Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a383030303a3a2f33332d3333203d3e203533303836.roa
File:                     323830343a346665343a383030303a3a2f33332d3333203d3e203533303836.roa (raw, json)
Hash identifier:          DSmIY1aA4sW/QIf6jTNrE2hSMb1s8t1iJ9p22ykNhog=
Subject key identifier:   1D:06:08:39:84:31:33:C9:64:84:99:E9:07:30:84:8F:20:0E:E1:F3
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       3576537455DB2CE742EA03CB62A3DC3242140A90
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a383030303a3a2f33332d3333203d3e203533303836.roa
Signing time:             Thu 06 Mar 2025 08:45:22 +0000
ROA not before:           Thu 06 Mar 2025 08:40:22 +0000
ROA not after:            Thu 05 Mar 2026 08:45:22 +0000
asID:                     53086
IP address blocks:        2804:4fe4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 17:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:76:53:74:55:db:2c:e7:42:ea:03:cb:62:a3:dc:32:42:14:0a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Mar  6 08:40:22 2025 GMT
            Not After : Mar  5 08:45:22 2026 GMT
        Subject: CN=1D060839843133C9648499E90730848F200EE1F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:ab:5d:ed:2a:e1:cf:81:bc:d9:de:a8:c0:
                    15:79:90:6e:72:0e:f6:89:a9:18:96:e5:ad:2b:cc:
                    e8:24:2e:e6:de:94:da:2e:8a:ec:97:d0:ae:56:86:
                    65:2e:50:45:89:96:2c:a8:76:15:a8:1a:a8:5f:4a:
                    bc:fc:0e:29:5d:3b:4e:a3:d3:99:21:f8:0f:ec:ed:
                    50:fd:64:e5:b7:5f:33:36:6b:9c:c9:d2:6b:08:09:
                    9d:4a:2f:b2:0e:ba:d7:9b:ef:2a:67:ae:d4:8a:49:
                    5e:95:3f:25:65:81:4e:50:cb:cf:33:a1:8f:05:9c:
                    8c:67:9e:7f:57:3d:c2:46:8d:e7:15:df:b2:49:86:
                    60:bb:fe:62:20:99:6a:b2:83:a1:77:8d:16:0e:ab:
                    22:a2:b3:08:3b:85:54:dd:b1:fa:7f:f1:63:6d:18:
                    16:45:24:03:0a:05:61:bd:96:88:bd:39:8e:c4:92:
                    34:30:d3:51:ec:a0:7e:73:1d:c3:60:04:c5:62:9e:
                    3c:00:9a:4c:c1:51:f6:93:b3:40:9a:e0:c4:a3:a5:
                    49:39:d1:1f:53:79:f1:09:91:37:c0:99:66:4f:b7:
                    f7:4f:d5:db:21:f9:8e:d1:16:9e:40:93:76:d2:38:
                    a5:d6:1f:a5:74:4d:45:e2:4f:26:cb:9c:ea:2e:22:
                    7a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:06:08:39:84:31:33:C9:64:84:99:E9:07:30:84:8F:20:0E:E1:F3
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a383030303a3a2f33332d3333203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a2:40:83:3d:00:39:f8:62:68:9c:93:98:c8:ad:f3:a2:c7:77:
         dd:cf:e1:f7:14:ba:4b:70:b6:6d:e8:eb:8c:7c:bf:c3:8b:3e:
         9b:bc:0b:11:f4:16:59:29:ef:0a:29:25:e8:1a:db:e4:aa:da:
         69:98:79:97:ea:33:b0:77:87:69:c3:b0:12:2c:df:a6:4f:14:
         18:e3:c6:b7:99:f2:32:7f:c0:54:af:58:35:79:ef:dc:e8:c4:
         b8:0a:0f:7c:c0:80:b2:67:2c:4c:8f:21:08:36:54:03:7a:2d:
         74:84:86:41:96:d3:26:14:0c:4d:29:63:e0:f4:d9:1e:33:d5:
         eb:98:ad:9d:48:b8:69:de:4e:9a:c1:d7:6d:b1:57:de:c6:55:
         b4:b0:17:89:21:61:f2:cc:59:96:f5:e4:d2:4a:ba:94:1f:ac:
         43:af:da:f4:f4:aa:66:01:da:75:8f:cb:61:0d:c6:14:7e:57:
         e6:9b:5b:cb:e8:ba:9d:69:52:8e:b7:bd:b1:a0:fd:77:a6:b4:
         b2:7d:5d:92:7c:69:0b:e1:30:29:ca:81:80:f1:af:ed:61:f7:
         6b:5e:a7:f0:92:28:6a:53:a1:bd:11:2d:70:50:f0:b2:43:29:
         35:81:54:6e:8f:06:9c:e4:04:30:33:7b:bf:51:7f:46:38:d1:
         19:41:a8:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUNXZTdFXbLOdC6gPLYqPcMkIUCpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM0QjY2RkE2ODc4RURDRjg2NkNGMDg2MzRCMTY4MDMw
MUYxNDI5NTAeFw0yNTAzMDYwODQwMjJaFw0yNjAzMDUwODQ1MjJaMDMxMTAvBgNV
BAMTKDFEMDYwODM5ODQzMTMzQzk2NDg0OTlFOTA3MzA4NDhGMjAwRUUxRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTn6td7Srhz4G82d6owBV5kG5y
DvaJqRiW5a0rzOgkLubelNouiuyX0K5WhmUuUEWJliyodhWoGqhfSrz8DildO06j
05kh+A/s7VD9ZOW3XzM2a5zJ0msICZ1KL7IOuteb7ypnrtSKSV6VPyVlgU5Qy88z
oY8FnIxnnn9XPcJGjecV37JJhmC7/mIgmWqyg6F3jRYOqyKiswg7hVTdsfp/8WNt
GBZFJAMKBWG9loi9OY7EkjQw01HsoH5zHcNgBMVinjwAmkzBUfaTs0Ca4MSjpUk5
0R9TefEJkTfAmWZPt/dP1dsh+Y7RFp5Ak3bSOKXWH6V0TUXiTybLnOouInrpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUHQYIOYQxM8lkhJnpBzCEjyAO4fMwHwYDVR0j
BBgwFoAUc0tm+mh47c+GbPCGNLFoAwHxQpUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJkWEVrRGREQW9KQllmUUNXcWVIelRZNW5oYlJjZlZFaXlKa3lqelJC
Y3IvMS83MzRCNjZGQTY4NzhFRENGODY2Q0YwODYzNEIxNjgwMzAxRjE0Mjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczNEI2NkZBNjg3OEVEQ0Y4
NjZDRjA4NjM0QjE2ODAzMDFGMTQyOTUuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyZFhFa0RkREFvSkJZZlFDV3FlSHpUWTVuaGJSY2ZWRWl5Smt5anpSQmNyLzEv
MzIzODMwMzQzYTM0NjY2NTM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDM1MzMzMDM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgcoBE/kgDANBgkqhkiG9w0BAQsFAAOC
AQEAokCDPQA5+GJonJOYyK3zosd33c/h9xS6S3C2bejrjHy/w4s+m7wLEfQWWSnv
Cikl6Brb5KraaZh5l+ozsHeHacOwEizfpk8UGOPGt5nyMn/AVK9YNXnv3OjEuAoP
fMCAsmcsTI8hCDZUA3otdISGQZbTJhQMTSlj4PTZHjPV65itnUi4ad5OmsHXbbFX
3sZVtLAXiSFh8sxZlvXk0kq6lB+sQ6/a9PSqZgHadY/LYQ3GFH5X5ptby+i6nWlS
jre9saD9d6a0sn1dknxpC+EwKcqBgPGv7WH3a16n8JIoalOhvREtcFDwskMpNYFU
bo8GnOQEMDN7v1F/RjjRGUGo5w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:58:35 2025 by rpki-client