Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a3a2f33322d3332203d3e20323638383739.roa
File:                     323830343a356266343a3a2f33322d3332203d3e20323638383739.roa (raw, json)
Hash identifier:          EVa82TOut5bhyMd7GLaEg/VgdZob20eqvkuVXRVI1FY=
Subject key identifier:   D8:ED:5E:24:9C:07:A9:9F:A1:CA:64:6B:01:5C:D8:39:0B:6D:DC:F8
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       26C6734C19DADA0B17141A9F2ADDC93845AE1477
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a3a2f33322d3332203d3e20323638383739.roa
Signing time:             Wed 09 Apr 2025 14:00:39 +0000
ROA not before:           Wed 09 Apr 2025 13:55:39 +0000
ROA not after:            Wed 08 Apr 2026 14:00:39 +0000
asID:                     268879
IP address blocks:        2804:5bf4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c6:73:4c:19:da:da:0b:17:14:1a:9f:2a:dd:c9:38:45:ae:14:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Apr  9 13:55:39 2025 GMT
            Not After : Apr  8 14:00:39 2026 GMT
        Subject: CN=D8ED5E249C07A99FA1CA646B015CD8390B6DDCF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a3:5a:c0:94:7b:e8:dd:b6:f6:c9:38:8d:44:
                    23:77:b2:52:d6:a7:d3:2d:fc:b8:a6:34:13:f0:b0:
                    61:6c:34:b3:46:15:dd:11:1b:61:3b:7a:5f:7d:59:
                    b1:16:8e:b1:af:23:de:22:7b:54:4d:92:eb:25:4b:
                    8b:7e:77:80:5f:97:86:b1:69:de:a5:f3:e9:5b:fc:
                    e2:09:e3:dc:05:58:c5:f8:bc:69:9d:b5:e7:eb:db:
                    fc:b9:8a:d5:61:18:d7:25:e6:05:58:f0:81:ba:13:
                    07:f9:e3:e1:e0:13:2b:c1:dc:01:f2:e7:fb:72:10:
                    16:9b:5d:02:24:30:1d:f0:a6:48:98:89:eb:eb:87:
                    d4:15:c4:1a:f9:aa:62:a2:12:8e:d8:e2:11:ef:74:
                    4f:86:29:b9:e5:6a:70:52:42:a6:1f:93:0a:df:9a:
                    ba:fb:93:06:1f:1e:c2:fc:0d:77:51:6c:ac:e0:36:
                    7b:31:ff:9d:b5:c4:f3:58:f2:21:02:ff:22:f5:5d:
                    32:7a:e3:d8:77:92:f8:5a:bf:8d:1a:18:1e:2a:df:
                    ab:b9:e6:10:2f:82:f3:86:6f:e2:f7:f0:58:d2:92:
                    3e:ea:5b:7a:6f:48:20:d8:ef:bb:3a:2f:7e:53:b6:
                    01:7a:5f:3e:7c:ad:6f:bc:ea:c7:02:6b:ac:bc:32:
                    4c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:ED:5E:24:9C:07:A9:9F:A1:CA:64:6B:01:5C:D8:39:0B:6D:DC:F8
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a3a2f33322d3332203d3e20323638383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf4::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:c1:19:d8:98:18:ed:03:bb:e9:e7:d3:8a:82:f1:6f:a5:b2:
         6a:e9:c5:ef:25:ae:0a:0e:ab:16:f1:0d:0f:10:c4:23:80:24:
         ae:b3:27:4f:e2:50:a0:e4:22:53:33:eb:a0:d3:e9:3d:51:aa:
         67:0d:59:6d:a4:44:61:43:67:50:ef:08:3a:cc:95:4e:c1:82:
         25:3f:20:b2:d0:b5:9b:57:56:28:20:e9:db:a2:d2:e7:a6:65:
         ea:d9:00:66:53:e6:35:ea:88:6e:f6:6c:09:2b:d7:ac:0c:15:
         85:87:52:e0:15:66:2a:b4:d4:2f:87:cf:3d:a7:ad:ae:63:26:
         84:fe:f5:e5:1e:7f:3c:21:ef:8a:e5:53:a4:bc:65:91:30:eb:
         c9:35:97:d8:3c:fd:09:a5:82:8f:e1:dc:48:87:7c:da:0f:63:
         7f:cb:ee:be:ac:44:fa:c6:72:f3:e7:3e:be:11:f5:51:30:eb:
         71:78:95:10:26:7c:8f:a7:2c:bd:4c:52:86:9f:3e:07:15:69:
         63:c4:29:6c:73:81:dc:a2:6c:5b:cd:89:ad:69:28:1e:02:84:
         cf:14:0f:9b:bf:0b:d9:e1:dc:5e:9c:5f:85:52:77:22:22:2e:
         20:52:8a:ef:66:2f:ec:cc:e5:05:75:89:70:74:f5:ca:23:81:
         d9:d8:da:8d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJsZzTBna2gsXFBqfKt3JOEWuFHcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDNDcyMUU2Njc1OTNBNDNEQTc4MzJGNTg4RTZCNkI4
RjU3MzExQzAeFw0yNTA0MDkxMzU1MzlaFw0yNjA0MDgxNDAwMzlaMDMxMTAvBgNV
BAMTKEQ4RUQ1RTI0OUMwN0E5OUZBMUNBNjQ2QjAxNUNEODM5MEI2RERDRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUo1rAlHvo3bb2yTiNRCN3slLW
p9Mt/LimNBPwsGFsNLNGFd0RG2E7el99WbEWjrGvI94ie1RNkuslS4t+d4Bfl4ax
ad6l8+lb/OIJ49wFWMX4vGmdtefr2/y5itVhGNcl5gVY8IG6Ewf54+HgEyvB3AHy
5/tyEBabXQIkMB3wpkiYievrh9QVxBr5qmKiEo7Y4hHvdE+GKbnlanBSQqYfkwrf
mrr7kwYfHsL8DXdRbKzgNnsx/521xPNY8iEC/yL1XTJ649h3kvhav40aGB4q36u5
5hAvgvOGb+L38FjSkj7qW3pvSCDY77s6L35TtgF6Xz58rW+86scCa6y8Mkx1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU2O1eJJwHqZ+hymRrAVzYOQtt3PgwHwYDVR0j
BBgwFoAUKMRyHmZ1k6Q9p4MvWI5ra49XMRwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFRlNU5LRnZmUDk2TEt6OG1IdWFHa0ZlZVRmREMxeUJVeGtyb3VmTnNU
cEMvMS8yOEM0NzIxRTY2NzU5M0E0M0RBNzgzMkY1ODhFNkI2QjhGNTczMTFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QzQ3MjFFNjY3NTkzQTQz
REE3ODMyRjU4OEU2QjZCOEY1NzMxMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RUZTVOS0Z2ZlA5NkxLejhtSHVhR2tGZWVUZkRDMXlCVXhrcm91Zk5zVHBDLzEv
MzIzODMwMzQzYTM1NjI2NjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzgzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARb9DANBgkqhkiG9w0BAQsFAAOCAQEAJMEZ2JgY
7QO76efTioLxb6WyaunF7yWuCg6rFvENDxDEI4AkrrMnT+JQoOQiUzProNPpPVGq
Zw1ZbaREYUNnUO8IOsyVTsGCJT8gstC1m1dWKCDp26LS56Zl6tkAZlPmNeqIbvZs
CSvXrAwVhYdS4BVmKrTUL4fPPaetrmMmhP715R5/PCHviuVTpLxlkTDryTWX2Dz9
CaWCj+HcSId82g9jf8vuvqxE+sZy8+c+vhH1UTDrcXiVECZ8j6csvUxShp8+BxVp
Y8QpbHOB3KJsW82JrWkoHgKEzxQPm78L2eHcXpxfhVJ3IiIuIFKK72Yv7MzlBXWJ
cHT1yiOB2djajQ==
-----END CERTIFICATE-----
Generated at Sun Apr 13 18:22:46 2025 by rpki-client