Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3163633a3a2f33322d3438203d3e203238313330.roa
File:                     323830343a3163633a3a2f33322d3438203d3e203238313330.roa (raw, json)
Hash identifier:          a9RI90c0MpGfozFMB91778PgiVXQnMTgsTIxPsg8Z60=
Subject key identifier:   65:2B:F6:C0:D2:E1:26:13:DD:B1:AF:BA:29:62:7B:EF:67:33:06:1E
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       24E889A5D2C8D42B21598256EF1A7E6463F2CA65
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3163633a3a2f33322d3438203d3e203238313330.roa
Signing time:             Thu 06 Mar 2025 07:53:57 +0000
ROA not before:           Thu 06 Mar 2025 07:48:57 +0000
ROA not after:            Thu 05 Mar 2026 07:53:57 +0000
asID:                     28130
IP address blocks:        2804:1cc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e8:89:a5:d2:c8:d4:2b:21:59:82:56:ef:1a:7e:64:63:f2:ca:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Mar  6 07:48:57 2025 GMT
            Not After : Mar  5 07:53:57 2026 GMT
        Subject: CN=652BF6C0D2E12613DDB1AFBA29627BEF6733061E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:46:21:76:76:55:66:a8:be:ee:19:3f:da:ba:
                    6c:dd:b4:92:b8:ad:9c:86:49:07:53:4a:01:cf:49:
                    51:7e:d9:cd:14:d5:ba:c1:66:2d:11:40:7c:c9:28:
                    c7:a4:9d:b4:f4:6b:6c:24:c2:9f:a5:14:24:61:a5:
                    9f:c1:c2:2a:c7:b5:66:c0:ee:52:f0:c4:a9:ac:58:
                    79:7a:3c:a3:9d:45:a8:b9:17:c0:ff:e5:dc:2a:1d:
                    81:f9:4a:9c:e9:f8:96:47:e3:fc:6c:89:43:a4:50:
                    6a:6f:2e:3c:0e:a1:e5:be:6a:88:99:4d:9f:60:0b:
                    e9:e8:c9:ea:12:09:75:db:87:bb:c2:9c:cb:c5:6d:
                    f3:7b:5b:b0:5f:4e:e1:89:57:46:d1:0f:e0:f9:f9:
                    0d:ab:11:3c:22:18:20:2f:ee:a2:1b:d1:a8:e7:cd:
                    6a:4b:48:b1:70:32:8c:ce:56:83:a2:69:be:a6:8f:
                    1a:6d:3d:90:7c:bd:8b:8e:a6:0d:c9:91:7e:44:02:
                    e6:f0:fb:7d:be:ce:83:95:f0:64:fe:ed:e8:58:61:
                    4c:15:31:bc:49:f0:0e:08:74:0d:c1:4a:8a:a6:70:
                    6d:9c:28:b6:8a:ae:9c:de:01:7e:35:b7:f4:f1:8c:
                    0a:50:71:87:24:6e:88:2f:91:c4:35:fb:e7:52:9b:
                    de:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2B:F6:C0:D2:E1:26:13:DD:B1:AF:BA:29:62:7B:EF:67:33:06:1E
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3163633a3a2f33322d3438203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:ec:7b:9d:ce:1b:12:32:3b:4b:25:f0:65:a4:a5:e2:32:0e:
         42:0b:da:fc:79:b5:74:be:b5:c7:14:3d:6b:87:bf:95:ec:8f:
         1b:01:aa:79:57:0f:a6:3b:79:0e:7f:0c:51:5a:58:d1:b4:69:
         4b:9c:0b:49:3c:18:47:11:e9:2e:20:e7:b7:9a:00:da:9c:9c:
         bb:c3:93:51:99:59:92:e8:ed:18:c6:ff:7c:b7:1b:13:2b:9a:
         58:d3:2c:f5:4f:3e:aa:ae:6e:28:05:47:0c:d6:af:0c:90:b5:
         30:1c:a1:ab:06:b3:09:50:6c:92:bb:ce:81:09:5c:e7:5e:7d:
         06:62:8d:14:1c:42:5b:3c:1a:3d:b2:1e:10:17:5c:ee:05:e0:
         04:62:4e:b5:6a:d4:70:64:0a:9a:19:d5:5a:0c:be:56:1d:82:
         36:22:a9:07:b9:a4:26:6d:37:5d:79:e0:4c:cd:c0:e9:16:c9:
         6d:94:10:d6:47:ea:33:df:a0:bc:7f:23:c6:a7:44:34:f6:42:
         ec:c8:05:0b:35:5f:7e:8e:06:4b:2e:59:97:8a:5c:a1:a4:a2:
         7e:4b:64:49:a6:5f:c4:0b:da:0f:67:b2:0b:a7:f4:7b:ff:9e:
         dc:0b:b5:e1:f2:a7:41:89:29:c7:68:80:6d:14:e1:39:45:a4:
         4a:22:5e:92
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUJOiJpdLI1CshWYJW7xp+ZGPyymUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFE
M0RDMDlFMDAeFw0yNTAzMDYwNzQ4NTdaFw0yNjAzMDUwNzUzNTdaMDMxMTAvBgNV
BAMTKDY1MkJGNkMwRDJFMTI2MTNEREIxQUZCQTI5NjI3QkVGNjczMzA2MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURiF2dlVmqL7uGT/aumzdtJK4
rZyGSQdTSgHPSVF+2c0U1brBZi0RQHzJKMeknbT0a2wkwp+lFCRhpZ/BwirHtWbA
7lLwxKmsWHl6PKOdRai5F8D/5dwqHYH5Spzp+JZH4/xsiUOkUGpvLjwOoeW+aoiZ
TZ9gC+noyeoSCXXbh7vCnMvFbfN7W7BfTuGJV0bRD+D5+Q2rETwiGCAv7qIb0ajn
zWpLSLFwMozOVoOiab6mjxptPZB8vYuOpg3JkX5EAubw+32+zoOV8GT+7ehYYUwV
MbxJ8A4IdA3BSoqmcG2cKLaKrpzeAX41t/TxjApQcYckbogvkcQ1++dSm94VAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUZSv2wNLhJhPdsa+6KWJ772czBh4wHwYDVR0j
BBgwFoAUSxPbZLzCXJ+pn6K536xJYdPcCeAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9oWHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMy
LzEvNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFEM0RDMDlFMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjEzREI2NEJDQzI1QzlGQTk5
RkEyQjlERkFDNDk2MUQzREMwOUUwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG
CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9o
WHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMyLzEvMzIz
ODMwMzQzYTMxNjM2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzMTMzMzAu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAoBAHMMA0GCSqGSIb3DQEBCwUAA4IBAQAt7HudzhsSMjtLJfBl
pKXiMg5CC9r8ebV0vrXHFD1rh7+V7I8bAap5Vw+mO3kOfwxRWljRtGlLnAtJPBhH
EekuIOe3mgDanJy7w5NRmVmS6O0Yxv98txsTK5pY0yz1Tz6qrm4oBUcM1q8MkLUw
HKGrBrMJUGySu86BCVznXn0GYo0UHEJbPBo9sh4QF1zuBeAEYk61atRwZAqaGdVa
DL5WHYI2IqkHuaQmbTddeeBMzcDpFsltlBDWR+oz36C8fyPGp0Q09kLsyAULNV9+
jgZLLlmXilyhpKJ+S2RJpl/EC9oPZ7ILp/R7/57cC7Xh8qdBiSnHaIBtFOE5RaRK
Il6S
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:28 2025 by rpki-client