Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/323830343a3336383a3a2f33322d313238203d3e203232333831.roa
File:                     323830343a3336383a3a2f33322d313238203d3e203232333831.roa (raw, json)
Hash identifier:          pHcOB/ubykUIF9jd2quA27fK0+QAFbCY+0ePiBiE2S4=
Subject key identifier:   BE:96:BD:C8:85:5C:EC:E6:CA:B0:24:AC:AC:9A:8A:D4:A9:C8:5A:2E
Certificate issuer:       /CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
Certificate serial:       20912ACBC1336AA0355196BE8ED4759F1D40D231
Authority key identifier: 19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/323830343a3336383a3a2f33322d313238203d3e203232333831.roa
Signing time:             Fri 07 Mar 2025 19:05:26 +0000
ROA not before:           Fri 07 Mar 2025 19:00:26 +0000
ROA not after:            Fri 06 Mar 2026 19:05:26 +0000
asID:                     22381
IP address blocks:        2804:368::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl
                          rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:91:2a:cb:c1:33:6a:a0:35:51:96:be:8e:d4:75:9f:1d:40:d2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC
        Validity
            Not Before: Mar  7 19:00:26 2025 GMT
            Not After : Mar  6 19:05:26 2026 GMT
        Subject: CN=BE96BDC8855CECE6CAB024ACAC9A8AD4A9C85A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:59:f6:8c:eb:76:97:e7:22:96:99:ed:04:a8:
                    b8:b8:aa:ee:64:27:ad:0e:22:ee:ce:df:74:61:55:
                    07:71:05:7c:41:dc:a3:9c:0f:d9:35:e8:f3:54:36:
                    2f:3f:e3:b1:55:10:0d:6e:26:27:e9:e5:2b:71:a5:
                    9b:ae:2f:cf:2b:10:2c:af:f9:b5:28:b2:87:3c:3d:
                    98:8e:da:48:6d:6c:3b:2d:e9:4e:88:2d:29:da:98:
                    94:84:70:e0:ea:c7:fc:18:49:97:93:04:bd:a3:c3:
                    13:77:cf:54:da:1e:50:ce:0f:85:2b:f9:2a:77:43:
                    79:58:20:b7:1b:99:c6:90:45:46:30:46:96:38:c6:
                    15:a0:d8:b7:01:8b:28:ba:40:d0:b1:8f:03:c3:3a:
                    6d:93:d9:aa:b2:1a:92:c8:b2:b7:de:90:ff:53:d2:
                    86:1f:87:e8:7e:a2:86:b5:a1:f4:20:09:56:12:1f:
                    e1:2c:a4:45:54:10:93:59:ce:d1:c5:92:61:b7:84:
                    31:73:6a:e0:4b:37:8e:6b:ba:fc:7e:3b:f0:b8:0b:
                    99:a5:90:5c:04:b5:91:ad:3a:a2:a5:6c:a7:f2:c1:
                    84:59:59:23:3e:20:42:e2:59:6f:80:ad:de:2f:1e:
                    ba:41:0b:ea:cf:f4:0e:3c:23:19:3e:89:c8:d2:57:
                    7a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:96:BD:C8:85:5C:EC:E6:CA:B0:24:AC:AC:9A:8A:D4:A9:C8:5A:2E
            X509v3 Authority Key Identifier:
                keyid:19:34:32:16:7D:7C:BA:FA:4E:5D:DE:04:01:9A:8E:57:DE:FE:0A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193432167D7CBAFA4E5DDE04019A8E57DEFE0AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bBg1vrFNZEZAkqpceeU7eYWt2f2DP7Xoj74EKhD5rTx/0/323830343a3336383a3a2f33322d313238203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:368::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:9a:0e:54:6f:c5:db:5c:8a:3b:62:b2:ad:33:ee:f1:76:ea:
         39:02:02:e2:c9:9e:7e:90:ec:0c:e0:cc:72:a3:76:f8:d0:3f:
         d0:c0:55:67:41:6f:56:49:6e:46:56:c4:5e:8e:6a:39:82:fb:
         c4:0d:6b:e7:31:23:3b:03:51:f7:39:66:d2:d8:70:78:ab:24:
         79:03:4e:ab:75:f3:6d:21:16:12:84:ae:5b:70:0c:d3:4f:92:
         a2:6b:60:fc:cd:d4:a7:30:ef:43:fd:ec:33:6d:0e:5b:76:c2:
         a7:e3:1b:1c:b9:70:93:33:dc:c5:c0:6c:c4:77:1f:34:22:8e:
         f7:26:87:be:25:67:ce:e0:62:c9:3f:2b:36:9d:8b:97:bf:96:
         fe:ac:7f:77:63:65:96:57:8e:60:71:c2:8c:f1:9a:a6:a8:26:
         db:4e:65:65:83:f7:fa:eb:b4:21:0f:3b:e3:c6:78:78:92:10:
         3d:cd:d2:95:db:ec:98:45:9b:36:9c:33:39:63:92:09:5b:a2:
         9e:7a:88:3e:30:42:33:ff:e7:e3:20:1a:11:3e:15:78:be:82:
         49:46:46:e9:f8:05:89:34:ab:43:86:31:d9:c6:3f:02:be:70:
         3c:4e:53:fb:d2:19:90:4c:0e:5f:a2:36:5c:48:c9:6f:2d:44:
         91:60:29:9c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUIJEqy8EzaqA1UZa+jtR1nx1A0jEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkzNDMyMTY3RDdDQkFGQTRFNURERTA0MDE5QThFNTdE
RUZFMEFBQzAeFw0yNTAzMDcxOTAwMjZaFw0yNjAzMDYxOTA1MjZaMDMxMTAvBgNV
BAMTKEJFOTZCREM4ODU1Q0VDRTZDQUIwMjRBQ0FDOUE4QUQ0QTlDODVBMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiWfaM63aX5yKWme0EqLi4qu5k
J60OIu7O33RhVQdxBXxB3KOcD9k16PNUNi8/47FVEA1uJifp5StxpZuuL88rECyv
+bUosoc8PZiO2khtbDst6U6ILSnamJSEcODqx/wYSZeTBL2jwxN3z1TaHlDOD4Ur
+Sp3Q3lYILcbmcaQRUYwRpY4xhWg2LcBiyi6QNCxjwPDOm2T2aqyGpLIsrfekP9T
0oYfh+h+ooa1ofQgCVYSH+EspEVUEJNZztHFkmG3hDFzauBLN45ruvx+O/C4C5ml
kFwEtZGtOqKlbKfywYRZWSM+IELiWW+Ard4vHrpBC+rP9A48Ixk+icjSV3ojAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUvpa9yIVc7ObKsCSsrJqK1KnIWi4wHwYDVR0j
BBgwFoAUGTQyFn18uvpOXd4EAZqOV97+CqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJCZzF2ckZOWkVaQWtxcGNlZVU3ZVlXdDJmMkRQN1hvajc0RUtoRDVy
VHgvMC8xOTM0MzIxNjdEN0NCQUZBNEU1RERFMDQwMTlBOEU1N0RFRkUwQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MzQzMjE2N0Q3Q0JBRkE0
RTVEREUwNDAxOUE4RTU3REVGRTBBQUMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliQmcxdnJGTlpFWkFrcXBjZWVVN2VZV3QyZjJEUDdYb2o3NEVLaEQ1clR4LzAv
MzIzODMwMzQzYTMzMzYzODNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzMjMz
MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEA2gwDQYJKoZIhvcNAQELBQADggEBADWaDlRvxdtc
ijtisq0z7vF26jkCAuLJnn6Q7AzgzHKjdvjQP9DAVWdBb1ZJbkZWxF6OajmC+8QN
a+cxIzsDUfc5ZtLYcHirJHkDTqt1820hFhKErltwDNNPkqJrYPzN1Kcw70P97DNt
Dlt2wqfjGxy5cJMz3MXAbMR3HzQijvcmh74lZ87gYsk/Kzadi5e/lv6sf3djZZZX
jmBxwozxmqaoJttOZWWD9/rrtCEPO+PGeHiSED3N0pXb7JhFmzacMzljkglbop56
iD4wQjP/5+MgGhE+FXi+gklGRun4BYk0q0OGMdnGPwK+cDxOU/vSGZBMDl+iNlxI
yW8tRJFgKZw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:40:49 2025 by rpki-client