Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a3a2f33352d3335203d3e203533303532.roa
File:                     323830343a326634383a3a2f33352d3335203d3e203533303532.roa (raw, json)
Hash identifier:          cWep3WKKbBkUlHtkvsf/lyvND8777lSyvw2YixHgRto=
Subject key identifier:   14:40:2B:07:F8:48:F6:39:99:2D:E7:F3:65:90:74:97:25:6B:B3:8F
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       1415B05A264EEF2BD5F134A05C08BDDA2DC4D4BB
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a3a2f33352d3335203d3e203533303532.roa
Signing time:             Mon 30 Sep 2024 18:00:08 +0000
ROA not before:           Mon 30 Sep 2024 17:55:08 +0000
ROA not after:            Mon 29 Sep 2025 18:00:08 +0000
asID:                     53052
IP address blocks:        2804:2f48::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:15:b0:5a:26:4e:ef:2b:d5:f1:34:a0:5c:08:bd:da:2d:c4:d4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep 30 17:55:08 2024 GMT
            Not After : Sep 29 18:00:08 2025 GMT
        Subject: CN=14402B07F848F639992DE7F365907497256BB38F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:e1:e6:ac:8a:30:d1:b4:b5:8f:39:22:da:
                    b9:2d:79:fa:a9:72:a3:b5:68:14:bd:db:30:7c:d8:
                    45:79:55:d1:42:35:02:91:80:0b:df:b7:80:94:d3:
                    48:b6:70:b7:e3:ec:89:ce:e9:db:6a:22:0e:2a:f4:
                    b6:34:cf:d9:49:c4:70:12:8e:11:53:10:39:5d:17:
                    28:b1:67:87:e9:ba:6b:09:70:13:12:c4:01:c9:8f:
                    ea:e6:cf:6d:0c:bf:e2:86:65:b6:1d:23:a4:3b:ef:
                    c2:5b:2f:0a:0e:3a:64:2b:fa:48:8b:17:57:5c:d2:
                    a3:b9:fc:69:29:5f:0b:49:4f:84:b3:9d:38:52:43:
                    48:62:fa:98:93:da:a9:c6:14:61:d1:05:6e:df:3c:
                    23:12:53:d7:62:fa:39:d1:49:c8:0e:e2:8b:d5:17:
                    6a:54:bb:e4:1e:ac:b6:52:e3:c4:0d:46:dc:7e:5d:
                    e2:96:a4:e9:77:6f:32:43:05:db:7e:d2:5a:55:2c:
                    c8:c9:17:99:ee:ab:b0:43:7d:b8:5c:59:f0:3e:95:
                    e4:5d:30:60:cf:1d:d2:b6:7b:86:77:fc:b6:b2:2c:
                    80:b3:4c:8e:c8:ab:6f:98:8a:ec:8c:7f:e6:92:95:
                    88:3b:a1:49:99:3d:ca:32:2a:74:31:80:8f:5b:fa:
                    b0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:40:2B:07:F8:48:F6:39:99:2D:E7:F3:65:90:74:97:25:6B:B3:8F
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a3a2f33352d3335203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f48::/35

    Signature Algorithm: sha256WithRSAEncryption
         7f:01:71:85:09:8d:b0:b3:8a:d1:5a:11:7a:84:d2:2a:42:65:
         39:46:7f:42:17:c3:79:ac:18:d0:21:ca:88:db:23:dc:2a:d4:
         80:1f:17:57:93:76:d7:84:b9:71:88:8c:ba:b4:94:3f:fc:cf:
         fc:1a:02:9c:3e:2a:69:e1:46:16:b4:88:15:02:bb:cb:5f:9a:
         bb:41:50:5a:ea:6e:2b:bc:58:e6:5c:0a:7e:b4:c0:6f:e1:2a:
         cb:b7:85:eb:9b:27:16:ea:3a:35:c9:92:88:07:75:cf:e7:0d:
         e0:6a:a0:9c:31:e3:95:7b:bb:ef:6d:33:ce:ab:c9:4f:28:4c:
         e9:0c:00:97:6a:10:cf:6c:b5:66:d7:2b:5d:26:c7:df:0e:57:
         a9:23:d0:35:5c:a4:6c:ef:67:67:a0:72:86:b2:87:f4:fb:aa:
         1b:62:36:a2:c3:3b:42:31:83:99:32:aa:35:c9:bd:5d:b6:95:
         6e:2c:4c:8a:6d:f7:9e:78:a1:e8:88:5e:59:a6:63:32:89:44:
         53:85:ab:2d:b3:1a:35:ec:83:da:0d:32:23:c8:34:fa:8c:42:
         63:e4:a6:77:b8:7d:e4:b0:2b:53:32:4b:8b:91:51:9b:6d:3b:
         00:cd:41:c0:f7:3a:9b:b8:c6:8b:d0:01:8c:81:69:b5:40:61:
         06:80:3d:23
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFBWwWiZO7yvV8TSgXAi92i3E1LswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FBNjUxNEQyREQxQUY0NkU3OTdEOTFDMzM0Qzc4QTQ0
OUI3NDAzRDAeFw0yNDA5MzAxNzU1MDhaFw0yNTA5MjkxODAwMDhaMDMxMTAvBgNV
BAMTKDE0NDAyQjA3Rjg0OEY2Mzk5OTJERTdGMzY1OTA3NDk3MjU2QkIzOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEyeHmrIow0bS1jzki2rktefqp
cqO1aBS92zB82EV5VdFCNQKRgAvft4CU00i2cLfj7InO6dtqIg4q9LY0z9lJxHAS
jhFTEDldFyixZ4fpumsJcBMSxAHJj+rmz20Mv+KGZbYdI6Q778JbLwoOOmQr+kiL
F1dc0qO5/GkpXwtJT4SznThSQ0hi+piT2qnGFGHRBW7fPCMSU9di+jnRScgO4ovV
F2pUu+QerLZS48QNRtx+XeKWpOl3bzJDBdt+0lpVLMjJF5nuq7BDfbhcWfA+leRd
MGDPHdK2e4Z3/LayLICzTI7Iq2+YiuyMf+aSlYg7oUmZPcoyKnQxgI9b+rBLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUFEArB/hI9jmZLefzZZB0lyVrs48wHwYDVR0j
BBgwFoAUyqZRTS3Rr0bnl9kcM0x4pEm3QD0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVlVM3VMUWdVWHU1RWJSazd1V01hWmRmTENLQmdqUW1YOUZnMnRDdzVM
RFUvMC9DQUE2NTE0RDJERDFBRjQ2RTc5N0Q5MUMzMzRDNzhBNDQ5Qjc0MDNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBQTY1MTREMkREMUFGNDZF
Nzk3RDkxQzMzNEM3OEE0NDlCNzQwM0QuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlZVTN1TFFnVVh1NUViUms3dVdNYVpkZkxDS0JnalFtWDlGZzJ0Q3c1TERVLzAv
MzIzODMwMzQzYTMyNjYzNDM4M2EzYTJmMzMzNTJkMzMzNTIwM2QzZTIwMzUzMzMw
MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBSgEL0gAMA0GCSqGSIb3DQEBCwUAA4IBAQB/AXGFCY2w
s4rRWhF6hNIqQmU5Rn9CF8N5rBjQIcqI2yPcKtSAHxdXk3bXhLlxiIy6tJQ//M/8
GgKcPipp4UYWtIgVArvLX5q7QVBa6m4rvFjmXAp+tMBv4SrLt4XrmycW6jo1yZKI
B3XP5w3gaqCcMeOVe7vvbTPOq8lPKEzpDACXahDPbLVm1ytdJsffDlepI9A1XKRs
72dnoHKGsof0+6obYjaiwztCMYOZMqo1yb1dtpVuLEyKbfeeeKHoiF5ZpmMyiURT
hastsxo17IPaDTIjyDT6jEJj5KZ3uH3ksCtTMkuLkVGbbTsAzUHA9zqbuMaL0AGM
gWm1QGEGgD0j
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:01 2025 by rpki-client