Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/323830343a366533633a3a2f33322d3332203d3e203238353732.roa
File:                     323830343a366533633a3a2f33322d3332203d3e203238353732.roa (raw, json)
Hash identifier:          WGbtq6mt6jw8wA2eL10khL2q7vz1yXpUThRDA3q0Trk=
Subject key identifier:   1E:53:6A:1C:6E:99:7A:D8:F5:AD:BF:D0:61:9A:09:7F:FD:BA:33:AC
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       5FFBFC82D440C0D08A502F14BF5DEA2D87138359
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/323830343a366533633a3a2f33322d3332203d3e203238353732.roa
Signing time:             Sat 29 Jun 2024 15:31:17 +0000
ROA not before:           Sat 29 Jun 2024 15:26:17 +0000
ROA not after:            Sat 28 Jun 2025 15:31:17 +0000
asID:                     28572
IP address blocks:        2804:6e3c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 09:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:fb:fc:82:d4:40:c0:d0:8a:50:2f:14:bf:5d:ea:2d:87:13:83:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: Jun 29 15:26:17 2024 GMT
            Not After : Jun 28 15:31:17 2025 GMT
        Subject: CN=1E536A1C6E997AD8F5ADBFD0619A097FFDBA33AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:54:f7:49:39:da:ec:a1:20:76:bc:5f:f5:3c:
                    a7:20:57:a7:ac:d2:38:d4:23:6c:be:07:20:16:c1:
                    bf:88:04:24:6e:c0:7a:38:3c:02:c6:87:b6:74:62:
                    74:6f:16:be:a0:90:5b:a9:fb:a5:8b:d0:62:b7:b8:
                    e2:ed:79:f7:49:78:60:cf:7c:87:71:65:16:52:32:
                    d4:7d:34:e6:57:97:1a:40:7b:6d:92:f7:f8:9c:e6:
                    be:e5:fe:93:2b:cb:de:29:96:88:35:fc:21:93:4c:
                    39:f3:b3:62:88:49:3f:4c:ff:9e:11:0c:fb:d9:1b:
                    ba:52:10:d7:46:88:21:e4:64:76:14:93:89:2b:f0:
                    d7:43:de:be:8c:a6:80:50:d2:63:10:33:76:c4:1a:
                    42:8c:cc:77:47:b9:5d:3c:df:25:d0:c8:39:23:b9:
                    04:7f:e9:ec:64:fb:82:f4:fe:f2:57:17:ae:67:64:
                    5b:ab:e8:e0:a3:21:05:d2:3d:42:16:42:44:ed:ad:
                    9b:dd:18:ca:e8:5b:1d:bc:53:95:e9:01:72:05:f0:
                    61:7d:0f:25:cf:b8:1a:d1:b2:83:39:21:ee:fe:04:
                    c9:c7:9d:00:45:7d:83:58:d1:fd:f5:79:29:b7:6a:
                    26:4f:b3:64:ba:49:c9:0a:1e:8a:55:0b:af:aa:e8:
                    fd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:53:6A:1C:6E:99:7A:D8:F5:AD:BF:D0:61:9A:09:7F:FD:BA:33:AC
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/323830343a366533633a3a2f33322d3332203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:6d:ed:99:8d:ca:dc:95:bb:29:e8:ac:bb:d8:a9:80:79:db:
         29:1d:d7:48:3f:68:5b:1e:06:af:7c:6a:65:a0:3d:db:19:be:
         16:10:b3:58:e1:61:1d:af:3d:c0:c1:09:67:c0:0c:73:87:a3:
         91:6e:ea:fe:2d:59:91:78:06:9b:e2:b9:a8:25:80:23:ab:97:
         94:84:fa:5d:0e:53:43:da:4c:e4:aa:05:59:9f:42:29:d1:b9:
         f6:60:0e:46:cc:0a:6a:cf:de:7e:88:66:46:ff:b2:df:8b:d7:
         80:8f:a3:07:b7:8b:21:97:b1:27:e7:0c:0d:73:81:93:13:0d:
         03:0e:3c:fa:7a:fb:12:6b:3b:bb:8f:b8:c5:02:0a:f6:fb:da:
         0d:f2:60:0f:eb:b0:c3:16:9f:bd:c6:53:d1:a4:f4:0a:dd:cf:
         18:46:bb:cd:42:e9:6b:cf:14:56:b8:d3:3d:e0:e5:31:aa:b3:
         da:c6:15:90:c7:4f:4f:56:09:bb:51:52:3e:0a:0a:5b:ad:93:
         f2:44:bf:aa:51:5e:54:02:c2:a1:f1:82:a2:10:ed:6e:1a:d7:
         2c:ae:94:52:7b:64:8d:28:fe:25:7f:bd:fe:3a:0a:2d:00:65:
         99:5c:dc:c3:ad:22:b8:d1:3b:10:74:5a:34:bf:6a:2f:c6:a9:
         af:5f:9d:0c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUX/v8gtRAwNCKUC8Uv13qLYcTg1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlFQUUzOEQxNUY1ODk5RDM2MDlDNDExRUIxQTFDNkI0
MkRGQjAwOTAeFw0yNDA2MjkxNTI2MTdaFw0yNTA2MjgxNTMxMTdaMDMxMTAvBgNV
BAMTKDFFNTM2QTFDNkU5OTdBRDhGNUFEQkZEMDYxOUEwOTdGRkRCQTMzQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpVPdJOdrsoSB2vF/1PKcgV6es
0jjUI2y+ByAWwb+IBCRuwHo4PALGh7Z0YnRvFr6gkFup+6WL0GK3uOLtefdJeGDP
fIdxZRZSMtR9NOZXlxpAe22S9/ic5r7l/pMry94plog1/CGTTDnzs2KIST9M/54R
DPvZG7pSENdGiCHkZHYUk4kr8NdD3r6MpoBQ0mMQM3bEGkKMzHdHuV083yXQyDkj
uQR/6exk+4L0/vJXF65nZFur6OCjIQXSPUIWQkTtrZvdGMroWx28U5XpAXIF8GF9
DyXPuBrRsoM5Ie7+BMnHnQBFfYNY0f31eSm3aiZPs2S6SckKHopVC6+q6P1pAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUHlNqHG6Zetj1rb/QYZoJf/26M6wwHwYDVR0j
BBgwFoAUGerjjRX1iZ02CcQR6xoca0LfsAkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk5abWZjelg4eExwVUxDQVhXQnhhamt3QkhESkprc0poSks0UG9hd3hB
U1EvMC8xOUVBRTM4RDE1RjU4OTlEMzYwOUM0MTFFQjFBMUM2QjQyREZCMDA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5RUFFMzhEMTVGNTg5OUQz
NjA5QzQxMUVCMUExQzZCNDJERkIwMDkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JOWm1mY3pYOHhMcFVMQ0FYV0J4YWprd0JIREpKa3NKaEpLNFBvYXd4QVNRLzAv
MzIzODMwMzQzYTM2NjUzMzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzODM1
MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEbjwwDQYJKoZIhvcNAQELBQADggEBAB9t7ZmNytyV
uynorLvYqYB52ykd10g/aFseBq98amWgPdsZvhYQs1jhYR2vPcDBCWfADHOHo5Fu
6v4tWZF4BpviuaglgCOrl5SE+l0OU0PaTOSqBVmfQinRufZgDkbMCmrP3n6IZkb/
st+L14CPowe3iyGXsSfnDA1zgZMTDQMOPPp6+xJrO7uPuMUCCvb72g3yYA/rsMMW
n73GU9Gk9ArdzxhGu81C6WvPFFa40z3g5TGqs9rGFZDHT09WCbtRUj4KClutk/JE
v6pRXlQCwqHxgqIQ7W4a1yyulFJ7ZI0o/iV/vf46Ci0AZZlc3MOtIrjROxB0WjS/
ai/Gqa9fnQw=
-----END CERTIFICATE-----
Generated at Fri Mar 14 00:39:19 2025 by rpki-client