Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/323830343a37633a3a2f33322d3438203d3e203238353835.roa
File:                     323830343a37633a3a2f33322d3438203d3e203238353835.roa (raw, json)
Hash identifier:          lKf/2rPb3nWuL48eSgZnXQ4qVQlumKEk+83Gx/Gviek=
Subject key identifier:   1A:C5:49:D7:0C:18:3A:7F:3A:D2:13:F4:C6:BE:5D:37:7E:0D:6F:1A
Certificate issuer:       /CN=0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437
Certificate serial:       3275F5E8BE83D2054CC01DBD8A04CF546BAD16A3
Authority key identifier: 05:44:F1:B1:BE:EC:4E:EA:D6:C1:F1:9C:61:F1:DE:27:4F:9E:F4:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/323830343a37633a3a2f33322d3438203d3e203238353835.roa
Signing time:             Tue 21 Jan 2025 02:06:47 +0000
ROA not before:           Tue 21 Jan 2025 02:01:47 +0000
ROA not after:            Tue 20 Jan 2026 02:06:47 +0000
asID:                     28585
IP address blocks:        2804:7c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.crl
                          rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 09:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:75:f5:e8:be:83:d2:05:4c:c0:1d:bd:8a:04:cf:54:6b:ad:16:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437
        Validity
            Not Before: Jan 21 02:01:47 2025 GMT
            Not After : Jan 20 02:06:47 2026 GMT
        Subject: CN=1AC549D70C183A7F3AD213F4C6BE5D377E0D6F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:56:64:5f:2e:4f:d1:0d:cc:02:ee:e4:e4:
                    77:99:95:88:e7:bd:e0:46:4a:d0:e4:b0:12:6b:e3:
                    b7:32:de:d0:a1:da:8d:52:78:bf:60:c8:03:6f:30:
                    3f:8a:c4:98:10:e4:89:55:3a:29:0e:4a:e5:04:24:
                    3d:4b:c2:44:f1:24:d6:aa:5b:86:24:4d:97:3b:52:
                    85:1b:15:12:22:fe:48:f9:4a:56:18:6b:e1:29:d6:
                    a3:00:df:90:1e:0e:b1:94:50:ff:da:c1:07:81:6f:
                    8c:2d:84:22:a3:41:bb:81:0b:1f:32:c7:7c:f6:04:
                    48:b0:4e:7f:88:80:71:2d:40:14:98:18:97:d0:fd:
                    24:fd:98:41:d7:6b:7c:e3:33:44:6b:9d:b2:73:f1:
                    59:d9:d4:65:07:70:1d:68:1f:a1:33:be:38:9f:c9:
                    51:db:71:f0:ed:f2:3f:6d:73:39:0b:6f:4a:e2:bd:
                    13:74:55:2f:16:bc:b8:17:a2:d4:24:01:b6:65:64:
                    d9:b9:fc:08:45:98:93:96:8c:31:2a:f9:db:b1:8e:
                    2e:34:61:7c:15:3e:bf:4c:93:7e:34:a1:3f:1e:30:
                    1f:f5:5c:05:29:6d:75:35:0d:4b:ba:63:73:a0:50:
                    a1:fc:e4:a9:5c:48:15:53:74:94:1e:7c:bf:ed:f8:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C5:49:D7:0C:18:3A:7F:3A:D2:13:F4:C6:BE:5D:37:7E:0D:6F:1A
            X509v3 Authority Key Identifier:
                keyid:05:44:F1:B1:BE:EC:4E:EA:D6:C1:F1:9C:61:F1:DE:27:4F:9E:F4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0544F1B1BEEC4EEAD6C1F19C61F1DE274F9EF437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/eq8h6ZXzfMkQ4gyU164Gn61dBrxgWxcnstKHKq23PAB/0/323830343a37633a3a2f33322d3438203d3e203238353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:62:ce:7a:77:43:d2:5c:ba:10:4f:67:a8:ee:57:45:56:03:
         b8:ef:b1:d5:63:c6:7c:f5:b3:59:93:19:34:eb:02:e8:32:c5:
         56:99:18:b3:88:83:5e:b7:d1:78:4f:2b:6c:67:55:41:1d:7f:
         5e:e8:f0:47:5d:32:a6:98:1e:87:a1:f6:10:d2:71:7a:fb:98:
         f6:30:75:9e:c1:9d:82:12:d3:c7:da:80:c1:5e:96:76:d7:fa:
         cd:db:b8:0b:43:c7:b5:ac:ef:7b:25:27:26:98:b5:62:c6:a6:
         ff:2e:ec:1a:9f:92:08:71:ad:58:0a:47:a8:0c:67:e0:10:07:
         e9:0b:74:9f:75:86:48:c2:fe:c6:0b:64:48:e3:40:24:3f:22:
         94:78:24:67:e7:ee:35:d2:76:01:b8:5c:19:2f:94:81:0f:c1:
         81:bd:e2:e1:0b:fc:18:6f:fb:30:16:7f:31:5f:28:b2:e1:ca:
         08:a0:ed:04:78:9c:de:d3:fa:58:b7:98:1b:c2:df:ab:4c:ee:
         dc:8c:95:66:81:7d:57:88:1c:d2:bb:34:82:3b:aa:e5:3e:92:
         0a:0e:00:33:25:f5:8d:23:73:2a:03:b6:07:78:64:d2:7e:26:
         b7:40:c7:91:a7:f4:a5:05:f8:86:4a:6b:1f:a7:4f:ba:d6:a9:
         8a:d5:9a:51
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUMnX16L6D0gVMwB29igTPVGutFqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU0NEYxQjFCRUVDNEVFQUQ2QzFGMTlDNjFGMURFMjc0
RjlFRjQzNzAeFw0yNTAxMjEwMjAxNDdaFw0yNjAxMjAwMjA2NDdaMDMxMTAvBgNV
BAMTKDFBQzU0OUQ3MEMxODNBN0YzQUQyMTNGNEM2QkU1RDM3N0UwRDZGMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLm1ZkXy5P0Q3MAu7k5HeZlYjn
veBGStDksBJr47cy3tCh2o1SeL9gyANvMD+KxJgQ5IlVOikOSuUEJD1LwkTxJNaq
W4YkTZc7UoUbFRIi/kj5SlYYa+Ep1qMA35AeDrGUUP/awQeBb4wthCKjQbuBCx8y
x3z2BEiwTn+IgHEtQBSYGJfQ/ST9mEHXa3zjM0RrnbJz8VnZ1GUHcB1oH6Ezvjif
yVHbcfDt8j9tczkLb0rivRN0VS8WvLgXotQkAbZlZNm5/AhFmJOWjDEq+duxji40
YXwVPr9Mk340oT8eMB/1XAUpbXU1DUu6Y3OgUKH85KlcSBVTdJQefL/t+KRzAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUGsVJ1wwYOn860hP0xr5dN34NbxowHwYDVR0j
BBgwFoAUBUTxsb7sTurWwfGcYfHeJ0+e9DcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9lcThoNlpYemZNa1E0Z3lVMTY0R242MWRCcnhnV3hjbnN0S0hLcTIzUEFC
LzAvMDU0NEYxQjFCRUVDNEVFQUQ2QzFGMTlDNjFGMURFMjc0RjlFRjQzNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wNTQ0RjFCMUJFRUM0RUVBRDZD
MUYxOUM2MUYxREUyNzRGOUVGNDM3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIG
CCsGAQUFBzALhoGFcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9l
cThoNlpYemZNa1E0Z3lVMTY0R242MWRCcnhnV3hjbnN0S0hLcTIzUEFCLzAvMzIz
ODMwMzQzYTM3NjMzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMjM4MzUzODM1LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAKAQAfDANBgkqhkiG9w0BAQsFAAOCAQEAAmLOendD0ly6EE9nqO5X
RVYDuO+x1WPGfPWzWZMZNOsC6DLFVpkYs4iDXrfReE8rbGdVQR1/XujwR10yppge
h6H2ENJxevuY9jB1nsGdghLTx9qAwV6Wdtf6zdu4C0PHtazveyUnJpi1Ysam/y7s
Gp+SCHGtWApHqAxn4BAH6Qt0n3WGSML+xgtkSONAJD8ilHgkZ+fuNdJ2AbhcGS+U
gQ/Bgb3i4Qv8GG/7MBZ/MV8osuHKCKDtBHic3tP6WLeYG8Lfq0zu3IyVZoF9V4gc
0rs0gjuq5T6SCg4AMyX1jSNzKgO2B3hk0n4mt0DHkaf0pQX4hkprH6dPutapitWa
UQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:53:00 2025 by rpki-client