Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31303a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31303a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          GeD1rwVlGqdeffXwNIdtlsxXelnBEfckSl9Y6sdQwzA=
Subject key identifier:   7B:69:9E:B4:50:4B:D2:64:FB:10:E9:B9:F8:70:6F:54:66:AF:13:F4
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       1BDD3F8C692000B04D4E61601F0F081B3B155F24
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31303a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:45:31 +0000
ROA not before:           Wed 30 Apr 2025 18:40:31 +0000
ROA not after:            Wed 29 Apr 2026 18:45:31 +0000
asID:                     52580
IP address blocks:        2804:cf8:10::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 11:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:dd:3f:8c:69:20:00:b0:4d:4e:61:60:1f:0f:08:1b:3b:15:5f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:40:31 2025 GMT
            Not After : Apr 29 18:45:31 2026 GMT
        Subject: CN=7B699EB4504BD264FB10E9B9F8706F5466AF13F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:df:51:16:31:33:e0:7b:5c:b1:2a:35:6a:
                    2a:90:5f:86:9b:c7:b9:08:b0:0b:5f:23:45:a1:dc:
                    f5:e9:16:9c:b4:02:38:68:04:3f:0b:4b:a1:57:f6:
                    4c:ae:99:84:2e:92:bc:e7:6b:78:dd:d4:90:11:d2:
                    95:ed:e8:9f:2f:bc:0d:1e:14:dc:e8:cd:96:89:36:
                    c4:9f:d3:87:f2:b2:00:bd:c4:5a:21:90:a3:71:6f:
                    91:59:35:28:bf:7e:3b:e5:fc:ab:ed:1c:5c:96:87:
                    cd:99:28:ab:bf:07:75:ca:e7:7e:a1:57:5c:50:2f:
                    3b:6d:3f:47:39:eb:92:89:87:70:73:8e:07:37:e3:
                    ee:a8:e3:00:6c:08:98:5b:09:fc:5a:4d:bb:d6:c3:
                    ed:2c:be:81:16:06:51:aa:9d:17:64:c8:11:07:a1:
                    ec:44:b7:ea:1a:10:ec:53:ad:b7:bc:8d:cd:01:15:
                    a8:b8:7b:ea:93:f6:e5:ee:40:a8:7b:b7:0d:53:60:
                    48:25:ca:68:c3:6b:eb:90:3f:50:ab:f5:d6:3f:d4:
                    04:30:91:22:43:3d:68:57:4a:0d:d9:50:cf:cc:32:
                    6c:30:5d:b4:97:8e:9e:3c:fa:8a:f7:b2:99:3a:dc:
                    5e:03:06:1e:7f:38:5a:fc:e5:2a:12:c6:fd:76:6a:
                    20:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:69:9E:B4:50:4B:D2:64:FB:10:E9:B9:F8:70:6F:54:66:AF:13:F4
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31303a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:66:97:1f:a8:92:52:af:b2:dc:40:0e:4a:8a:0b:91:05:e6:
         2a:90:ef:4e:2b:1c:49:51:09:75:52:66:af:10:b8:b4:db:f7:
         7e:a9:88:c4:82:87:22:a2:ef:82:f3:88:f6:2a:9d:76:7a:c9:
         56:4b:c5:e3:37:50:9e:02:6b:6f:93:ec:97:7a:f5:36:77:72:
         13:de:5e:18:8c:d7:cf:ca:c9:37:dc:b7:57:5c:ba:96:98:55:
         61:d2:46:07:4a:fb:45:c0:de:b3:21:3a:44:bc:bb:06:d9:00:
         51:48:ce:af:a0:01:49:33:ef:87:e0:8d:d5:0e:4c:ec:ea:ae:
         af:e0:ec:05:7c:7d:bc:16:e4:0e:28:9c:6a:6e:01:8e:0d:39:
         3b:67:7f:59:56:b8:3c:a8:2e:c0:b7:f7:5b:00:ce:54:98:e4:
         d7:ed:ee:43:84:01:01:33:62:b5:9b:0b:92:99:54:1f:65:f0:
         28:2f:d8:44:09:8e:96:c9:2e:ac:08:7e:85:c8:76:ab:84:33:
         f9:1a:bd:f2:a4:78:e8:2c:b1:09:2a:2b:87:f1:48:66:b5:f6:
         c7:4a:62:19:76:03:6c:5c:95:b3:3e:57:ec:ab:05:7a:d5:e5:
         67:aa:d3:84:a3:1c:9d:f6:90:4c:a0:59:2a:34:9b:53:bc:ba:
         7b:54:04:cd
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUG90/jGkgALBNTmFgHw8IGzsVXyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEzMTM2QURFRUJCNTQxMTFFMkMwOUYyQzdERkJCMzk1
MUVCQ0ZEMDAeFw0yNTA0MzAxODQwMzFaFw0yNjA0MjkxODQ1MzFaMDMxMTAvBgNV
BAMTKDdCNjk5RUI0NTA0QkQyNjRGQjEwRTlCOUY4NzA2RjU0NjZBRjEzRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0N99RFjEz4HtcsSo1aiqQX4ab
x7kIsAtfI0Wh3PXpFpy0AjhoBD8LS6FX9kyumYQukrzna3jd1JAR0pXt6J8vvA0e
FNzozZaJNsSf04fysgC9xFohkKNxb5FZNSi/fjvl/KvtHFyWh82ZKKu/B3XK536h
V1xQLzttP0c565KJh3Bzjgc34+6o4wBsCJhbCfxaTbvWw+0svoEWBlGqnRdkyBEH
oexEt+oaEOxTrbe8jc0BFai4e+qT9uXuQKh7tw1TYEglymjDa+uQP1Cr9dY/1AQw
kSJDPWhXSg3ZUM/MMmwwXbSXjp48+or3spk63F4DBh5/OFr85SoSxv12aiDRAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUe2metFBL0mT7EOm5+HBvVGavE/QwHwYDVR0j
BBgwFoAUwTE2re67VBEeLAnyx9+7OVHrz9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9DMTMxMzZBREVFQkI1NDExMUUyQzA5RjJDN0RGQkIzOTUxRUJDRkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMzEzNkFERUVCQjU0MTEx
RTJDMDlGMkM3REZCQjM5NTFFQkNGRDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzIzODMwMzQzYTYzNjYzODNhMzEzMDNhM2EyZjM0MzgyZDMxMzIzODIwM2QzZTIw
MzUzMjM1MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEDPgAEDANBgkqhkiG9w0BAQsFAAOCAQEA
RWaXH6iSUq+y3EAOSooLkQXmKpDvTiscSVEJdVJmrxC4tNv3fqmIxIKHIqLvgvOI
9iqddnrJVkvF4zdQngJrb5Psl3r1NndyE95eGIzXz8rJN9y3V1y6lphVYdJGB0r7
RcDesyE6RLy7BtkAUUjOr6ABSTPvh+CN1Q5M7Oqur+DsBXx9vBbkDiicam4Bjg05
O2d/WVa4PKguwLf3WwDOVJjk1+3uQ4QBATNitZsLkplUH2XwKC/YRAmOlskurAh+
hch2q4Qz+Rq98qR46CyxCSorh/FIZrX2x0piGXYDbFyVsz5X7KsFetXlZ6rThKMc
nfaQTKBZKjSbU7y6e1QEzQ==
-----END CERTIFICATE-----
Generated at Thu May 1 23:52:20 2025 by rpki-client