Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a383030303a3a2f33352d3335203d3e20323632373239.roa
File:                     323830343a313664383a383030303a3a2f33352d3335203d3e20323632373239.roa (raw, json)
Hash identifier:          9Ngd3c6KHvnPDnSzii00FZTLj3Bj4+i6WsxEfoc4e2Q=
Subject key identifier:   90:82:F5:9A:8E:19:09:5E:B5:BC:9A:C9:4D:AE:6D:C9:8B:5E:68:EA
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       15A6AF18A35C3BAB1638BC40426408BCDC2F6ADE
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a383030303a3a2f33352d3335203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:27 +0000
ROA not before:           Mon 15 Jul 2024 13:37:27 +0000
ROA not after:            Mon 14 Jul 2025 13:42:27 +0000
asID:                     262729
IP address blocks:        2804:16d8:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a6:af:18:a3:5c:3b:ab:16:38:bc:40:42:64:08:bc:dc:2f:6a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:27 2024 GMT
            Not After : Jul 14 13:42:27 2025 GMT
        Subject: CN=9082F59A8E19095EB5BC9AC94DAE6DC98B5E68EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fb:ca:61:32:87:a0:57:6c:f5:b1:f5:0d:37:
                    89:03:ba:88:b4:5e:a7:3b:06:c1:cb:e6:7f:a1:97:
                    bf:1f:6e:bc:9f:9c:73:18:ef:68:47:88:0a:f2:bc:
                    86:8d:75:78:05:6c:61:f3:ad:f0:d7:e5:90:3e:e5:
                    04:a4:20:f6:5d:a0:46:ba:d7:e4:26:fc:8a:15:df:
                    85:e6:38:20:f1:2b:4b:ed:8d:b4:38:dc:02:c7:87:
                    a2:d0:3f:9b:ae:89:a0:32:2c:6b:25:23:d8:f6:dd:
                    50:ba:66:19:3a:0d:42:3b:0c:b4:51:00:80:03:12:
                    4d:c5:cc:aa:6b:c3:5c:50:ae:05:3f:07:e0:b9:36:
                    d1:44:d5:7e:13:87:18:14:99:0b:83:b4:52:a6:94:
                    55:96:7e:90:0a:39:fa:34:ae:87:c8:c8:50:f8:d5:
                    41:ca:d5:ec:bf:9e:f6:f4:36:14:7a:05:cd:7d:41:
                    3f:e8:e2:9d:7e:98:70:02:62:b3:4b:0b:bd:2d:d1:
                    f0:66:40:bd:d6:3e:08:bd:a9:c1:fb:8f:a3:ee:ab:
                    7d:f8:b1:30:1c:6c:b5:6f:1a:e2:81:fd:b0:16:f4:
                    7b:d8:71:35:cf:0c:48:35:81:53:ed:77:4b:7e:f3:
                    59:a0:42:6c:55:4e:c5:2e:72:04:ef:3b:48:f9:3d:
                    1d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:82:F5:9A:8E:19:09:5E:B5:BC:9A:C9:4D:AE:6D:C9:8B:5E:68:EA
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a383030303a3a2f33352d3335203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:e8:f4:f9:98:ef:51:5b:4e:21:0c:db:50:e9:67:d4:0d:
         7f:d8:96:03:f1:f1:0a:f0:d6:51:c3:a5:26:c8:7a:14:33:ed:
         3f:82:19:1d:95:ea:c3:17:0d:98:d0:28:bc:47:78:c4:0e:a3:
         2b:e6:e2:9e:7f:1c:02:e2:57:76:37:58:76:1f:e8:b8:75:69:
         19:d8:c3:5d:00:25:ec:2c:9e:be:b4:ef:65:9f:43:d1:3e:be:
         23:51:c1:b5:34:49:cb:85:32:b8:f6:c1:6d:00:b3:27:09:f5:
         17:d8:f0:2b:76:7a:ec:4c:68:51:1e:f0:5e:ec:81:82:b1:36:
         45:db:54:f4:6a:2e:5c:35:75:ad:82:02:46:ca:ec:1b:9a:24:
         fa:d7:0d:7a:94:74:fe:b6:e2:99:c2:57:6a:3c:ad:f9:17:57:
         5f:42:bf:44:ac:f6:3e:c8:19:83:bf:42:3f:13:0b:44:70:d9:
         02:24:3f:1e:4a:e7:db:37:b7:f8:4a:b6:97:ab:47:ca:36:72:
         ba:a7:0b:b7:ee:e7:38:f4:7e:69:1d:52:ca:e7:65:f4:ab:55:
         4e:b4:dc:de:0f:fb:32:59:26:ef:5b:52:2e:67:05:4e:36:c8:
         0f:b4:4e:de:c7:a1:b1:5f:66:0a:18:a1:e8:ac:f1:26:80:78:
         06:fc:b5:47
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUFaavGKNcO6sWOLxAQmQIvNwvat4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNDA3MTUxMzM3MjdaFw0yNTA3MTQxMzQyMjdaMDMxMTAvBgNV
BAMTKDkwODJGNTlBOEUxOTA5NUVCNUJDOUFDOTREQUU2REM5OEI1RTY4RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+8phMoegV2z1sfUNN4kDuoi0
Xqc7BsHL5n+hl78fbryfnHMY72hHiAryvIaNdXgFbGHzrfDX5ZA+5QSkIPZdoEa6
1+Qm/IoV34XmOCDxK0vtjbQ43ALHh6LQP5uuiaAyLGslI9j23VC6Zhk6DUI7DLRR
AIADEk3FzKprw1xQrgU/B+C5NtFE1X4ThxgUmQuDtFKmlFWWfpAKOfo0rofIyFD4
1UHK1ey/nvb0NhR6Bc19QT/o4p1+mHACYrNLC70t0fBmQL3WPgi9qcH7j6Puq334
sTAcbLVvGuKB/bAW9HvYcTXPDEg1gVPtd0t+81mgQmxVTsUucgTvO0j5PR1zAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUkIL1mo4ZCV61vJrJTa5tyYteaOowHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzIzODMwMzQzYTMxMzY2NDM4M2EzODMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEFtiAMA0GCSqGSIb3DQEBCwUA
A4IBAQAyTej0+ZjvUVtOIQzbUOln1A1/2JYD8fEK8NZRw6UmyHoUM+0/ghkdlerD
Fw2Y0Ci8R3jEDqMr5uKefxwC4ld2N1h2H+i4dWkZ2MNdACXsLJ6+tO9ln0PRPr4j
UcG1NEnLhTK49sFtALMnCfUX2PArdnrsTGhRHvBe7IGCsTZF21T0ai5cNXWtggJG
yuwbmiT61w16lHT+tuKZwldqPK35F1dfQr9ErPY+yBmDv0I/EwtEcNkCJD8eSufb
N7f4SraXq0fKNnK6pwu37uc49H5pHVLK52X0q1VOtNzeD/syWSbvW1IuZwVONsgP
tE7ex6GxX2YKGKHorPEmgHgG/LVH
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:37:13 2025 by rpki-client