Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/323830343a323663633a3a2f33332d3333203d3e20323633383538.roa
File:                     323830343a323663633a3a2f33332d3333203d3e20323633383538.roa (raw, json)
Hash identifier:          4sk+szUVlWSaQZiPeGyBaPGSHoYWYqe2TJ7rIl/Vr28=
Subject key identifier:   EB:AA:3A:2D:98:D4:D0:66:5E:F9:A3:49:71:07:25:74:CD:E6:13:19
Certificate issuer:       /CN=53BF4224C1DAB932B987D0CF66C65662A8B5020F
Certificate serial:       3582B25DF64E19E056137CE0F1AE86C8EE32D732
Authority key identifier: 53:BF:42:24:C1:DA:B9:32:B9:87:D0:CF:66:C6:56:62:A8:B5:02:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BF4224C1DAB932B987D0CF66C65662A8B5020F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/323830343a323663633a3a2f33332d3333203d3e20323633383538.roa
Signing time:             Tue 21 Jan 2025 18:28:01 +0000
ROA not before:           Tue 21 Jan 2025 18:23:01 +0000
ROA not after:            Tue 20 Jan 2026 18:28:01 +0000
asID:                     263858
IP address blocks:        2804:26cc::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/53BF4224C1DAB932B987D0CF66C65662A8B5020F.crl
                          rsync://rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/53BF4224C1DAB932B987D0CF66C65662A8B5020F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BF4224C1DAB932B987D0CF66C65662A8B5020F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 02:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:82:b2:5d:f6:4e:19:e0:56:13:7c:e0:f1:ae:86:c8:ee:32:d7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BF4224C1DAB932B987D0CF66C65662A8B5020F
        Validity
            Not Before: Jan 21 18:23:01 2025 GMT
            Not After : Jan 20 18:28:01 2026 GMT
        Subject: CN=EBAA3A2D98D4D0665EF9A34971072574CDE61319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:01:6a:33:7c:aa:6d:f3:2a:34:0e:32:10:
                    1c:9e:78:1b:64:12:02:52:eb:0a:6d:b3:c7:cc:a1:
                    67:18:14:c3:f8:97:9f:4c:aa:ef:78:06:b6:a0:68:
                    34:0c:42:de:42:6b:a4:97:ec:64:f4:b1:2e:38:d6:
                    17:dd:7c:85:06:6f:f4:21:b7:29:13:d4:0d:8b:d0:
                    04:a4:16:09:63:52:ce:f8:e3:83:36:43:23:86:94:
                    0f:ec:c7:24:56:ea:f7:c7:90:bd:1b:cb:dd:2a:a5:
                    73:a5:5d:02:e8:fc:fe:34:c9:d0:6f:1d:0b:61:fb:
                    18:00:25:01:e0:6e:c0:67:2d:6f:8b:12:11:81:be:
                    d0:ac:f0:68:4b:69:f5:b2:10:6a:34:aa:e0:a6:10:
                    32:85:5a:c8:42:d1:7b:11:65:2d:a7:e8:2b:86:12:
                    95:51:64:2c:19:04:05:39:42:c6:8c:81:d4:dc:ef:
                    7a:24:ce:d1:b8:48:8b:9b:be:7e:0b:ad:54:a0:fd:
                    7d:ca:ce:40:67:d9:f4:9e:05:ed:44:9e:62:9c:b3:
                    d5:ca:c5:e8:8b:05:68:d6:ef:2c:b9:86:f8:7c:12:
                    a4:9d:df:bd:2e:84:15:31:d7:5c:2e:2c:f5:f5:e5:
                    39:a8:81:8e:fc:56:e0:44:e4:a5:e0:fc:78:d5:50:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AA:3A:2D:98:D4:D0:66:5E:F9:A3:49:71:07:25:74:CD:E6:13:19
            X509v3 Authority Key Identifier:
                keyid:53:BF:42:24:C1:DA:B9:32:B9:87:D0:CF:66:C6:56:62:A8:B5:02:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/53BF4224C1DAB932B987D0CF66C65662A8B5020F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BF4224C1DAB932B987D0CF66C65662A8B5020F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/323830343a323663633a3a2f33332d3333203d3e20323633383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26cc::/33

    Signature Algorithm: sha256WithRSAEncryption
         7e:c0:a6:98:13:ca:d9:40:ef:22:8a:da:14:df:78:10:f8:b9:
         43:8c:e0:0c:78:ca:de:0d:e3:77:e1:7a:b2:1d:8d:67:9b:c3:
         96:47:bf:e0:e4:e1:71:01:64:c3:ef:cf:b5:91:dc:f1:ba:6d:
         56:97:9f:0f:82:c4:b5:fd:4d:6d:a7:c7:da:3a:a3:5d:b2:a7:
         39:24:45:2d:bf:bb:04:fd:7d:57:3b:bf:a3:57:94:99:dc:f4:
         a1:59:c0:6e:39:05:f0:25:a3:6c:35:ac:aa:af:55:ee:44:ee:
         6a:c8:ed:93:56:d3:1d:cb:06:49:cc:fe:3f:0d:97:1b:d5:2d:
         bb:90:49:af:21:a0:70:c0:1e:cf:56:f0:b5:67:52:62:88:f5:
         4f:5d:b4:f6:68:d5:a2:11:34:d1:80:a0:40:7e:26:e5:ca:47:
         f1:20:32:57:96:73:ee:7d:af:98:37:df:ba:75:d4:fe:e5:34:
         d8:6b:97:90:29:99:09:5e:90:9f:9d:7c:6d:36:a2:cb:13:d0:
         c2:1c:9d:a3:8a:8d:85:c9:53:38:42:63:69:41:46:7a:aa:5e:
         aa:3d:1c:b3:66:16:a3:44:c1:7c:ae:d7:19:c7:3c:a9:9c:9b:
         a2:17:7f:d7:a1:a9:70:db:52:56:3a:70:d0:92:a6:9a:75:0d:
         80:8b:f9:ed
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNYKyXfZOGeBWE3zg8a6GyO4y1zIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNCRjQyMjRDMURBQjkzMkI5ODdEMENGNjZDNjU2NjJB
OEI1MDIwRjAeFw0yNTAxMjExODIzMDFaFw0yNjAxMjAxODI4MDFaMDMxMTAvBgNV
BAMTKEVCQUEzQTJEOThENEQwNjY1RUY5QTM0OTcxMDcyNTc0Q0RFNjEzMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiBwFqM3yqbfMqNA4yEByeeBtk
EgJS6wpts8fMoWcYFMP4l59Mqu94BragaDQMQt5Ca6SX7GT0sS441hfdfIUGb/Qh
tykT1A2L0ASkFgljUs7444M2QyOGlA/sxyRW6vfHkL0by90qpXOlXQLo/P40ydBv
HQth+xgAJQHgbsBnLW+LEhGBvtCs8GhLafWyEGo0quCmEDKFWshC0XsRZS2n6CuG
EpVRZCwZBAU5QsaMgdTc73okztG4SIubvn4LrVSg/X3KzkBn2fSeBe1EnmKcs9XK
xeiLBWjW7yy5hvh8EqSd370uhBUx11wuLPX15TmogY78VuBE5KXg/HjVUO2BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU66o6LZjU0GZe+aNJcQcldM3mExkwHwYDVR0j
BBgwFoAUU79CJMHauTK5h9DPZsZWYqi1Ag8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR29SVmNNa2o3N3A5VjRmZ3NGQlp6b3o4RmhRR2JyUW5uSzRNa0tpS0d0
U0QvMC81M0JGNDIyNEMxREFCOTMyQjk4N0QwQ0Y2NkM2NTY2MkE4QjUwMjBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzQkY0MjI0QzFEQUI5MzJC
OTg3RDBDRjY2QzY1NjYyQThCNTAyMEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dvUlZjTWtqNzdwOVY0ZmdzRkJaem96OEZoUUdiclFubks0TWtLaUtHdFNELzAv
MzIzODMwMzQzYTMyMzY2MzYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjMz
MzgzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQmzAAwDQYJKoZIhvcNAQELBQADggEBAH7AppgT
ytlA7yKK2hTfeBD4uUOM4Ax4yt4N43fherIdjWebw5ZHv+Dk4XEBZMPvz7WR3PG6
bVaXnw+CxLX9TW2nx9o6o12ypzkkRS2/uwT9fVc7v6NXlJnc9KFZwG45BfAlo2w1
rKqvVe5E7mrI7ZNW0x3LBknM/j8NlxvVLbuQSa8hoHDAHs9W8LVnUmKI9U9dtPZo
1aIRNNGAoEB+JuXKR/EgMleWc+59r5g337p11P7lNNhrl5ApmQlekJ+dfG02ossT
0MIcnaOKjYXJUzhCY2lBRnqqXqo9HLNmFqNEwXyu1xnHPKmcm6IXf9ehqXDbUlY6
cNCSppp1DYCL+e0=
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:43:37 2025 by rpki-client