Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/323830343a383833343a3a2f33322d313238203d3e20323732373537.roa
File:                     323830343a383833343a3a2f33322d313238203d3e20323732373537.roa (raw, json)
Hash identifier:          5OuFQaznavKGRpmb4KAk4LsnsujT7Q+l3d5vVLr4Dq4=
Subject key identifier:   4D:C8:F8:33:48:45:6F:68:44:0A:C9:14:70:0A:1F:09:94:1E:63:F9
Certificate issuer:       /CN=F9EE5F3CAD582E50F346855D065B1378F925500B
Certificate serial:       478E8766126F756166095959EAADE854EA1D0680
Authority key identifier: F9:EE:5F:3C:AD:58:2E:50:F3:46:85:5D:06:5B:13:78:F9:25:50:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9EE5F3CAD582E50F346855D065B1378F925500B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/323830343a383833343a3a2f33322d313238203d3e20323732373537.roa
Signing time:             Wed 22 Jan 2025 14:10:49 +0000
ROA not before:           Wed 22 Jan 2025 14:05:49 +0000
ROA not after:            Wed 21 Jan 2026 14:10:49 +0000
asID:                     272757
IP address blocks:        2804:8834::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/F9EE5F3CAD582E50F346855D065B1378F925500B.crl
                          rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/F9EE5F3CAD582E50F346855D065B1378F925500B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9EE5F3CAD582E50F346855D065B1378F925500B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 22:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8e:87:66:12:6f:75:61:66:09:59:59:ea:ad:e8:54:ea:1d:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9EE5F3CAD582E50F346855D065B1378F925500B
        Validity
            Not Before: Jan 22 14:05:49 2025 GMT
            Not After : Jan 21 14:10:49 2026 GMT
        Subject: CN=4DC8F83348456F68440AC914700A1F09941E63F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:93:ac:58:3e:ee:b2:06:bf:dc:45:1b:aa:
                    1a:17:61:6b:6f:e2:56:a9:e6:f2:d4:0b:7a:1d:85:
                    e5:d0:ab:c8:c1:a0:f3:3c:4c:9d:32:67:71:50:8e:
                    88:26:5d:c6:2a:28:84:97:e5:2c:77:3f:4b:47:7e:
                    6e:f0:47:c6:6e:b3:a9:22:e4:d0:b0:1b:45:0d:14:
                    aa:a2:2a:bc:9f:cb:73:d8:52:66:e6:23:36:0c:e4:
                    6f:38:80:2f:33:ea:39:84:01:d8:67:8c:76:24:b0:
                    af:80:38:48:ec:c0:dd:79:e1:74:ef:e8:f3:fa:6d:
                    e7:9a:a0:a2:6b:23:db:d4:b2:bc:fc:de:2a:e2:a0:
                    11:7f:e4:00:1e:1f:68:21:5c:ee:27:24:64:ca:32:
                    5b:6d:81:ad:2a:23:bb:2c:07:30:f2:16:fa:1e:56:
                    40:c6:41:fe:90:38:43:21:3c:1c:dc:ca:69:0e:c9:
                    ce:d7:f9:78:d6:88:06:e0:e8:d7:b7:62:6d:1c:b2:
                    02:8e:33:68:63:25:4c:1c:2c:20:dc:7d:28:e1:67:
                    61:6b:37:50:ed:1f:d0:17:c1:3d:6f:6b:fd:90:cf:
                    d7:fc:fc:b1:dd:c6:bd:9a:d9:fc:10:2c:fd:7c:35:
                    0b:75:30:0d:c3:5e:f7:fe:a5:05:94:39:e3:c2:8b:
                    0e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C8:F8:33:48:45:6F:68:44:0A:C9:14:70:0A:1F:09:94:1E:63:F9
            X509v3 Authority Key Identifier:
                keyid:F9:EE:5F:3C:AD:58:2E:50:F3:46:85:5D:06:5B:13:78:F9:25:50:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/F9EE5F3CAD582E50F346855D065B1378F925500B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9EE5F3CAD582E50F346855D065B1378F925500B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9akSzWtxmgtW7ssUH3zV35jhufs9Aoe98vTbkmF7jB4/0/323830343a383833343a3a2f33322d313238203d3e20323732373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8834::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:9a:c1:0f:70:33:1d:73:bd:6f:7f:6d:58:97:ba:14:8d:90:
         0d:9e:d2:ba:81:6d:6a:e7:d0:a9:d7:fd:e7:9c:93:2f:52:51:
         d7:b3:d0:a4:bf:d7:24:f9:b9:81:81:96:97:e9:50:70:8a:46:
         00:4f:eb:08:91:fc:a4:6b:31:a9:e9:e2:47:0b:85:8d:16:74:
         34:d2:7a:ea:09:4e:74:c7:fe:46:f5:63:e8:5f:47:52:49:0c:
         09:00:de:36:5b:d2:2d:81:52:f1:5b:d9:33:13:ae:85:5a:1c:
         66:b8:73:18:4c:f9:be:7e:48:31:22:e7:b6:a2:38:54:5f:59:
         9b:71:55:76:f6:a1:f6:c4:19:18:49:9a:96:a4:e5:34:68:5a:
         c2:af:2e:ca:0d:8d:78:4c:dd:c4:43:ce:cb:13:18:e1:4d:21:
         2d:89:67:56:3a:b7:b0:99:2c:b6:dd:c6:5b:41:88:55:19:5a:
         12:26:fb:f1:3a:8a:dc:80:c5:1f:20:64:3a:0e:e6:d6:4b:5e:
         b0:7c:4c:46:8e:fd:b2:29:99:75:5e:7f:e1:e6:f0:86:41:ae:
         6c:c6:56:5b:ed:ba:e4:c8:63:67:63:ff:04:4e:ad:38:8f:0c:
         00:28:8c:a3:3c:f8:7c:32:8d:74:28:f6:c4:a6:d7:07:37:73:
         66:95:c4:d2
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUR46HZhJvdWFmCVlZ6q3oVOodBoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlFRTVGM0NBRDU4MkU1MEYzNDY4NTVEMDY1QjEzNzhG
OTI1NTAwQjAeFw0yNTAxMjIxNDA1NDlaFw0yNjAxMjExNDEwNDlaMDMxMTAvBgNV
BAMTKDREQzhGODMzNDg0NTZGNjg0NDBBQzkxNDcwMEExRjA5OTQxRTYzRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX65OsWD7usga/3EUbqhoXYWtv
4lap5vLUC3odheXQq8jBoPM8TJ0yZ3FQjogmXcYqKISX5Sx3P0tHfm7wR8Zus6ki
5NCwG0UNFKqiKryfy3PYUmbmIzYM5G84gC8z6jmEAdhnjHYksK+AOEjswN154XTv
6PP6beeaoKJrI9vUsrz83irioBF/5AAeH2ghXO4nJGTKMlttga0qI7ssBzDyFvoe
VkDGQf6QOEMhPBzcymkOyc7X+XjWiAbg6Ne3Ym0csgKOM2hjJUwcLCDcfSjhZ2Fr
N1DtH9AXwT1va/2Qz9f8/LHdxr2a2fwQLP18NQt1MA3DXvf+pQWUOePCiw4VAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUTcj4M0hFb2hECskUcAofCZQeY/kwHwYDVR0j
BBgwFoAU+e5fPK1YLlDzRoVdBlsTePklUAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzlha1N6V3R4bWd0Vzdzc1VIM3pWMzVqaHVmczlBb2U5OHZUYmttRjdq
QjQvMC9GOUVFNUYzQ0FENTgyRTUwRjM0Njg1NUQwNjVCMTM3OEY5MjU1MDBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5RUU1RjNDQUQ1ODJFNTBG
MzQ2ODU1RDA2NUIxMzc4RjkyNTUwMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c5YWtTeld0eG1ndFc3c3NVSDN6VjM1amh1ZnM5QW9lOTh2VGJrbUY3akI0LzAv
MzIzODMwMzQzYTM4MzgzMzM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzIzNzM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBIg0MA0GCSqGSIb3DQEBCwUAA4IBAQApmsEP
cDMdc71vf21Yl7oUjZANntK6gW1q59Cp1/3nnJMvUlHXs9Ckv9ck+bmBgZaX6VBw
ikYAT+sIkfykazGp6eJHC4WNFnQ00nrqCU50x/5G9WPoX0dSSQwJAN42W9ItgVLx
W9kzE66FWhxmuHMYTPm+fkgxIue2ojhUX1mbcVV29qH2xBkYSZqWpOU0aFrCry7K
DY14TN3EQ87LExjhTSEtiWdWOrewmSy23cZbQYhVGVoSJvvxOorcgMUfIGQ6DubW
S16wfExGjv2yKZl1Xn/h5vCGQa5sxlZb7brkyGNnY/8ETq04jwwAKIyjPPh8Mo10
KPbEptcHN3NmlcTS
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:33 2025 by rpki-client