Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a666163653a3a2f36342d3634203d3e203532363133.roa
File:                     323830343a6433633a666163653a3a2f36342d3634203d3e203532363133.roa (raw, json)
Hash identifier:          2C0/bS6+vDz8LY3am2Nad/jGlsCAvQYrwJH4fdzyFZ4=
Subject key identifier:   E9:CE:15:E4:F1:AE:91:F3:93:7A:DD:F5:D0:26:43:6A:38:E1:7B:96
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       019C3B4D82690110330CA02014FDB9FFA0529308
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a666163653a3a2f36342d3634203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:19 +0000
ROA not before:           Thu 06 Mar 2025 09:37:19 +0000
ROA not after:            Thu 05 Mar 2026 09:42:19 +0000
asID:                     52613
IP address blocks:        2804:d3c:face::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:3b:4d:82:69:01:10:33:0c:a0:20:14:fd:b9:ff:a0:52:93:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:19 2025 GMT
            Not After : Mar  5 09:42:19 2026 GMT
        Subject: CN=E9CE15E4F1AE91F3937ADDF5D026436A38E17B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:c2:e6:ce:f4:00:22:db:4d:00:6b:dd:99:
                    54:97:35:1c:63:df:e0:89:35:bb:0a:e4:68:95:8e:
                    5b:33:1e:57:88:05:7f:0e:a1:a6:7a:ae:0c:5a:ca:
                    aa:e8:6d:38:a0:24:b6:81:be:52:c6:62:80:1c:8c:
                    ab:58:3f:fe:e0:bb:cb:4b:df:39:51:2f:cc:5c:07:
                    77:91:e9:4b:7d:57:ba:a4:55:70:58:aa:d3:a0:58:
                    5f:8a:21:93:e9:ee:26:81:e7:57:9f:99:d6:cf:35:
                    d4:77:1d:e7:1f:86:a5:cb:17:50:7c:26:3d:9f:de:
                    25:47:54:44:ef:15:8e:0e:77:08:2f:03:38:dd:b9:
                    23:48:4b:84:a4:64:25:e6:f0:64:2e:91:c2:73:be:
                    61:f8:44:a1:52:4f:1a:8e:bf:de:01:2d:b0:de:ae:
                    0b:9c:d5:0c:e3:13:bf:de:c3:87:c5:22:67:e7:17:
                    24:7f:9c:b0:41:85:91:e3:e8:a0:26:ed:5c:a7:2d:
                    1c:a9:ee:83:33:45:d2:c2:87:b0:59:f3:c1:4d:5a:
                    65:86:78:6b:ba:b1:aa:f3:d9:99:54:cb:53:8b:ec:
                    8e:74:24:d5:5f:a3:97:0c:38:38:3f:45:c9:95:7a:
                    42:86:38:be:e5:3a:2a:70:1d:b0:ea:35:f1:93:74:
                    8e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CE:15:E4:F1:AE:91:F3:93:7A:DD:F5:D0:26:43:6A:38:E1:7B:96
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a666163653a3a2f36342d3634203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d3c:face::/64

    Signature Algorithm: sha256WithRSAEncryption
         9b:cf:60:68:38:5c:5d:a7:a6:dd:38:40:7c:4d:37:2f:a0:42:
         fa:51:c4:dd:c5:8a:58:87:f7:98:4c:89:db:a8:9d:3c:b5:fe:
         b6:3a:e4:a5:42:a0:8a:03:5b:ed:91:87:7a:6a:af:8f:18:2d:
         73:33:4e:31:ff:8f:c7:f6:68:90:7d:c9:54:c2:96:a2:c6:34:
         f2:ed:ca:8b:39:56:38:c5:66:06:b8:33:bd:25:db:d4:18:41:
         d3:7a:8b:c5:f4:13:56:da:38:e6:27:5b:51:c4:69:51:dd:a9:
         16:5e:53:32:94:e3:2a:84:9c:a9:22:72:aa:4c:5d:d8:29:dd:
         c9:cc:9a:dc:9a:f9:77:78:1a:7c:11:f6:f6:b8:ab:b5:66:80:
         ba:af:21:21:09:06:df:89:c6:e1:58:83:de:5b:1c:ab:6c:6e:
         67:cd:c2:ea:5e:98:c2:d4:69:45:df:5e:bf:3d:c6:e0:06:ae:
         c2:62:b8:6f:43:31:66:d8:e9:9f:ce:41:7f:09:4c:9b:de:a8:
         7a:98:b0:d6:c0:73:7e:d4:47:15:74:6e:6d:56:4a:f3:38:25:
         db:f4:d1:33:2f:e2:45:6f:67:f0:29:ec:ee:f1:88:64:35:72:
         31:81:e1:81:97:b8:e5:0d:8b:68:89:cf:4d:a6:11:e9:6a:7b:
         03:44:f6:c2
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUAZw7TYJpARAzDKAgFP25/6BSkwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBEQzVBMzVCOTQ3MDdENEVCNzEwNkY2QkE5RTlDRjg3
NkJBRTQ1NjAeFw0yNTAzMDYwOTM3MTlaFw0yNjAzMDUwOTQyMTlaMDMxMTAvBgNV
BAMTKEU5Q0UxNUU0RjFBRTkxRjM5MzdBRERGNUQwMjY0MzZBMzhFMTdCOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ssLmzvQAIttNAGvdmVSXNRxj
3+CJNbsK5GiVjlszHleIBX8OoaZ6rgxayqrobTigJLaBvlLGYoAcjKtYP/7gu8tL
3zlRL8xcB3eR6Ut9V7qkVXBYqtOgWF+KIZPp7iaB51efmdbPNdR3HecfhqXLF1B8
Jj2f3iVHVETvFY4OdwgvAzjduSNIS4SkZCXm8GQukcJzvmH4RKFSTxqOv94BLbDe
rguc1QzjE7/ew4fFImfnFyR/nLBBhZHj6KAm7VynLRyp7oMzRdLCh7BZ88FNWmWG
eGu6sarz2ZlUy1OL7I50JNVfo5cMODg/RcmVekKGOL7lOipwHbDqNfGTdI7RAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU6c4V5PGukfOTet310CZDajjhe5YwHwYDVR0j
BBgwFoAUkNxaNblHB9TrcQb2up6c+Ha65FYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VTNlF5M2lqejdMSktjblRHZzZOVEc0WXBFY0RDTGZ6aFAyYm5FemtQ
TWkvMS85MERDNUEzNUI5NDcwN0Q0RUI3MTA2RjZCQTlFOUNGODc2QkFFNDU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwREM1QTM1Qjk0NzA3RDRF
QjcxMDZGNkJBOUU5Q0Y4NzZCQUU0NTYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1UzZReTNpano3TEpLY25UR2c2TlRHNFlwRWNEQ0xmemhQMmJuRXprUE1pLzEv
MzIzODMwMzQzYTY0MzM2MzNhNjY2MTYzNjUzYTNhMmYzNjM0MmQzNjM0MjAzZDNl
MjAzNTMyMzYzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsG
AQUFBwEHAQH/BBUwEzARBAIAAjALAwkAKAQNPPrOAAAwDQYJKoZIhvcNAQELBQAD
ggEBAJvPYGg4XF2npt04QHxNNy+gQvpRxN3FiliH95hMiduonTy1/rY65KVCoIoD
W+2Rh3pqr48YLXMzTjH/j8f2aJB9yVTClqLGNPLtyos5VjjFZga4M70l29QYQdN6
i8X0E1baOOYnW1HEaVHdqRZeUzKU4yqEnKkicqpMXdgp3cnMmtya+Xd4GnwR9va4
q7VmgLqvISEJBt+JxuFYg95bHKtsbmfNwupemMLUaUXfXr89xuAGrsJiuG9DMWbY
6Z/OQX8JTJveqHqYsNbAc37URxV0bm1WSvM4Jdv00TMv4kVvZ/Ap7O7xiGQ1cjGB
4YGXuOUNi2iJz02mEelqewNE9sI=
-----END CERTIFICATE-----
Generated at Fri Apr 18 11:21:46 2025 by rpki-client