Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a61343a3a2f33322d313238203d3e203238363439.roa
File:                     323830343a61343a3a2f33322d313238203d3e203238363439.roa (raw, json)
Hash identifier:          vIB/uhfhAlv7gq3xUVnaZE9/Sc+eLO2GUpK3CMjEUjs=
Subject key identifier:   31:0D:9F:86:CF:69:60:47:E1:52:A4:2E:81:C1:1B:F0:22:73:9A:FA
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       0BB974BE282BD4011710AE23808B005A8174C1B2
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a61343a3a2f33322d313238203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:58:18 +0000
ROA not before:           Tue 06 May 2025 00:53:18 +0000
ROA not after:            Tue 05 May 2026 00:58:18 +0000
asID:                     28649
IP address blocks:        2804:a4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 05:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b9:74:be:28:2b:d4:01:17:10:ae:23:80:8b:00:5a:81:74:c1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:53:18 2025 GMT
            Not After : May  5 00:58:18 2026 GMT
        Subject: CN=310D9F86CF696047E152A42E81C11BF022739AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:93:f1:dc:8b:71:27:df:75:ab:50:e8:96:
                    00:cc:57:ee:c5:21:f2:04:fe:b1:f2:d3:d3:94:e5:
                    fb:dd:79:85:43:f0:b0:4b:7a:ae:4f:a5:e3:39:1c:
                    d8:b8:05:c3:19:5d:58:03:19:47:90:d0:4d:02:b0:
                    34:e3:33:3f:ee:7c:a0:5a:21:3f:f4:23:97:37:34:
                    77:02:d6:ad:30:02:b8:80:6f:a3:ea:f3:08:0f:43:
                    cd:21:62:b3:ed:55:6c:0c:17:41:81:9d:af:ff:cc:
                    67:f2:c9:9a:79:93:9b:46:b8:1b:87:8b:7a:d6:ed:
                    e6:de:45:80:a9:41:7a:47:2a:23:75:52:b0:e7:b6:
                    a9:90:78:b0:5c:2d:bd:6a:c3:9c:0d:3a:72:59:1b:
                    1f:d8:35:d7:4d:e6:bd:c4:03:89:04:72:69:d3:f7:
                    19:9b:91:b0:63:6c:51:a2:95:31:c6:88:3d:51:a9:
                    94:11:28:dd:48:5b:ec:6f:1c:c7:cd:9b:35:99:6c:
                    07:ff:51:f2:97:02:8f:8f:f6:71:d3:16:5a:b5:d1:
                    39:96:3a:91:f4:bf:f4:05:3d:8c:fb:05:9d:d3:8b:
                    b2:ac:56:8a:e9:1e:9b:8c:68:a8:b8:e0:eb:27:36:
                    a7:d0:2e:d5:6b:15:27:21:9f:60:fc:2c:aa:e7:74:
                    57:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0D:9F:86:CF:69:60:47:E1:52:A4:2E:81:C1:1B:F0:22:73:9A:FA
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a61343a3a2f33322d313238203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:69:e6:24:dc:a5:7a:00:1c:61:53:65:f2:63:b0:70:fe:13:
         90:4e:d7:02:a2:b3:a7:5e:9b:aa:e6:ce:aa:e4:0d:2f:c8:94:
         d0:bb:d3:3b:61:4a:03:a9:4e:dd:13:dc:c4:40:6d:12:1d:da:
         98:af:5b:46:ef:4d:b1:06:5d:ff:f9:2e:b7:a7:f2:2e:b2:eb:
         d5:68:be:6e:b1:e4:0f:eb:c8:66:19:46:13:70:89:b8:f7:1b:
         c0:17:0b:a9:54:d5:68:94:f8:c3:47:2f:fe:ed:9f:64:60:fe:
         f2:df:3d:0a:55:12:39:d4:6f:76:c3:13:c9:b6:ee:61:93:64:
         2a:89:6c:2f:6f:d9:5c:28:bb:a6:df:e1:cf:07:a8:81:a5:4f:
         f4:60:52:7c:f0:22:07:2c:bc:b8:6a:ea:28:68:d7:8e:9f:e8:
         60:58:e2:b8:29:06:4c:a4:4b:b2:63:b7:ca:07:cf:7e:0c:61:
         a8:a7:17:d0:f6:83:ae:6c:2a:f2:c6:27:ad:03:37:ca:5d:c9:
         00:b5:b8:25:f7:1c:57:67:ca:77:b7:65:31:2a:cc:10:84:fc:
         5f:1f:17:5a:2d:7d:53:15:41:b8:bc:f3:47:c0:8b:b0:8a:13:
         91:34:08:f8:28:02:46:38:a4:a2:2a:8a:97:96:a2:41:5f:55:
         16:e8:d1:2b
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUC7l0vigr1AEXEK4jgIsAWoF0wbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM5M0UxMDM5OTJGNThEQ0EwMUY0OUNGMzRFOTkzMzdG
Q0YwREI0MzAeFw0yNTA1MDYwMDUzMThaFw0yNjA1MDUwMDU4MThaMDMxMTAvBgNV
BAMTKDMxMEQ5Rjg2Q0Y2OTYwNDdFMTUyQTQyRTgxQzExQkYwMjI3MzlBRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0ZPx3ItxJ991q1DolgDMV+7F
IfIE/rHy09OU5fvdeYVD8LBLeq5PpeM5HNi4BcMZXVgDGUeQ0E0CsDTjMz/ufKBa
IT/0I5c3NHcC1q0wAriAb6Pq8wgPQ80hYrPtVWwMF0GBna//zGfyyZp5k5tGuBuH
i3rW7ebeRYCpQXpHKiN1UrDntqmQeLBcLb1qw5wNOnJZGx/YNddN5r3EA4kEcmnT
9xmbkbBjbFGilTHGiD1RqZQRKN1IW+xvHMfNmzWZbAf/UfKXAo+P9nHTFlq10TmW
OpH0v/QFPYz7BZ3Ti7KsVorpHpuMaKi44OsnNqfQLtVrFSchn2D8LKrndFe7AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUMQ2fhs9pYEfhUqQugcEb8CJzmvowHwYDVR0j
BBgwFoAUHJPhA5kvWNygH0nPNOmTN/zw20MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8xQzkzRTEwMzk5MkY1OERDQTAxRjQ5Q0YzNEU5OTMzN0ZDRjBEQjQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDOTNFMTAzOTkyRjU4RENB
MDFGNDlDRjM0RTk5MzM3RkNGMERCNDMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzIzODMwMzQzYTYxMzQzYTNhMmYzMzMyMmQzMTMyMzgyMDNkM2UyMDMyMzgzNjM0
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBACkMA0GCSqGSIb3DQEBCwUAA4IBAQA2aeYk3KV6ABxh
U2XyY7Bw/hOQTtcCorOnXpuq5s6q5A0vyJTQu9M7YUoDqU7dE9zEQG0SHdqYr1tG
702xBl3/+S63p/IusuvVaL5useQP68hmGUYTcIm49xvAFwupVNVolPjDRy/+7Z9k
YP7y3z0KVRI51G92wxPJtu5hk2QqiWwvb9lcKLum3+HPB6iBpU/0YFJ88CIHLLy4
auooaNeOn+hgWOK4KQZMpEuyY7fKB89+DGGopxfQ9oOubCryxietAzfKXckAtbgl
9xxXZ8p3t2UxKswQhPxfHxdaLX1TFUG4vPNHwIuwihORNAj4KAJGOKSiKoqXlqJB
X1UW6NEr
-----END CERTIFICATE-----
Generated at Mon May 12 19:24:45 2025 by rpki-client