Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a323030303a3a2f33352d3335203d3e20323634313431.roa
File:                     323830343a316530633a323030303a3a2f33352d3335203d3e20323634313431.roa (raw, json)
Hash identifier:          JZRenNS90msxS3xI64/c1N6LiPvXSjCUZLLWuJl6Z0U=
Subject key identifier:   05:DC:27:EB:38:F1:AE:CF:DB:C2:0A:68:C6:5A:58:B0:64:BB:37:E0
Certificate issuer:       /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial:       4E9C70E0B4CCF55FD2FE1AB65D8045E3053DE872
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a323030303a3a2f33352d3335203d3e20323634313431.roa
Signing time:             Thu 02 Jan 2025 19:58:17 +0000
ROA not before:           Thu 02 Jan 2025 19:53:17 +0000
ROA not after:            Thu 01 Jan 2026 19:58:17 +0000
asID:                     264141
IP address blocks:        2804:1e0c:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
                          rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9c:70:e0:b4:cc:f5:5f:d2:fe:1a:b6:5d:80:45:e3:05:3d:e8:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
        Validity
            Not Before: Jan  2 19:53:17 2025 GMT
            Not After : Jan  1 19:58:17 2026 GMT
        Subject: CN=05DC27EB38F1AECFDBC20A68C65A58B064BB37E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:7e:35:59:d4:15:ee:96:08:6e:fe:47:68:
                    ae:44:38:7b:52:66:92:d4:e2:26:9c:b8:74:a3:3a:
                    fb:42:fb:ef:1e:d3:20:ca:58:d8:22:ab:95:f8:e4:
                    e5:40:fb:aa:a8:7a:51:82:14:f4:70:8c:90:36:4b:
                    f1:dd:de:e6:1c:91:2e:26:a0:7c:4d:e7:bb:c1:68:
                    db:54:ee:0c:d9:69:8b:d5:34:0b:6e:fb:29:23:a6:
                    37:d4:76:8e:11:21:1a:70:97:ec:48:2f:6f:c4:29:
                    79:b1:9a:75:a8:59:04:73:6c:ce:64:38:e1:eb:e0:
                    af:e5:5b:ec:34:f1:0e:3c:71:11:e8:8e:1e:0b:86:
                    3f:b1:4a:06:8c:85:88:48:41:a7:b1:9a:5d:65:b7:
                    f5:24:02:bf:91:32:6d:97:19:16:9d:7d:a5:e5:76:
                    90:9f:65:55:a8:f3:24:11:be:85:76:51:fc:fd:a2:
                    7c:50:b3:d7:f4:d3:c5:fb:39:01:98:d0:e2:30:e0:
                    b7:85:77:9f:73:fd:83:7b:7e:7b:2a:7b:77:e7:df:
                    e1:33:f2:c5:03:21:d3:24:d3:16:3f:bc:3c:ce:20:
                    4a:9d:7c:f6:6f:06:7d:23:4e:48:92:52:59:ef:70:
                    ff:e3:07:f2:c9:d8:d6:7a:55:59:c2:71:9c:59:a6:
                    65:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DC:27:EB:38:F1:AE:CF:DB:C2:0A:68:C6:5A:58:B0:64:BB:37:E0
            X509v3 Authority Key Identifier:
                keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a323030303a3a2f33352d3335203d3e20323634313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0c:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         01:72:cf:32:28:18:a0:8a:0d:80:47:5f:7c:d2:a5:ee:98:8b:
         9f:fc:82:92:5e:98:13:77:3e:8a:86:b4:80:14:1a:5f:c4:06:
         6a:1f:e5:06:17:8d:14:9d:61:e8:2d:88:00:87:34:e2:50:32:
         81:5e:b5:d2:eb:d3:5d:b2:0b:d4:34:5a:7b:57:f7:27:e2:55:
         4d:a2:33:ec:57:17:80:23:65:6f:4a:b5:6e:6d:e7:c7:6d:53:
         d0:53:8a:37:2a:02:64:01:d7:22:1b:62:b1:57:43:01:84:08:
         18:51:ba:ed:16:21:b4:c2:3e:93:5e:eb:f5:f7:0f:16:cb:35:
         fe:c9:09:30:bf:ce:00:5e:fe:de:25:33:5b:34:c0:01:70:73:
         1d:e9:85:da:1a:b7:bd:1c:73:a1:1c:fb:8c:a4:81:52:6f:84:
         52:83:5f:bd:4d:4e:5f:00:7d:53:90:90:4e:c9:b5:0b:fb:5d:
         41:a1:14:5b:93:df:3d:43:7f:aa:79:43:7b:d2:5f:c4:7d:7d:
         65:4f:0e:b9:dd:4f:35:df:95:80:b5:6c:9d:99:a7:4c:4d:72:
         08:b6:71:4c:51:8c:5a:0c:39:47:38:98:71:16:e3:78:f3:8d:
         2c:94:9c:67:ae:6c:33:24:b6:65:13:84:99:5d:92:81:fd:79:
         c3:c0:31:b9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTpxw4LTM9V/S/hq2XYBF4wU96HIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJCOTZGOEI1M0IwNkVFNDQ4QTUxNzA5QjhEMjMwQUU0
OURCRjMwRDAeFw0yNTAxMDIxOTUzMTdaFw0yNjAxMDExOTU4MTdaMDMxMTAvBgNV
BAMTKDA1REMyN0VCMzhGMUFFQ0ZEQkMyMEE2OEM2NUE1OEIwNjRCQjM3RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYX41WdQV7pYIbv5HaK5EOHtS
ZpLU4iacuHSjOvtC++8e0yDKWNgiq5X45OVA+6qoelGCFPRwjJA2S/Hd3uYckS4m
oHxN57vBaNtU7gzZaYvVNAtu+ykjpjfUdo4RIRpwl+xIL2/EKXmxmnWoWQRzbM5k
OOHr4K/lW+w08Q48cRHojh4Lhj+xSgaMhYhIQaexml1lt/UkAr+RMm2XGRadfaXl
dpCfZVWo8yQRvoV2Ufz9onxQs9f008X7OQGY0OIw4LeFd59z/YN7fnsqe3fn3+Ez
8sUDIdMk0xY/vDzOIEqdfPZvBn0jTkiSUlnvcP/jB/LJ2NZ6VVnCcZxZpmWvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUBdwn6zjxrs/bwgpoxlpYsGS7N+AwHwYDVR0j
BBgwFoAUorlvi1OwbuRIpRcJuNIwrknb8w0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjVrQVVZanBwS2ppOWNWY01kTlR4d052ZGtZbzEzejJqRnV5Wm81OHVY
ZmkvMC9BMkI5NkY4QjUzQjA2RUU0NDhBNTE3MDlCOEQyMzBBRTQ5REJGMzBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyQjk2RjhCNTNCMDZFRTQ0
OEE1MTcwOUI4RDIzMEFFNDlEQkYzMEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I1a0FVWWpwcEtqaTljVmNNZE5UeHdOdmRrWW8xM3oyakZ1eVpvNTh1WGZpLzAv
MzIzODMwMzQzYTMxNjUzMDYzM2EzMjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzNDMxMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEHgwgMA0GCSqGSIb3DQEBCwUA
A4IBAQABcs8yKBigig2AR1980qXumIuf/IKSXpgTdz6KhrSAFBpfxAZqH+UGF40U
nWHoLYgAhzTiUDKBXrXS69NdsgvUNFp7V/cn4lVNojPsVxeAI2VvSrVubefHbVPQ
U4o3KgJkAdciG2KxV0MBhAgYUbrtFiG0wj6TXuv19w8WyzX+yQkwv84AXv7eJTNb
NMABcHMd6YXaGre9HHOhHPuMpIFSb4RSg1+9TU5fAH1TkJBOybUL+11BoRRbk989
Q3+qeUN70l/EfX1lTw653U8135WAtWydmadMTXIItnFMUYxaDDlHOJhxFuN4840s
lJxnrmwzJLZlE4SZXZKB/XnDwDG5
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:41:45 2025 by rpki-client