Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa
File:                     323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa (raw, json)
Hash identifier:          RerjbS9xKc0/CK/Y5n8XplDwJVGGM77Bh0aaB454fY4=
Subject key identifier:   9A:C2:A1:DF:87:47:9B:D2:47:8A:80:52:E3:54:BE:88:1F:D9:6E:1A
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       693181BCD8927AC6E1A8F8E7FB22829A97B31B3B
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa
Signing time:             Thu 06 Mar 2025 07:44:37 +0000
ROA not before:           Thu 06 Mar 2025 07:39:37 +0000
ROA not after:            Thu 05 Mar 2026 07:44:37 +0000
asID:                     270910
IP address blocks:        2804:735c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
                          rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 15:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:31:81:bc:d8:92:7a:c6:e1:a8:f8:e7:fb:22:82:9a:97:b3:1b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Mar  6 07:39:37 2025 GMT
            Not After : Mar  5 07:44:37 2026 GMT
        Subject: CN=9AC2A1DF87479BD2478A8052E354BE881FD96E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f8:31:2f:dc:bb:fb:39:d1:fa:50:c3:48:ec:
                    a2:38:a6:fd:ae:83:f9:2e:4a:0c:5b:84:f4:ce:2c:
                    c4:b2:5f:b7:1d:df:34:6b:b1:58:19:04:0f:b7:28:
                    58:a6:c7:2a:ba:5c:30:05:b8:37:09:a5:8b:85:5b:
                    f2:92:06:f2:60:80:5c:62:22:5a:2d:62:9a:d7:42:
                    6b:65:d2:f6:0a:92:80:a6:9b:36:64:b5:50:66:6c:
                    e0:01:0c:bd:0d:c6:f9:c9:86:2d:28:4b:5c:ee:1d:
                    25:18:ee:6c:7d:b3:5e:bf:75:01:8a:b5:b6:9e:b8:
                    54:78:67:13:f0:1b:02:df:ca:7b:b8:09:18:2a:60:
                    60:ea:ae:73:fd:24:33:2f:43:c5:1f:60:a9:9e:4b:
                    8f:9d:4c:29:e9:16:ec:43:61:8e:72:fd:f0:40:b6:
                    e8:d0:41:90:2b:65:62:9f:6c:a9:d3:20:5b:2c:0c:
                    44:03:aa:28:31:e7:a7:ff:8d:cc:72:07:f0:3f:57:
                    a8:e0:45:19:25:0c:38:90:be:e1:44:6b:5e:56:b1:
                    91:cb:e6:52:1d:58:4d:0d:ab:0e:9c:d7:34:1e:87:
                    1c:d8:57:06:59:d3:55:50:89:3a:7b:17:23:ea:51:
                    07:54:1f:c3:4c:44:fc:0c:98:7c:4d:99:09:fc:2c:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C2:A1:DF:87:47:9B:D2:47:8A:80:52:E3:54:BE:88:1F:D9:6E:1A
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a383030303a3a2f33332d3333203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:735c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         90:88:db:22:3f:aa:9c:ad:aa:64:cd:e1:1d:93:b5:26:6e:7e:
         51:20:7e:a3:95:ea:b2:61:2b:10:24:5c:37:fa:e2:05:18:b2:
         b6:75:3d:da:b0:b6:9e:48:83:5e:d1:60:28:d5:d9:eb:8d:44:
         04:f4:5d:3c:10:bd:78:2c:0e:bc:bc:cc:f2:26:c1:20:be:17:
         fd:6e:0f:59:dd:30:2c:33:70:69:76:db:ed:39:4f:0c:60:db:
         11:9a:d5:1c:76:8a:5d:f2:fd:3c:16:99:e5:8b:6c:e4:7e:15:
         91:68:31:be:d3:cc:ce:dd:cc:9f:e4:48:e9:92:fe:23:a5:70:
         c4:16:fa:09:62:01:88:cf:0d:1e:72:4b:68:5d:eb:48:67:0b:
         1d:63:b5:88:c4:2d:ce:bb:8e:29:a6:06:cc:dc:24:35:2f:70:
         39:7e:71:bf:f7:40:c1:b9:fd:3f:c6:0f:fd:90:bf:bc:85:81:
         94:ea:43:0b:6b:f2:39:28:c3:fb:b5:b2:0d:46:d1:5d:6a:85:
         06:cf:f2:85:c4:ca:42:6d:3b:1e:ea:18:27:a0:d2:c9:2e:6b:
         22:b4:05:b5:40:5f:f5:71:71:db:9f:80:88:4d:33:b1:f5:fa:
         e2:48:95:23:c9:10:da:a3:20:ef:bf:22:08:c4:f5:13:f1:1b:
         90:d5:90:5e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUaTGBvNiSesbhqPjn+yKCmpezGzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCNjZENTE4RjZGMUVDNDQwODk2RURFQTFDNkY5RTY5
NENDM0I2NjAeFw0yNTAzMDYwNzM5MzdaFw0yNjAzMDUwNzQ0MzdaMDMxMTAvBgNV
BAMTKDlBQzJBMURGODc0NzlCRDI0NzhBODA1MkUzNTRCRTg4MUZEOTZFMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+DEv3Lv7OdH6UMNI7KI4pv2u
g/kuSgxbhPTOLMSyX7cd3zRrsVgZBA+3KFimxyq6XDAFuDcJpYuFW/KSBvJggFxi
IlotYprXQmtl0vYKkoCmmzZktVBmbOABDL0NxvnJhi0oS1zuHSUY7mx9s16/dQGK
tbaeuFR4ZxPwGwLfynu4CRgqYGDqrnP9JDMvQ8UfYKmeS4+dTCnpFuxDYY5y/fBA
tujQQZArZWKfbKnTIFssDEQDqigx56f/jcxyB/A/V6jgRRklDDiQvuFEa15WsZHL
5lIdWE0Nqw6c1zQehxzYVwZZ01VQiTp7FyPqUQdUH8NMRPwMmHxNmQn8LAufAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUmsKh34dHm9JHioBS41S+iB/ZbhowHwYDVR0j
BBgwFoAUIbZtUY9vHsRAiW7eocb55pTMO2YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNxRTVIc0NxOEI1SGp0Smc5MXBjeFFZRVRyUnlIUXBCa1VHUmNEaGRU
Q2YvMS8yMUI2NkQ1MThGNkYxRUM0NDA4OTZFREVBMUM2RjlFNjk0Q0MzQjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxQjY2RDUxOEY2RjFFQzQ0
MDg5NkVERUExQzZGOUU2OTRDQzNCNjYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzcUU1SHNDcThCNUhqdEpnOTFwY3hRWUVUclJ5SFFwQmtVR1JjRGhkVENmLzEv
MzIzODMwMzQzYTM3MzMzNTYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczMDM5MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEc1yAMA0GCSqGSIb3DQEBCwUA
A4IBAQCQiNsiP6qcrapkzeEdk7Umbn5RIH6jleqyYSsQJFw3+uIFGLK2dT3asLae
SINe0WAo1dnrjUQE9F08EL14LA68vMzyJsEgvhf9bg9Z3TAsM3BpdtvtOU8MYNsR
mtUcdopd8v08Fpnli2zkfhWRaDG+08zO3cyf5Ejpkv4jpXDEFvoJYgGIzw0eckto
XetIZwsdY7WIxC3Ou44ppgbM3CQ1L3A5fnG/90DBuf0/xg/9kL+8hYGU6kMLa/I5
KMP7tbINRtFdaoUGz/KFxMpCbTse6hgnoNLJLmsitAW1QF/1cXHbn4CITTOx9fri
SJUjyRDaoyDvvyIIxPUT8RuQ1ZBe
-----END CERTIFICATE-----
Generated at Wed Apr 23 06:43:08 2025 by rpki-client