Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/323830343a323063383a3a2f33322d3335203d3e20323634353134.roa
File:                     323830343a323063383a3a2f33322d3335203d3e20323634353134.roa (raw, json)
Hash identifier:          86mBckqTldtPFOoke7xjRzvr/ZLSp/9uRzM12BTkkRw=
Subject key identifier:   5F:9E:9B:0A:F6:C6:D7:23:88:EF:3B:52:D7:3B:6A:1B:7E:55:FA:25
Certificate issuer:       /CN=5116131606911447B81AE3C7A8BE76D217A043B2
Certificate serial:       B828C50BFAC2A164A8BB848EEADC1912E3D1F3
Authority key identifier: 51:16:13:16:06:91:14:47:B8:1A:E3:C7:A8:BE:76:D2:17:A0:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/323830343a323063383a3a2f33322d3335203d3e20323634353134.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     264514
IP address blocks:        2804:20c8::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.crl
                          rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b8:28:c5:0b:fa:c2:a1:64:a8:bb:84:8e:ea:dc:19:12:e3:d1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5116131606911447B81AE3C7A8BE76D217A043B2
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=3082010A0282010100BFDC883F0668C81F72E7E89F99FBFE523F3347135ACD435D0FC4EA8309554BCCDC4A9924E5B62038CFC3715C05A142DFE339D052A0B6A25072A35AB642C348AD2CBB579F275BF22DCFABB61A6734A3FD95D08812604F533315CC08D4BBE8F3471521ADD5AC80E2A2FE3A009828AF32E51FF0626675B25A09DAE1CA54C86777C66867F50406328265C073721FEDFCFDE56C3AC6FB5EBCB55C6325C012ACCEAB4D660640464347C81A6E761F85DC9D5ECA19D9EC2DD4E6513344E91E8D7F650EDB550A22FE4249C606DC3EDB26BFBB57C6BD91F2C541B0FEBCF4FFE3B13DBA8C1582CF208B49B52FBFF5447B3043B10972FF74DF2EBE323E60543DFFA869367CF90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:88:3f:06:68:c8:1f:72:e7:e8:9f:99:fb:
                    fe:52:3f:33:47:13:5a:cd:43:5d:0f:c4:ea:83:09:
                    55:4b:cc:dc:4a:99:24:e5:b6:20:38:cf:c3:71:5c:
                    05:a1:42:df:e3:39:d0:52:a0:b6:a2:50:72:a3:5a:
                    b6:42:c3:48:ad:2c:bb:57:9f:27:5b:f2:2d:cf:ab:
                    b6:1a:67:34:a3:fd:95:d0:88:12:60:4f:53:33:15:
                    cc:08:d4:bb:e8:f3:47:15:21:ad:d5:ac:80:e2:a2:
                    fe:3a:00:98:28:af:32:e5:1f:f0:62:66:75:b2:5a:
                    09:da:e1:ca:54:c8:67:77:c6:68:67:f5:04:06:32:
                    82:65:c0:73:72:1f:ed:fc:fd:e5:6c:3a:c6:fb:5e:
                    bc:b5:5c:63:25:c0:12:ac:ce:ab:4d:66:06:40:46:
                    43:47:c8:1a:6e:76:1f:85:dc:9d:5e:ca:19:d9:ec:
                    2d:d4:e6:51:33:44:e9:1e:8d:7f:65:0e:db:55:0a:
                    22:fe:42:49:c6:06:dc:3e:db:26:bf:bb:57:c6:bd:
                    91:f2:c5:41:b0:fe:bc:f4:ff:e3:b1:3d:ba:8c:15:
                    82:cf:20:8b:49:b5:2f:bf:f5:44:7b:30:43:b1:09:
                    72:ff:74:df:2e:be:32:3e:60:54:3d:ff:a8:69:36:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9E:9B:0A:F6:C6:D7:23:88:EF:3B:52:D7:3B:6A:1B:7E:55:FA:25
            X509v3 Authority Key Identifier:
                keyid:51:16:13:16:06:91:14:47:B8:1A:E3:C7:A8:BE:76:D2:17:A0:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/323830343a323063383a3a2f33322d3335203d3e20323634353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:94:d8:d6:39:ec:a6:97:7f:48:7d:ae:af:87:8e:d3:9e:74:
         5c:1d:50:a9:c0:e8:2c:c7:fc:41:0d:59:a3:ed:d6:39:f2:45:
         02:43:4b:24:25:0b:b3:44:4b:3a:c0:3b:a1:b0:5b:71:70:bf:
         a8:8f:f8:8d:e8:03:db:7c:ce:3f:c2:64:e1:d2:08:fe:8e:f2:
         d4:14:c8:2e:84:e9:f8:f3:6e:be:b0:f0:ac:63:7a:ec:c5:4a:
         f7:b1:17:08:92:8b:cb:75:e9:89:95:a9:7e:0d:89:77:94:dd:
         c3:b5:0e:55:5e:64:89:d3:f2:04:d2:70:3c:05:0a:80:f5:e0:
         92:e4:e2:83:ca:41:70:24:60:f1:a6:f4:17:73:7f:e8:ad:f0:
         16:1f:b0:39:f9:c1:fc:75:3c:ec:3c:d0:7d:4e:ba:ef:f9:a0:
         be:4b:fd:fa:a1:30:ea:ae:04:19:46:31:a6:79:82:8a:cf:b8:
         1d:3e:62:9b:99:76:d9:c1:b9:af:7c:39:a5:46:d3:04:c2:dc:
         8b:c3:e4:da:72:3d:21:4d:5d:3d:0e:9b:93:3e:d8:81:a5:d0:
         13:4f:54:27:11:28:0a:38:18:77:63:d5:6b:08:aa:bf:72:15:
         ac:20:9e:79:c0:a6:0d:bf:3e:9c:b0:50:15:d7:be:6f:e8:46:
         54:fa:73:3c
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUALgoxQv6wqFkqLuEjurcGRLj0fMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExNjEzMTYwNjkxMTQ0N0I4MUFFM0M3QThCRTc2RDIx
N0EwNDNCMjAeFw0yNTAzMDUxODU1MDJaFw0yNjAzMDQxOTAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkZEQzg4M0YwNjY4QzgxRjcy
RTdFODlGOTlGQkZFNTIzRjMzNDcxMzVBQ0Q0MzVEMEZDNEVBODMwOTU1NEJDQ0RD
NEE5OTI0RTVCNjIwMzhDRkMzNzE1QzA1QTE0MkRGRTMzOUQwNTJBMEI2QTI1MDcy
QTM1QUI2NDJDMzQ4QUQyQ0JCNTc5RjI3NUJGMjJEQ0ZBQkI2MUE2NzM0QTNGRDk1
RDA4ODEyNjA0RjUzMzMxNUNDMDhENEJCRThGMzQ3MTUyMUFERDVBQzgwRTJBMkZF
M0EwMDk4MjhBRjMyRTUxRkYwNjI2Njc1QjI1QTA5REFFMUNBNTRDODY3NzdDNjY4
NjdGNTA0MDYzMjgyNjVDMDczNzIxRkVERkNGREU1NkMzQUM2RkI1RUJDQjU1QzYz
MjVDMDEyQUNDRUFCNEQ2NjA2NDA0NjQzNDdDODFBNkU3NjFGODVEQzlENUVDQTE5
RDlFQzJERDRFNjUxMzM0NEU5MUU4RDdGNjUwRURCNTUwQTIyRkU0MjQ5QzYwNkRD
M0VEQjI2QkZCQjU3QzZCRDkxRjJDNTQxQjBGRUJDRjRGRkUzQjEzREJBOEMxNTgy
Q0YyMDhCNDlCNTJGQkZGNTQ0N0IzMDQzQjEwOTcyRkY3NERGMkVCRTMyM0U2MDU0
M0RGRkE4NjkzNjdDRjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv9yIPwZoyB9y5+ifmfv+Uj8zRxNazUNdD8TqgwlVS8zcSpkk5bYg
OM/DcVwFoULf4znQUqC2olByo1q2QsNIrSy7V58nW/Itz6u2Gmc0o/2V0IgSYE9T
MxXMCNS76PNHFSGt1ayA4qL+OgCYKK8y5R/wYmZ1sloJ2uHKVMhnd8ZoZ/UEBjKC
ZcBzch/t/P3lbDrG+168tVxjJcASrM6rTWYGQEZDR8gabnYfhdydXsoZ2ewt1OZR
M0TpHo1/ZQ7bVQoi/kJJxgbcPtsmv7tXxr2R8sVBsP689P/jsT26jBWCzyCLSbUv
v/VEezBDsQly/3TfLr4yPmBUPf+oaTZ8+QIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FF+emwr2xtcjiO87Utc7aht+VfolMB8GA1UdIwQYMBaAFFEWExYGkRRHuBrjx6i+
dtIXoEOyMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vZFIzcnN4cXlqQnpMSmFL
Q2gxblJTOFp1aXN0enFvSjlaQVRBNVNwWmVnRS8xLzUxMTYxMzE2MDY5MTE0NDdC
ODFBRTNDN0E4QkU3NkQyMTdBMDQzQjIuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzEvNTExNjEzMTYwNjkxMTQ0N0I4MUFFM0M3QThCRTc2RDIxN0EwNDNC
Mi5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vZFIzcnN4cXlqQnpMSmFLQ2gxblJT
OFp1aXN0enFvSjlaQVRBNVNwWmVnRS8xLzMyMzgzMDM0M2EzMjMwNjMzODNhM2Ey
ZjMzMzIyZDMzMzUyMDNkM2UyMDMyMzYzNDM1MzEzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEIMgw
DQYJKoZIhvcNAQELBQADggEBABOU2NY57KaXf0h9rq+HjtOedFwdUKnA6CzH/EEN
WaPt1jnyRQJDSyQlC7NESzrAO6GwW3Fwv6iP+I3oA9t8zj/CZOHSCP6O8tQUyC6E
6fjzbr6w8KxjeuzFSvexFwiSi8t16YmVqX4NiXeU3cO1DlVeZInT8gTScDwFCoD1
4JLk4oPKQXAkYPGm9Bdzf+it8BYfsDn5wfx1POw80H1Ouu/5oL5L/fqhMOquBBlG
MaZ5gorPuB0+YpuZdtnBua98OaVG0wTC3IvD5NpyPSFNXT0Om5M+2IGl0BNPVCcR
KAo4GHdj1WsIqr9yFawgnnnApg2/PpywUBXXvm/oRlT6czw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:59:10 2025 by rpki-client