Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a633030303a3a2f33342d3334203d3e20323730393130.roa
File:                     323830343a373335633a633030303a3a2f33342d3334203d3e20323730393130.roa (raw, json)
Hash identifier:          CtMnGFZDV/ujgIeCVzvWSAqffIskxfhSpWHx90fvF1I=
Subject key identifier:   2F:3C:AB:A4:F2:E8:D9:6B:A5:0E:B5:EC:5E:26:EC:41:F8:AA:05:74
Certificate issuer:       /CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
Certificate serial:       74C7335E4507D3388E40019BBD6C8A127696B417
Authority key identifier: 21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a633030303a3a2f33342d3334203d3e20323730393130.roa
Signing time:             Thu 04 Apr 2024 07:17:27 +0000
ROA not before:           Thu 04 Apr 2024 07:12:27 +0000
ROA not after:            Thu 03 Apr 2025 07:17:27 +0000
asID:                     270910
IP address blocks:        2804:735c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl
                          rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c7:33:5e:45:07:d3:38:8e:40:01:9b:bd:6c:8a:12:76:96:b4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Validity
            Not Before: Apr  4 07:12:27 2024 GMT
            Not After : Apr  3 07:17:27 2025 GMT
        Subject: CN=2F3CABA4F2E8D96BA50EB5EC5E26EC41F8AA0574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:d2:36:65:09:98:74:32:13:63:92:8e:5c:
                    54:0a:cf:96:dd:ae:b3:77:38:06:7f:eb:ae:36:15:
                    af:78:88:b6:4e:8e:df:fc:45:f8:d1:77:87:84:7f:
                    f7:12:eb:24:af:ea:cb:0d:da:09:8a:fd:a8:bd:58:
                    a1:3c:6a:01:ff:12:11:83:4a:27:e9:e8:15:9f:60:
                    af:49:b5:32:d6:55:7f:05:6f:71:3b:b3:33:06:52:
                    dd:8a:2c:af:6a:ef:a3:94:a6:95:b0:28:9c:f0:71:
                    4f:7a:46:d3:f8:03:be:16:38:26:f2:aa:65:4d:c7:
                    04:75:c0:4a:48:4a:ed:d2:c6:88:bd:10:40:0c:f8:
                    03:2e:a2:34:93:f7:6c:b0:32:8a:5c:d6:25:cc:24:
                    94:39:cb:d9:57:25:6f:1d:30:d9:78:df:57:60:79:
                    fc:1d:cf:6f:4b:6d:cc:65:ce:e8:bd:4e:de:5c:5f:
                    51:1c:a4:b4:af:29:af:e4:af:01:49:c4:5a:fc:24:
                    7d:a4:f8:d2:41:38:33:54:26:08:ad:4a:f8:de:ff:
                    69:ff:f2:97:cb:6c:1c:21:45:4c:c8:e8:4d:88:0b:
                    9d:15:09:66:53:dd:9b:16:9d:1c:87:43:40:bd:e3:
                    c8:da:69:6d:6b:73:c0:fd:6b:58:b8:f2:ed:dc:e1:
                    d4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3C:AB:A4:F2:E8:D9:6B:A5:0E:B5:EC:5E:26:EC:41:F8:AA:05:74
            X509v3 Authority Key Identifier:
                keyid:21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/323830343a373335633a633030303a3a2f33342d3334203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:735c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d0:b2:9f:cc:f4:84:98:17:9d:c9:03:2d:a7:1d:af:2c:30:f2:
         32:26:20:ee:ae:f6:10:db:0a:b7:6a:0b:cd:48:af:44:90:ca:
         b8:56:99:f9:c2:13:0e:cc:b9:b5:76:84:3c:d4:03:40:2c:b5:
         8e:f7:5b:11:bd:f6:03:89:1d:0e:94:d8:f7:74:eb:a6:40:0a:
         16:53:00:43:da:26:1b:52:d2:58:a2:14:f4:3f:73:0e:fb:09:
         c5:e5:63:fa:72:d3:86:28:33:a0:4a:26:7d:5c:1f:89:76:32:
         88:69:f3:22:10:22:e0:0c:06:bc:62:2b:b8:bf:5a:e6:08:c1:
         6c:8b:5e:a5:69:57:ee:1b:d5:71:3c:b4:1c:b1:a8:5b:fe:12:
         62:31:42:2b:a0:b5:26:0d:56:fb:43:90:96:0c:dc:a1:6b:2a:
         34:7f:23:94:49:0f:b8:20:29:2d:53:60:bc:ca:6a:c1:12:ef:
         30:f0:d7:9f:36:06:04:e9:c1:3e:27:92:55:fe:91:0d:ea:19:
         b8:ff:4d:16:41:18:6e:a3:b5:08:24:e6:41:1c:1d:68:89:1e:
         8c:c3:11:45:5f:a2:b8:90:6f:75:64:58:b1:d9:cf:80:55:48:
         cc:28:7b:b8:db:87:03:5c:05:8d:e4:af:93:f5:a1:d8:69:b3:
         93:ee:32:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:03 2025 by rpki-client