Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/0/323830343a383766633a3a2f33322d3438203d3e20323732373434.roa
File:                     323830343a383766633a3a2f33322d3438203d3e20323732373434.roa (raw, json)
Hash identifier:          Dbx3zojvNb0T2I17GD0TJgoWCYHkU9AH73za4Mhx+pw=
Subject key identifier:   2E:08:E5:0D:09:60:5A:80:FC:91:06:7F:7C:45:BD:7A:C3:9A:7C:62
Certificate issuer:       /CN=01F5FB48B5BF3E1660392E1BF49903DE7425A56B
Certificate serial:       1EDBD892A54624BE3F0EB033B87D3CAE24C2448B
Authority key identifier: 01:F5:FB:48:B5:BF:3E:16:60:39:2E:1B:F4:99:03:DE:74:25:A5:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01F5FB48B5BF3E1660392E1BF49903DE7425A56B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/0/323830343a383766633a3a2f33322d3438203d3e20323732373434.roa
Signing time:             Mon 16 Dec 2024 18:50:19 +0000
ROA not before:           Mon 16 Dec 2024 18:45:19 +0000
ROA not after:            Mon 15 Dec 2025 18:50:19 +0000
asID:                     272744
IP address blocks:        2804:87fc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/0/01F5FB48B5BF3E1660392E1BF49903DE7425A56B.crl
                          rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/0/01F5FB48B5BF3E1660392E1BF49903DE7425A56B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01F5FB48B5BF3E1660392E1BF49903DE7425A56B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 10:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:db:d8:92:a5:46:24:be:3f:0e:b0:33:b8:7d:3c:ae:24:c2:44:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01F5FB48B5BF3E1660392E1BF49903DE7425A56B
        Validity
            Not Before: Dec 16 18:45:19 2024 GMT
            Not After : Dec 15 18:50:19 2025 GMT
        Subject: CN=2E08E50D09605A80FC91067F7C45BD7AC39A7C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:31:e2:04:17:d5:c9:6b:fa:27:52:a7:7d:
                    5f:a2:22:10:c3:ca:83:cc:4f:45:15:c3:57:45:ef:
                    c2:5b:9d:6f:a9:ef:c6:93:66:da:a2:8a:af:88:a6:
                    c2:c8:12:eb:a8:c2:72:99:da:e1:f3:81:11:b6:ed:
                    64:1e:d6:14:59:a9:fb:9f:b1:5e:df:15:40:b2:6f:
                    4c:37:bd:1d:ac:4d:a2:84:00:6b:f9:fb:87:0d:50:
                    3f:97:9a:9b:b3:ed:1b:f0:86:13:e5:f4:15:01:39:
                    74:bb:55:d8:f1:f2:e2:e9:fc:3c:30:e5:74:04:d5:
                    07:e0:94:35:dc:3e:78:3f:56:4b:71:8b:5b:0f:72:
                    5b:ef:e6:47:7a:ea:94:36:72:88:24:e4:60:bb:cf:
                    9f:bc:36:7a:cb:90:17:b8:64:23:ca:0e:d4:29:49:
                    f1:82:d4:a1:75:6f:61:50:0d:fa:09:3a:05:7b:04:
                    27:7d:d9:82:7b:64:ee:22:83:c9:2a:d8:9f:3f:cf:
                    b5:b1:cd:d1:fe:76:03:4c:bd:c2:fa:7d:76:76:2f:
                    6b:f7:2d:93:b6:15:32:81:56:20:17:7a:de:28:b9:
                    b6:2b:f7:eb:c1:fa:68:99:32:8a:77:48:d8:42:aa:
                    30:4d:9f:96:ee:0d:4f:83:42:27:09:2f:6c:b9:82:
                    6c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:08:E5:0D:09:60:5A:80:FC:91:06:7F:7C:45:BD:7A:C3:9A:7C:62
            X509v3 Authority Key Identifier:
                keyid:01:F5:FB:48:B5:BF:3E:16:60:39:2E:1B:F4:99:03:DE:74:25:A5:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/0/01F5FB48B5BF3E1660392E1BF49903DE7425A56B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01F5FB48B5BF3E1660392E1BF49903DE7425A56B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4YBo9GbvY1CHnayFvbVB7CUhuMY2TZxsPF97EoG3qxB/0/323830343a383766633a3a2f33322d3438203d3e20323732373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:55:d8:ff:25:10:9a:5a:25:0e:b3:b0:78:21:db:46:42:a8:
         b3:51:bd:94:cb:f5:8e:67:b5:8f:ab:c1:6e:21:de:30:f3:e8:
         17:ff:14:ea:59:1a:90:17:b4:bd:6a:f4:9a:31:04:80:c3:7b:
         55:50:1e:e5:91:36:01:b7:61:12:de:7e:12:28:59:a3:20:38:
         4d:3a:ac:f7:99:33:21:c7:18:b7:81:71:0d:82:b1:77:52:2f:
         df:aa:9f:b6:f0:d8:d8:90:01:8d:cd:bc:e3:79:3b:bb:ae:05:
         a4:78:32:f9:bc:fa:c8:0d:3c:66:f2:c9:92:8e:27:93:4b:b3:
         00:26:f0:d3:6b:36:bf:4f:3e:4d:2a:14:99:ec:d7:ad:30:67:
         e3:22:7b:0a:2c:94:da:71:ad:e6:b5:e2:7f:01:a5:2a:df:e4:
         36:2c:49:c7:d1:fd:b5:e4:05:02:66:79:0f:5b:cf:ce:b5:4e:
         d0:61:ac:57:cc:c0:f5:32:47:b1:e3:eb:01:02:df:75:07:06:
         41:e0:b0:bd:d6:35:43:bd:d1:db:43:8a:df:ae:17:6f:26:20:
         93:86:b5:06:fb:4d:a0:15:f9:26:5e:d0:ef:ee:a9:4f:84:63:
         41:0a:aa:9f:3e:01:f8:67:b7:44:f3:09:9e:f5:18:77:e7:59:
         94:4e:35:98
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHtvYkqVGJL4/DrAzuH08riTCRIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFGNUZCNDhCNUJGM0UxNjYwMzkyRTFCRjQ5OTAzREU3
NDI1QTU2QjAeFw0yNDEyMTYxODQ1MTlaFw0yNTEyMTUxODUwMTlaMDMxMTAvBgNV
BAMTKDJFMDhFNTBEMDk2MDVBODBGQzkxMDY3RjdDNDVCRDdBQzM5QTdDNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNGTHiBBfVyWv6J1KnfV+iIhDD
yoPMT0UVw1dF78JbnW+p78aTZtqiiq+IpsLIEuuownKZ2uHzgRG27WQe1hRZqfuf
sV7fFUCyb0w3vR2sTaKEAGv5+4cNUD+Xmpuz7RvwhhPl9BUBOXS7Vdjx8uLp/Dww
5XQE1QfglDXcPng/Vktxi1sPclvv5kd66pQ2cogk5GC7z5+8NnrLkBe4ZCPKDtQp
SfGC1KF1b2FQDfoJOgV7BCd92YJ7ZO4ig8kq2J8/z7WxzdH+dgNMvcL6fXZ2L2v3
LZO2FTKBViAXet4oubYr9+vB+miZMop3SNhCqjBNn5buDU+DQicJL2y5gmxxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQULgjlDQlgWoD8kQZ/fEW9esOafGIwHwYDVR0j
BBgwFoAUAfX7SLW/PhZgOS4b9JkD3nQlpWswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRZQm85R2J2WTFDSG5heUZ2YlZCN0NVaHVNWTJUWnhzUEY5N0VvRzNx
eEIvMC8wMUY1RkI0OEI1QkYzRTE2NjAzOTJFMUJGNDk5MDNERTc0MjVBNTZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxRjVGQjQ4QjVCRjNFMTY2
MDM5MkUxQkY0OTkwM0RFNzQyNUE1NkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0WUJvOUdidlkxQ0huYXlGdmJWQjdDVWh1TVkyVFp4c1BGOTdFb0czcXhCLzAv
MzIzODMwMzQzYTM4Mzc2NjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMy
MzczNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASH/DANBgkqhkiG9w0BAQsFAAOCAQEABFXY/yUQ
mlolDrOweCHbRkKos1G9lMv1jme1j6vBbiHeMPPoF/8U6lkakBe0vWr0mjEEgMN7
VVAe5ZE2AbdhEt5+EihZoyA4TTqs95kzIccYt4FxDYKxd1Iv36qftvDY2JABjc28
43k7u64FpHgy+bz6yA08ZvLJko4nk0uzACbw02s2v08+TSoUmezXrTBn4yJ7CiyU
2nGt5rXifwGlKt/kNixJx9H9teQFAmZ5D1vPzrVO0GGsV8zA9TJHsePrAQLfdQcG
QeCwvdY1Q73R20OK364XbyYgk4a1BvtNoBX5Jl7Q7+6pT4RjQQqqnz4B+Ge3RPMJ
nvUYd+dZlE41mA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:03 2025 by rpki-client