Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030363a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a633030363a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          JHELS3oWhMXBoJ7zuHjeEvGd1i7s2wUtFW2x8PlZOxE=
Subject key identifier:   7A:3B:5E:65:77:07:32:C0:60:3C:1D:B2:93:56:F9:C2:9A:5E:D8:71
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       01A20BEEEED5F4DA4CDA1B8747B8C4973D6E2997
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030363a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:47:50 +0000
ROA not before:           Wed 30 Apr 2025 18:42:50 +0000
ROA not after:            Wed 29 Apr 2026 18:47:50 +0000
asID:                     52580
IP address blocks:        2804:cf8:c006::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 06:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a2:0b:ee:ee:d5:f4:da:4c:da:1b:87:47:b8:c4:97:3d:6e:29:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:42:50 2025 GMT
            Not After : Apr 29 18:47:50 2026 GMT
        Subject: CN=7A3B5E65770732C0603C1DB29356F9C29A5ED871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:d8:19:6f:f6:82:66:62:1b:22:8d:ef:b1:
                    30:cf:97:5f:54:c7:8d:ec:10:be:8e:c8:e5:5f:58:
                    5b:3d:ee:b0:f2:dc:70:ef:00:19:ac:bc:7e:ee:13:
                    f4:f7:a4:a8:7f:1a:08:5e:57:6b:b5:95:56:04:09:
                    c0:c5:92:88:02:27:bd:f3:2c:03:6c:b1:66:1c:92:
                    4c:f0:be:44:65:4a:42:20:92:19:cd:c4:c7:ba:15:
                    6f:b1:c6:32:5e:3f:c9:a0:2a:72:9b:1d:8b:7e:f1:
                    72:f7:02:e2:0f:20:c5:89:92:e3:b0:b9:b0:97:2c:
                    4b:02:df:c0:88:bb:f4:20:f3:09:2b:b8:4a:f8:98:
                    29:fc:02:d1:8c:f6:c4:40:82:7e:b6:0d:aa:43:7f:
                    3c:c7:73:97:4d:ad:c8:68:1a:00:9e:42:3d:d9:1d:
                    21:3f:34:30:bd:6d:dc:89:95:eb:2d:21:c0:a7:9f:
                    5f:2c:b2:c1:72:1e:0b:3f:df:71:22:7b:c1:02:18:
                    0e:a3:7e:aa:44:ab:46:8e:e2:7c:59:e1:0b:7e:95:
                    ab:dc:60:fe:fd:c5:9d:44:a7:c5:9a:06:57:1d:50:
                    53:04:cf:db:47:b5:65:c9:2b:90:42:45:b2:09:e5:
                    a6:c2:7b:b0:7a:eb:8e:3e:de:26:c7:73:9e:42:06:
                    55:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3B:5E:65:77:07:32:C0:60:3C:1D:B2:93:56:F9:C2:9A:5E:D8:71
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030363a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c006::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:e9:0c:cd:c5:eb:26:8f:b7:7f:0c:e2:56:ea:17:04:ac:b1:
         be:3f:b8:a6:ab:ed:9f:e3:8d:ed:fb:1f:fc:99:e7:17:50:90:
         bb:33:77:a4:fd:13:dd:41:0f:b1:8a:fc:bf:28:50:4d:28:71:
         d3:0b:cd:37:47:27:59:54:a6:d2:82:63:1b:eb:ba:93:45:7c:
         74:72:b5:be:22:cc:2f:cb:66:28:6b:95:88:c4:3e:0e:9f:5c:
         a9:7c:76:e4:e1:d3:31:21:1e:42:aa:c6:e0:22:d8:91:9d:c4:
         36:34:0a:c3:8a:d2:a1:75:78:93:8d:a5:1f:ec:86:87:b1:f2:
         2d:57:d1:d4:a1:af:3f:a1:45:b7:d1:ec:ea:ca:c6:06:18:f4:
         60:20:f8:2b:b6:c5:fa:3f:7b:a2:55:e5:c3:b2:79:6d:ad:fd:
         ef:9b:9c:f8:ea:ac:cc:eb:88:08:fa:30:a2:6d:54:23:ce:71:
         2d:04:56:5c:0d:dd:2d:c8:4c:d5:60:d0:85:d2:30:80:53:95:
         4f:33:49:ee:a9:a8:76:33:8d:eb:ed:92:ad:33:ff:b9:e2:62:
         ab:f1:7c:a4:67:94:2f:94:3a:50:af:b4:00:4f:b6:74:c5:2d:
         28:91:43:0a:08:4b:35:4b:df:83:21:41:04:db:92:91:76:57:
         f0:cd:16:49
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUAaIL7u7V9NpM2huHR7jElz1uKZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEzMTM2QURFRUJCNTQxMTFFMkMwOUYyQzdERkJCMzk1
MUVCQ0ZEMDAeFw0yNTA0MzAxODQyNTBaFw0yNjA0MjkxODQ3NTBaMDMxMTAvBgNV
BAMTKDdBM0I1RTY1NzcwNzMyQzA2MDNDMURCMjkzNTZGOUMyOUE1RUQ4NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ttgZb/aCZmIbIo3vsTDPl19U
x43sEL6OyOVfWFs97rDy3HDvABmsvH7uE/T3pKh/GgheV2u1lVYECcDFkogCJ73z
LANssWYckkzwvkRlSkIgkhnNxMe6FW+xxjJeP8mgKnKbHYt+8XL3AuIPIMWJkuOw
ubCXLEsC38CIu/Qg8wkruEr4mCn8AtGM9sRAgn62DapDfzzHc5dNrchoGgCeQj3Z
HSE/NDC9bdyJlestIcCnn18sssFyHgs/33Eie8ECGA6jfqpEq0aO4nxZ4Qt+lavc
YP79xZ1Ep8WaBlcdUFMEz9tHtWXJK5BCRbIJ5abCe7B6644+3ibHc55CBlVBAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUejteZXcHMsBgPB2yk1b5wppe2HEwHwYDVR0j
BBgwFoAUwTE2re67VBEeLAnyx9+7OVHrz9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9DMTMxMzZBREVFQkI1NDExMUUyQzA5RjJDN0RGQkIzOTUxRUJDRkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMzEzNkFERUVCQjU0MTEx
RTJDMDlGMkM3REZCQjM5NTFFQkNGRDAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzIzODMwMzQzYTYzNjYzODNhNjMzMDMwMzYzYTNhMmYzNDM4MmQzMTMyMzgyMDNk
M2UyMDM1MzIzNTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBAz4wAYwDQYJKoZIhvcNAQELBQAD
ggEBAIjpDM3F6yaPt38M4lbqFwSssb4/uKar7Z/jje37H/yZ5xdQkLszd6T9E91B
D7GK/L8oUE0ocdMLzTdHJ1lUptKCYxvrupNFfHRytb4izC/LZihrlYjEPg6fXKl8
duTh0zEhHkKqxuAi2JGdxDY0CsOK0qF1eJONpR/shoex8i1X0dShrz+hRbfR7OrK
xgYY9GAg+Cu2xfo/e6JV5cOyeW2t/e+bnPjqrMzriAj6MKJtVCPOcS0EVlwN3S3I
TNVg0IXSMIBTlU8zSe6pqHYzjevtkq0z/7niYqvxfKRnlC+UOlCvtABPtnTFLSiR
QwoISzVL34MhQQTbkpF2V/DNFkk=
-----END CERTIFICATE-----
Generated at Sat May 3 00:01:03 2025 by rpki-client