Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/323830343a6166343a3a2f33322d3332203d3e203532393330.roa
File:                     323830343a6166343a3a2f33322d3332203d3e203532393330.roa (raw, json)
Hash identifier:          Vr5wuEokqEJOXwEFTxx41vEHcRq6VxftKo8uCyVe2jM=
Subject key identifier:   2A:50:D0:FD:C1:55:E5:66:B0:1D:67:10:4E:04:4E:E4:4E:6A:C9:19
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       3794CDF2D76B34492DF2D1682591B6EBC9F00488
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/323830343a6166343a3a2f33322d3332203d3e203532393330.roa
Signing time:             Fri 17 Jan 2025 16:16:59 +0000
ROA not before:           Fri 17 Jan 2025 16:11:59 +0000
ROA not after:            Fri 16 Jan 2026 16:16:59 +0000
asID:                     52930
IP address blocks:        2804:af4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:94:cd:f2:d7:6b:34:49:2d:f2:d1:68:25:91:b6:eb:c9:f0:04:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Jan 17 16:11:59 2025 GMT
            Not After : Jan 16 16:16:59 2026 GMT
        Subject: CN=2A50D0FDC155E566B01D67104E044EE44E6AC919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:01:96:2b:e8:a8:19:65:10:7e:f9:5b:e7:7a:
                    0a:7a:dc:33:5f:89:c3:c4:7b:a7:18:82:79:e2:cd:
                    21:a9:58:77:2d:e6:66:41:0c:32:41:5c:88:c9:e2:
                    db:29:7b:90:9d:6b:fc:47:f1:5c:46:0c:a7:e7:68:
                    47:08:f1:35:52:e0:61:cc:e7:32:28:8f:db:88:75:
                    72:5c:90:9e:cf:76:0f:c7:b6:51:73:32:e3:70:83:
                    6d:24:0b:6e:05:5a:3d:c3:78:f7:48:7a:bf:91:b9:
                    e0:b5:e2:b5:d2:9e:9f:b7:19:e0:04:31:8a:a3:ae:
                    c6:b0:1f:19:ce:d6:1f:d0:e7:b8:4f:31:ad:35:00:
                    33:79:90:03:94:03:db:f5:76:35:73:79:35:49:92:
                    52:4e:ab:30:e7:f0:90:07:27:ff:32:32:8b:be:97:
                    b7:8e:a3:26:3e:56:29:c6:f9:fb:06:5a:32:df:82:
                    ac:e7:ae:9f:5a:f0:37:99:a5:66:33:1e:c8:a6:bc:
                    8a:98:86:ae:82:11:38:6c:9d:b0:56:64:db:33:52:
                    bc:9c:0b:72:b8:7f:f6:62:bf:f4:79:3b:5c:15:cc:
                    1b:b7:57:bf:0d:65:a0:9f:0f:9f:e4:36:e3:d8:51:
                    cd:33:e1:44:77:89:da:c7:31:b9:78:25:56:bd:d3:
                    76:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:50:D0:FD:C1:55:E5:66:B0:1D:67:10:4E:04:4E:E4:4E:6A:C9:19
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/323830343a6166343a3a2f33322d3332203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:af4::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:e4:d8:5b:4a:75:0c:9f:68:cb:ae:0d:5b:77:78:25:ac:c8:
         08:db:2c:82:b6:4b:f6:e3:a0:a6:f4:38:cb:9c:00:b8:b1:a7:
         a5:65:54:69:f4:81:11:b4:0f:b2:f2:07:62:e2:51:14:8f:8e:
         8e:ac:c7:cd:e0:cd:e5:c6:5a:71:b0:ea:d4:a8:2b:fc:7f:80:
         ec:5f:40:c3:3b:43:38:b5:27:93:29:23:4a:12:93:63:4f:cb:
         4b:18:57:5d:7e:2f:a4:b4:5a:22:cd:66:73:12:94:a6:0d:8f:
         1b:3d:61:5d:ac:b6:8c:c5:89:f5:79:8c:3c:a9:d5:85:d4:d4:
         43:95:9d:e6:17:92:fa:43:42:f5:cd:b8:77:e2:99:71:61:08:
         b7:88:3d:36:ff:fb:ff:61:e4:2f:7e:04:51:6f:8b:fc:c4:3a:
         d4:56:a5:2a:ab:4e:c9:79:f4:3e:0e:ff:42:39:08:c7:17:e9:
         95:2f:44:7b:36:3d:9c:09:d6:c5:87:87:da:04:a2:b9:59:1b:
         43:bb:c2:66:cb:18:bd:72:68:71:43:54:ea:e4:9a:50:5e:df:
         ab:af:e7:01:41:ab:a6:65:ba:9e:a3:8a:84:e1:70:71:4d:54:
         18:83:b0:04:98:57:9e:07:33:47:d0:3e:a4:c5:fc:e8:95:2c:
         01:57:8c:bd
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUN5TN8tdrNEkt8tFoJZG268nwBIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBGOUY3NUUyRkYyMTlCMkJERDYyNUVCQkMyOTRBOTg5
QkFCMEVCRDAeFw0yNTAxMTcxNjExNTlaFw0yNjAxMTYxNjE2NTlaMDMxMTAvBgNV
BAMTKDJBNTBEMEZEQzE1NUU1NjZCMDFENjcxMDRFMDQ0RUU0NEU2QUM5MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoAZYr6KgZZRB++Vvnegp63DNf
icPEe6cYgnnizSGpWHct5mZBDDJBXIjJ4tspe5Cda/xH8VxGDKfnaEcI8TVS4GHM
5zIoj9uIdXJckJ7Pdg/HtlFzMuNwg20kC24FWj3DePdIer+RueC14rXSnp+3GeAE
MYqjrsawHxnO1h/Q57hPMa01ADN5kAOUA9v1djVzeTVJklJOqzDn8JAHJ/8yMou+
l7eOoyY+VinG+fsGWjLfgqznrp9a8DeZpWYzHsimvIqYhq6CEThsnbBWZNszUryc
C3K4f/Ziv/R5O1wVzBu3V78NZaCfD5/kNuPYUc0z4UR3idrHMbl4JVa903YHAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUKlDQ/cFV5WawHWcQTgRO5E5qyRkwHwYDVR0j
BBgwFoAUsPn3Xi/yGbK91iXrvClKmJurDr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjdEYkU5OGRQWjlDVmkyVEhDMW9FVUVzck11NWpGNU1lZm5HMTluV1R6
anIvMC9CMEY5Rjc1RTJGRjIxOUIyQkRENjI1RUJCQzI5NEE5ODlCQUIwRUJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwRjlGNzVFMkZGMjE5QjJC
REQ2MjVFQkJDMjk0QTk4OUJBQjBFQkQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o3RGJFOThkUFo5Q1ZpMlRIQzFvRVVFc3JNdTVqRjVNZWZuRzE5bldUempyLzAv
MzIzODMwMzQzYTYxNjYzNDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzIzOTMz
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAr0MA0GCSqGSIb3DQEBCwUAA4IBAQBZ5NhbSnUMn2jL
rg1bd3glrMgI2yyCtkv246Cm9DjLnAC4saelZVRp9IERtA+y8gdi4lEUj46OrMfN
4M3lxlpxsOrUqCv8f4DsX0DDO0M4tSeTKSNKEpNjT8tLGFddfi+ktFoizWZzEpSm
DY8bPWFdrLaMxYn1eYw8qdWF1NRDlZ3mF5L6Q0L1zbh34plxYQi3iD02//v/YeQv
fgRRb4v8xDrUVqUqq07JefQ+Dv9COQjHF+mVL0R7Nj2cCdbFh4faBKK5WRtDu8Jm
yxi9cmhxQ1Tq5JpQXt+rr+cBQaumZbqeo4qE4XBxTVQYg7AEmFeeBzNH0D6kxfzo
lSwBV4y9
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:12 2025 by rpki-client