Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa
File:                     323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa (raw, json)
Hash identifier:          pRg5K9zgmeK8IyJcB9EOxOKJIjLW4WxHeB8CfEa2Sas=
Subject key identifier:   C1:22:03:86:93:4E:7C:C5:E4:F3:07:12:00:77:F5:09:D2:5C:7C:69
Certificate issuer:       /CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
Certificate serial:       3BED3280E97546EDC987515DAC2588F666821D03
Authority key identifier: 32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa
Signing time:             Fri 14 Feb 2025 17:47:36 +0000
ROA not before:           Fri 14 Feb 2025 17:42:36 +0000
ROA not after:            Fri 13 Feb 2026 17:47:36 +0000
asID:                     52772
IP address blocks:        2804:259c:ba00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ed:32:80:e9:75:46:ed:c9:87:51:5d:ac:25:88:f6:66:82:1d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9
        Validity
            Not Before: Feb 14 17:42:36 2025 GMT
            Not After : Feb 13 17:47:36 2026 GMT
        Subject: CN=C1220386934E7CC5E4F307120077F509D25C7C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:da:90:ec:14:29:1c:00:2b:34:68:87:b2:7d:
                    f5:5b:8d:05:1d:17:87:e0:45:cd:d7:73:3c:33:94:
                    79:b6:31:07:ce:9d:2c:d0:49:24:f5:eb:0d:93:56:
                    f2:51:7f:c3:48:4f:f6:56:bb:dc:1a:3d:eb:41:fb:
                    16:c2:79:9d:7f:02:ca:96:cf:f2:ff:19:75:41:d8:
                    56:ef:a5:ec:15:70:30:2d:d0:60:7a:a5:b7:0e:d6:
                    8c:3e:0a:91:c5:96:0b:c8:c2:d4:26:d2:a4:af:43:
                    53:3c:4c:7d:fa:be:a5:e2:d9:ef:1d:61:b0:dd:1e:
                    f5:99:7b:28:60:70:ed:e7:5d:2a:9f:a6:f3:21:3c:
                    1a:ac:88:cb:08:10:dd:80:0d:0c:72:a4:9a:0f:42:
                    35:2f:bb:f0:70:f6:76:11:a4:41:d0:d9:56:b4:11:
                    cc:a8:60:60:21:4a:f5:98:79:58:67:fe:68:6a:9b:
                    9a:ee:b1:af:45:55:49:ea:62:da:cd:0a:d1:86:05:
                    42:0c:b2:5e:d1:75:aa:cd:3c:a2:e0:76:c0:ee:3d:
                    2c:a7:92:b5:00:27:b8:11:39:02:6f:48:bb:eb:1b:
                    62:75:86:96:57:e5:d6:42:5b:24:80:14:6b:32:37:
                    a4:75:19:a2:bc:37:d3:b0:5d:7d:85:dc:b8:16:68:
                    c8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:22:03:86:93:4E:7C:C5:E4:F3:07:12:00:77:F5:09:D2:5C:7C:69
            X509v3 Authority Key Identifier:
                keyid:32:F6:AC:3D:8F:50:6B:DC:EC:81:2B:DF:D2:CF:B3:31:A2:51:EA:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F6AC3D8F506BDCEC812BDFD2CFB331A251EAC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a626130303a3a2f34302d3430203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:ca:d6:6b:2d:d2:b5:fd:73:d0:48:62:c5:94:e5:0c:ee:0c:
         35:39:e7:ec:df:32:28:2d:f4:36:2c:f4:2d:47:c1:c4:c6:58:
         cd:2f:3a:4d:53:3b:e4:41:b1:21:8e:ee:c2:29:b9:ed:75:34:
         43:a0:4d:7c:0a:58:ed:9c:81:ec:2d:72:19:37:71:05:12:8e:
         e0:87:0d:94:21:e0:40:50:12:c3:1c:8b:54:f7:fc:35:af:38:
         ff:be:2f:14:cb:24:6f:fd:3b:e5:f8:21:c0:4c:b0:63:bf:a4:
         7a:e9:28:ff:55:be:58:b3:cb:e2:1f:ed:33:56:b9:54:ee:f9:
         8f:83:a0:e3:ba:1d:6d:c0:80:20:58:89:b7:d0:11:be:50:a0:
         a1:03:53:29:dd:5c:52:56:9c:1f:f0:c2:cd:d3:63:e6:51:de:
         27:86:62:63:71:4d:53:54:28:77:dc:00:7c:51:c7:b2:31:7d:
         c4:21:2e:9c:d0:8e:41:cb:1d:a6:9c:5a:2a:ff:c7:eb:c3:ee:
         68:05:2a:c1:cb:31:fe:e1:da:1e:99:67:95:2c:fe:2c:42:f8:
         c8:76:ea:79:98:99:16:96:37:93:9e:2b:de:88:c8:11:98:f2:
         9f:c3:0d:5c:5a:40:48:38:f4:00:23:87:48:0a:ab:39:e7:30:
         77:27:24:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUO+0ygOl1Ru3Jh1FdrCWI9maCHQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJGNkFDM0Q4RjUwNkJEQ0VDODEyQkRGRDJDRkIzMzFB
MjUxRUFDOTAeFw0yNTAyMTQxNzQyMzZaFw0yNjAyMTMxNzQ3MzZaMDMxMTAvBgNV
BAMTKEMxMjIwMzg2OTM0RTdDQzVFNEYzMDcxMjAwNzdGNTA5RDI1QzdDNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX2pDsFCkcACs0aIeyffVbjQUd
F4fgRc3XczwzlHm2MQfOnSzQSST16w2TVvJRf8NIT/ZWu9waPetB+xbCeZ1/AsqW
z/L/GXVB2FbvpewVcDAt0GB6pbcO1ow+CpHFlgvIwtQm0qSvQ1M8TH36vqXi2e8d
YbDdHvWZeyhgcO3nXSqfpvMhPBqsiMsIEN2ADQxypJoPQjUvu/Bw9nYRpEHQ2Va0
EcyoYGAhSvWYeVhn/mhqm5rusa9FVUnqYtrNCtGGBUIMsl7RdarNPKLgdsDuPSyn
krUAJ7gROQJvSLvrG2J1hpZX5dZCWySAFGsyN6R1GaK8N9OwXX2F3LgWaMhNAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUwSIDhpNOfMXk8wcSAHf1CdJcfGkwHwYDVR0j
BBgwFoAUMvasPY9Qa9zsgSvf0s+zMaJR6skwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4
VGYvMC8zMkY2QUMzRDhGNTA2QkRDRUM4MTJCREZEMkNGQjMzMUEyNTFFQUM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyRjZBQzNEOEY1MDZCRENF
QzgxMkJERkQyQ0ZCMzMxQTI1MUVBQzkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzeDRwd3Jqa0h2ODJtMWd4VEtucHY4SjV4NFNDSmZNYlVLeU5XaVBkeFRmLzAv
MzIzODMwMzQzYTMyMzUzOTYzM2E2MjYxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDM1MzIzNzM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBCWcujANBgkqhkiG9w0BAQsFAAOC
AQEAAMrWay3Stf1z0EhixZTlDO4MNTnn7N8yKC30Niz0LUfBxMZYzS86TVM75EGx
IY7uwim57XU0Q6BNfApY7ZyB7C1yGTdxBRKO4IcNlCHgQFASwxyLVPf8Na84/74v
FMskb/075fghwEywY7+keuko/1W+WLPL4h/tM1a5VO75j4Og47odbcCAIFiJt9AR
vlCgoQNTKd1cUlacH/DCzdNj5lHeJ4ZiY3FNU1Qod9wAfFHHsjF9xCEunNCOQcsd
ppxaKv/H68PuaAUqwcsx/uHaHplnlSz+LEL4yHbqeZiZFpY3k54r3ojIEZjyn8MN
XFpASDj0ACOHSAqrOecwdyckwA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:26 2025 by rpki-client