Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/323830343a313636383a3a2f33322d3438203d3e203533313332.roa
File:                     323830343a313636383a3a2f33322d3438203d3e203533313332.roa (raw, json)
Hash identifier:          +Xg7aFhNal1NEBj1tp2LkQX7ZnjUA/E/JssM2xFfD08=
Subject key identifier:   CE:98:63:7D:DF:ED:23:FF:01:42:66:35:71:69:FF:46:CF:0B:4B:B0
Certificate issuer:       /CN=B53A77B5E460044CB626F7588E1A91702B1AE08E
Certificate serial:       13A02531EDCFA22074386B0011FED7C8E5DC6127
Authority key identifier: B5:3A:77:B5:E4:60:04:4C:B6:26:F7:58:8E:1A:91:70:2B:1A:E0:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/323830343a313636383a3a2f33322d3438203d3e203533313332.roa
Signing time:             Thu 06 Mar 2025 04:33:06 +0000
ROA not before:           Thu 06 Mar 2025 04:28:06 +0000
ROA not after:            Thu 05 Mar 2026 04:33:06 +0000
asID:                     53132
IP address blocks:        2804:1668::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.crl
                          rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 04:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a0:25:31:ed:cf:a2:20:74:38:6b:00:11:fe:d7:c8:e5:dc:61:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B53A77B5E460044CB626F7588E1A91702B1AE08E
        Validity
            Not Before: Mar  6 04:28:06 2025 GMT
            Not After : Mar  5 04:33:06 2026 GMT
        Subject: CN=CE98637DDFED23FF014266357169FF46CF0B4BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:11:97:5f:70:ed:97:8f:23:5b:65:9e:94:
                    f8:59:84:38:86:52:a0:d6:67:2f:6d:ed:6b:1a:cd:
                    f1:ee:71:17:d5:09:d1:21:d4:be:20:12:6b:46:4f:
                    50:e3:07:fa:89:bc:2d:16:cb:97:f1:0b:13:70:0a:
                    d1:56:11:0a:9f:5d:86:40:63:67:b3:81:dd:c4:8e:
                    62:ca:de:99:56:86:43:b2:2b:4d:96:42:07:cd:e3:
                    18:25:6d:bc:31:5f:25:e2:36:7e:a2:d4:50:64:1e:
                    09:3f:23:1b:82:16:3a:70:6e:93:ea:83:9d:4f:41:
                    8d:18:b7:ea:e7:48:ac:66:de:5e:1f:17:5a:e1:e2:
                    73:99:2c:48:1d:27:dc:0d:b4:ca:24:00:73:7a:19:
                    5c:84:ea:e0:3f:a5:f8:24:84:3a:78:2f:1c:5f:86:
                    b4:2e:d0:6c:0e:8c:db:11:e1:7c:7a:84:31:a5:a5:
                    07:00:b2:17:41:a4:c2:97:90:96:aa:9e:da:2e:50:
                    7e:c2:be:86:5f:9c:c2:dd:8b:2e:60:e2:4b:3a:cd:
                    5c:98:f6:aa:1b:43:76:9c:38:27:23:22:f8:71:35:
                    8b:4d:f4:d6:ef:34:a6:69:74:3c:9e:66:c7:a5:6b:
                    2e:80:fb:54:11:eb:c5:00:a5:41:1f:48:1b:ec:d9:
                    a9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:98:63:7D:DF:ED:23:FF:01:42:66:35:71:69:FF:46:CF:0B:4B:B0
            X509v3 Authority Key Identifier:
                keyid:B5:3A:77:B5:E4:60:04:4C:B6:26:F7:58:8E:1A:91:70:2B:1A:E0:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/323830343a313636383a3a2f33322d3438203d3e203533313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1668::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:10:97:9f:57:3f:2d:78:d4:a0:3f:f3:86:2f:bb:40:29:ad:
         9b:c2:dd:6f:ed:ab:58:fc:d6:6d:54:1e:e8:09:77:a8:08:fd:
         a9:3f:c9:f1:52:96:2b:ec:e8:5d:7e:ac:bd:36:54:28:c6:0e:
         76:f6:4d:4c:20:e3:f5:ff:63:aa:f9:3b:06:26:4f:23:f6:d8:
         e8:dd:8e:32:dd:75:91:3f:47:1e:84:ca:42:94:f9:53:a8:e4:
         c7:b2:e6:1c:a5:33:6a:46:3f:17:3a:08:76:4a:43:e8:06:d6:
         90:99:ef:bb:94:01:f4:61:9c:5f:04:ca:5d:36:3d:a6:0e:17:
         49:85:bb:40:bc:20:0c:4f:9f:a9:5e:a6:c3:93:24:af:5a:c0:
         d1:c7:ae:9e:93:a2:2a:c0:a5:9b:69:61:84:a3:07:4c:55:40:
         be:d4:2f:c5:80:cc:f4:cd:d2:6b:20:d7:ab:9a:0f:1e:2a:0a:
         ec:f4:4a:8a:29:a5:ce:14:46:c2:c1:c0:a1:a9:a2:33:e9:43:
         18:3f:2c:74:76:04:9b:ff:3d:61:29:32:b6:86:c8:8f:1e:72:
         bf:8b:56:cf:65:1c:ff:5e:4e:3f:44:9b:c0:83:53:4b:84:5d:
         70:a4:99:90:0c:05:d7:e0:3e:04:2b:f0:6c:2c:4f:2b:7f:80:
         46:f4:9e:ea
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUE6AlMe3PoiB0OGsAEf7XyOXcYScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUzQTc3QjVFNDYwMDQ0Q0I2MjZGNzU4OEUxQTkxNzAy
QjFBRTA4RTAeFw0yNTAzMDYwNDI4MDZaFw0yNjAzMDUwNDMzMDZaMDMxMTAvBgNV
BAMTKENFOTg2MzdEREZFRDIzRkYwMTQyNjYzNTcxNjlGRjQ2Q0YwQjRCQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxURGXX3Dtl48jW2WelPhZhDiG
UqDWZy9t7WsazfHucRfVCdEh1L4gEmtGT1DjB/qJvC0Wy5fxCxNwCtFWEQqfXYZA
Y2ezgd3EjmLK3plWhkOyK02WQgfN4xglbbwxXyXiNn6i1FBkHgk/IxuCFjpwbpPq
g51PQY0Yt+rnSKxm3l4fF1rh4nOZLEgdJ9wNtMokAHN6GVyE6uA/pfgkhDp4Lxxf
hrQu0GwOjNsR4Xx6hDGlpQcAshdBpMKXkJaqntouUH7CvoZfnMLdiy5g4ks6zVyY
9qobQ3acOCcjIvhxNYtN9NbvNKZpdDyeZselay6A+1QR68UApUEfSBvs2anXAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUzphjfd/tI/8BQmY1cWn/Rs8LS7AwHwYDVR0j
BBgwFoAUtTp3teRgBEy2JvdYjhqRcCsa4I4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3ZKUU01cVZTZ2lSZ0JzTXVUemlCelU2WnVkOG54Y3ZDc2p4eUhyTmU2
ZUYvMS9CNTNBNzdCNUU0NjAwNDRDQjYyNkY3NTg4RTFBOTE3MDJCMUFFMDhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1M0E3N0I1RTQ2MDA0NENC
NjI2Rjc1ODhFMUE5MTcwMkIxQUUwOEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d2SlFNNXFWU2dpUmdCc011VHppQnpVNlp1ZDhueGN2Q3NqeHlIck5lNmVGLzEv
MzIzODMwMzQzYTMxMzYzNjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMzMx
MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEFmgwDQYJKoZIhvcNAQELBQADggEBAIgQl59XPy14
1KA/84Yvu0AprZvC3W/tq1j81m1UHugJd6gI/ak/yfFSlivs6F1+rL02VCjGDnb2
TUwg4/X/Y6r5OwYmTyP22OjdjjLddZE/Rx6EykKU+VOo5Mey5hylM2pGPxc6CHZK
Q+gG1pCZ77uUAfRhnF8Eyl02PaYOF0mFu0C8IAxPn6lepsOTJK9awNHHrp6ToirA
pZtpYYSjB0xVQL7UL8WAzPTN0msg16uaDx4qCuz0Sooppc4URsLBwKGpojPpQxg/
LHR2BJv/PWEpMraGyI8ecr+LVs9lHP9eTj9Em8CDU0uEXXCkmZAMBdfgPgQr8Gws
Tyt/gEb0nuo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:10:48 2025 by rpki-client