Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/323830343a343936633a3a2f33322d3438203d3e20323637313833.roa
File:                     323830343a343936633a3a2f33322d3438203d3e20323637313833.roa (raw, json)
Hash identifier:          3vkXR6J4soYuM8yUllFvpChIo0UEO5wCzzMS3MZnBVo=
Subject key identifier:   53:BB:0E:01:A2:5F:A8:95:B0:A5:C0:59:C9:D0:D4:52:57:52:33:9D
Certificate issuer:       /CN=ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411
Certificate serial:       35EF431A2837C7438BEB6D6D80444F3C12410078
Authority key identifier: AD:D1:8D:4B:9D:4E:B5:B8:E5:52:0C:0E:00:32:C2:2E:DB:05:F4:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/323830343a343936633a3a2f33322d3438203d3e20323637313833.roa
Signing time:             Wed 05 Mar 2025 19:45:26 +0000
ROA not before:           Wed 05 Mar 2025 19:40:26 +0000
ROA not after:            Wed 04 Mar 2026 19:45:26 +0000
asID:                     267183
IP address blocks:        2804:496c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl
                          rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 16:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ef:43:1a:28:37:c7:43:8b:eb:6d:6d:80:44:4f:3c:12:41:00:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411
        Validity
            Not Before: Mar  5 19:40:26 2025 GMT
            Not After : Mar  4 19:45:26 2026 GMT
        Subject: CN=53BB0E01A25FA895B0A5C059C9D0D4525752339D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:96:51:6b:c6:49:f4:14:cf:e2:cf:6b:31:
                    f0:f5:3f:fa:95:9e:6e:fb:c0:3b:24:53:00:13:e3:
                    c1:8c:16:56:2a:ad:6a:61:cf:b3:2a:48:f0:06:ec:
                    b7:f9:6a:5a:d2:5a:f2:c9:76:f7:74:e6:9b:da:97:
                    27:de:a8:b5:d4:c7:e4:2a:05:67:12:35:4f:ab:5a:
                    f4:01:57:f6:6b:61:7d:ba:f3:5f:9e:bf:aa:bc:4f:
                    61:08:fa:12:19:d8:95:d7:fa:aa:0f:9d:e8:87:09:
                    9b:75:63:c9:d8:d3:27:8b:76:26:5e:80:88:73:e7:
                    a5:05:85:3a:d7:0b:1c:e8:0c:70:1f:c6:dc:2d:c5:
                    8b:c2:bd:41:c0:88:2a:e7:25:9d:f9:68:7d:fd:0d:
                    e7:7b:2c:09:f4:21:41:c0:4e:5c:01:83:3c:e5:d3:
                    5c:12:83:52:f8:3a:b4:90:bc:e7:f1:e8:c0:64:ba:
                    b3:85:ae:a5:f6:6c:d3:76:4e:36:18:2e:5e:6e:43:
                    4b:5c:47:2d:d5:ee:db:67:c6:1e:d8:c3:c2:51:14:
                    52:33:89:5a:de:be:9f:43:ff:09:e8:11:eb:5e:14:
                    eb:4e:15:38:d2:07:48:4b:41:29:d6:09:2d:aa:69:
                    3e:7f:6d:0d:89:90:35:55:78:1c:52:82:1a:f9:68:
                    c4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BB:0E:01:A2:5F:A8:95:B0:A5:C0:59:C9:D0:D4:52:57:52:33:9D
            X509v3 Authority Key Identifier:
                keyid:AD:D1:8D:4B:9D:4E:B5:B8:E5:52:0C:0E:00:32:C2:2E:DB:05:F4:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD18D4B9D4EB5B8E5520C0E0032C22EDB05F411.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/1/323830343a343936633a3a2f33322d3438203d3e20323637313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:496c::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:74:17:1f:94:b2:85:09:aa:51:55:c5:3a:95:e3:b4:66:cb:
         6d:d0:08:93:90:62:72:f9:e3:e6:a5:d1:71:a0:81:2e:fd:a8:
         56:4b:9a:7d:8b:dc:3a:a0:bf:05:c7:a4:03:7c:ae:e3:9b:c6:
         12:24:6f:91:4d:47:45:e0:f8:6d:72:74:5d:4a:df:1d:e9:69:
         43:1b:64:98:78:43:54:42:4f:26:f2:6f:83:5e:6e:31:73:db:
         c6:8b:30:eb:b5:69:ca:dd:de:0c:76:25:f1:11:8c:34:9a:8d:
         da:ad:31:16:7d:58:47:f2:f1:60:84:cd:32:7e:30:c8:1d:ba:
         c6:f2:0f:a6:2d:cc:c1:95:fb:d3:15:b4:9c:f9:8a:53:af:64:
         0c:b9:b2:ae:ea:b8:d4:01:8c:21:87:6e:51:12:1d:83:ec:af:
         4e:8e:c5:81:1c:93:60:e0:3f:2c:11:dd:5b:23:a9:27:41:e5:
         3e:f3:8a:b7:85:54:0a:1d:8f:a6:f5:42:73:0c:6a:87:c9:07:
         24:c7:8e:ec:a8:1c:60:67:8a:73:e3:a6:a1:a7:00:55:8e:3d:
         b8:b2:fa:2f:27:cd:4d:e7:97:e9:da:08:5e:54:9a:79:5c:2a:
         7f:c9:c0:e9:8a:07:b4:3b:1d:74:28:ed:e4:18:f8:2c:2f:51:
         0d:c3:33:c4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUNe9DGig3x0OL621tgERPPBJBAHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUREMThENEI5RDRFQjVCOEU1NTIwQzBFMDAzMkMyMkVE
QjA1RjQxMTAeFw0yNTAzMDUxOTQwMjZaFw0yNjAzMDQxOTQ1MjZaMDMxMTAvBgNV
BAMTKDUzQkIwRTAxQTI1RkE4OTVCMEE1QzA1OUM5RDBENDUyNTc1MjMzOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOpZRa8ZJ9BTP4s9rMfD1P/qV
nm77wDskUwAT48GMFlYqrWphz7MqSPAG7Lf5alrSWvLJdvd05pvalyfeqLXUx+Qq
BWcSNU+rWvQBV/ZrYX2681+ev6q8T2EI+hIZ2JXX+qoPneiHCZt1Y8nY0yeLdiZe
gIhz56UFhTrXCxzoDHAfxtwtxYvCvUHAiCrnJZ35aH39Ded7LAn0IUHATlwBgzzl
01wSg1L4OrSQvOfx6MBkurOFrqX2bNN2TjYYLl5uQ0tcRy3V7ttnxh7Yw8JRFFIz
iVrevp9D/wnoEeteFOtOFTjSB0hLQSnWCS2qaT5/bQ2JkDVVeBxSghr5aMTbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUU7sOAaJfqJWwpcBZydDUUldSM50wHwYDVR0j
BBgwFoAUrdGNS51OtbjlUgwOADLCLtsF9BEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXdNTXBFVW5kZDFrVzNtRUdIUTg3cVEzeWZEQWNXUGpuMXpQa0dvczF1
eHUvMS9BREQxOEQ0QjlENEVCNUI4RTU1MjBDMEUwMDMyQzIyRURCMDVGNDExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FERDE4RDRCOUQ0RUI1QjhF
NTUyMEMwRTAwMzJDMjJFREIwNUY0MTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F3TU1wRVVuZGQxa1czbUVHSFE4N3FRM3lmREFjV1BqbjF6UGtHb3MxdXh1LzEv
MzIzODMwMzQzYTM0MzkzNjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzEzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARJbDANBgkqhkiG9w0BAQsFAAOCAQEAkXQXH5Sy
hQmqUVXFOpXjtGbLbdAIk5Bicvnj5qXRcaCBLv2oVkuafYvcOqC/BcekA3yu45vG
EiRvkU1HReD4bXJ0XUrfHelpQxtkmHhDVEJPJvJvg15uMXPbxosw67Vpyt3eDHYl
8RGMNJqN2q0xFn1YR/LxYITNMn4wyB26xvIPpi3MwZX70xW0nPmKU69kDLmyruq4
1AGMIYduURIdg+yvTo7FgRyTYOA/LBHdWyOpJ0HlPvOKt4VUCh2PpvVCcwxqh8kH
JMeO7KgcYGeKc+OmoacAVY49uLL6LyfNTeeX6doIXlSaeVwqf8nA6YoHtDsddCjt
5Bj4LC9RDcMzxA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:48:46 2025 by rpki-client