Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/323830343a373663383a3a2f33332d3333203d3e20323731313334.roa
File:                     323830343a373663383a3a2f33332d3333203d3e20323731313334.roa (raw, json)
Hash identifier:          HAZOuZGSVJPLjCFOBsAiIzJxP28F9kQVH02cxgYKR2M=
Subject key identifier:   2B:26:F5:09:FC:D6:FD:50:5A:61:A6:23:4F:59:FC:E7:68:2E:3E:BC
Certificate issuer:       /CN=C0DA5845CF951A8ECD8332855BC18916639F81DF
Certificate serial:       2145EFA7E67A1BD93F46A16E1A5210390634508C
Authority key identifier: C0:DA:58:45:CF:95:1A:8E:CD:83:32:85:5B:C1:89:16:63:9F:81:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DA5845CF951A8ECD8332855BC18916639F81DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/323830343a373663383a3a2f33332d3333203d3e20323731313334.roa
Signing time:             Sat 01 Mar 2025 16:24:27 +0000
ROA not before:           Sat 01 Mar 2025 16:19:27 +0000
ROA not after:            Sat 28 Feb 2026 16:24:27 +0000
asID:                     271134
IP address blocks:        2804:76c8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.crl
                          rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DA5845CF951A8ECD8332855BC18916639F81DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 22:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:45:ef:a7:e6:7a:1b:d9:3f:46:a1:6e:1a:52:10:39:06:34:50:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DA5845CF951A8ECD8332855BC18916639F81DF
        Validity
            Not Before: Mar  1 16:19:27 2025 GMT
            Not After : Feb 28 16:24:27 2026 GMT
        Subject: CN=2B26F509FCD6FD505A61A6234F59FCE7682E3EBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d8:57:3b:6e:da:b3:1a:e2:cd:bc:23:79:c7:
                    44:f0:8c:59:70:c7:8a:36:40:8f:9c:36:06:8d:80:
                    3e:33:e2:7a:51:a2:ee:56:fd:94:41:95:b6:a1:c8:
                    80:c6:80:71:b7:9f:d3:50:06:b6:95:30:fd:9f:1f:
                    95:fb:70:3a:97:7a:7b:cf:4a:55:46:2a:58:8a:ec:
                    83:04:e0:55:3d:64:38:47:08:76:09:4f:89:aa:36:
                    d2:a3:b2:a4:c5:b8:9e:c1:9c:e3:ee:86:c4:5c:b0:
                    14:7f:b5:31:06:bd:00:ae:0c:19:6a:af:a0:8d:5c:
                    7c:51:2e:a3:ef:a1:cb:87:d0:f7:16:29:41:7c:d6:
                    b9:44:58:bb:1a:8f:a3:b6:69:44:23:88:56:cb:1c:
                    90:51:01:a3:e0:65:4f:5e:03:72:92:e1:6f:93:2f:
                    47:42:af:52:af:c2:ca:e5:8c:5a:8c:20:dc:df:37:
                    4c:d6:ef:b0:36:5b:91:e7:e2:e0:b7:c0:56:5d:78:
                    19:4a:20:23:aa:4b:1a:67:7c:f5:d5:8c:ab:ec:03:
                    79:3a:5c:0b:1c:0f:30:ff:57:84:be:51:89:e4:f4:
                    93:0d:d2:71:a2:ce:83:45:0e:80:0b:9c:63:86:94:
                    80:a4:dc:92:3e:16:a0:29:8c:c3:6e:11:32:ba:65:
                    48:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:26:F5:09:FC:D6:FD:50:5A:61:A6:23:4F:59:FC:E7:68:2E:3E:BC
            X509v3 Authority Key Identifier:
                keyid:C0:DA:58:45:CF:95:1A:8E:CD:83:32:85:5B:C1:89:16:63:9F:81:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/C0DA5845CF951A8ECD8332855BC18916639F81DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DA5845CF951A8ECD8332855BC18916639F81DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/323830343a373663383a3a2f33332d3333203d3e20323731313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76c8::/33

    Signature Algorithm: sha256WithRSAEncryption
         88:1b:8a:fe:87:38:cb:ef:8e:4a:dc:be:aa:12:82:64:ad:35:
         27:57:70:78:07:3f:35:3a:f6:a5:4d:60:27:b3:10:c9:cd:ca:
         31:3d:16:71:79:42:b1:b6:6c:45:a6:15:b2:9f:eb:95:6e:ea:
         05:61:a9:ad:ca:ab:bf:a9:82:55:d0:c2:1f:f4:c6:85:ef:e7:
         eb:21:d9:8c:df:de:fb:fd:eb:83:f0:e9:fa:e4:1b:50:27:26:
         ef:70:33:7f:7e:6c:b2:5a:55:17:0e:56:1e:99:d6:a0:a0:8c:
         33:92:58:a7:04:0a:01:44:59:e4:bc:30:cb:fc:83:11:b1:e8:
         1b:00:ad:f3:dc:d1:6e:07:9a:18:2c:b9:12:88:ea:a3:56:c4:
         81:8d:d7:5f:f0:ff:3a:6b:ef:c9:cc:6c:47:79:bc:13:58:3c:
         89:1c:21:01:ab:5e:59:69:a3:b4:17:01:b0:7f:8c:ed:b3:0b:
         61:c8:72:0d:af:1d:72:11:a5:71:e3:26:78:f8:82:cd:b0:29:
         31:60:b3:3d:b2:5c:dd:a1:e2:71:71:4c:14:57:65:f4:fa:1a:
         11:c2:19:87:69:fd:45:fe:35:7d:a7:f8:e8:85:d8:6c:f5:b9:
         90:b3:04:f1:9b:4e:21:59:4d:ef:78:6d:c9:b8:b8:05:f6:7c:
         2b:ef:85:df
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIUXvp+Z6G9k/RqFuGlIQOQY0UIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBEQTU4NDVDRjk1MUE4RUNEODMzMjg1NUJDMTg5MTY2
MzlGODFERjAeFw0yNTAzMDExNjE5MjdaFw0yNjAyMjgxNjI0MjdaMDMxMTAvBgNV
BAMTKDJCMjZGNTA5RkNENkZENTA1QTYxQTYyMzRGNTlGQ0U3NjgyRTNFQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2Fc7btqzGuLNvCN5x0TwjFlw
x4o2QI+cNgaNgD4z4npRou5W/ZRBlbahyIDGgHG3n9NQBraVMP2fH5X7cDqXenvP
SlVGKliK7IME4FU9ZDhHCHYJT4mqNtKjsqTFuJ7BnOPuhsRcsBR/tTEGvQCuDBlq
r6CNXHxRLqPvocuH0PcWKUF81rlEWLsaj6O2aUQjiFbLHJBRAaPgZU9eA3KS4W+T
L0dCr1KvwsrljFqMINzfN0zW77A2W5Hn4uC3wFZdeBlKICOqSxpnfPXVjKvsA3k6
XAscDzD/V4S+UYnk9JMN0nGizoNFDoALnGOGlICk3JI+FqApjMNuETK6ZUjHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKyb1CfzW/VBaYaYjT1n852guPrwwHwYDVR0j
BBgwFoAUwNpYRc+VGo7NgzKFW8GJFmOfgd8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmhVM1FoTWF0aldYQW8yWEUzVTkzekxTR0hHY0JFR1pycmQ2MTdnTWFw
NHovMC9DMERBNTg0NUNGOTUxQThFQ0Q4MzMyODU1QkMxODkxNjYzOUY4MURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwREE1ODQ1Q0Y5NTFBOEVD
RDgzMzI4NTVCQzE4OTE2NjM5RjgxREYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JoVTNRaE1hdGpXWEFvMlhFM1U5M3pMU0dIR2NCRUdacnJkNjE3Z01hcDR6LzAv
MzIzODMwMzQzYTM3MzY2MzM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMx
MzEzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAR2yAAwDQYJKoZIhvcNAQELBQADggEBAIgbiv6H
OMvvjkrcvqoSgmStNSdXcHgHPzU69qVNYCezEMnNyjE9FnF5QrG2bEWmFbKf65Vu
6gVhqa3Kq7+pglXQwh/0xoXv5+sh2Yzf3vv964Pw6frkG1AnJu9wM39+bLJaVRcO
Vh6Z1qCgjDOSWKcECgFEWeS8MMv8gxGx6BsArfPc0W4HmhgsuRKI6qNWxIGN11/w
/zpr78nMbEd5vBNYPIkcIQGrXllpo7QXAbB/jO2zC2HIcg2vHXIRpXHjJnj4gs2w
KTFgsz2yXN2h4nFxTBRXZfT6GhHCGYdp/UX+NX2n+OiF2Gz1uZCzBPGbTiFZTe94
bcm4uAX2fCvvhd8=
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:50:43 2025 by rpki-client