Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/323830343a6162303a3a2f33322d313238203d3e203532393037.roa
File:                     323830343a6162303a3a2f33322d313238203d3e203532393037.roa (raw, json)
Hash identifier:          LESmXmo+TCodqnOP6aszowbG14aPD4lNlhr/Pqeglfc=
Subject key identifier:   81:28:5A:D0:93:07:73:44:55:0B:0E:30:7D:93:A6:DF:CF:C4:73:EF
Certificate issuer:       /CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
Certificate serial:       2710B7813BC839ECFE66E116CDF4F8BB7435AB31
Authority key identifier: 85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/323830343a6162303a3a2f33322d313238203d3e203532393037.roa
Signing time:             Thu 06 Mar 2025 03:59:16 +0000
ROA not before:           Thu 06 Mar 2025 03:54:16 +0000
ROA not after:            Thu 05 Mar 2026 03:59:16 +0000
asID:                     52907
IP address blocks:        2804:ab0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl
                          rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:10:b7:81:3b:c8:39:ec:fe:66:e1:16:cd:f4:f8:bb:74:35:ab:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
        Validity
            Not Before: Mar  6 03:54:16 2025 GMT
            Not After : Mar  5 03:59:16 2026 GMT
        Subject: CN=81285AD093077344550B0E307D93A6DFCFC473EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0b:cc:b2:20:a2:2e:91:11:ab:b0:62:7c:87:
                    76:fc:d5:5a:84:64:e0:1d:dd:e9:da:bd:82:48:54:
                    ad:07:9a:ff:ae:43:e6:cc:05:1e:bf:14:5b:33:9d:
                    40:b2:7d:ff:70:e4:ae:64:cb:a3:7e:43:58:e1:5b:
                    de:b7:61:f4:1b:1b:44:b1:48:8f:06:de:0d:c3:b4:
                    cb:cf:10:5d:b6:81:18:48:da:1a:4e:f3:dc:44:ab:
                    3c:37:cb:4f:75:d3:86:8b:85:7d:12:21:fa:4f:02:
                    d0:49:2b:97:0f:7e:6a:03:0a:1b:e9:8f:02:42:de:
                    fb:f3:38:f4:03:6a:f2:1d:71:fd:79:46:4c:8e:55:
                    de:ec:0d:56:64:82:19:4c:71:34:4b:45:ce:1c:38:
                    70:ad:f8:29:58:1e:d1:8c:02:02:a4:d4:a4:ac:d6:
                    05:8c:00:b6:91:b0:46:4d:8d:f9:e5:45:05:36:5b:
                    b6:6b:ac:08:7e:89:e6:a0:8a:b2:99:21:4f:f8:ec:
                    35:e9:d3:11:40:8c:4c:db:c5:84:72:f2:47:1e:4a:
                    c2:66:89:75:e1:57:53:e0:3e:29:52:29:9a:c5:52:
                    7d:a9:b3:ce:04:4d:11:92:9c:56:26:ef:6d:6d:aa:
                    37:90:69:55:c1:12:f3:af:cd:11:49:38:cb:d2:91:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:28:5A:D0:93:07:73:44:55:0B:0E:30:7D:93:A6:DF:CF:C4:73:EF
            X509v3 Authority Key Identifier:
                keyid:85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/323830343a6162303a3a2f33322d313238203d3e203532393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:ce:ef:14:66:2f:8e:24:8d:ba:30:0e:ea:ff:6a:4c:b9:3f:
         f1:f0:d4:cd:fc:bf:27:9c:0b:90:a0:41:35:5a:55:78:3e:fc:
         be:a8:5a:c7:09:97:f4:19:9a:1b:42:2b:69:68:aa:7c:47:93:
         94:6f:d8:ab:43:0b:c3:73:4d:87:5d:16:7d:46:e9:5f:ee:24:
         57:f2:2d:4c:3a:ce:6f:ec:49:50:e6:cf:80:63:0d:e0:52:c0:
         51:2e:b7:e9:f9:23:ee:11:8c:88:c5:44:8b:bc:a2:f5:88:71:
         65:a5:32:c8:8c:32:2d:da:92:bf:0b:66:92:73:bd:69:fc:9e:
         55:b5:77:34:c0:f5:8c:a1:9c:6d:7a:39:6f:51:4f:b0:96:18:
         a8:af:3f:3b:0e:e6:2a:c4:63:cc:86:c8:bb:e4:f9:06:1a:ac:
         0f:ac:6e:b1:b6:6b:3a:a8:99:ed:b9:d4:e5:39:06:7c:1c:a1:
         76:1a:55:fa:c1:79:27:05:74:f7:c5:a7:f0:e5:cf:a6:a5:a3:
         d0:09:9f:58:99:3b:df:0d:f7:0c:38:13:ae:3c:78:ee:c7:43:
         ee:cd:63:5d:8f:38:bd:03:2d:e2:d9:40:e2:d1:60:d3:fd:c4:
         bb:8f:02:dd:25:9f:93:1f:51:1e:27:40:ac:9b:fe:2d:06:41:
         61:45:55:0b
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJxC3gTvIOez+ZuEWzfT4u3Q1qzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU0N0QwQzFBODQ3MjVCQ0M4QTA1QjcyNUMyMjI5M0RB
QzQyMEM3OTAeFw0yNTAzMDYwMzU0MTZaFw0yNjAzMDUwMzU5MTZaMDMxMTAvBgNV
BAMTKDgxMjg1QUQwOTMwNzczNDQ1NTBCMEUzMDdEOTNBNkRGQ0ZDNDczRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgC8yyIKIukRGrsGJ8h3b81VqE
ZOAd3enavYJIVK0Hmv+uQ+bMBR6/FFsznUCyff9w5K5ky6N+Q1jhW963YfQbG0Sx
SI8G3g3DtMvPEF22gRhI2hpO89xEqzw3y09104aLhX0SIfpPAtBJK5cPfmoDChvp
jwJC3vvzOPQDavIdcf15RkyOVd7sDVZkghlMcTRLRc4cOHCt+ClYHtGMAgKk1KSs
1gWMALaRsEZNjfnlRQU2W7ZrrAh+ieagirKZIU/47DXp0xFAjEzbxYRy8kceSsJm
iXXhV1PgPilSKZrFUn2ps84ETRGSnFYm721tqjeQaVXBEvOvzRFJOMvSkdbBAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUgSha0JMHc0RVCw4wfZOm38/Ec+8wHwYDVR0j
BBgwFoAUhUfQwahHJbzIoFtyXCIpPaxCDHkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUxuY1JDcmNTUHNMeVFwWE4ybThmQ2l2QndKelRKQ25VQUViRlpvZndY
Tm8vMS84NTQ3RDBDMUE4NDcyNUJDQzhBMDVCNzI1QzIyMjkzREFDNDIwQzc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1NDdEMEMxQTg0NzI1QkND
OEEwNUI3MjVDMjIyOTNEQUM0MjBDNzkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlMbmNSQ3JjU1BzTHlRcFhOMm04ZkNpdkJ3SnpUSkNuVUFFYkZab2Z3WE5vLzEv
MzIzODMwMzQzYTYxNjIzMDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzUzMjM5
MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECrAwDQYJKoZIhvcNAQELBQADggEBAGjO7xRmL44k
jbowDur/aky5P/Hw1M38vyecC5CgQTVaVXg+/L6oWscJl/QZmhtCK2loqnxHk5Rv
2KtDC8NzTYddFn1G6V/uJFfyLUw6zm/sSVDmz4BjDeBSwFEut+n5I+4RjIjFRIu8
ovWIcWWlMsiMMi3akr8LZpJzvWn8nlW1dzTA9YyhnG16OW9RT7CWGKivPzsO5irE
Y8yGyLvk+QYarA+sbrG2azqome251OU5BnwcoXYaVfrBeScFdPfFp/Dlz6alo9AJ
n1iZO98N9ww4E648eO7HQ+7NY12POL0DLeLZQOLRYNP9xLuPAt0ln5MfUR4nQKyb
/i0GQWFFVQs=
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:12:19 2025 by rpki-client