Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33342d3334203d3e20323633383931.roa
File:                     323830343a323734383a3a2f33342d3334203d3e20323633383931.roa (raw, json)
Hash identifier:          P72Vo0+btTdKLtZrwM6d6w1d0tSzgvKj3HQWGsIM80w=
Subject key identifier:   99:9B:41:8E:A0:C3:03:49:C9:4F:8D:73:E6:02:08:03:6E:52:B2:7E
Certificate issuer:       /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial:       0ECFDFC8DD60D06D76EB96583CA7C55C637F42F3
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33342d3334203d3e20323633383931.roa
Signing time:             Thu 20 Feb 2025 11:43:49 +0000
ROA not before:           Thu 20 Feb 2025 11:38:49 +0000
ROA not after:            Thu 19 Feb 2026 11:43:49 +0000
asID:                     263891
IP address blocks:        2804:2748::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
                          rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:df:c8:dd:60:d0:6d:76:eb:96:58:3c:a7:c5:5c:63:7f:42:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
        Validity
            Not Before: Feb 20 11:38:49 2025 GMT
            Not After : Feb 19 11:43:49 2026 GMT
        Subject: CN=999B418EA0C30349C94F8D73E60208036E52B27E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a7:a9:1c:44:3d:44:32:80:83:fd:db:07:a4:
                    9a:8e:c7:b1:0b:ac:2a:2b:79:32:3c:1f:bb:81:46:
                    26:ca:22:aa:a3:ab:eb:b2:32:b4:e1:29:c8:c2:47:
                    14:92:5f:b5:68:fd:e2:a3:e0:87:7f:ce:3e:2f:f3:
                    1f:22:cb:e7:00:27:f1:f9:41:b4:2d:fa:31:9c:44:
                    a3:b3:6a:7a:5c:21:84:f9:5b:2f:1e:7a:4c:1f:d2:
                    38:13:16:35:c7:18:8c:ac:08:d2:9c:35:96:04:32:
                    46:12:4d:0b:40:2b:28:fa:d7:c0:d6:a9:ba:57:30:
                    f1:b0:43:be:b5:5f:3d:09:bf:31:05:55:6e:05:65:
                    ff:52:f3:b2:c7:89:3d:59:20:f8:9a:c1:d9:cd:31:
                    c7:89:42:95:17:86:0e:07:75:06:fc:e9:dc:dd:8e:
                    8c:11:6f:88:b8:89:3a:82:79:e6:a4:f1:0d:8f:00:
                    05:89:fc:7a:ed:6e:ad:81:65:a9:2b:87:de:35:7c:
                    a1:f6:29:85:3d:86:b7:77:2c:a5:28:d2:59:e0:ed:
                    e6:cd:5f:db:96:db:9f:95:9f:67:f6:ff:b3:cc:66:
                    ee:8a:f9:81:80:cf:09:bc:e8:0c:ae:09:3c:c3:76:
                    58:e7:a0:d2:91:ed:c4:f0:a9:d9:44:1e:8d:b4:4e:
                    c9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9B:41:8E:A0:C3:03:49:C9:4F:8D:73:E6:02:08:03:6E:52:B2:7E
            X509v3 Authority Key Identifier:
                keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33342d3334203d3e20323633383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2748::/34

    Signature Algorithm: sha256WithRSAEncryption
         76:2f:b9:e7:6c:cb:55:c5:18:8a:f0:ca:6b:76:0d:29:da:a8:
         38:e9:31:3e:4d:57:92:92:65:3d:fb:bc:0c:06:cf:f2:72:75:
         37:38:87:ee:c1:aa:98:e6:b4:b0:60:c3:f3:53:90:12:46:3e:
         a2:e0:5f:f6:95:9d:a9:30:98:f9:7e:2f:a3:9c:ec:23:e4:53:
         c0:1e:83:74:63:9c:19:f3:5b:cd:78:96:fc:23:d1:e8:04:df:
         af:6f:7b:78:4b:dc:46:82:5e:5c:e8:f2:25:73:fb:32:ff:ae:
         fc:d6:d6:aa:c6:99:5c:63:3f:fe:1a:d5:c6:ee:e5:16:8d:64:
         c2:ee:fb:ce:0c:74:90:5d:01:95:42:43:81:02:d0:f0:41:98:
         01:cd:aa:d4:19:6d:c2:49:4f:70:7c:93:7d:79:d0:c4:71:95:
         2b:b0:9d:ab:1b:6f:d8:03:46:f7:1a:86:d9:6f:6e:45:2c:5c:
         66:77:2c:7d:72:f5:40:86:b7:ce:78:de:67:ee:ea:bb:47:2e:
         22:c1:72:71:18:6e:f7:24:5d:50:f0:13:b2:56:c8:68:a9:0a:
         c4:d0:d7:9b:b3:ab:40:7b:2c:52:91:31:7a:68:06:64:35:89:
         02:74:aa:bb:9e:b7:3e:e4:fa:64:5a:11:0d:eb:cf:2a:cd:ec:
         2b:7b:5b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:59:35 2025 by rpki-client