Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a343030303a3a2f33342d3334203d3e20323730393130.roa
File:                     323830343a373335633a343030303a3a2f33342d3334203d3e20323730393130.roa (raw, json)
Hash identifier:          Fkj1iQ2VdMaOY7MarBtt5NmHE84HEo9cQVt0MFrGW9U=
Subject key identifier:   3D:9D:15:8E:8A:79:46:3C:14:FD:45:DD:72:24:47:36:53:20:52:2B
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       533130F994055E72EC626649032713F98A693536
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a343030303a3a2f33342d3334203d3e20323730393130.roa
Signing time:             Thu 04 Apr 2024 07:17:27 +0000
ROA not before:           Thu 04 Apr 2024 07:12:27 +0000
ROA not after:            Thu 03 Apr 2025 07:17:27 +0000
asID:                     270910
IP address blocks:        2804:735c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
                          rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:31:30:f9:94:05:5e:72:ec:62:66:49:03:27:13:f9:8a:69:35:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Apr  4 07:12:27 2024 GMT
            Not After : Apr  3 07:17:27 2025 GMT
        Subject: CN=3D9D158E8A79463C14FD45DD722447365320522B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1e:ed:9c:2b:1d:4d:68:33:2a:ff:35:f2:04:
                    02:f4:0b:e3:96:1c:94:f9:53:4c:4e:80:2f:a5:a0:
                    07:27:e2:62:ed:17:a4:04:63:70:1a:c7:b0:d7:59:
                    ce:3b:40:e5:d6:94:0f:72:38:98:a6:eb:02:42:ca:
                    80:ed:b6:84:71:94:7a:c2:4b:b7:b7:00:f5:7d:b4:
                    56:e8:d5:90:52:91:f1:6a:08:a6:8e:55:cf:48:30:
                    8b:7c:f5:b6:c4:a1:fc:5c:04:69:1a:61:69:41:04:
                    ee:df:3c:9d:2c:5b:7a:bf:ee:69:13:f3:75:3e:a1:
                    70:ad:27:a6:62:80:07:c9:93:92:e6:b6:fb:a5:c2:
                    c5:df:3f:cb:aa:eb:65:5f:a9:10:21:69:46:ab:11:
                    b6:0b:41:7f:b1:41:c8:d4:9e:4f:63:6c:e7:af:21:
                    40:94:c7:67:ea:9f:68:9b:4c:33:b2:a5:1b:7e:b5:
                    60:a6:f5:49:de:48:3a:f9:77:6d:1e:40:98:d8:43:
                    83:10:08:8c:ad:3c:6d:45:f2:3b:66:94:7a:2d:12:
                    74:47:71:7b:e9:d0:4c:55:ca:b1:cb:8b:12:c7:35:
                    a6:f4:45:91:30:eb:9c:a7:5c:df:c5:84:f0:7e:b9:
                    11:89:4b:ad:e8:07:a4:58:b8:c3:43:ca:0c:ed:8f:
                    62:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9D:15:8E:8A:79:46:3C:14:FD:45:DD:72:24:47:36:53:20:52:2B
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a343030303a3a2f33342d3334203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:735c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         08:51:22:a4:0d:5e:c8:9c:7f:99:32:34:03:1b:bc:0b:fe:dc:
         cb:0c:2b:72:b3:d6:47:4e:52:10:1e:ff:f0:40:0a:72:b7:47:
         db:e1:a9:a2:31:47:ce:98:5b:96:fc:52:37:57:9d:d1:b6:a2:
         42:cc:3f:14:09:f8:62:dc:92:3e:c1:5f:32:29:13:a4:c6:c3:
         c1:d1:1d:47:cc:15:e2:f2:4a:fb:fb:ba:b4:31:e1:df:52:b8:
         37:f6:64:90:51:6e:42:a2:c3:1c:35:73:24:67:69:77:5b:07:
         8b:39:ce:94:9f:1e:71:1c:99:bc:e0:d6:32:7d:8b:56:8a:41:
         05:71:80:3a:a2:dd:1b:21:4d:29:82:9c:10:f8:78:16:4d:3f:
         ad:33:40:31:c3:ec:01:09:4e:a6:9f:98:6a:71:28:3f:4e:4d:
         35:60:7d:dc:6c:30:4f:84:0e:50:74:68:03:1f:05:00:29:54:
         38:6b:48:85:4c:f7:68:5e:c7:f6:15:6e:b1:29:16:37:1b:90:
         a5:e8:dd:9c:e9:52:d5:2b:52:64:8d:6d:7e:d5:ea:aa:d5:b8:
         c3:40:6b:bc:ae:28:1b:07:fa:01:72:3e:2d:b9:ee:69:19:15:
         6b:ee:cb:f7:a4:73:32:6b:0e:16:12:f9:8e:2b:22:96:ed:4c:
         95:50:ff:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:11 2025 by rpki-client