Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a383030343a3a2f34382d3438203d3e203532363133.roa
File:                     323830343a6433633a383030343a3a2f34382d3438203d3e203532363133.roa (raw, json)
Hash identifier:          SG9gW1e7drVBytHeu41E/4w3RiYZZMfOnyM+Ja15hBQ=
Subject key identifier:   E6:DE:2F:58:3F:80:CA:B7:CA:BC:40:57:6E:CD:F9:51:9D:73:13:EF
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       62286817FFCE0F13FA644D632EB90B133E529A6F
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a383030343a3a2f34382d3438203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:18 +0000
ROA not before:           Thu 06 Mar 2025 09:37:18 +0000
ROA not after:            Thu 05 Mar 2026 09:42:18 +0000
asID:                     52613
IP address blocks:        2804:d3c:8004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:28:68:17:ff:ce:0f:13:fa:64:4d:63:2e:b9:0b:13:3e:52:9a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:18 2025 GMT
            Not After : Mar  5 09:42:18 2026 GMT
        Subject: CN=E6DE2F583F80CAB7CABC40576ECDF9519D7313EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:89:13:95:33:e6:c9:64:2e:64:23:de:73:
                    11:dd:19:45:68:fb:b1:48:5b:c6:bb:26:e5:02:ac:
                    70:9a:67:fb:bb:3d:9c:4c:1d:66:af:d9:ef:05:8b:
                    2d:12:45:98:9b:84:44:3d:7e:93:d4:f2:76:2c:b8:
                    62:b9:73:a9:af:13:96:0e:1e:27:36:a0:f0:60:62:
                    e3:48:cb:6e:33:7a:60:a1:fc:e4:80:d8:fa:27:72:
                    61:9d:7a:be:ba:c7:92:74:0b:13:cf:4b:28:af:1b:
                    9a:c6:ee:f5:bc:52:5f:9a:5a:e2:09:81:d0:95:0b:
                    02:29:bb:ae:9e:c1:2d:d0:90:86:35:87:26:31:31:
                    ae:ab:8f:79:72:c5:fd:2a:0c:2f:f3:09:42:0b:0a:
                    96:fc:f4:a7:7a:49:f7:0f:37:c7:47:9d:a9:99:7f:
                    cf:a3:74:f6:f2:0e:dd:9c:96:1c:d6:61:03:34:cd:
                    a4:ce:19:ba:13:26:29:5d:35:ea:e7:63:a1:4f:69:
                    68:93:ba:04:f2:f0:2d:70:01:15:c8:b1:1f:27:e3:
                    67:b1:1d:6d:96:f8:d1:4b:bb:b0:80:be:f1:04:2d:
                    e5:3d:c0:0b:d3:38:4f:98:ee:02:e7:e4:6c:5f:e7:
                    88:1a:88:51:57:01:c6:c6:7a:89:2f:14:08:db:9a:
                    d2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DE:2F:58:3F:80:CA:B7:CA:BC:40:57:6E:CD:F9:51:9D:73:13:EF
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a383030343a3a2f34382d3438203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d3c:8004::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:68:43:11:55:46:8c:24:3d:97:2a:c8:4c:c1:24:1f:54:c7:
         16:cd:3c:06:19:a0:f9:d6:f5:0b:bd:71:ed:62:9f:7f:f6:c2:
         18:85:ab:fb:e8:39:36:eb:e9:16:1c:9b:18:b6:ff:01:02:0c:
         e6:17:1a:e2:c5:28:3b:7f:6d:29:a3:5d:c4:7e:27:e4:12:58:
         5b:e2:1e:b1:5a:9a:aa:4a:22:33:e2:49:fd:df:c1:35:ee:93:
         fd:3c:ec:f3:b6:72:51:aa:a6:fd:c9:8c:1f:03:06:0c:c4:0f:
         cf:c1:c2:17:85:bf:7e:2d:45:b5:34:f3:89:e3:79:23:d7:b2:
         97:ae:aa:ed:80:cc:5d:09:ca:2d:72:1a:47:ce:6b:9a:c0:73:
         9b:62:4d:76:18:4d:34:c8:96:93:65:6d:16:62:32:4a:1f:e7:
         19:48:1a:90:f9:4d:d7:57:75:e8:7a:93:e3:ca:4c:60:31:cb:
         41:0c:8c:30:98:e7:ff:60:43:34:f7:dd:77:f9:c5:64:db:e7:
         b2:e7:26:3c:9b:ed:3f:61:84:b5:30:cf:c7:82:45:7a:19:f8:
         18:bf:ef:23:50:1e:cd:5a:bf:de:02:6a:1e:17:16:b6:20:17:
         23:4b:84:e3:6e:1c:11:b5:2f:c6:39:74:48:a0:54:c8:a5:24:
         82:c0:91:5e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUYihoF//ODxP6ZE1jLrkLEz5Smm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBEQzVBMzVCOTQ3MDdENEVCNzEwNkY2QkE5RTlDRjg3
NkJBRTQ1NjAeFw0yNTAzMDYwOTM3MThaFw0yNjAzMDUwOTQyMThaMDMxMTAvBgNV
BAMTKEU2REUyRjU4M0Y4MENBQjdDQUJDNDA1NzZFQ0RGOTUxOUQ3MzEzRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSIkTlTPmyWQuZCPecxHdGUVo
+7FIW8a7JuUCrHCaZ/u7PZxMHWav2e8Fiy0SRZibhEQ9fpPU8nYsuGK5c6mvE5YO
Hic2oPBgYuNIy24zemCh/OSA2PoncmGder66x5J0CxPPSyivG5rG7vW8Ul+aWuIJ
gdCVCwIpu66ewS3QkIY1hyYxMa6rj3lyxf0qDC/zCUILCpb89Kd6SfcPN8dHnamZ
f8+jdPbyDt2clhzWYQM0zaTOGboTJildNernY6FPaWiTugTy8C1wARXIsR8n42ex
HW2W+NFLu7CAvvEELeU9wAvTOE+Y7gLn5Gxf54gaiFFXAcbGeokvFAjbmtL3AgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQU5t4vWD+AyrfKvEBXbs35UZ1zE+8wHwYDVR0j
BBgwFoAUkNxaNblHB9TrcQb2up6c+Ha65FYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VTNlF5M2lqejdMSktjblRHZzZOVEc0WXBFY0RDTGZ6aFAyYm5FemtQ
TWkvMS85MERDNUEzNUI5NDcwN0Q0RUI3MTA2RjZCQTlFOUNGODc2QkFFNDU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwREM1QTM1Qjk0NzA3RDRF
QjcxMDZGNkJBOUU5Q0Y4NzZCQUU0NTYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1UzZReTNpano3TEpLY25UR2c2TlRHNFlwRWNEQ0xmemhQMmJuRXprUE1pLzEv
MzIzODMwMzQzYTY0MzM2MzNhMzgzMDMwMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNTMyMzYzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQNPIAEMA0GCSqGSIb3DQEBCwUAA4IB
AQC1aEMRVUaMJD2XKshMwSQfVMcWzTwGGaD51vULvXHtYp9/9sIYhav76Dk26+kW
HJsYtv8BAgzmFxrixSg7f20po13EfifkElhb4h6xWpqqSiIz4kn938E17pP9POzz
tnJRqqb9yYwfAwYMxA/PwcIXhb9+LUW1NPOJ43kj17KXrqrtgMxdCcotchpHzmua
wHObYk12GE00yJaTZW0WYjJKH+cZSBqQ+U3XV3XoepPjykxgMctBDIwwmOf/YEM0
9913+cVk2+ey5yY8m+0/YYS1MM/HgkV6GfgYv+8jUB7NWr/eAmoeFxa2IBcjS4Tj
bhwRtS/GOXRIoFTIpSSCwJFe
-----END CERTIFICATE-----
Generated at Fri Apr 18 11:27:10 2025 by rpki-client