Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/323830343a6364633a3a2f33322d3438203d3e203532353635.roa
File:                     323830343a6364633a3a2f33322d3438203d3e203532353635.roa (raw, json)
Hash identifier:          RZb+Bxk6BAyM64SNfqbiB3j2lJXhQ1axUQDtE3Rcw7w=
Subject key identifier:   BD:9B:4A:FF:27:74:57:35:E1:A7:8C:07:25:F0:D6:29:49:E4:C6:AB
Certificate issuer:       /CN=02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9
Certificate serial:       23C14C16455AEB466CD92C78C11A0B5E3E98BA00
Authority key identifier: 02:B7:FA:C2:7E:D8:E4:63:4E:61:DF:A8:90:D8:6B:CF:AE:8F:9B:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/323830343a6364633a3a2f33322d3438203d3e203532353635.roa
Signing time:             Tue 14 Jan 2025 12:56:43 +0000
ROA not before:           Tue 14 Jan 2025 12:51:43 +0000
ROA not after:            Tue 13 Jan 2026 12:56:43 +0000
asID:                     52565
IP address blocks:        2804:cdc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.crl
                          rsync://rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c1:4c:16:45:5a:eb:46:6c:d9:2c:78:c1:1a:0b:5e:3e:98:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9
        Validity
            Not Before: Jan 14 12:51:43 2025 GMT
            Not After : Jan 13 12:56:43 2026 GMT
        Subject: CN=BD9B4AFF27745735E1A78C0725F0D62949E4C6AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:2b:05:66:70:3d:db:91:9f:76:e0:08:47:
                    ce:81:5e:a6:96:2a:42:34:77:b7:8e:d6:06:83:6e:
                    5c:38:76:84:55:1a:17:f6:55:aa:cf:f1:97:c5:bd:
                    8b:09:f0:e4:15:14:f7:b7:c3:22:69:76:10:29:63:
                    a7:90:fc:01:53:95:2b:c3:d2:53:d4:2a:8e:ee:b2:
                    46:8a:c5:29:b8:99:32:66:f8:ea:53:50:9b:b3:e6:
                    1c:d4:09:cb:06:97:65:12:9f:62:b3:bd:c5:2d:e1:
                    c4:08:81:e1:a0:8b:43:ea:eb:a2:ab:f4:f1:c8:ea:
                    2e:74:47:83:40:ec:d1:3f:62:4b:58:ab:05:90:ca:
                    33:76:71:2d:73:d3:42:fe:92:a0:1a:57:bb:65:17:
                    d3:1b:47:52:5c:b7:03:69:f6:75:5b:c9:e8:2f:6b:
                    e6:bf:61:0b:8c:7a:7a:e2:60:62:ec:0d:12:a8:e5:
                    95:b7:e5:9d:7a:a5:bc:15:fb:e6:02:a5:74:f9:0b:
                    85:e9:79:03:6a:1c:a5:11:04:6f:09:20:d6:00:90:
                    cc:e9:63:b6:33:fe:f9:ec:89:33:02:df:e7:45:21:
                    eb:b0:db:80:f2:f3:80:75:1d:0d:d3:84:af:ef:b1:
                    31:f4:8b:d7:91:af:4c:f4:c7:81:38:29:7a:c8:03:
                    55:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9B:4A:FF:27:74:57:35:E1:A7:8C:07:25:F0:D6:29:49:E4:C6:AB
            X509v3 Authority Key Identifier:
                keyid:02:B7:FA:C2:7E:D8:E4:63:4E:61:DF:A8:90:D8:6B:CF:AE:8F:9B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02B7FAC27ED8E4634E61DFA890D86BCFAE8F9BA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qWFSWvCe6Vhsi7pFRaD6Jg4w8TDXUdg4ZbYJMZNBy2b/0/323830343a6364633a3a2f33322d3438203d3e203532353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:ee:25:87:af:d9:0f:9d:e2:31:bb:b3:00:34:18:65:1d:5d:
         90:66:d3:45:f7:e3:5b:92:00:f9:ed:9f:0a:17:47:2b:07:54:
         31:d0:29:c2:2a:8d:f6:b3:63:64:ba:14:d9:64:3b:0b:11:ec:
         15:75:03:6a:95:43:7c:29:4f:5a:3a:14:b2:f8:0c:8c:d6:0f:
         6a:b6:fe:5c:08:ac:f3:9d:61:0c:cd:74:62:fa:e3:cb:57:92:
         2f:dc:dd:59:23:78:90:3d:35:d7:6d:ab:8a:31:8a:f2:de:9a:
         7d:5e:05:2a:2e:ad:95:f4:49:6e:bb:8d:5b:09:79:b6:18:df:
         c0:6a:b6:52:e0:8e:a8:71:b2:a1:6c:ec:a0:25:75:c1:ce:c9:
         56:d5:4f:82:6e:8d:94:62:bf:53:3b:55:d4:47:fc:0b:6a:77:
         03:99:46:92:24:5f:0b:94:c1:b3:b0:ce:d9:e8:10:83:77:fd:
         a5:a2:2f:13:c9:ee:ad:61:c4:7d:39:ef:c9:57:24:8b:0a:fd:
         56:0c:96:dc:19:97:2e:4f:18:74:61:f2:7c:0d:c5:ee:a5:34:
         ac:c8:c4:97:74:cf:8d:a5:ac:83:95:88:07:07:49:4c:e5:40:
         e5:48:37:e0:76:56:5c:28:35:4e:6a:e8:41:63:23:6b:2a:92:
         0e:1e:1c:bc
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUI8FMFkVa60Zs2Sx4wRoLXj6YugAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJCN0ZBQzI3RUQ4RTQ2MzRFNjFERkE4OTBEODZCQ0ZB
RThGOUJBOTAeFw0yNTAxMTQxMjUxNDNaFw0yNjAxMTMxMjU2NDNaMDMxMTAvBgNV
BAMTKEJEOUI0QUZGMjc3NDU3MzVFMUE3OEMwNzI1RjBENjI5NDlFNEM2QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOFysFZnA925GfduAIR86BXqaW
KkI0d7eO1gaDblw4doRVGhf2VarP8ZfFvYsJ8OQVFPe3wyJpdhApY6eQ/AFTlSvD
0lPUKo7uskaKxSm4mTJm+OpTUJuz5hzUCcsGl2USn2KzvcUt4cQIgeGgi0Pq66Kr
9PHI6i50R4NA7NE/YktYqwWQyjN2cS1z00L+kqAaV7tlF9MbR1JctwNp9nVbyegv
a+a/YQuMenriYGLsDRKo5ZW35Z16pbwV++YCpXT5C4XpeQNqHKURBG8JINYAkMzp
Y7Yz/vnsiTMC3+dFIeuw24Dy84B1HQ3ThK/vsTH0i9eRr0z0x4E4KXrIA1U1AgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUvZtK/yd0VzXhp4wHJfDWKUnkxqswHwYDVR0j
BBgwFoAUArf6wn7Y5GNOYd+okNhrz66Pm6kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9xV0ZTV3ZDZTZWaHNpN3BGUmFENkpnNHc4VERYVWRnNFpiWUpNWk5CeTJi
LzAvMDJCN0ZBQzI3RUQ4RTQ2MzRFNjFERkE4OTBEODZCQ0ZBRThGOUJBOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wMkI3RkFDMjdFRDhFNDYzNEU2
MURGQTg5MEQ4NkJDRkFFOEY5QkE5LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQG
CCsGAQUFBzALhoGHcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9x
V0ZTV3ZDZTZWaHNpN3BGUmFENkpnNHc4VERYVWRnNFpiWUpNWk5CeTJiLzAvMzIz
ODMwMzQzYTYzNjQ2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNTM2MzUu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAP
MA0EAgACMAcDBQAoBAzcMA0GCSqGSIb3DQEBCwUAA4IBAQBi7iWHr9kPneIxu7MA
NBhlHV2QZtNF9+NbkgD57Z8KF0crB1Qx0CnCKo32s2NkuhTZZDsLEewVdQNqlUN8
KU9aOhSy+AyM1g9qtv5cCKzznWEMzXRi+uPLV5Iv3N1ZI3iQPTXXbauKMYry3pp9
XgUqLq2V9Eluu41bCXm2GN/AarZS4I6ocbKhbOygJXXBzslW1U+Cbo2UYr9TO1XU
R/wLancDmUaSJF8LlMGzsM7Z6BCDd/2loi8Tye6tYcR9Oe/JVySLCv1WDJbcGZcu
Txh0YfJ8DcXupTSsyMSXdM+NpayDlYgHB0lM5UDlSDfgdlZcKDVOauhBYyNrKpIO
Hhy8
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:52:46 2025 by rpki-client