Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/323830343a6238343a3a2f33322d3438203d3e203532373838.roa
File:                     323830343a6238343a3a2f33322d3438203d3e203532373838.roa (raw, json)
Hash identifier:          hl/5OxGOU0JH6btmx6NDigAj4IAqY8I+wrvb5DixlD0=
Subject key identifier:   D6:9C:F6:C5:F8:3F:E2:64:78:67:CD:B6:B1:32:F9:4E:8C:D9:52:F3
Certificate issuer:       /CN=33D444D18668AFF627287DE909F4EDC258CA9CC3
Certificate serial:       45DF630B2157DA7D81847A554E3AD489AF82D94C
Authority key identifier: 33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/323830343a6238343a3a2f33322d3438203d3e203532373838.roa
Signing time:             Wed 07 May 2025 19:31:16 +0000
ROA not before:           Wed 07 May 2025 19:26:16 +0000
ROA not after:            Wed 06 May 2026 19:31:16 +0000
asID:                     52788
IP address blocks:        2804:b84::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.crl
                          rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 00:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:df:63:0b:21:57:da:7d:81:84:7a:55:4e:3a:d4:89:af:82:d9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D444D18668AFF627287DE909F4EDC258CA9CC3
        Validity
            Not Before: May  7 19:26:16 2025 GMT
            Not After : May  6 19:31:16 2026 GMT
        Subject: CN=D69CF6C5F83FE2647867CDB6B132F94E8CD952F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:7c:bd:5d:79:96:06:bf:bc:db:76:0a:1a:
                    0b:59:38:02:a9:32:12:83:63:90:ef:53:b1:4a:6d:
                    7d:b7:38:ad:65:6e:de:98:2f:ad:51:5e:4e:9b:2a:
                    d0:d9:52:7a:31:b4:a6:57:29:d1:e7:e6:2f:93:80:
                    9b:f9:aa:f9:b3:a8:fc:22:ab:00:03:dd:70:c6:fc:
                    7f:9a:19:12:7c:90:21:cf:12:43:f1:86:44:f7:ed:
                    fe:18:06:ea:91:53:e2:fd:11:6c:1d:af:2c:65:77:
                    07:c4:92:b1:e8:56:e2:9a:f8:bf:07:08:3a:6b:a8:
                    94:42:11:bf:7f:1f:c1:9f:05:fc:17:97:44:fd:c9:
                    7c:48:de:09:d3:70:f9:40:67:8d:44:2d:49:16:df:
                    1b:87:92:c5:59:b1:38:e9:30:18:ed:c8:13:4d:0f:
                    a9:a8:2f:53:ce:58:63:7e:3a:37:96:43:42:51:ba:
                    45:2d:6e:4b:0c:6b:91:be:ea:d0:7b:4d:80:4d:cd:
                    df:b4:bb:b2:23:aa:f0:9d:b7:2b:7e:80:1d:73:b4:
                    9a:c2:21:41:06:aa:1b:c8:75:43:b1:99:a5:68:5d:
                    a2:e2:0e:78:5d:50:fe:34:8e:7a:54:26:5c:d7:1b:
                    c9:b7:1a:cc:8f:43:e7:5f:45:9c:d0:d7:75:4c:3b:
                    11:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9C:F6:C5:F8:3F:E2:64:78:67:CD:B6:B1:32:F9:4E:8C:D9:52:F3
            X509v3 Authority Key Identifier:
                keyid:33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/323830343a6238343a3a2f33322d3438203d3e203532373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b84::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:22:5d:68:2d:1f:98:f9:42:28:1a:0e:16:b3:99:f5:b8:9b:
         ee:5f:dd:71:7c:fc:95:5e:80:1a:6d:a5:83:8b:3e:8a:4e:9e:
         ea:5b:86:8a:52:4f:08:f1:61:13:34:7b:6c:ff:b5:92:07:3b:
         39:ce:ce:09:f3:9f:aa:2a:75:82:16:8d:8a:33:8f:55:32:63:
         b5:d5:02:f5:90:21:1b:26:b6:f8:c7:cc:5c:9d:06:25:0d:f0:
         b5:94:2f:6e:a2:b7:eb:85:0d:fc:f0:b1:cf:98:7a:3b:70:15:
         d2:f3:45:31:83:a7:4c:9b:ee:ac:ee:15:0b:09:2f:ab:cd:46:
         4e:27:39:ab:66:da:b8:00:8d:50:cf:07:40:62:c0:7e:f1:ac:
         d0:64:6d:f7:74:06:ab:5f:13:12:27:ac:64:c3:99:a7:e4:36:
         82:ee:5f:f4:a8:66:bc:55:ef:af:95:6f:bd:76:40:ca:af:94:
         88:41:a1:6f:a2:6c:fb:a3:20:e7:85:e7:5f:f5:7b:17:40:4e:
         50:32:a1:f4:85:2f:1c:83:26:13:93:55:1f:07:cf:27:fe:9b:
         82:cd:2e:e4:ad:62:d7:8f:40:d7:6b:a9:3f:ca:17:7f:0b:a2:
         8f:47:bd:31:b5:e9:61:93:d2:57:aa:76:64:4c:3e:99:ad:0e:
         a9:a1:1b:fb
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIURd9jCyFX2n2BhHpVTjrUia+C2UwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNENDQ0RDE4NjY4QUZGNjI3Mjg3REU5MDlGNEVEQzI1
OENBOUNDMzAeFw0yNTA1MDcxOTI2MTZaFw0yNjA1MDYxOTMxMTZaMDMxMTAvBgNV
BAMTKEQ2OUNGNkM1RjgzRkUyNjQ3ODY3Q0RCNkIxMzJGOTRFOENEOTUyRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAT3y9XXmWBr+823YKGgtZOAKp
MhKDY5DvU7FKbX23OK1lbt6YL61RXk6bKtDZUnoxtKZXKdHn5i+TgJv5qvmzqPwi
qwAD3XDG/H+aGRJ8kCHPEkPxhkT37f4YBuqRU+L9EWwdryxldwfEkrHoVuKa+L8H
CDprqJRCEb9/H8GfBfwXl0T9yXxI3gnTcPlAZ41ELUkW3xuHksVZsTjpMBjtyBNN
D6moL1POWGN+OjeWQ0JRukUtbksMa5G+6tB7TYBNzd+0u7IjqvCdtyt+gB1ztJrC
IUEGqhvIdUOxmaVoXaLiDnhdUP40jnpUJlzXG8m3GsyPQ+dfRZzQ13VMOxFTAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU1pz2xfg/4mR4Z822sTL5TozZUvMwHwYDVR0j
BBgwFoAUM9RE0YZor/YnKH3pCfTtwljKnMMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzVtTkVGQW82RDNuUUpieFJyOWlTS2dobk1KTG5ycXZTbmlXeWRSWkpq
Qk0vMC8zM0Q0NDREMTg2NjhBRkY2MjcyODdERTkwOUY0RURDMjU4Q0E5Q0MzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDQ0NEQxODY2OEFGRjYy
NzI4N0RFOTA5RjRFREMyNThDQTlDQzMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c1bU5FRkFvNkQzblFKYnhScjlpU0tnaG5NSkxucnF2U25pV3lkUlpKakJNLzAv
MzIzODMwMzQzYTYyMzgzNDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzIzNzM4
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAuEMA0GCSqGSIb3DQEBCwUAA4IBAQBTIl1oLR+Y+UIo
Gg4Ws5n1uJvuX91xfPyVXoAabaWDiz6KTp7qW4aKUk8I8WETNHts/7WSBzs5zs4J
85+qKnWCFo2KM49VMmO11QL1kCEbJrb4x8xcnQYlDfC1lC9uorfrhQ388LHPmHo7
cBXS80Uxg6dMm+6s7hULCS+rzUZOJzmrZtq4AI1QzwdAYsB+8azQZG33dAarXxMS
J6xkw5mn5DaC7l/0qGa8Ve+vlW+9dkDKr5SIQaFvomz7oyDnhedf9XsXQE5QMqH0
hS8cgyYTk1UfB88n/puCzS7krWLXj0DXa6k/yhd/C6KPR70xtelhk9JXqnZkTD6Z
rQ6poRv7
-----END CERTIFICATE-----
Generated at Wed May 14 14:47:42 2025 by rpki-client