Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/323830343a323038383a3a2f33322d313238203d3e203533323233.roa
File:                     323830343a323038383a3a2f33322d313238203d3e203533323233.roa (raw, json)
Hash identifier:          +t8Bsv1AI35r7hbtARB1XxfKGcOByed27RSYAE5NzH4=
Subject key identifier:   D6:F1:49:84:F3:1D:44:1B:EF:9E:45:9B:40:D6:99:E5:28:A7:CB:F1
Certificate issuer:       /CN=3332A8C3B68FE79476953E58B1857203FA676F0F
Certificate serial:       7310020342CD8EDBD7BD242B3567AEE6C1C88903
Authority key identifier: 33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/323830343a323038383a3a2f33322d313238203d3e203533323233.roa
Signing time:             Mon 15 Jul 2024 17:48:26 +0000
ROA not before:           Mon 15 Jul 2024 17:43:26 +0000
ROA not after:            Mon 14 Jul 2025 17:48:26 +0000
asID:                     53223
IP address blocks:        2804:2088::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl
                          rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 01:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:10:02:03:42:cd:8e:db:d7:bd:24:2b:35:67:ae:e6:c1:c8:89:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3332A8C3B68FE79476953E58B1857203FA676F0F
        Validity
            Not Before: Jul 15 17:43:26 2024 GMT
            Not After : Jul 14 17:48:26 2025 GMT
        Subject: CN=D6F14984F31D441BEF9E459B40D699E528A7CBF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:d6:04:9b:d8:00:60:49:95:cc:d4:22:68:
                    e6:a2:13:e3:20:7e:bd:ad:3f:2b:c9:40:41:5e:c8:
                    b9:ea:05:1c:2e:1f:1c:7c:9f:da:a7:fa:53:c3:f8:
                    bf:85:57:87:ed:40:22:24:c2:90:36:9d:e5:10:31:
                    2e:5f:86:df:b9:20:84:12:23:1a:0b:b8:e8:b5:25:
                    93:79:38:1a:48:e1:58:21:04:28:3c:fc:09:f6:9f:
                    d7:50:d1:83:68:5c:3d:b6:38:ec:94:d7:52:93:8a:
                    a3:3c:81:e6:37:a2:73:71:75:3c:8e:59:c3:ca:79:
                    fa:ac:75:77:54:5f:21:79:49:fa:90:96:17:58:97:
                    7d:13:10:38:bb:9a:bb:63:1d:e2:d1:45:a5:87:eb:
                    fd:06:18:af:c1:9e:c7:bb:26:51:bf:7e:0e:8a:0a:
                    c0:4a:1c:66:cf:f2:6d:d1:ee:90:66:7d:15:13:a9:
                    08:c7:8e:75:0d:c6:2d:84:9a:a2:4f:a5:0e:15:ab:
                    99:21:44:10:43:d1:45:7d:e6:db:76:6a:38:b2:52:
                    ab:8d:e9:27:07:eb:45:a8:44:0b:83:61:52:6e:51:
                    cb:f6:a4:7b:50:11:b3:f3:44:eb:8e:a5:db:98:4a:
                    a8:da:78:7f:b4:15:a4:71:9b:99:13:90:16:b1:41:
                    d3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F1:49:84:F3:1D:44:1B:EF:9E:45:9B:40:D6:99:E5:28:A7:CB:F1
            X509v3 Authority Key Identifier:
                keyid:33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/323830343a323038383a3a2f33322d313238203d3e203533323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2088::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:bd:da:a9:c9:5e:b7:99:ae:76:89:2b:30:16:fa:a5:4a:da:
         bd:8d:39:c8:3a:0d:9f:d7:ee:bc:38:fc:66:c2:7b:67:52:83:
         bc:d1:c3:6b:c6:30:7c:73:7e:74:39:64:e3:2d:41:14:c2:bf:
         83:eb:08:26:36:1e:e2:2a:49:7a:2d:c0:7b:88:41:d6:0e:fb:
         40:8f:01:0c:f1:67:69:a4:84:45:c7:7a:0f:79:20:f6:0d:7b:
         13:2b:06:a6:7d:e5:65:79:5b:38:c9:0c:2c:d6:5c:c3:22:52:
         95:15:18:0b:4b:de:01:ef:c5:c6:39:46:0c:7c:79:07:8e:52:
         dc:02:6f:0d:05:fc:50:46:93:8e:73:e2:58:aa:da:39:f0:32:
         aa:08:d5:46:1e:2f:16:32:29:6b:83:09:e1:91:8a:d4:fa:eb:
         f8:79:42:5b:38:6f:d9:a6:d4:35:ad:0d:e2:3b:83:40:26:54:
         bf:00:b4:a3:f3:71:e3:e4:e4:49:9b:37:ac:80:3a:10:84:fd:
         e0:60:d3:3f:35:d0:b9:6a:ea:14:8d:d5:bd:49:3a:a6:45:e0:
         c8:6e:86:f6:3b:e2:cb:5d:02:7c:53:b1:68:fa:47:96:6b:0c:
         e2:4f:3b:4b:06:be:e7:a3:87:91:e6:f4:bc:d9:d1:84:51:0f:
         a1:72:4b:6b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcxACA0LNjtvXvSQrNWeu5sHIiQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMzMkE4QzNCNjhGRTc5NDc2OTUzRTU4QjE4NTcyMDNG
QTY3NkYwRjAeFw0yNDA3MTUxNzQzMjZaFw0yNTA3MTQxNzQ4MjZaMDMxMTAvBgNV
BAMTKEQ2RjE0OTg0RjMxRDQ0MUJFRjlFNDU5QjQwRDY5OUU1MjhBN0NCRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobdYEm9gAYEmVzNQiaOaiE+Mg
fr2tPyvJQEFeyLnqBRwuHxx8n9qn+lPD+L+FV4ftQCIkwpA2neUQMS5fht+5IIQS
IxoLuOi1JZN5OBpI4VghBCg8/An2n9dQ0YNoXD22OOyU11KTiqM8geY3onNxdTyO
WcPKefqsdXdUXyF5SfqQlhdYl30TEDi7mrtjHeLRRaWH6/0GGK/Bnse7JlG/fg6K
CsBKHGbP8m3R7pBmfRUTqQjHjnUNxi2EmqJPpQ4Vq5khRBBD0UV95tt2ajiyUquN
6ScH60WoRAuDYVJuUcv2pHtQEbPzROuOpduYSqjaeH+0FaRxm5kTkBaxQdOlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1vFJhPMdRBvvnkWbQNaZ5Siny/EwHwYDVR0j
BBgwFoAUMzKow7aP55R2lT5YsYVyA/pnbw8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFnQXFSS3VHWHh0UWN6ejJtVVFRV2dZREhUUDZIa20zZHRzaFN6VzZR
NTMvMC8zMzMyQThDM0I2OEZFNzk0NzY5NTNFNThCMTg1NzIwM0ZBNjc2RjBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzMzJBOEMzQjY4RkU3OTQ3
Njk1M0U1OEIxODU3MjAzRkE2NzZGMEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhZ0FxUkt1R1h4dFFjenoybVVRUVdnWURIVFA2SGttM2R0c2hTelc2UTUzLzAv
MzIzODMwMzQzYTMyMzAzODM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNTMz
MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQgiDANBgkqhkiG9w0BAQsFAAOCAQEAx73aqcle
t5mudokrMBb6pUravY05yDoNn9fuvDj8ZsJ7Z1KDvNHDa8YwfHN+dDlk4y1BFMK/
g+sIJjYe4ipJei3Ae4hB1g77QI8BDPFnaaSERcd6D3kg9g17EysGpn3lZXlbOMkM
LNZcwyJSlRUYC0veAe/FxjlGDHx5B45S3AJvDQX8UEaTjnPiWKraOfAyqgjVRh4v
FjIpa4MJ4ZGK1Prr+HlCWzhv2abUNa0N4juDQCZUvwC0o/Nx4+TkSZs3rIA6EIT9
4GDTPzXQuWrqFI3VvUk6pkXgyG6G9jviy10CfFOxaPpHlmsM4k87Swa+56OHkeb0
vNnRhFEPoXJLaw==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:59 2025 by rpki-client