Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31383a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31383a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          ulWJkpM6569IWK/29h3GYsdX/TLDWGwDuUtk9jNt2BA=
Subject key identifier:   F1:24:4D:C2:F0:CD:AD:9D:CA:DB:B3:2B:79:6C:AB:92:B8:04:F6:AD
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       03F45F9E3EE633CB94D7DF6A4F50405FBEA8CFCB
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31383a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:46:53 +0000
ROA not before:           Wed 30 Apr 2025 18:41:53 +0000
ROA not after:            Wed 29 Apr 2026 18:46:53 +0000
asID:                     52580
IP address blocks:        2804:cf8:18::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 15:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f4:5f:9e:3e:e6:33:cb:94:d7:df:6a:4f:50:40:5f:be:a8:cf:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:41:53 2025 GMT
            Not After : Apr 29 18:46:53 2026 GMT
        Subject: CN=F1244DC2F0CDAD9DCADBB32B796CAB92B804F6AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:33:c5:23:e9:2b:6d:11:e5:c4:f6:7d:3b:
                    20:74:91:13:5b:b2:8c:5c:46:a7:6c:64:f6:2a:7b:
                    ed:b3:f7:ce:a3:4c:30:89:f5:02:3e:ef:05:67:ec:
                    76:27:00:58:02:4d:d0:c1:c0:fe:9d:25:cc:d5:a3:
                    2a:c6:40:ef:65:f7:b4:56:f1:47:33:72:eb:f8:e3:
                    1c:0f:05:4b:b4:9b:eb:30:38:8b:98:ea:38:8b:2d:
                    39:e6:d4:f3:63:e3:e1:8b:70:e2:7d:e8:a9:7e:79:
                    5d:16:1d:c6:49:d9:80:a4:82:3f:dd:eb:0e:06:b4:
                    d3:5e:38:1a:aa:7b:5f:b7:ea:83:51:b9:30:1f:1f:
                    5e:24:84:19:9d:a1:c0:22:35:ee:a8:90:53:ae:86:
                    b4:fb:02:e1:d5:2a:cf:20:d8:92:04:4d:30:e8:bf:
                    83:de:be:a1:4e:05:48:50:5f:15:f1:5f:4e:b1:07:
                    dc:4c:10:1d:ae:7c:c9:11:e4:2d:73:b3:6e:58:31:
                    11:ff:63:5a:58:57:d6:be:19:19:6c:30:e9:ac:72:
                    4b:dc:0e:10:0a:66:ef:35:e1:14:c9:ff:c6:9e:7f:
                    38:44:42:49:55:53:ec:4a:1e:ed:b2:39:4b:79:1c:
                    d4:d8:5e:07:c3:7e:6f:25:6f:2e:2b:1c:2d:53:bd:
                    b9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:24:4D:C2:F0:CD:AD:9D:CA:DB:B3:2B:79:6C:AB:92:B8:04:F6:AD
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31383a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:49:13:95:e2:b1:06:cb:72:69:07:bb:39:a1:fd:53:d1:c4:
         ed:59:f3:5d:7f:3e:6f:f9:43:53:78:1d:8a:74:7d:28:43:b0:
         c9:c4:64:96:d7:78:69:56:4a:26:1f:35:76:a0:f3:b9:a7:09:
         dd:0f:08:f3:ed:a1:cc:de:ba:b0:b4:57:bb:62:0f:c2:83:f0:
         c4:0a:5f:b0:80:e5:00:cc:9a:64:d4:f2:09:15:9d:ad:e6:a1:
         17:36:3c:62:d5:6e:63:25:ae:8c:76:f0:10:3d:fc:6a:ae:b9:
         04:51:c2:f9:51:34:bd:3c:8a:fa:45:d3:59:0f:1c:6f:b2:a4:
         94:e6:78:d7:c6:a6:2d:c7:31:e2:9e:cf:06:74:17:a3:82:5b:
         93:3f:9c:53:fa:b3:f8:f6:3d:9e:cd:bc:31:3a:f4:c6:88:75:
         de:7f:25:34:a8:1a:e9:b5:5d:74:6a:ed:70:78:c3:ac:1a:d4:
         9f:42:6a:dc:c5:9e:09:21:1a:95:39:7c:b6:0f:a0:69:1e:8c:
         9e:ac:9e:a5:1c:d1:82:1f:8b:02:b0:6c:df:63:7b:af:c5:63:
         3f:32:33:55:73:99:46:a7:bd:fc:fc:4f:58:f1:15:39:dc:34:
         d0:ef:41:f5:85:18:86:77:48:b7:89:2e:e4:0b:a1:3d:98:a5:
         fe:1f:07:fa
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUA/Rfnj7mM8uU199qT1BAX76oz8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEzMTM2QURFRUJCNTQxMTFFMkMwOUYyQzdERkJCMzk1
MUVCQ0ZEMDAeFw0yNTA0MzAxODQxNTNaFw0yNjA0MjkxODQ2NTNaMDMxMTAvBgNV
BAMTKEYxMjQ0REMyRjBDREFEOURDQURCQjMyQjc5NkNBQjkyQjgwNEY2QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmnTPFI+krbRHlxPZ9OyB0kRNb
soxcRqdsZPYqe+2z986jTDCJ9QI+7wVn7HYnAFgCTdDBwP6dJczVoyrGQO9l97RW
8Uczcuv44xwPBUu0m+swOIuY6jiLLTnm1PNj4+GLcOJ96Kl+eV0WHcZJ2YCkgj/d
6w4GtNNeOBqqe1+36oNRuTAfH14khBmdocAiNe6okFOuhrT7AuHVKs8g2JIETTDo
v4PevqFOBUhQXxXxX06xB9xMEB2ufMkR5C1zs25YMRH/Y1pYV9a+GRlsMOmsckvc
DhAKZu814RTJ/8aefzhEQklVU+xKHu2yOUt5HNTYXgfDfm8lby4rHC1TvbkNAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU8SRNwvDNrZ3K27MreWyrkrgE9q0wHwYDVR0j
BBgwFoAUwTE2re67VBEeLAnyx9+7OVHrz9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9DMTMxMzZBREVFQkI1NDExMUUyQzA5RjJDN0RGQkIzOTUxRUJDRkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMzEzNkFERUVCQjU0MTEx
RTJDMDlGMkM3REZCQjM5NTFFQkNGRDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzIzODMwMzQzYTYzNjYzODNhMzEzODNhM2EyZjM0MzgyZDMxMzIzODIwM2QzZTIw
MzUzMjM1MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEDPgAGDANBgkqhkiG9w0BAQsFAAOCAQEA
S0kTleKxBstyaQe7OaH9U9HE7VnzXX8+b/lDU3gdinR9KEOwycRkltd4aVZKJh81
dqDzuacJ3Q8I8+2hzN66sLRXu2IPwoPwxApfsIDlAMyaZNTyCRWdreahFzY8YtVu
YyWujHbwED38aq65BFHC+VE0vTyK+kXTWQ8cb7KklOZ418amLccx4p7PBnQXo4Jb
kz+cU/qz+PY9ns28MTr0xoh13n8lNKga6bVddGrtcHjDrBrUn0Jq3MWeCSEalTl8
tg+gaR6MnqyepRzRgh+LArBs32N7r8VjPzIzVXOZRqe9/PxPWPEVOdw00O9B9YUY
hndIt4ku5AuhPZil/h8H+g==
-----END CERTIFICATE-----
Generated at Mon May 12 19:11:45 2025 by rpki-client