Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/323830343a326433303a3a2f33322d3438203d3e20323635323635.roa
File:                     323830343a326433303a3a2f33322d3438203d3e20323635323635.roa (raw, json)
Hash identifier:          p5Ed6quJ313tq49qLCIvNWWCC+Y//kkXIzR9rCy0FvE=
Subject key identifier:   41:B9:B4:8B:31:07:3F:75:D7:9D:93:BC:24:BB:BA:BC:5C:5E:64:2F
Certificate issuer:       /CN=733F4B034A3788745713B6F81B211FD8957CF1EE
Certificate serial:       4CACDAD2BB1599AB733A2648B64DDE775FB21AD6
Authority key identifier: 73:3F:4B:03:4A:37:88:74:57:13:B6:F8:1B:21:1F:D8:95:7C:F1:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/323830343a326433303a3a2f33322d3438203d3e20323635323635.roa
Signing time:             Thu 06 Mar 2025 23:46:07 +0000
ROA not before:           Thu 06 Mar 2025 23:41:07 +0000
ROA not after:            Thu 05 Mar 2026 23:46:07 +0000
asID:                     265265
IP address blocks:        2804:2d30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.crl
                          rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 17:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ac:da:d2:bb:15:99:ab:73:3a:26:48:b6:4d:de:77:5f:b2:1a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733F4B034A3788745713B6F81B211FD8957CF1EE
        Validity
            Not Before: Mar  6 23:41:07 2025 GMT
            Not After : Mar  5 23:46:07 2026 GMT
        Subject: CN=41B9B48B31073F75D79D93BC24BBBABC5C5E642F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:9e:26:be:7d:a9:64:71:99:a1:9c:7e:23:
                    7b:cf:7f:03:cf:1d:c9:ef:7f:6b:59:e8:2b:e5:d1:
                    4c:0f:43:e3:1d:c2:08:2b:2c:17:f1:bb:92:7f:b7:
                    b9:07:74:9a:c1:6b:1e:ab:cf:cf:3c:e8:50:f6:f1:
                    30:95:d1:02:a9:c0:1e:ef:e2:55:4b:56:ee:9b:63:
                    10:2e:15:0c:05:55:5d:b0:da:54:23:4c:ad:f7:1f:
                    e2:94:7c:41:4d:e5:80:52:05:ae:ca:8c:95:61:ff:
                    78:30:c0:59:17:dc:11:10:d0:c0:67:af:e8:5a:c8:
                    95:b1:19:35:1b:04:b2:38:31:95:f9:b4:48:bf:bb:
                    3b:27:41:d4:e7:a9:02:ed:1b:51:43:28:36:74:8d:
                    e2:f8:c8:ea:c7:12:3b:e2:ea:0e:83:33:78:f5:fa:
                    4c:e6:c9:91:8e:a4:ed:b9:a5:6c:34:c9:07:48:35:
                    38:d0:c2:8f:39:2e:86:cb:54:ef:68:84:73:90:4b:
                    be:e4:aa:d6:81:48:0e:95:36:95:4e:3c:a4:0a:5c:
                    4f:74:11:a2:e5:ec:11:de:84:07:93:89:2f:2a:4f:
                    2f:76:ba:5f:82:20:34:29:51:54:dc:f7:d6:8e:85:
                    33:43:06:7b:68:e8:9e:34:80:21:5b:b6:35:75:22:
                    aa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B9:B4:8B:31:07:3F:75:D7:9D:93:BC:24:BB:BA:BC:5C:5E:64:2F
            X509v3 Authority Key Identifier:
                keyid:73:3F:4B:03:4A:37:88:74:57:13:B6:F8:1B:21:1F:D8:95:7C:F1:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/323830343a326433303a3a2f33322d3438203d3e20323635323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d30::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:d6:9c:10:a8:54:55:51:02:de:c3:ce:0f:6e:c0:c1:5b:54:
         d4:04:3e:dd:7a:31:21:a7:31:bd:50:fa:80:32:f9:e5:c8:f6:
         09:21:48:14:1b:ca:2e:ba:10:9b:17:a0:5a:26:25:d8:27:c6:
         c5:d0:62:d0:aa:a9:50:75:51:3f:3d:f6:ff:e4:34:b2:19:79:
         1b:13:d1:bb:5a:7e:d5:a4:08:ad:d7:11:f4:5b:44:6e:d7:2c:
         1e:88:9c:f9:24:0f:27:0f:10:a9:50:ce:c7:49:d7:ad:7e:23:
         fe:22:88:88:dc:3d:ae:62:f5:1b:1e:47:71:88:fd:b9:58:33:
         a2:1f:15:d2:78:08:a9:85:a9:58:bc:de:e4:cb:42:f2:62:c6:
         dd:23:37:e1:8d:03:db:a7:ac:f0:ea:8c:05:00:1e:ae:99:a5:
         1f:62:60:15:3f:73:e5:7f:9d:67:dd:9b:c8:64:97:8d:e0:aa:
         12:56:a8:db:cf:f3:53:87:33:22:02:b9:d1:5f:58:c6:25:35:
         e1:10:23:18:cb:de:e1:de:bf:40:cc:4a:d0:97:31:98:92:d9:
         1a:6c:5c:20:ab:b8:a6:91:67:a6:64:57:0e:f4:f2:ad:69:a2:
         f5:6a:a9:69:5a:4f:03:b5:7b:30:5c:dc:43:05:4e:0e:5d:e3:
         52:36:90:40
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUTKza0rsVmatzOiZItk3ed1+yGtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMzRjRCMDM0QTM3ODg3NDU3MTNCNkY4MUIyMTFGRDg5
NTdDRjFFRTAeFw0yNTAzMDYyMzQxMDdaFw0yNjAzMDUyMzQ2MDdaMDMxMTAvBgNV
BAMTKDQxQjlCNDhCMzEwNzNGNzVENzlEOTNCQzI0QkJCQUJDNUM1RTY0MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrp4mvn2pZHGZoZx+I3vPfwPP
Hcnvf2tZ6Cvl0UwPQ+MdwggrLBfxu5J/t7kHdJrBax6rz8886FD28TCV0QKpwB7v
4lVLVu6bYxAuFQwFVV2w2lQjTK33H+KUfEFN5YBSBa7KjJVh/3gwwFkX3BEQ0MBn
r+hayJWxGTUbBLI4MZX5tEi/uzsnQdTnqQLtG1FDKDZ0jeL4yOrHEjvi6g6DM3j1
+kzmyZGOpO25pWw0yQdINTjQwo85LobLVO9ohHOQS77kqtaBSA6VNpVOPKQKXE90
EaLl7BHehAeTiS8qTy92ul+CIDQpUVTc99aOhTNDBnto6J40gCFbtjV1IqrtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUQbm0izEHP3XXnZO8JLu6vFxeZC8wHwYDVR0j
BBgwFoAUcz9LA0o3iHRXE7b4GyEf2JV88e4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnlDeERqdnFIdzg3TmlIRGd2bVl3M0F4Rjljc3luZzV0aHRaTllYaHZY
SnMvMS83MzNGNEIwMzRBMzc4ODc0NTcxM0I2RjgxQjIxMUZEODk1N0NGMUVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczM0Y0QjAzNEEzNzg4NzQ1
NzEzQjZGODFCMjExRkQ4OTU3Q0YxRUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J5Q3hEanZxSHc4N05pSERndm1ZdzNBeEY5Y3N5bmc1dGh0Wk5ZWGh2WEpzLzEv
MzIzODMwMzQzYTMyNjQzMzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzIzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQtMDANBgkqhkiG9w0BAQsFAAOCAQEAnNacEKhU
VVEC3sPOD27AwVtU1AQ+3XoxIacxvVD6gDL55cj2CSFIFBvKLroQmxegWiYl2CfG
xdBi0KqpUHVRPz32/+Q0shl5GxPRu1p+1aQIrdcR9FtEbtcsHoic+SQPJw8QqVDO
x0nXrX4j/iKIiNw9rmL1Gx5HcYj9uVgzoh8V0ngIqYWpWLze5MtC8mLG3SM34Y0D
26es8OqMBQAerpmlH2JgFT9z5X+dZ92byGSXjeCqElao28/zU4czIgK50V9YxiU1
4RAjGMve4d6/QMxK0JcxmJLZGmxcIKu4ppFnpmRXDvTyrWmi9WqpaVpPA7V7MFzc
QwVODl3jUjaQQA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:46:36 2025 by rpki-client