Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31343a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31343a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          /DOcSyuChXGj2BR+CalrsG37tdGthPOkju9eqfhXs1c=
Subject key identifier:   D8:95:F7:FC:B0:B2:F9:B8:22:D3:56:99:9E:AA:2A:AC:AF:94:4A:CB
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       14C7B0BC7AFAE98F5841D52461D4F71A64AD40ED
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31343a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:46:12 +0000
ROA not before:           Wed 30 Apr 2025 18:41:12 +0000
ROA not after:            Wed 29 Apr 2026 18:46:12 +0000
asID:                     52580
IP address blocks:        2804:cf8:14::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 19:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c7:b0:bc:7a:fa:e9:8f:58:41:d5:24:61:d4:f7:1a:64:ad:40:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:41:12 2025 GMT
            Not After : Apr 29 18:46:12 2026 GMT
        Subject: CN=D895F7FCB0B2F9B822D356999EAA2AACAF944ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c8:54:56:9b:35:aa:5e:3d:66:86:33:45:a0:
                    db:e1:11:ae:f1:01:81:32:ad:a1:a5:7d:17:ef:11:
                    9b:43:d0:53:b1:ec:57:98:3e:ff:78:7c:4d:a4:bb:
                    ce:09:16:fe:28:17:a6:b6:5f:44:9c:b1:ba:11:ba:
                    01:37:d9:d4:0c:49:fe:cb:8a:eb:14:70:7f:f5:67:
                    7a:33:04:c9:6f:22:f9:96:7d:14:48:87:a9:e5:0a:
                    0c:da:bb:86:94:18:3c:5c:bd:31:46:6a:3d:ca:64:
                    f2:61:c5:e3:87:df:79:eb:01:44:55:74:46:68:50:
                    0d:9b:c2:39:03:7d:3f:3f:d0:af:4e:64:83:e4:d5:
                    69:28:df:20:de:89:e8:d1:b6:5b:97:71:ec:df:88:
                    f2:ae:ac:37:27:e7:45:87:e4:ba:2e:a0:d1:f4:d9:
                    85:b4:ca:63:f3:a7:7a:9c:8f:d0:42:f9:67:74:eb:
                    af:61:dc:fe:31:90:57:c1:a5:02:69:4a:fb:54:f6:
                    11:68:c7:3e:59:36:87:52:fa:c7:bd:48:8c:ea:ac:
                    8a:59:ee:43:25:ec:9a:32:64:c8:d0:d9:93:b3:c8:
                    43:75:2d:d0:9e:32:bc:dc:9d:c4:a9:bc:79:7e:18:
                    7d:67:f5:d3:22:e4:e0:72:c4:af:ec:6a:bf:74:00:
                    5b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:95:F7:FC:B0:B2:F9:B8:22:D3:56:99:9E:AA:2A:AC:AF:94:4A:CB
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31343a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:47:9a:25:23:00:72:c6:92:a1:2b:b6:ea:14:9f:7b:e3:41:
         f4:bb:58:4a:ff:cb:f9:66:54:79:c1:1d:e0:7c:34:e2:e9:ee:
         72:2f:59:da:8d:80:5c:06:bd:fc:8b:59:5a:6d:2b:03:83:e9:
         e9:86:8c:2f:3c:95:97:d0:54:57:3d:38:8f:2d:79:c0:b4:5b:
         27:b4:49:c1:91:d4:25:e7:44:79:ac:c3:4f:cb:1a:d2:cb:0f:
         c0:4d:19:26:9d:0f:0d:97:4e:94:e1:3f:ae:84:74:3b:07:49:
         0e:3d:ed:d1:41:c8:24:9f:5f:11:e7:6e:2c:fd:80:28:3c:b1:
         09:52:39:28:0e:6f:48:8c:b6:07:b7:98:60:b4:60:dd:1b:b3:
         eb:5e:b2:25:d3:e0:60:4f:5c:71:41:39:e7:8f:04:8d:83:36:
         4b:ba:97:ee:a2:5f:fd:68:6b:af:34:19:ef:5e:3d:b6:e2:06:
         d3:58:c9:1a:51:c7:e2:19:30:68:28:05:a3:98:20:53:73:9f:
         66:83:0b:d6:c4:ee:49:8c:a5:4c:c7:cf:81:fb:db:9a:e6:76:
         53:8f:f2:ab:66:5d:81:da:78:44:1b:bf:87:4b:a8:55:08:78:
         ff:b4:aa:df:41:ba:dc:c3:f6:75:01:6f:e4:ef:b6:d8:6f:80:
         8d:e3:4a:5f
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUFMewvHr66Y9YQdUkYdT3GmStQO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEzMTM2QURFRUJCNTQxMTFFMkMwOUYyQzdERkJCMzk1
MUVCQ0ZEMDAeFw0yNTA0MzAxODQxMTJaFw0yNjA0MjkxODQ2MTJaMDMxMTAvBgNV
BAMTKEQ4OTVGN0ZDQjBCMkY5QjgyMkQzNTY5OTlFQUEyQUFDQUY5NDRBQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWyFRWmzWqXj1mhjNFoNvhEa7x
AYEyraGlfRfvEZtD0FOx7FeYPv94fE2ku84JFv4oF6a2X0ScsboRugE32dQMSf7L
iusUcH/1Z3ozBMlvIvmWfRRIh6nlCgzau4aUGDxcvTFGaj3KZPJhxeOH33nrAURV
dEZoUA2bwjkDfT8/0K9OZIPk1Wko3yDeiejRtluXcezfiPKurDcn50WH5LouoNH0
2YW0ymPzp3qcj9BC+Wd0669h3P4xkFfBpQJpSvtU9hFoxz5ZNodS+se9SIzqrIpZ
7kMl7JoyZMjQ2ZOzyEN1LdCeMrzcncSpvHl+GH1n9dMi5OByxK/sar90AFuPAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU2JX3/LCy+bgi01aZnqoqrK+USsswHwYDVR0j
BBgwFoAUwTE2re67VBEeLAnyx9+7OVHrz9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9DMTMxMzZBREVFQkI1NDExMUUyQzA5RjJDN0RGQkIzOTUxRUJDRkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMzEzNkFERUVCQjU0MTEx
RTJDMDlGMkM3REZCQjM5NTFFQkNGRDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzIzODMwMzQzYTYzNjYzODNhMzEzNDNhM2EyZjM0MzgyZDMxMzIzODIwM2QzZTIw
MzUzMjM1MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEDPgAFDANBgkqhkiG9w0BAQsFAAOCAQEA
t0eaJSMAcsaSoSu26hSfe+NB9LtYSv/L+WZUecEd4Hw04unuci9Z2o2AXAa9/ItZ
Wm0rA4Pp6YaMLzyVl9BUVz04jy15wLRbJ7RJwZHUJedEeazDT8sa0ssPwE0ZJp0P
DZdOlOE/roR0OwdJDj3t0UHIJJ9fEeduLP2AKDyxCVI5KA5vSIy2B7eYYLRg3Ruz
616yJdPgYE9ccUE5548EjYM2S7qX7qJf/WhrrzQZ7149tuIG01jJGlHH4hkwaCgF
o5ggU3OfZoML1sTuSYylTMfPgfvbmuZ2U4/yq2Zdgdp4RBu/h0uoVQh4/7Sq30G6
3MP2dQFv5O+22G+AjeNKXw==
-----END CERTIFICATE-----
Generated at Thu May 1 08:55:22 2025 by rpki-client