Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/323830343a363063633a383030303a3a2f33332d3333203d3e20323639313932.roa
File:                     323830343a363063633a383030303a3a2f33332d3333203d3e20323639313932.roa (raw, json)
Hash identifier:          zeD6lwrVyJKe6SLDV683PErDsvg5/fN0Gc62TgmROzc=
Subject key identifier:   AA:63:37:39:3A:57:F3:16:92:AD:F2:D9:02:94:70:BB:C0:BA:F4:42
Certificate issuer:       /CN=19DB591368FFC9C033D175BED1136000D4C84821
Certificate serial:       0251402618566DAFE46A404B6C8BDC9548A5FA77
Authority key identifier: 19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/323830343a363063633a383030303a3a2f33332d3333203d3e20323639313932.roa
Signing time:             Wed 05 Mar 2025 19:00:08 +0000
ROA not before:           Wed 05 Mar 2025 18:55:08 +0000
ROA not after:            Wed 04 Mar 2026 19:00:08 +0000
asID:                     269192
IP address blocks:        2804:60cc:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl
                          rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 07:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:51:40:26:18:56:6d:af:e4:6a:40:4b:6c:8b:dc:95:48:a5:fa:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19DB591368FFC9C033D175BED1136000D4C84821
        Validity
            Not Before: Mar  5 18:55:08 2025 GMT
            Not After : Mar  4 19:00:08 2026 GMT
        Subject: CN=AA6337393A57F31692ADF2D9029470BBC0BAF442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:80:70:d5:5c:89:db:a9:11:a7:09:ed:a4:54:
                    8b:f1:ab:57:2d:fd:56:f7:a1:01:eb:56:1a:8b:6c:
                    a6:fe:e0:92:85:b8:eb:d3:b0:d1:78:74:f7:1c:b9:
                    e8:ed:8c:1e:fb:f3:ff:ef:20:15:80:a9:02:6b:be:
                    28:c5:f7:a2:28:a2:a3:7f:d9:dc:1f:ac:6d:49:2b:
                    28:52:0b:ea:63:66:0e:62:90:1f:b6:e8:f8:f7:dc:
                    ad:95:f7:05:d2:e2:38:ea:b3:be:ca:dc:86:17:d3:
                    87:45:91:31:f8:0f:f8:70:85:e7:0c:ea:fa:1d:32:
                    c5:94:37:68:5b:db:b0:23:61:c0:e9:dd:87:6b:40:
                    82:1c:51:36:72:75:d5:65:b8:25:31:85:a4:8b:6c:
                    80:de:09:7f:f8:fd:e2:07:bf:ff:99:0d:89:8a:31:
                    5f:58:b0:69:9c:b3:c1:15:6c:4b:97:e4:cd:0e:fe:
                    8b:15:35:e8:e7:f1:16:8f:f7:f1:5f:e2:52:59:c1:
                    ff:05:c9:60:7b:2b:0e:c0:f1:c1:da:4c:d7:3e:14:
                    1c:c6:cc:c0:65:fb:a2:b8:d8:96:ac:f9:dc:1c:d0:
                    18:5e:2e:aa:aa:21:8b:34:54:73:3c:6f:ec:9c:5c:
                    0b:62:d1:df:84:2f:30:c3:09:75:6d:56:f2:50:70:
                    12:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:63:37:39:3A:57:F3:16:92:AD:F2:D9:02:94:70:BB:C0:BA:F4:42
            X509v3 Authority Key Identifier:
                keyid:19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/323830343a363063633a383030303a3a2f33332d3333203d3e20323639313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60cc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         55:67:dc:33:f2:01:47:45:c8:de:1e:e1:9a:09:2b:bc:17:cd:
         2f:9b:bb:04:f0:8e:73:a4:31:e0:46:52:8e:21:ba:30:f1:19:
         a7:93:aa:e0:16:3c:6f:bb:5e:78:f4:ac:9e:fc:9b:4f:0c:4a:
         78:da:bf:32:55:09:21:e2:e3:6b:3b:71:04:81:b7:c6:62:86:
         1d:9a:ad:69:26:8a:69:ce:7d:74:67:fa:23:93:99:28:18:73:
         28:36:ed:4d:8f:ed:62:a9:2f:6a:c7:b3:00:10:77:69:3a:4b:
         fc:f5:db:75:fa:39:7d:92:ae:bf:84:60:ec:96:a2:11:32:7c:
         c0:e1:fe:55:68:8b:7a:c7:2c:14:e7:ec:6e:a4:3a:da:10:8f:
         f0:0d:d4:f0:03:86:b7:18:9c:91:d8:44:8b:8f:80:6b:8e:eb:
         19:dd:9e:d6:f3:7e:57:61:21:0e:76:a2:e1:c5:6d:d3:71:1b:
         72:6f:15:82:c6:cb:d9:1f:88:a3:95:5a:50:81:5b:e5:83:e0:
         da:29:81:e9:59:8d:65:38:a3:16:9a:64:bc:0f:04:f6:11:1e:
         93:e5:ca:38:5e:4a:6f:20:a0:9e:b8:12:de:d0:9e:57:cd:9f:
         d0:e4:49:a9:84:a4:ec:bd:33:6b:a7:73:79:47:83:09:86:63:
         5d:f2:4e:52
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUAlFAJhhWba/kakBLbIvclUil+ncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlEQjU5MTM2OEZGQzlDMDMzRDE3NUJFRDExMzYwMDBE
NEM4NDgyMTAeFw0yNTAzMDUxODU1MDhaFw0yNjAzMDQxOTAwMDhaMDMxMTAvBgNV
BAMTKEFBNjMzNzM5M0E1N0YzMTY5MkFERjJEOTAyOTQ3MEJCQzBCQUY0NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgHDVXInbqRGnCe2kVIvxq1ct
/Vb3oQHrVhqLbKb+4JKFuOvTsNF4dPccuejtjB778//vIBWAqQJrvijF96IooqN/
2dwfrG1JKyhSC+pjZg5ikB+26Pj33K2V9wXS4jjqs77K3IYX04dFkTH4D/hwhecM
6vodMsWUN2hb27AjYcDp3YdrQIIcUTZyddVluCUxhaSLbIDeCX/4/eIHv/+ZDYmK
MV9YsGmcs8EVbEuX5M0O/osVNejn8RaP9/Ff4lJZwf8FyWB7Kw7A8cHaTNc+FBzG
zMBl+6K42Jas+dwc0BheLqqqIYs0VHM8b+ycXAti0d+ELzDDCXVtVvJQcBKXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUqmM3OTpX8xaSrfLZApRwu8C69EIwHwYDVR0j
BBgwFoAUGdtZE2j/ycAz0XW+0RNgANTISCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGpZcnE4cmFuMWJSREVvUGM5aXZVZlM5NnZxb2R3WnpoMmNGSk5KeEpt
a3MvMS8xOURCNTkxMzY4RkZDOUMwMzNEMTc1QkVEMTEzNjAwMEQ0Qzg0ODIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5REI1OTEzNjhGRkM5QzAz
M0QxNzVCRUQxMTM2MDAwRDRDODQ4MjEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RqWXJxOHJhbjFiUkRFb1BjOWl2VWZTOTZ2cW9kd1p6aDJjRkpOSnhKbWtzLzEv
MzIzODMwMzQzYTM2MzA2MzYzM2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzOTMxMzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEYMyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBVZ9wz8gFHRcjeHuGaCSu8F80vm7sE8I5zpDHgRlKOIbow8Rmnk6rgFjxv
u1549Kye/JtPDEp42r8yVQkh4uNrO3EEgbfGYoYdmq1pJoppzn10Z/ojk5koGHMo
Nu1Nj+1iqS9qx7MAEHdpOkv89dt1+jl9kq6/hGDslqIRMnzA4f5VaIt6xywU5+xu
pDraEI/wDdTwA4a3GJyR2ESLj4BrjusZ3Z7W835XYSEOdqLhxW3TcRtybxWCxsvZ
H4ijlVpQgVvlg+DaKYHpWY1lOKMWmmS8DwT2ER6T5co4XkpvIKCeuBLe0J5XzZ/Q
5EmphKTsvTNrp3N5R4MJhmNd8k5S
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:43:24 2025 by rpki-client