Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a3a2f33322d3332203d3e203533303836.roa
File:                     323830343a346665343a3a2f33322d3332203d3e203533303836.roa (raw, json)
Hash identifier:          bT34t8WV+CMTIbvvIerQ63bMxIWBViw9ieCeyVZS/5c=
Subject key identifier:   80:58:9B:88:20:21:C9:9C:E0:21:AC:93:F3:46:88:A5:D4:AA:E7:96
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       5341D5D572F13C89063BCE1829A11A39272273DC
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a3a2f33322d3332203d3e203533303836.roa
Signing time:             Thu 06 Mar 2025 08:45:20 +0000
ROA not before:           Thu 06 Mar 2025 08:40:20 +0000
ROA not after:            Thu 05 Mar 2026 08:45:20 +0000
asID:                     53086
IP address blocks:        2804:4fe4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 17:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:41:d5:d5:72:f1:3c:89:06:3b:ce:18:29:a1:1a:39:27:22:73:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Mar  6 08:40:20 2025 GMT
            Not After : Mar  5 08:45:20 2026 GMT
        Subject: CN=80589B882021C99CE021AC93F34688A5D4AAE796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:fc:13:e9:6f:b9:6d:71:aa:a1:29:7b:74:
                    69:0f:58:62:46:bc:b4:ea:42:58:cc:6c:c9:cf:f5:
                    47:ef:88:62:c6:a9:ca:8b:87:43:20:c8:f7:ee:7c:
                    ea:b6:d6:82:fb:d1:8d:51:82:a2:4e:19:88:9c:de:
                    53:04:ac:90:5e:e2:69:f2:e7:90:00:72:05:30:79:
                    d1:07:11:ee:09:df:93:eb:53:60:5f:93:a8:42:bd:
                    a5:23:e6:3a:a8:93:34:b4:cb:88:18:a8:da:03:a1:
                    f1:13:f3:5d:25:84:24:e3:1f:28:3d:29:02:eb:29:
                    80:56:6c:68:5f:e4:b0:cc:49:66:44:14:3f:30:72:
                    be:09:ce:66:0f:40:40:88:3f:0c:13:74:99:c4:7d:
                    cb:d3:cf:23:8a:6c:ca:06:e4:5c:1f:c5:69:29:91:
                    d5:aa:de:ba:d6:38:21:d9:33:6f:a3:6d:d2:21:33:
                    5f:c9:55:6d:bd:5d:6f:06:27:24:93:31:39:97:d9:
                    35:91:1c:a4:44:e8:06:5f:f6:68:7d:6a:9b:79:38:
                    f1:cd:eb:47:52:3b:c2:9d:a8:2c:f6:5a:fc:e6:98:
                    45:c5:8c:90:f4:73:23:cc:4a:d1:90:65:2c:74:3e:
                    a9:90:82:9c:e1:a7:91:30:78:9c:5d:6e:91:b0:ec:
                    8e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:58:9B:88:20:21:C9:9C:E0:21:AC:93:F3:46:88:A5:D4:AA:E7:96
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a3a2f33322d3332203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:fe:c2:05:32:2c:e5:2e:2d:19:8a:b9:6a:a5:72:fa:1a:11:
         f0:7d:06:96:80:38:e6:d1:af:24:c8:fd:2d:6b:05:19:f8:a0:
         4d:f9:2b:6c:98:23:eb:44:b2:66:39:e4:71:c8:b5:66:f7:df:
         9c:4c:e5:e6:16:0f:96:77:64:ff:4c:db:89:12:a9:e3:89:70:
         f1:b9:5f:dc:09:c9:13:13:78:0b:9d:bf:75:30:68:f4:56:8c:
         48:be:26:59:59:0b:76:6b:6c:ca:e1:3e:4c:2c:e2:3f:b6:d5:
         1f:63:8f:88:eb:88:84:bb:18:4b:5a:ca:7f:f9:30:d6:68:be:
         de:9d:24:08:06:aa:1e:e6:57:88:80:c4:52:29:07:35:39:e5:
         fb:41:08:b9:c4:16:94:d3:3d:41:c9:73:52:bb:7b:50:28:f1:
         93:b3:1d:a1:ea:2c:23:6f:2a:e6:9a:ef:85:09:5b:19:62:62:
         8f:8b:9b:60:01:9f:ff:a4:dc:b6:6c:08:7a:dd:f4:05:c1:1d:
         97:88:88:8f:02:da:67:e7:df:74:5d:d7:b0:8d:ac:96:89:98:
         e4:fa:34:7c:38:25:1a:da:7c:a2:21:42:6e:fe:9f:c9:16:ec:
         c8:20:b2:c9:fd:37:a4:95:49:88:0e:4d:ed:0a:39:da:f9:ab:
         17:e9:4b:a0
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUU0HV1XLxPIkGO84YKaEaOScic9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM0QjY2RkE2ODc4RURDRjg2NkNGMDg2MzRCMTY4MDMw
MUYxNDI5NTAeFw0yNTAzMDYwODQwMjBaFw0yNjAzMDUwODQ1MjBaMDMxMTAvBgNV
BAMTKDgwNTg5Qjg4MjAyMUM5OUNFMDIxQUM5M0YzNDY4OEE1RDRBQUU3OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9BPwT6W+5bXGqoSl7dGkPWGJG
vLTqQljMbMnP9UfviGLGqcqLh0MgyPfufOq21oL70Y1RgqJOGYic3lMErJBe4mny
55AAcgUwedEHEe4J35PrU2Bfk6hCvaUj5jqokzS0y4gYqNoDofET810lhCTjHyg9
KQLrKYBWbGhf5LDMSWZEFD8wcr4JzmYPQECIPwwTdJnEfcvTzyOKbMoG5FwfxWkp
kdWq3rrWOCHZM2+jbdIhM1/JVW29XW8GJySTMTmX2TWRHKRE6AZf9mh9apt5OPHN
60dSO8KdqCz2WvzmmEXFjJD0cyPMStGQZSx0PqmQgpzhp5EweJxdbpGw7I5fAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUgFibiCAhyZzgIayT80aIpdSq55YwHwYDVR0j
BBgwFoAUc0tm+mh47c+GbPCGNLFoAwHxQpUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJkWEVrRGREQW9KQllmUUNXcWVIelRZNW5oYlJjZlZFaXlKa3lqelJC
Y3IvMS83MzRCNjZGQTY4NzhFRENGODY2Q0YwODYzNEIxNjgwMzAxRjE0Mjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczNEI2NkZBNjg3OEVEQ0Y4
NjZDRjA4NjM0QjE2ODAzMDFGMTQyOTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyZFhFa0RkREFvSkJZZlFDV3FlSHpUWTVuaGJSY2ZWRWl5Smt5anpSQmNyLzEv
MzIzODMwMzQzYTM0NjY2NTM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMzMw
MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgET+QwDQYJKoZIhvcNAQELBQADggEBAJ/+wgUyLOUu
LRmKuWqlcvoaEfB9BpaAOObRryTI/S1rBRn4oE35K2yYI+tEsmY55HHItWb335xM
5eYWD5Z3ZP9M24kSqeOJcPG5X9wJyRMTeAudv3UwaPRWjEi+JllZC3ZrbMrhPkws
4j+21R9jj4jriIS7GEtayn/5MNZovt6dJAgGqh7mV4iAxFIpBzU55ftBCLnEFpTT
PUHJc1K7e1Ao8ZOzHaHqLCNvKuaa74UJWxliYo+Lm2ABn/+k3LZsCHrd9AXBHZeI
iI8C2mfn33Rd17CNrJaJmOT6NHw4JRrafKIhQm7+n8kW7Mggssn9N6SVSYgOTe0K
Odr5qxfpS6A=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:04:54 2025 by rpki-client