Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a653030303a3a2f33352d3335203d3e203238323532.roa
File:                     323830343a313534343a653030303a3a2f33352d3335203d3e203238323532.roa (raw, json)
Hash identifier:          wSrdxQNCgm3FoteSvfP7vUlc6NQ42BShZNL1zJbwjBI=
Subject key identifier:   ED:E4:34:87:12:A5:F7:E5:FD:D9:17:66:80:10:34:C1:C8:69:2E:27
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       17CE231D1A68D4759C9C59B31E82FD00A7DFF4CD
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a653030303a3a2f33352d3335203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:47:50 +0000
ROA not before:           Wed 09 Apr 2025 18:42:50 +0000
ROA not after:            Wed 08 Apr 2026 18:47:50 +0000
asID:                     28252
IP address blocks:        2804:1544:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 09:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ce:23:1d:1a:68:d4:75:9c:9c:59:b3:1e:82:fd:00:a7:df:f4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:42:50 2025 GMT
            Not After : Apr  8 18:47:50 2026 GMT
        Subject: CN=EDE4348712A5F7E5FDD91766801034C1C8692E27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:2a:3d:ff:28:35:e9:34:eb:ed:5e:0a:47:
                    48:6a:3c:4d:58:3c:96:86:64:e1:8e:29:25:9d:15:
                    ee:8f:99:b2:05:3c:5f:1b:2b:7c:74:df:d4:ff:ee:
                    fd:ad:92:e2:86:cf:90:0a:c4:e8:86:9c:a0:cd:7c:
                    b7:98:57:d6:eb:f4:ba:2a:30:71:09:63:8a:3d:c9:
                    2c:96:9e:1e:1e:91:3c:c5:8e:a7:f8:32:e6:d8:0c:
                    c8:a5:6f:4c:08:2d:27:35:60:2a:15:f2:ff:ac:c6:
                    e8:b9:0e:3a:f0:e0:f4:f1:e7:5c:ac:ee:81:a3:60:
                    51:e4:4a:fb:7d:eb:3f:23:21:26:e5:d2:a3:df:7b:
                    95:cd:1d:1f:2b:19:cd:24:2c:e1:32:55:dc:94:e4:
                    a8:da:ca:28:08:9c:7c:0b:b1:cb:6e:34:66:42:68:
                    14:21:15:41:96:d5:57:59:f9:c9:eb:9b:8f:68:1e:
                    21:14:ca:33:0a:69:67:f7:94:1c:cd:b4:38:72:8d:
                    47:22:ac:cc:de:0b:24:a1:fb:9c:eb:21:7e:ac:77:
                    f2:1a:15:32:8e:50:af:ab:d2:89:ef:89:85:29:12:
                    b9:e2:fb:eb:f4:7a:c3:9e:ee:41:60:0e:15:56:47:
                    c9:62:78:1a:98:b6:b7:21:9d:35:c1:47:7c:68:62:
                    a0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E4:34:87:12:A5:F7:E5:FD:D9:17:66:80:10:34:C1:C8:69:2E:27
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a653030303a3a2f33352d3335203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1544:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         71:21:a6:75:4d:7b:2a:8b:aa:60:99:2f:ef:fb:f6:82:46:a2:
         d9:5b:d3:3e:46:f6:24:1c:b1:d9:aa:d4:2d:db:b9:26:7f:e9:
         e8:27:3a:6e:b7:e1:ce:34:d6:16:0b:33:8d:41:5d:f2:8f:e2:
         f6:15:8d:d3:7e:1a:f1:2c:4c:96:66:95:fb:4c:7e:dd:bc:6c:
         42:8f:32:31:74:bf:91:65:ca:4c:3c:e0:68:f0:69:87:1b:c5:
         b5:81:80:2e:2b:a3:02:61:10:97:1b:cf:17:2f:70:77:a5:b9:
         00:86:4a:fa:d5:33:cc:3f:f6:74:f0:75:77:77:8f:13:48:7f:
         77:f9:88:6e:ce:ab:d9:77:2a:90:f4:94:0c:c8:43:ee:af:8e:
         a9:0a:45:e9:eb:0d:4e:e4:bb:a2:86:26:2c:4b:f1:06:59:8e:
         c9:2a:66:df:72:a0:7e:29:50:9b:96:75:9b:c6:98:e7:70:b6:
         af:1c:2f:8c:8c:f1:f3:6a:24:78:7b:ea:3a:fb:0a:3c:0b:cd:
         f8:d1:99:eb:97:5f:41:3d:dd:03:26:19:f7:25:8d:fd:f1:bb:
         1e:96:56:09:0f:4e:24:52:e2:e5:ce:e9:2f:4e:6f:6b:59:fd:
         2c:0b:71:52:c5:06:c0:f8:a6:db:15:13:f8:5a:80:8a:e9:08:
         3b:a6:ab:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUF84jHRpo1HWcnFmzHoL9AKff9M0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD
M0RDQUIzNDAeFw0yNTA0MDkxODQyNTBaFw0yNjA0MDgxODQ3NTBaMDMxMTAvBgNV
BAMTKEVERTQzNDg3MTJBNUY3RTVGREQ5MTc2NjgwMTAzNEMxQzg2OTJFMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ISo9/yg16TTr7V4KR0hqPE1Y
PJaGZOGOKSWdFe6PmbIFPF8bK3x039T/7v2tkuKGz5AKxOiGnKDNfLeYV9br9Loq
MHEJY4o9ySyWnh4ekTzFjqf4MubYDMilb0wILSc1YCoV8v+sxui5Djrw4PTx51ys
7oGjYFHkSvt96z8jISbl0qPfe5XNHR8rGc0kLOEyVdyU5KjayigInHwLsctuNGZC
aBQhFUGW1VdZ+cnrm49oHiEUyjMKaWf3lBzNtDhyjUcirMzeCySh+5zrIX6sd/Ia
FTKOUK+r0onviYUpErni++v0esOe7kFgDhVWR8lieBqYtrchnTXBR3xoYqDhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU7eQ0hxKl9+X92RdmgBA0wchpLicwHwYDVR0j
BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC
MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzIzODMwMzQzYTMxMzUzNDM0M2E2NTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzgzMjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBBVE4DANBgkqhkiG9w0BAQsFAAOC
AQEAcSGmdU17KouqYJkv7/v2gkai2VvTPkb2JByx2arULdu5Jn/p6Cc6brfhzjTW
FgszjUFd8o/i9hWN034a8SxMlmaV+0x+3bxsQo8yMXS/kWXKTDzgaPBphxvFtYGA
LiujAmEQlxvPFy9wd6W5AIZK+tUzzD/2dPB1d3ePE0h/d/mIbs6r2XcqkPSUDMhD
7q+OqQpF6esNTuS7ooYmLEvxBlmOySpm33KgfilQm5Z1m8aY53C2rxwvjIzx82ok
eHvqOvsKPAvN+NGZ65dfQT3dAyYZ9yWN/fG7HpZWCQ9OJFLi5c7pL05va1n9LAtx
UsUGwPim2xUT+FqAiukIO6arBA==
-----END CERTIFICATE-----
Generated at Thu May 1 19:01:35 2025 by rpki-client