Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/323830343a376464383a633030303a3a2f33352d3335203d3e20323731353836.roa
File:                     323830343a376464383a633030303a3a2f33352d3335203d3e20323731353836.roa (raw, json)
Hash identifier:          v7Vh0YN7LU7sXIpk9GbMaIbwKkP5zjkcgZizLk9mAG8=
Subject key identifier:   7A:86:C3:32:0B:A2:30:4B:65:F0:52:86:A1:F9:53:3D:9B:3B:35:9F
Certificate issuer:       /CN=5F33BB65A501B1A095633041CB4544B7CD75764A
Certificate serial:       7031C155CCE610F2951C5C203454F5CA6B464ED4
Authority key identifier: 5F:33:BB:65:A5:01:B1:A0:95:63:30:41:CB:45:44:B7:CD:75:76:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/323830343a376464383a633030303a3a2f33352d3335203d3e20323731353836.roa
Signing time:             Fri 21 Mar 2025 03:00:00 +0000
ROA not before:           Fri 21 Mar 2025 02:55:00 +0000
ROA not after:            Fri 20 Mar 2026 03:00:00 +0000
asID:                     271586
IP address blocks:        2804:7dd8:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.crl
                          rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:31:c1:55:cc:e6:10:f2:95:1c:5c:20:34:54:f5:ca:6b:46:4e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F33BB65A501B1A095633041CB4544B7CD75764A
        Validity
            Not Before: Mar 21 02:55:00 2025 GMT
            Not After : Mar 20 03:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:3f:ce:c0:94:4a:6c:27:9e:ef:06:56:7f:
                    c2:b6:c5:a2:fb:a0:72:b9:06:a1:5e:9d:76:27:64:
                    c2:32:5d:c7:7d:25:46:64:45:d7:82:62:75:de:cd:
                    32:c2:73:e8:d1:64:ee:b3:a1:4a:e7:97:43:bb:8a:
                    a0:89:6f:0d:0b:8a:62:91:52:74:89:62:87:79:9c:
                    83:33:17:0b:2a:3e:50:43:3b:a6:c8:d6:0d:19:9f:
                    e0:56:56:f0:aa:14:7a:2d:3c:98:12:ed:d3:a7:d4:
                    53:b6:e2:7d:03:ea:f0:b4:02:d3:21:57:50:6e:ef:
                    1b:55:c8:86:6e:f4:df:43:4c:3b:cc:48:41:d8:cb:
                    55:1c:91:34:32:86:91:0b:ab:57:7f:c1:f8:30:29:
                    12:cc:50:83:40:21:6c:20:82:64:c2:53:52:2b:31:
                    e2:5b:d4:10:19:97:de:71:47:85:09:5c:87:56:14:
                    0c:4a:97:8e:7c:03:d7:1a:a9:96:17:d9:33:0f:37:
                    78:2b:12:e8:73:8c:0e:14:57:86:76:20:7d:9b:b4:
                    09:54:6b:fd:6e:7e:11:8c:9e:75:71:0f:6a:12:dc:
                    c2:67:ce:76:81:73:de:90:83:2a:a5:43:2b:10:87:
                    b1:8c:b7:ea:da:8d:6c:b6:ff:f2:5b:54:09:36:7d:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:86:C3:32:0B:A2:30:4B:65:F0:52:86:A1:F9:53:3D:9B:3B:35:9F
            X509v3 Authority Key Identifier:
                keyid:5F:33:BB:65:A5:01:B1:A0:95:63:30:41:CB:45:44:B7:CD:75:76:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/323830343a376464383a633030303a3a2f33352d3335203d3e20323731353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7dd8:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         7b:36:7a:27:70:dc:a9:72:6e:0d:c3:09:90:44:91:cb:b2:b0:
         40:7d:45:d0:24:e6:88:cc:dc:77:00:25:f3:80:fa:5c:06:a9:
         7c:16:05:6a:1d:a9:dc:a1:b9:d1:30:23:ff:c9:21:23:21:90:
         4f:26:d8:66:c1:79:fc:73:39:82:26:02:b0:0a:76:30:8f:b9:
         2c:a6:54:55:7e:d2:8e:f0:3a:5d:37:d1:d3:b2:bb:a1:8a:bd:
         f9:c5:d1:06:07:70:d8:f0:04:25:b8:30:0b:73:e8:9e:f3:4d:
         93:7c:23:d0:02:11:6a:3c:d8:60:57:9a:84:b1:79:e2:8b:5e:
         52:49:fe:7a:23:1b:ae:6f:30:15:37:6b:f8:6f:fb:cb:14:1c:
         fb:4f:2a:f5:68:e8:30:03:b8:cf:2c:71:5a:15:d3:1d:0c:dc:
         10:79:14:0e:60:89:1c:61:e8:0e:79:4f:f6:60:e6:b6:6d:82:
         5c:9e:a9:ee:3f:6c:e5:d4:f7:7c:0d:3b:59:cb:81:f3:a8:1e:
         ed:a9:8a:e5:32:0e:2e:35:26:a3:1e:dd:1a:5f:5e:83:9d:bd:
         6a:5e:06:66:95:64:ef:c7:92:83:04:87:71:91:8b:cc:2a:eb:
         a1:3f:3c:0c:c7:e3:f9:c8:1c:b7:01:8c:de:38:22:2f:25:62:
         c2:32:34:86
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUcDHBVczmEPKVHFwgNFT1ymtGTtQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYzM0JCNjVBNTAxQjFBMDk1NjMzMDQxQ0I0NTQ0QjdD
RDc1NzY0QTAeFw0yNTAzMjEwMjU1MDBaFw0yNjAzMjAwMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUY4RDNGQ0VDMDk0NEE2QzI3
OUVFRjA2NTY3RkMyQjZDNUEyRkJBMDcyQjkwNkExNUU5RDc2Mjc2NEMyMzI1REM3
N0QyNTQ2NjQ0NUQ3ODI2Mjc1REVDRDMyQzI3M0U4RDE2NEVFQjNBMTRBRTc5NzQz
QkI4QUEwODk2RjBEMEI4QTYyOTE1Mjc0ODk2Mjg3Nzk5QzgzMzMxNzBCMkEzRTUw
NDMzQkE2QzhENjBEMTk5RkUwNTY1NkYwQUExNDdBMkQzQzk4MTJFREQzQTdENDUz
QjZFMjdEMDNFQUYwQjQwMkQzMjE1NzUwNkVFRjFCNTVDODg2NkVGNERGNDM0QzNC
Q0M0ODQxRDhDQjU1MUM5MTM0MzI4NjkxMEJBQjU3N0ZDMUY4MzAyOTEyQ0M1MDgz
NDAyMTZDMjA4MjY0QzI1MzUyMkIzMUUyNUJENDEwMTk5N0RFNzE0Nzg1MDk1Qzg3
NTYxNDBDNEE5NzhFN0MwM0Q3MUFBOTk2MTdEOTMzMEYzNzc4MkIxMkU4NzM4QzBF
MTQ1Nzg2NzYyMDdEOUJCNDA5NTQ2QkZENkU3RTExOEM5RTc1NzEwRjZBMTJEQ0My
NjdDRTc2ODE3M0RFOTA4MzJBQTU0MzJCMTA4N0IxOENCN0VBREE4RDZDQjZGRkYy
NUI1NDA5MzY3RDA4OUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAr40/zsCUSmwnnu8GVn/CtsWi+6ByuQahXp12J2TCMl3HfSVGZEXX
gmJ13s0ywnPo0WTus6FK55dDu4qgiW8NC4pikVJ0iWKHeZyDMxcLKj5QQzumyNYN
GZ/gVlbwqhR6LTyYEu3Tp9RTtuJ9A+rwtALTIVdQbu8bVciGbvTfQ0w7zEhB2MtV
HJE0MoaRC6tXf8H4MCkSzFCDQCFsIIJkwlNSKzHiW9QQGZfecUeFCVyHVhQMSpeO
fAPXGqmWF9kzDzd4KxLoc4wOFFeGdiB9m7QJVGv9bn4RjJ51cQ9qEtzCZ852gXPe
kIMqpUMrEIexjLfq2o1stv/yW1QJNn0InQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FHqGwzILojBLZfBShqH5Uz2bOzWfMB8GA1UdIwQYMBaAFF8zu2WlAbGglWMwQctF
RLfNdXZKMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NkZkx4QmdVeXR3QTd5
dHF0a3RGQjdIcWs3M2pYc3BXd1lFa1JXN213dVZhLzEvNUYzM0JCNjVBNTAxQjFB
MDk1NjMzMDQxQ0I0NTQ0QjdDRDc1NzY0QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RjMzQkI2NUE1MDFCMUEwOTU2MzMwNDFDQjQ1NDRCN0NENzU3
NjRBLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DZGZMeEJnVXl0d0E3eXRxdGt0
RkI3SHFrNzNqWHNwV3dZRWtSVzdtd3VWYS8xLzMyMzgzMDM0M2EzNzY0NjQzODNh
NjMzMDMwMzAzYTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMjM3MzEzNTM4MzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgUoBH3YwDANBgkqhkiG9w0BAQsFAAOCAQEAezZ6J3DcqXJuDcMJkESR
y7KwQH1F0CTmiMzcdwAl84D6XAapfBYFah2p3KG50TAj/8khIyGQTybYZsF5/HM5
giYCsAp2MI+5LKZUVX7SjvA6XTfR07K7oYq9+cXRBgdw2PAEJbgwC3PonvNNk3wj
0AIRajzYYFeahLF54oteUkn+eiMbrm8wFTdr+G/7yxQc+08q9WjoMAO4zyxxWhXT
HQzcEHkUDmCJHGHoDnlP9mDmtm2CXJ6p7j9s5dT3fA07WcuB86ge7amK5TIOLjUm
ox7dGl9eg529al4GZpVk78eSgwSHcZGLzCrroT88DMfj+cgctwGM3jgiLyViwjI0
hg==
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:14:19 2025 by rpki-client