Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/323830343a353530303a3a2f33342d313238203d3e20323638363833.roa
File:                     323830343a353530303a3a2f33342d313238203d3e20323638363833.roa (raw, json)
Hash identifier:          CY1cgckh5LfihHbyiE5qbTbYicOGwA3cdqSQfEjeJok=
Subject key identifier:   BD:BF:40:42:BB:E9:38:DF:E8:FD:D9:C8:35:F4:D2:1B:6A:AF:3F:91
Certificate issuer:       /CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25
Certificate serial:       05B9A2F6D85D85F3E533CB96C9C094736A8E6BF0
Authority key identifier: BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/323830343a353530303a3a2f33342d313238203d3e20323638363833.roa
Signing time:             Thu 06 Mar 2025 10:04:40 +0000
ROA not before:           Thu 06 Mar 2025 09:59:40 +0000
ROA not after:            Thu 05 Mar 2026 10:04:40 +0000
asID:                     268683
IP address blocks:        2804:5500::/34 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl
                          rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b9:a2:f6:d8:5d:85:f3:e5:33:cb:96:c9:c0:94:73:6a:8e:6b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25
        Validity
            Not Before: Mar  6 09:59:40 2025 GMT
            Not After : Mar  5 10:04:40 2026 GMT
        Subject: CN=BDBF4042BBE938DFE8FDD9C835F4D21B6AAF3F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:88:0f:e9:90:94:31:c3:67:33:b9:9b:92:18:
                    79:32:65:16:6c:33:39:f5:9f:6b:91:ae:c2:f3:97:
                    df:30:a8:da:7d:12:ab:78:15:a1:46:b8:96:d4:e5:
                    57:22:70:6c:91:de:33:45:e8:6a:de:f1:cd:c9:31:
                    b7:d3:81:c7:e5:65:07:09:6e:e2:d8:83:6c:e9:76:
                    52:2a:3a:b1:f9:75:95:3b:59:65:e3:c3:e8:30:44:
                    50:51:83:25:87:e8:c3:a6:4d:4d:d7:a7:6a:5a:5b:
                    30:e1:43:94:bd:aa:03:5f:25:a3:bb:42:77:ad:9b:
                    a1:75:39:68:a8:7e:54:b7:ef:c3:9a:8e:49:d3:29:
                    03:8c:c0:ef:5c:75:e5:a5:d3:34:25:36:34:f1:70:
                    46:42:b8:79:51:30:9b:14:e8:3d:e6:da:88:ac:ce:
                    4d:68:56:72:ff:5e:52:3c:e0:37:0f:0d:50:6b:04:
                    80:bc:b3:0e:c4:97:80:67:fe:6b:fc:29:4e:f8:fa:
                    b6:0e:00:24:cc:26:fa:c7:ea:ae:91:6d:52:c2:20:
                    39:ed:cd:b1:45:69:b6:33:f5:96:3c:32:98:73:71:
                    ca:55:7d:7d:4f:40:3d:19:2d:80:da:c4:76:4c:3e:
                    cb:8e:9b:bd:e5:14:dc:c0:90:8d:dc:e8:37:8d:f0:
                    16:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BF:40:42:BB:E9:38:DF:E8:FD:D9:C8:35:F4:D2:1B:6A:AF:3F:91
            X509v3 Authority Key Identifier:
                keyid:BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/323830343a353530303a3a2f33342d313238203d3e20323638363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5500::/34

    Signature Algorithm: sha256WithRSAEncryption
         4a:b1:11:6b:2b:14:e9:19:71:49:a3:fa:2e:dd:8a:ca:85:e6:
         0f:07:e4:53:5f:0e:e6:c4:f6:0e:1b:38:95:5c:3d:33:4d:9a:
         87:49:e6:c8:f6:f1:a6:2b:0a:81:84:c3:48:c4:84:a2:09:bb:
         66:b3:74:5d:ca:f1:9d:3f:1f:af:9b:7b:f2:b4:39:1f:ca:ae:
         79:48:ab:0b:ff:47:7b:f4:17:2d:34:4d:ed:eb:d1:05:8f:1a:
         4d:bb:53:a6:50:6a:46:2b:05:b8:c1:9e:92:41:23:4f:cb:4c:
         ab:ec:8b:3f:75:dd:af:fe:31:01:3c:94:c3:24:a6:33:83:7c:
         62:7b:f0:b9:2b:9f:f9:d6:5a:2b:ef:18:34:02:84:95:f4:33:
         db:2e:f1:e8:10:c4:4e:36:c4:35:73:f0:09:ca:3d:78:56:6b:
         2e:5f:89:b6:52:c1:92:70:61:de:e8:b4:2a:cd:94:49:e3:bd:
         69:db:69:93:e5:1d:c7:a1:ec:c7:c9:35:02:ac:36:42:a1:50:
         a5:ad:bb:eb:8a:c4:bb:d0:1f:b7:7f:87:60:4a:3f:80:e1:42:
         2b:e0:c4:a0:5b:a6:b6:0d:3a:cb:fb:ee:2f:c1:70:e1:3c:0e:
         fc:46:c6:79:37:08:c1:bd:c4:ee:e9:f0:8a:a7:b3:89:c5:fa:
         f1:81:df:61
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBbmi9thdhfPlM8uWycCUc2qOa/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU5MTkxRjIyMkQzNkZGN0VEOTQwQTJCNUU0OTFFMkE4
MDIxREEyNTAeFw0yNTAzMDYwOTU5NDBaFw0yNjAzMDUxMDA0NDBaMDMxMTAvBgNV
BAMTKEJEQkY0MDQyQkJFOTM4REZFOEZERDlDODM1RjREMjFCNkFBRjNGOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJiA/pkJQxw2czuZuSGHkyZRZs
Mzn1n2uRrsLzl98wqNp9Eqt4FaFGuJbU5VcicGyR3jNF6Gre8c3JMbfTgcflZQcJ
buLYg2zpdlIqOrH5dZU7WWXjw+gwRFBRgyWH6MOmTU3Xp2paWzDhQ5S9qgNfJaO7
Qnetm6F1OWioflS378OajknTKQOMwO9cdeWl0zQlNjTxcEZCuHlRMJsU6D3m2ois
zk1oVnL/XlI84DcPDVBrBIC8sw7El4Bn/mv8KU74+rYOACTMJvrH6q6RbVLCIDnt
zbFFabYz9ZY8MphzccpVfX1PQD0ZLYDaxHZMPsuOm73lFNzAkI3c6DeN8BY9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUvb9AQrvpON/o/dnINfTSG2qvP5EwHwYDVR0j
BBgwFoAUvpGR8iLTb/ftlAorXkkeKoAh2iUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1lMRXd3c0Q4UXF3ZkxUaXN3UXFlZHZ2TVJTeWVyVlpyY0JkS1dCd0t2
eGsvMS9CRTkxOTFGMjIyRDM2RkY3RUQ5NDBBMkI1RTQ5MUUyQTgwMjFEQTI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFOTE5MUYyMjJEMzZGRjdF
RDk0MEEyQjVFNDkxRTJBODAyMURBMjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NZTEV3d3NEOFFxd2ZMVGlzd1FxZWR2dk1SU3llclZacmNCZEtXQndLdnhrLzEv
MzIzODMwMzQzYTM1MzUzMDMwM2EzYTJmMzMzNDJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzNjM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgYoBFUAADANBgkqhkiG9w0BAQsFAAOCAQEASrER
aysU6RlxSaP6Lt2KyoXmDwfkU18O5sT2Dhs4lVw9M02ah0nmyPbxpisKgYTDSMSE
ogm7ZrN0XcrxnT8fr5t78rQ5H8queUirC/9He/QXLTRN7evRBY8aTbtTplBqRisF
uMGekkEjT8tMq+yLP3Xdr/4xATyUwySmM4N8YnvwuSuf+dZaK+8YNAKElfQz2y7x
6BDETjbENXPwCco9eFZrLl+JtlLBknBh3ui0Ks2USeO9adtpk+Udx6Hsx8k1Aqw2
QqFQpa2764rEu9Aft3+HYEo/gOFCK+DEoFumtg06y/vuL8Fw4TwO/EbGeTcIwb3E
7unwiqezicX68YHfYQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:42:42 2025 by rpki-client