Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/323830343a313564343a3a2f33322d3332203d3e20323633343133.roa
File:                     323830343a313564343a3a2f33322d3332203d3e20323633343133.roa (raw, json)
Hash identifier:          vBSNV3n807UTlt3z4BSTJKuTzDH3XzY14LVVXZckQWM=
Subject key identifier:   23:A5:61:58:86:62:62:11:F4:5D:C1:65:38:CA:B8:32:E8:F1:F2:62
Certificate issuer:       /CN=157F6108533B10B33C69A854D184113D2CC781E1
Certificate serial:       7F191E65CAA6697613EE0B4F4788341BE5711336
Authority key identifier: 15:7F:61:08:53:3B:10:B3:3C:69:A8:54:D1:84:11:3D:2C:C7:81:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157F6108533B10B33C69A854D184113D2CC781E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/323830343a313564343a3a2f33322d3332203d3e20323633343133.roa
Signing time:             Sat 28 Dec 2024 12:38:05 +0000
ROA not before:           Sat 28 Dec 2024 12:33:05 +0000
ROA not after:            Sat 27 Dec 2025 12:38:05 +0000
asID:                     263413
IP address blocks:        2804:15d4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/157F6108533B10B33C69A854D184113D2CC781E1.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/157F6108533B10B33C69A854D184113D2CC781E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157F6108533B10B33C69A854D184113D2CC781E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:19:1e:65:ca:a6:69:76:13:ee:0b:4f:47:88:34:1b:e5:71:13:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157F6108533B10B33C69A854D184113D2CC781E1
        Validity
            Not Before: Dec 28 12:33:05 2024 GMT
            Not After : Dec 27 12:38:05 2025 GMT
        Subject: CN=23A5615886626211F45DC16538CAB832E8F1F262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:e3:a9:af:84:db:ce:c9:f5:b8:44:bf:21:
                    ec:7a:77:d5:46:57:32:f8:7d:9a:09:0d:3e:9f:ed:
                    0b:26:4d:84:af:7c:ea:52:69:ae:f9:45:3c:c6:88:
                    02:63:b6:a9:71:d7:ea:04:12:bc:58:cc:7c:7a:fc:
                    b0:9d:69:fb:15:27:58:d9:d9:7c:9c:33:99:30:e2:
                    2d:b6:df:68:d6:ff:53:94:0d:fc:85:7e:20:3c:4c:
                    e2:aa:d3:77:e4:bb:0d:8f:84:d3:20:7e:a5:2f:fc:
                    4f:11:c8:98:42:0b:78:b1:0c:6d:1d:ad:b2:6c:dd:
                    3e:a6:cc:34:72:00:99:34:50:c9:31:09:a1:ee:b9:
                    71:7c:36:2d:ba:9a:c3:f8:db:23:90:44:28:9f:d9:
                    7f:31:fe:e1:5a:2c:4f:d7:ec:7d:a5:ec:96:67:15:
                    df:d6:6f:8a:7b:43:5d:9c:94:2f:d7:5f:1b:5f:ae:
                    1d:45:b3:b3:ae:86:5b:a4:6f:e1:29:77:48:99:23:
                    ce:21:f1:26:93:30:d6:75:67:25:a2:11:4e:95:8d:
                    5f:0b:99:78:b4:f3:16:df:d8:14:ec:00:7a:de:a3:
                    02:6e:8e:ea:0f:7a:95:e0:5d:30:92:58:1a:d7:05:
                    93:63:d5:70:66:67:04:c9:ee:89:5c:2a:cb:b3:f2:
                    6a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A5:61:58:86:62:62:11:F4:5D:C1:65:38:CA:B8:32:E8:F1:F2:62
            X509v3 Authority Key Identifier:
                keyid:15:7F:61:08:53:3B:10:B3:3C:69:A8:54:D1:84:11:3D:2C:C7:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/157F6108533B10B33C69A854D184113D2CC781E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157F6108533B10B33C69A854D184113D2CC781E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/323830343a313564343a3a2f33322d3332203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:fc:dd:8c:f4:69:6d:ef:95:ea:3b:88:77:3a:b4:67:ac:e5:
         10:bd:d9:13:db:66:fc:d2:50:33:11:a3:71:d5:4a:39:8b:ee:
         8b:68:28:81:27:b0:ad:ca:e5:7a:c9:c3:bc:ac:83:5d:8c:1e:
         73:c5:31:79:1e:8b:8d:4a:23:5e:e2:cd:6a:25:70:50:bc:a9:
         74:4d:95:0a:e7:f6:c2:2c:97:ca:54:b7:97:8f:ac:7e:22:1c:
         38:af:eb:04:f9:e3:d7:40:d8:3a:2b:f3:ae:3e:20:20:29:e0:
         45:80:32:60:4c:db:78:62:77:3b:d2:89:56:d6:8d:7e:1f:d9:
         db:40:33:39:2c:71:ff:a5:18:cb:e8:b1:0c:ca:e3:e6:c3:64:
         45:82:c2:c0:a9:71:0f:d3:20:08:b8:da:23:57:e2:47:5e:d2:
         50:4a:29:cb:46:47:08:66:99:dc:65:3a:3e:4c:05:25:38:fe:
         9e:31:c5:9a:23:dc:ba:f2:47:17:d9:1e:96:e3:71:ca:55:e5:
         a8:60:97:6c:8b:10:25:48:8a:2d:7b:96:8f:57:b5:25:93:c7:
         16:37:a8:e3:d4:d0:e4:30:96:f0:15:a5:e9:67:d7:43:55:ff:
         92:14:d4:b7:66:19:3f:1f:a2:30:45:35:55:0c:bd:e3:fc:16:
         79:f6:c1:ad
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfxkeZcqmaXYT7gtPR4g0G+VxEzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU3RjYxMDg1MzNCMTBCMzNDNjlBODU0RDE4NDExM0Qy
Q0M3ODFFMTAeFw0yNDEyMjgxMjMzMDVaFw0yNTEyMjcxMjM4MDVaMDMxMTAvBgNV
BAMTKDIzQTU2MTU4ODY2MjYyMTFGNDVEQzE2NTM4Q0FCODMyRThGMUYyNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXV+Opr4Tbzsn1uES/Iex6d9VG
VzL4fZoJDT6f7QsmTYSvfOpSaa75RTzGiAJjtqlx1+oEErxYzHx6/LCdafsVJ1jZ
2XycM5kw4i2232jW/1OUDfyFfiA8TOKq03fkuw2PhNMgfqUv/E8RyJhCC3ixDG0d
rbJs3T6mzDRyAJk0UMkxCaHuuXF8Ni26msP42yOQRCif2X8x/uFaLE/X7H2l7JZn
Fd/Wb4p7Q12clC/XXxtfrh1Fs7Ouhlukb+Epd0iZI84h8SaTMNZ1ZyWiEU6VjV8L
mXi08xbf2BTsAHreowJujuoPepXgXTCSWBrXBZNj1XBmZwTJ7olcKsuz8mqZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUI6VhWIZiYhH0XcFlOMq4Mujx8mIwHwYDVR0j
BBgwFoAUFX9hCFM7ELM8aahU0YQRPSzHgeEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVNGM0VMenpiQk5XMmIxdWY2R0s4YzVvU0dRQXR4SFhDUW9OWm52QmFy
UUUvMC8xNTdGNjEwODUzM0IxMEIzM0M2OUE4NTREMTg0MTEzRDJDQzc4MUUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1N0Y2MTA4NTMzQjEwQjMz
QzY5QTg1NEQxODQxMTNEMkNDNzgxRTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlTRjNFTHp6YkJOVzJiMXVmNkdLOGM1b1NHUUF0eEhYQ1FvTlpudkJhclFFLzAv
MzIzODMwMzQzYTMxMzU2NDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzQzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQV1DANBgkqhkiG9w0BAQsFAAOCAQEArvzdjPRp
be+V6juIdzq0Z6zlEL3ZE9tm/NJQMxGjcdVKOYvui2gogSewrcrlesnDvKyDXYwe
c8UxeR6LjUojXuLNaiVwULypdE2VCuf2wiyXylS3l4+sfiIcOK/rBPnj10DYOivz
rj4gICngRYAyYEzbeGJ3O9KJVtaNfh/Z20AzOSxx/6UYy+ixDMrj5sNkRYLCwKlx
D9MgCLjaI1fiR17SUEopy0ZHCGaZ3GU6PkwFJTj+njHFmiPcuvJHF9keluNxylXl
qGCXbIsQJUiKLXuWj1e1JZPHFjeo49TQ5DCW8BWl6WfXQ1X/khTUt2YZPx+iMEU1
VQy94/wWefbBrQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:31 2025 by rpki-client