Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33322d3332203d3e20323633383931.roa
File:                     323830343a323734383a3a2f33322d3332203d3e20323633383931.roa (raw, json)
Hash identifier:          MO6euXOe3+e/c5Y8E5tznHMe0mpIDKm2mZmkPoTVZII=
Subject key identifier:   3E:C5:CD:79:B5:11:D0:F6:58:7B:2A:08:88:10:E0:44:19:5A:00:79
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       1E4DF52F338D323A46B25F06B10998DE1F6DF6D4
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33322d3332203d3e20323633383931.roa
Signing time:             Thu 20 Feb 2025 11:43:48 +0000
ROA not before:           Thu 20 Feb 2025 11:38:48 +0000
ROA not after:            Thu 19 Feb 2026 11:43:48 +0000
asID:                     263891
IP address blocks:        2804:2748::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
                          rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4d:f5:2f:33:8d:32:3a:46:b2:5f:06:b1:09:98:de:1f:6d:f6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Feb 20 11:38:48 2025 GMT
            Not After : Feb 19 11:43:48 2026 GMT
        Subject: CN=3EC5CD79B511D0F6587B2A088810E044195A0079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1a:a8:2d:07:ca:36:ab:05:24:d0:96:f6:ae:
                    f8:73:e0:ac:ca:1c:cc:2b:d0:df:73:19:2d:6a:d8:
                    a3:3a:20:63:93:bf:ea:5f:23:c1:47:1b:cd:95:03:
                    55:8d:d8:11:f8:9e:f6:f5:94:f2:bf:ac:72:a6:57:
                    bb:4e:4b:e0:aa:90:d6:d5:b6:81:b3:2d:f7:e2:4b:
                    3c:ce:35:14:4a:d2:f5:bd:87:db:ef:20:ca:76:5b:
                    5d:cd:bd:2e:c7:ac:65:f7:5b:76:ce:e1:2d:5a:5d:
                    61:21:f8:2b:7e:47:24:72:79:e6:e5:df:88:22:44:
                    74:1c:26:d7:87:72:34:4a:af:10:a4:76:23:82:ca:
                    14:70:31:64:25:65:8d:cc:da:84:06:a1:2c:b2:8b:
                    fb:8b:49:39:7b:bc:04:14:b6:64:a5:fc:b3:45:37:
                    a9:36:e5:70:59:ff:37:12:e1:38:8a:58:57:3c:a0:
                    1f:2e:13:95:46:e8:2b:ca:8f:fc:54:6a:a5:c8:fb:
                    77:1e:bc:09:93:ec:b6:3b:c6:71:e0:a4:d8:48:08:
                    5e:a3:69:83:81:4d:e6:f6:df:7b:fe:47:60:65:e8:
                    db:f2:79:49:bf:f2:4d:6d:d0:61:04:06:52:77:bb:
                    e3:c9:86:a5:b1:57:9a:20:9d:04:65:da:02:93:43:
                    13:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C5:CD:79:B5:11:D0:F6:58:7B:2A:08:88:10:E0:44:19:5A:00:79
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33322d3332203d3e20323633383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2748::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:c1:ce:49:45:cb:4b:9d:bc:bd:ce:40:da:dc:8f:8e:85:c5:
         6e:49:b0:1b:07:98:b8:c0:6d:b9:2e:f6:d7:0e:db:75:a0:6a:
         92:96:4d:d7:c7:d2:e4:2f:a2:59:8f:81:18:f4:99:d6:7e:44:
         87:dc:b7:f5:8a:8c:53:05:44:6f:fa:49:0f:2d:f6:17:98:54:
         da:96:11:84:cc:b3:40:f5:16:20:f6:86:b9:12:c9:1c:0c:85:
         b3:2d:1d:47:5e:19:a1:5a:c1:ea:60:49:d2:00:20:da:5c:0d:
         a7:90:69:ad:b5:97:c3:33:3e:6e:1b:43:9f:7b:de:a8:47:34:
         9f:df:1f:dc:ce:65:9e:29:ec:69:72:88:2c:6a:bd:38:70:28:
         e0:c5:ac:c1:52:84:ac:2a:0e:38:38:b0:bc:d0:17:8b:7c:93:
         df:6d:4e:58:f6:51:24:6e:94:be:63:99:b5:11:b2:2e:81:fa:
         08:d3:6b:11:95:a8:24:ba:ae:18:bd:24:90:6a:19:ec:b0:a7:
         d7:14:eb:58:7f:f3:23:00:ec:1f:40:c1:c5:5a:65:8a:6f:1f:
         6a:91:f9:09:76:2d:48:87:8e:a3:ee:83:4c:9a:68:82:f1:ed:
         ba:96:c3:95:4a:71:b2:cc:01:6b:fd:78:3e:2e:d8:46:a5:f3:
         23:85:62:de
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUHk31LzONMjpGsl8GsQmY3h9t9tQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFFOTRFMUU4REVDMUI4MkE5QjJGRDEzODExNTQ5NkYx
QjAyRjM5MDAeFw0yNTAyMjAxMTM4NDhaFw0yNjAyMTkxMTQzNDhaMDMxMTAvBgNV
BAMTKDNFQzVDRDc5QjUxMUQwRjY1ODdCMkEwODg4MTBFMDQ0MTk1QTAwNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgGqgtB8o2qwUk0Jb2rvhz4KzK
HMwr0N9zGS1q2KM6IGOTv+pfI8FHG82VA1WN2BH4nvb1lPK/rHKmV7tOS+CqkNbV
toGzLffiSzzONRRK0vW9h9vvIMp2W13NvS7HrGX3W3bO4S1aXWEh+Ct+RyRyeebl
34giRHQcJteHcjRKrxCkdiOCyhRwMWQlZY3M2oQGoSyyi/uLSTl7vAQUtmSl/LNF
N6k25XBZ/zcS4TiKWFc8oB8uE5VG6CvKj/xUaqXI+3cevAmT7LY7xnHgpNhICF6j
aYOBTeb233v+R2Bl6NvyeUm/8k1t0GEEBlJ3u+PJhqWxV5ognQRl2gKTQxMRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPsXNebUR0PZYeyoIiBDgRBlaAHkwHwYDVR0j
BBgwFoAUIelOHo3sG4Kpsv0TgRVJbxsC85AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlFnQWQyZTZKNGZtdVdGaFg3bVVZd3doczFjR3g1WDNRb1dGYXdCRWVV
NFovMC8yMUU5NEUxRThERUMxQjgyQTlCMkZEMTM4MTE1NDk2RjFCMDJGMzkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRTk0RTFFOERFQzFCODJB
OUIyRkQxMzgxMTU0OTZGMUIwMkYzOTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JRZ0FkMmU2SjRmbXVXRmhYN21VWXd3aHMxY0d4NVgzUW9XRmF3QkVlVTRaLzAv
MzIzODMwMzQzYTMyMzczNDM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzgzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQnSDANBgkqhkiG9w0BAQsFAAOCAQEAAMHOSUXL
S528vc5A2tyPjoXFbkmwGweYuMBtuS721w7bdaBqkpZN18fS5C+iWY+BGPSZ1n5E
h9y39YqMUwVEb/pJDy32F5hU2pYRhMyzQPUWIPaGuRLJHAyFsy0dR14ZoVrB6mBJ
0gAg2lwNp5BprbWXwzM+bhtDn3veqEc0n98f3M5lninsaXKILGq9OHAo4MWswVKE
rCoOODiwvNAXi3yT321OWPZRJG6UvmOZtRGyLoH6CNNrEZWoJLquGL0kkGoZ7LCn
1xTrWH/zIwDsH0DBxVplim8fapH5CXYtSIeOo+6DTJpogvHtupbDlUpxsswBa/14
Pi7YRqXzI4Vi3g==
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:00:19 2025 by rpki-client