Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a633030303a3a2f33342d3334203d3e20323638353333.roa
File:                     323830343a353261633a633030303a3a2f33342d3334203d3e20323638353333.roa (raw, json)
Hash identifier:          TDmWOgpLRKpDDiL9IkKzagHfIzq66JLQS5+JyHVQCVc=
Subject key identifier:   8E:F8:59:F2:D2:E3:2E:7C:52:6E:33:BC:AC:EC:4D:C1:3F:23:CE:AF
Certificate issuer:       /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
Certificate serial:       41BCA346941FE55500B4C5C8BFFA7969AB797214
Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a633030303a3a2f33342d3334203d3e20323638353333.roa
Signing time:             Mon 14 Apr 2025 21:17:07 +0000
ROA not before:           Mon 14 Apr 2025 21:12:07 +0000
ROA not after:            Mon 13 Apr 2026 21:17:07 +0000
asID:                     268533
IP address blocks:        2804:52ac:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl
                          rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 02:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bc:a3:46:94:1f:e5:55:00:b4:c5:c8:bf:fa:79:69:ab:79:72:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
        Validity
            Not Before: Apr 14 21:12:07 2025 GMT
            Not After : Apr 13 21:17:07 2026 GMT
        Subject: CN=8EF859F2D2E32E7C526E33BCACEC4DC13F23CEAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4b:a9:01:7b:39:8d:a2:75:87:34:e2:3d:b6:
                    59:76:db:aa:d8:dd:13:1f:62:b8:96:07:09:ed:2b:
                    ce:09:58:97:9f:eb:90:6e:93:2b:ce:cf:de:06:cc:
                    2a:4b:92:e6:50:41:da:d8:9e:bf:77:92:8f:90:24:
                    da:27:59:56:12:93:80:ed:85:e1:92:ee:f7:f3:cd:
                    fe:48:aa:3d:d8:06:7b:73:03:b3:ce:61:04:65:59:
                    3a:29:b4:6f:3f:34:2a:3c:7e:6d:77:fa:b0:7a:e0:
                    bd:c5:30:22:4f:9a:f2:1a:6d:3f:a6:43:ea:8d:4a:
                    78:54:bb:3e:76:e7:f3:be:e1:ff:5c:97:ba:2c:89:
                    d1:41:73:b2:3c:94:0f:76:82:f4:cb:22:10:77:9e:
                    68:18:f1:41:f6:1f:2c:1c:f2:87:f3:25:61:9e:4f:
                    bd:56:38:01:23:b6:d3:0e:bd:fc:a3:78:c2:90:17:
                    a4:8c:ff:eb:37:2b:9c:8f:a8:43:af:54:ae:5f:09:
                    33:19:57:ac:40:55:42:61:c9:bf:50:b4:9c:68:cd:
                    24:8f:1b:c3:41:19:d5:59:f9:c1:af:aa:43:a7:b6:
                    8e:af:b2:54:87:2c:92:af:c3:88:6a:16:df:89:1b:
                    78:90:8a:13:ef:27:1d:84:10:78:a0:92:c7:8e:53:
                    35:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F8:59:F2:D2:E3:2E:7C:52:6E:33:BC:AC:EC:4D:C1:3F:23:CE:AF
            X509v3 Authority Key Identifier:
                keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a633030303a3a2f33342d3334203d3e20323638353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52ac:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7a:45:ad:0a:b2:1f:0c:35:0f:e8:e5:01:61:a2:8d:33:88:b8:
         5a:1a:47:f1:a5:a3:e3:25:e6:34:39:8d:49:4e:5b:f0:b4:e7:
         2c:37:56:74:ea:94:a1:0c:3a:9d:ed:0f:2a:28:29:0f:06:1c:
         55:43:31:6f:c4:c5:3b:71:ca:3c:5f:ef:a5:93:e9:13:26:e2:
         ab:c2:13:0b:eb:42:55:60:8b:97:3c:bb:70:e6:be:57:75:49:
         fb:d3:c4:96:a8:23:f1:cf:cf:8d:f0:68:d4:99:3d:79:f8:c1:
         07:91:06:74:b8:d0:e2:c9:88:fe:53:65:f2:ac:77:88:0c:d8:
         b8:78:c2:c6:0a:86:41:34:5b:4b:35:ae:96:9d:11:7c:8c:0e:
         47:e8:04:17:35:1c:53:89:d9:e6:61:45:a9:8c:89:b2:d6:ed:
         b6:0a:bb:65:5a:e3:cf:63:99:a1:4a:51:25:56:c8:59:71:b8:
         84:1f:61:63:42:ab:c2:7c:01:85:e0:55:09:17:0f:5b:b3:f3:
         b5:6c:d2:f8:25:c4:be:b3:ec:36:aa:ad:2a:58:e6:1f:be:77:
         0a:57:62:6a:8a:bd:32:b9:56:ef:2c:4b:30:a1:d9:43:c8:bb:
         93:8e:cd:10:13:4f:ba:91:0b:8b:8b:13:cf:85:f1:f6:d5:70:
         1c:f3:f4:31
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQbyjRpQf5VUAtMXIv/p5aat5chQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIxNThGMUY5ODNEOEYyMUNBRUI5M0M5MjhBQzZBQjUy
QjUxQ0IxQzAeFw0yNTA0MTQyMTEyMDdaFw0yNjA0MTMyMTE3MDdaMDMxMTAvBgNV
BAMTKDhFRjg1OUYyRDJFMzJFN0M1MjZFMzNCQ0FDRUM0REMxM0YyM0NFQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfS6kBezmNonWHNOI9tll226rY
3RMfYriWBwntK84JWJef65BukyvOz94GzCpLkuZQQdrYnr93ko+QJNonWVYSk4Dt
heGS7vfzzf5Iqj3YBntzA7POYQRlWToptG8/NCo8fm13+rB64L3FMCJPmvIabT+m
Q+qNSnhUuz525/O+4f9cl7osidFBc7I8lA92gvTLIhB3nmgY8UH2Hywc8ofzJWGe
T71WOAEjttMOvfyjeMKQF6SM/+s3K5yPqEOvVK5fCTMZV6xAVUJhyb9QtJxozSSP
G8NBGdVZ+cGvqkOnto6vslSHLJKvw4hqFt+JG3iQihPvJx2EEHigkseOUzWLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUjvhZ8tLjLnxSbjO8rOxNwT8jzq8wHwYDVR0j
BBgwFoAUuxWPH5g9jyHK65PJKKxqtStRyxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2RlaGU2OEsydWVSNGhXUTVVNWJwQ2daY1gyN3BSSlJKWVBGRG5BMmQ0
S1IvMS9CQjE1OEYxRjk4M0Q4RjIxQ0FFQjkzQzkyOEFDNkFCNTJCNTFDQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMTU4RjFGOTgzRDhGMjFD
QUVCOTNDOTI4QUM2QUI1MkI1MUNCMUMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dkZWhlNjhLMnVlUjRoV1E1VTVicENnWmNYMjdwUkpSSllQRkRuQTJkNEtSLzEv
MzIzODMwMzQzYTM1MzI2MTYzM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM1MzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEUqzAMA0GCSqGSIb3DQEBCwUA
A4IBAQB6Ra0Ksh8MNQ/o5QFhoo0ziLhaGkfxpaPjJeY0OY1JTlvwtOcsN1Z06pSh
DDqd7Q8qKCkPBhxVQzFvxMU7cco8X++lk+kTJuKrwhML60JVYIuXPLtw5r5XdUn7
08SWqCPxz8+N8GjUmT15+MEHkQZ0uNDiyYj+U2XyrHeIDNi4eMLGCoZBNFtLNa6W
nRF8jA5H6AQXNRxTidnmYUWpjImy1u22CrtlWuPPY5mhSlElVshZcbiEH2FjQqvC
fAGF4FUJFw9bs/O1bNL4JcS+s+w2qq0qWOYfvncKV2Jqir0yuVbvLEswodlDyLuT
js0QE0+6kQuLixPPhfH21XAc8/Qx
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:37:22 2025 by rpki-client