Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33322d3332203d3e20323638343633.roa
File:                     323830343a353139343a3a2f33322d3332203d3e20323638343633.roa (raw, json)
Hash identifier:          jsNqoox3r9kjmOQKK1npD7wnHQC/Uq0dCAK6l770JXI=
Subject key identifier:   89:16:DF:06:04:E6:47:03:5E:FF:53:44:E2:36:A5:A1:3B:5B:98:F3
Certificate issuer:       /CN=F0931552062EC8A139154BBD3CD39D55B6697B9A
Certificate serial:       5F3837A2E2E3796B9798A303903FD32B077FD68F
Authority key identifier: F0:93:15:52:06:2E:C8:A1:39:15:4B:BD:3C:D3:9D:55:B6:69:7B:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0931552062EC8A139154BBD3CD39D55B6697B9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33322d3332203d3e20323638343633.roa
Signing time:             Tue 11 Feb 2025 20:52:36 +0000
ROA not before:           Tue 11 Feb 2025 20:47:36 +0000
ROA not after:            Tue 10 Feb 2026 20:52:36 +0000
asID:                     268463
IP address blocks:        2804:5194::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/F0931552062EC8A139154BBD3CD39D55B6697B9A.crl
                          rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/F0931552062EC8A139154BBD3CD39D55B6697B9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0931552062EC8A139154BBD3CD39D55B6697B9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:38:37:a2:e2:e3:79:6b:97:98:a3:03:90:3f:d3:2b:07:7f:d6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0931552062EC8A139154BBD3CD39D55B6697B9A
        Validity
            Not Before: Feb 11 20:47:36 2025 GMT
            Not After : Feb 10 20:52:36 2026 GMT
        Subject: CN=8916DF0604E647035EFF5344E236A5A13B5B98F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:19:f2:87:26:4a:3d:33:d1:1e:4f:56:03:dc:
                    a2:c0:eb:b8:67:c7:72:bd:a5:f0:f5:6b:ca:f6:53:
                    3a:7c:26:51:6c:59:eb:1f:58:ff:ed:a9:a0:0c:44:
                    db:fa:1e:8d:d9:6c:22:fa:4c:22:38:af:b3:36:c3:
                    b6:0d:09:50:24:3c:e5:46:13:28:e0:88:71:f4:76:
                    d9:2f:63:9a:42:81:57:83:01:2d:0e:da:a7:c4:21:
                    43:64:5a:54:03:54:b5:4b:3f:f6:07:17:5f:3b:af:
                    43:5f:33:74:84:ab:61:fc:14:5e:ff:78:e4:e8:3b:
                    59:7d:04:7e:68:b9:7b:c8:00:2d:93:65:16:66:01:
                    09:9c:79:95:7e:be:2d:3e:a9:88:78:b8:c8:74:bc:
                    84:54:3b:c1:9a:93:76:06:c3:29:ec:97:54:05:86:
                    3d:cf:ca:6f:02:d6:f2:6a:58:0b:c0:5d:d4:63:ee:
                    be:8a:20:67:ab:ff:ef:0f:a3:55:30:12:a0:04:37:
                    22:2e:9a:6c:8c:4d:b9:c3:72:55:82:b0:20:df:cc:
                    fa:6c:aa:bb:be:c1:46:be:4e:e5:96:14:81:96:16:
                    de:d9:11:5a:21:98:a8:4f:36:0e:af:2e:0f:d4:85:
                    12:9d:bc:20:f4:e8:ba:d9:f9:b8:6d:dd:c4:4e:a4:
                    74:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:16:DF:06:04:E6:47:03:5E:FF:53:44:E2:36:A5:A1:3B:5B:98:F3
            X509v3 Authority Key Identifier:
                keyid:F0:93:15:52:06:2E:C8:A1:39:15:4B:BD:3C:D3:9D:55:B6:69:7B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/F0931552062EC8A139154BBD3CD39D55B6697B9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0931552062EC8A139154BBD3CD39D55B6697B9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33322d3332203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5194::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:4e:c7:d8:62:d0:b8:42:d6:92:bf:79:c4:26:1e:bd:d6:81:
         51:6a:e1:ff:5e:4d:77:dd:75:ea:c9:b6:c5:65:40:e7:50:87:
         f7:0c:8b:b8:76:d2:2d:37:7a:82:9f:37:76:be:5a:98:d4:7f:
         cd:b5:5e:f8:26:ab:be:0c:74:3b:2d:7c:af:a2:2c:6d:f3:99:
         d1:66:90:59:9a:10:80:c8:10:91:82:1b:80:63:97:c0:47:6b:
         92:cf:0f:e0:2a:8d:aa:e5:46:53:69:d3:7f:70:ff:24:0b:b4:
         13:f7:72:88:99:c5:d0:b0:8e:55:15:54:5f:a9:b2:00:92:96:
         48:9d:29:75:d9:8d:34:a1:d3:a0:e8:9c:b5:55:d1:b6:dd:b0:
         5a:16:b9:f0:df:2a:97:c8:31:0a:fa:a9:ec:5d:2a:51:6c:c9:
         9d:74:e7:1d:65:80:8f:2b:6e:71:8f:2d:81:a1:47:d0:aa:83:
         4b:30:21:0c:cc:59:48:36:dd:f0:13:93:63:00:0d:3b:95:2f:
         c9:b3:79:43:05:ff:3e:ad:ed:2c:82:67:f1:4d:50:7d:92:89:
         36:c1:7e:96:12:4a:db:eb:0a:42:61:3c:fa:7c:93:c8:6d:a6:
         a8:69:1b:4c:fa:19:ca:64:ee:f7:9c:4a:eb:e8:d0:c4:e6:de:
         02:fd:cd:c8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXzg3ouLjeWuXmKMDkD/TKwd/1o8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA5MzE1NTIwNjJFQzhBMTM5MTU0QkJEM0NEMzlENTVC
NjY5N0I5QTAeFw0yNTAyMTEyMDQ3MzZaFw0yNjAyMTAyMDUyMzZaMDMxMTAvBgNV
BAMTKDg5MTZERjA2MDRFNjQ3MDM1RUZGNTM0NEUyMzZBNUExM0I1Qjk4RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfGfKHJko9M9EeT1YD3KLA67hn
x3K9pfD1a8r2Uzp8JlFsWesfWP/tqaAMRNv6Ho3ZbCL6TCI4r7M2w7YNCVAkPOVG
EyjgiHH0dtkvY5pCgVeDAS0O2qfEIUNkWlQDVLVLP/YHF187r0NfM3SEq2H8FF7/
eOToO1l9BH5ouXvIAC2TZRZmAQmceZV+vi0+qYh4uMh0vIRUO8Gak3YGwynsl1QF
hj3Pym8C1vJqWAvAXdRj7r6KIGer/+8Po1UwEqAENyIummyMTbnDclWCsCDfzPps
qru+wUa+TuWWFIGWFt7ZEVohmKhPNg6vLg/UhRKdvCD06LrZ+bht3cROpHTxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUiRbfBgTmRwNe/1NE4jaloTtbmPMwHwYDVR0j
BBgwFoAU8JMVUgYuyKE5FUu9PNOdVbZpe5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnNNd3BvV1FERTlRMlE0YVRGR0hxdjZqZGcybTdZRmNENjlOcUs2ZTJm
S3MvMC9GMDkzMTU1MjA2MkVDOEExMzkxNTRCQkQzQ0QzOUQ1NUI2Njk3QjlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwOTMxNTUyMDYyRUM4QTEz
OTE1NEJCRDNDRDM5RDU1QjY2OTdCOUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZzTXdwb1dRREU5UTJRNGFURkdIcXY2amRnMm03WUZjRDY5TnFLNmUyZktzLzAv
MzIzODMwMzQzYTM1MzEzOTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzQzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARRlDANBgkqhkiG9w0BAQsFAAOCAQEAlU7H2GLQ
uELWkr95xCYevdaBUWrh/15Nd9116sm2xWVA51CH9wyLuHbSLTd6gp83dr5amNR/
zbVe+Carvgx0Oy18r6IsbfOZ0WaQWZoQgMgQkYIbgGOXwEdrks8P4CqNquVGU2nT
f3D/JAu0E/dyiJnF0LCOVRVUX6myAJKWSJ0pddmNNKHToOictVXRtt2wWha58N8q
l8gxCvqp7F0qUWzJnXTnHWWAjytucY8tgaFH0KqDSzAhDMxZSDbd8BOTYwANO5Uv
ybN5QwX/Pq3tLIJn8U1QfZKJNsF+lhJK2+sKQmE8+nyTyG2mqGkbTPoZymTu95xK
6+jQxObeAv3NyA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:27 2025 by rpki-client