Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/323830343a353136343a3a2f33322d3332203d3e20323638343439.roa
File:                     323830343a353136343a3a2f33322d3332203d3e20323638343439.roa (raw, json)
Hash identifier:          Cl16DiwJNumyv71pOGojDv+nWVRm7Lg2IzVvJEaSZoQ=
Subject key identifier:   B2:49:2F:E0:69:73:6B:E3:F5:A0:F1:5A:8D:EC:30:E6:34:B2:5A:69
Certificate issuer:       /CN=72D4C5EE34A043798ED938051AE717D10692045C
Certificate serial:       1D72B55ADB5186927127BC8AC1B2847532A99104
Authority key identifier: 72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/323830343a353136343a3a2f33322d3332203d3e20323638343439.roa
Signing time:             Fri 11 Apr 2025 18:17:45 +0000
ROA not before:           Fri 11 Apr 2025 18:12:45 +0000
ROA not after:            Fri 10 Apr 2026 18:17:45 +0000
asID:                     268449
IP address blocks:        2804:5164::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl
                          rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 13:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:72:b5:5a:db:51:86:92:71:27:bc:8a:c1:b2:84:75:32:a9:91:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D4C5EE34A043798ED938051AE717D10692045C
        Validity
            Not Before: Apr 11 18:12:45 2025 GMT
            Not After : Apr 10 18:17:45 2026 GMT
        Subject: CN=B2492FE069736BE3F5A0F15A8DEC30E634B25A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5c:b3:8b:f9:8f:43:6d:b7:9d:34:35:a9:0c:
                    6b:e1:38:f3:43:64:5c:ae:41:37:de:92:96:29:3b:
                    81:93:3a:e7:93:6a:cd:4b:b4:94:dc:9d:a4:8c:be:
                    ac:2d:9d:5b:cb:98:c1:b1:62:87:b1:2d:a7:2c:c2:
                    32:4c:22:ee:cf:d2:ac:88:08:80:92:ef:4a:56:da:
                    b7:a7:3b:e6:98:8f:2d:de:ae:75:a3:8e:b1:36:77:
                    a1:bf:04:18:0e:02:44:e2:bb:91:40:8c:20:fa:1d:
                    2a:52:18:73:67:18:cd:3c:cc:b1:94:42:4e:32:3f:
                    4c:84:17:86:10:83:de:43:2c:d8:7c:10:68:8e:ac:
                    da:59:bb:9f:c8:c4:70:6a:93:32:40:7d:93:8b:9e:
                    4f:85:28:8e:d1:3e:b0:52:47:89:98:80:94:29:3a:
                    b4:99:ad:41:8b:4a:a0:e7:6c:07:0c:a1:f9:87:e0:
                    ac:c6:69:1e:f2:2c:11:eb:ff:08:c7:47:17:09:c7:
                    86:9b:93:c5:2e:2f:41:d2:80:0a:6b:46:7c:eb:37:
                    2c:75:c8:79:90:63:68:08:68:e5:2d:cf:94:58:90:
                    48:1f:ef:19:65:cb:df:eb:4d:08:31:cc:35:9e:31:
                    ee:5d:20:8c:6e:50:eb:a4:8f:da:5b:68:53:78:ed:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:49:2F:E0:69:73:6B:E3:F5:A0:F1:5A:8D:EC:30:E6:34:B2:5A:69
            X509v3 Authority Key Identifier:
                keyid:72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/323830343a353136343a3a2f33322d3332203d3e20323638343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5164::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:de:0a:97:e4:8d:d3:07:b9:13:46:be:32:a5:63:65:e8:55:
         91:9c:1b:77:10:91:e8:85:51:21:cf:97:9c:5d:00:5c:55:c7:
         f5:76:b0:1a:85:2f:8b:42:e8:0c:3a:c1:a5:3c:c5:93:a0:fc:
         76:37:96:3c:25:6c:3d:2e:7d:6e:80:4b:51:74:61:aa:49:b0:
         5c:60:ca:4e:6e:3d:aa:02:cc:c2:0b:5d:44:f7:8c:f7:67:a9:
         da:a6:35:2f:5e:7f:23:c6:f8:c2:15:f5:d2:b6:46:03:93:2d:
         68:c0:95:1e:56:b4:6d:26:9c:30:05:f9:59:31:d4:09:39:82:
         e8:82:52:2b:b8:d9:89:f2:fb:8e:f7:32:da:21:7f:32:8a:9a:
         c4:70:19:35:17:bf:ab:e6:40:ec:0d:ae:5d:ca:9e:ae:dd:5a:
         e9:66:36:48:07:43:7e:77:24:ac:f7:05:d0:40:fb:68:1c:fa:
         c8:b0:1d:5e:65:30:96:76:47:9a:26:93:87:17:8e:1f:0a:43:
         6e:00:03:a2:ba:ce:84:c2:c5:a3:5e:75:52:98:39:18:7f:33:
         bf:61:1b:48:5d:eb:68:a7:61:21:5a:90:dd:44:04:06:c3:6b:
         26:15:3d:df:76:1d:5f:bb:98:4f:33:e3:f1:cd:1d:65:25:6c:
         20:8d:fb:49
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHXK1WttRhpJxJ7yKwbKEdTKpkQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJENEM1RUUzNEEwNDM3OThFRDkzODA1MUFFNzE3RDEw
NjkyMDQ1QzAeFw0yNTA0MTExODEyNDVaFw0yNjA0MTAxODE3NDVaMDMxMTAvBgNV
BAMTKEIyNDkyRkUwNjk3MzZCRTNGNUEwRjE1QThERUMzMEU2MzRCMjVBNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcXLOL+Y9DbbedNDWpDGvhOPND
ZFyuQTfekpYpO4GTOueTas1LtJTcnaSMvqwtnVvLmMGxYoexLacswjJMIu7P0qyI
CICS70pW2renO+aYjy3ernWjjrE2d6G/BBgOAkTiu5FAjCD6HSpSGHNnGM08zLGU
Qk4yP0yEF4YQg95DLNh8EGiOrNpZu5/IxHBqkzJAfZOLnk+FKI7RPrBSR4mYgJQp
OrSZrUGLSqDnbAcMofmH4KzGaR7yLBHr/wjHRxcJx4abk8UuL0HSgAprRnzrNyx1
yHmQY2gIaOUtz5RYkEgf7xlly9/rTQgxzDWeMe5dIIxuUOukj9pbaFN47eObAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUskkv4Glza+P1oPFajeww5jSyWmkwHwYDVR0j
BBgwFoAUctTF7jSgQ3mO2TgFGucX0QaSBFwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHBaQ05MMU1GcVA0N1hERHJnRHZUcHRrUlpTV2Y3am11UVVlS21ja2I2
aXAvMC83MkQ0QzVFRTM0QTA0Mzc5OEVEOTM4MDUxQUU3MTdEMTA2OTIwNDVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyRDRDNUVFMzRBMDQzNzk4
RUQ5MzgwNTFBRTcxN0QxMDY5MjA0NUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRwWkNOTDFNRnFQNDdYRERyZ0R2VHB0a1JaU1dmN2ptdVFVZUttY2tiNmlwLzAv
MzIzODMwMzQzYTM1MzEzNjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzQzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARRZDANBgkqhkiG9w0BAQsFAAOCAQEANd4Kl+SN
0we5E0a+MqVjZehVkZwbdxCR6IVRIc+XnF0AXFXH9XawGoUvi0LoDDrBpTzFk6D8
djeWPCVsPS59boBLUXRhqkmwXGDKTm49qgLMwgtdRPeM92ep2qY1L15/I8b4whX1
0rZGA5MtaMCVHla0bSacMAX5WTHUCTmC6IJSK7jZifL7jvcy2iF/MoqaxHAZNRe/
q+ZA7A2uXcqert1a6WY2SAdDfnckrPcF0ED7aBz6yLAdXmUwlnZHmiaThxeOHwpD
bgADorrOhMLFo151Upg5GH8zv2EbSF3raKdhIVqQ3UQEBsNrJhU933YdX7uYTzPj
8c0dZSVsII37SQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:55:25 2025 by rpki-client