Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a3a2f33342d3334203d3e203533303836.roa
File:                     323830343a346665343a3a2f33342d3334203d3e203533303836.roa (raw, json)
Hash identifier:          KDhvqcBxV9CT1fEqATykuZumuOXdLoY552pkb+9U5Fg=
Subject key identifier:   9A:76:5E:F0:92:A9:42:E6:D9:FE:0A:67:46:60:0A:D8:D2:E0:72:8E
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       12ACA3ED272A4D54545F1EC104689D461ED2BFA5
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a3a2f33342d3334203d3e203533303836.roa
Signing time:             Thu 06 Mar 2025 08:45:21 +0000
ROA not before:           Thu 06 Mar 2025 08:40:21 +0000
ROA not after:            Thu 05 Mar 2026 08:45:21 +0000
asID:                     53086
IP address blocks:        2804:4fe4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 17:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ac:a3:ed:27:2a:4d:54:54:5f:1e:c1:04:68:9d:46:1e:d2:bf:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Mar  6 08:40:21 2025 GMT
            Not After : Mar  5 08:45:21 2026 GMT
        Subject: CN=9A765EF092A942E6D9FE0A6746600AD8D2E0728E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:20:b1:b6:5b:e6:88:86:4e:86:63:17:2d:33:
                    45:79:97:b3:ee:ee:c9:2a:d5:d9:0f:53:8c:38:5a:
                    ca:55:c3:5e:4b:f8:68:89:a9:88:a5:80:a3:35:35:
                    85:14:0a:b8:e8:d8:df:ec:99:4f:6a:46:fc:6d:c8:
                    9e:1d:59:40:ac:2f:ff:87:f4:8e:21:a6:63:e4:1b:
                    c5:34:39:3e:7d:9d:2f:65:32:f3:03:ef:31:8f:6d:
                    32:07:9a:15:f8:9a:92:74:21:6c:2c:51:49:8e:ce:
                    61:5e:5f:45:94:b0:f0:52:33:b4:69:70:3b:9c:33:
                    de:48:3c:b1:f3:28:7f:eb:4b:97:ea:35:8a:aa:c4:
                    61:cc:b1:0f:03:c8:a3:3a:62:1a:c7:5f:17:67:c5:
                    e3:6e:16:54:6b:81:9b:88:86:52:75:61:96:ab:9e:
                    86:88:d5:09:b2:78:a5:05:2a:af:7a:91:da:5a:4f:
                    77:96:c7:7e:08:aa:50:dc:14:7d:23:e3:d9:08:81:
                    ee:16:26:61:0a:69:5d:56:76:31:f0:c4:58:5b:0f:
                    50:e7:30:0c:de:19:61:3a:4c:df:a5:3c:9d:e8:46:
                    59:61:f0:82:2f:06:76:f5:14:e0:ab:3d:64:ff:42:
                    72:20:09:16:75:ce:b7:22:96:0e:26:31:fb:54:6d:
                    f7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:76:5E:F0:92:A9:42:E6:D9:FE:0A:67:46:60:0A:D8:D2:E0:72:8E
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/323830343a346665343a3a2f33342d3334203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe4::/34

    Signature Algorithm: sha256WithRSAEncryption
         96:f3:69:16:31:f8:f5:37:7f:2a:a1:ef:8f:b2:b3:a3:f8:39:
         e2:23:42:58:53:8b:ed:95:28:f4:73:d0:bb:44:f7:96:ae:ed:
         5c:7e:be:d5:c3:82:77:9a:e7:27:42:a3:ed:56:23:e3:f1:36:
         78:bd:c1:7f:e5:5e:19:a3:3c:4e:31:30:7e:85:fb:67:db:9c:
         cf:c0:31:19:bb:39:1e:6a:44:4a:7d:40:ae:98:3d:ee:67:9e:
         6e:c7:74:4b:94:82:e7:d5:5a:bf:e8:64:54:44:53:66:f7:71:
         99:77:a1:a6:fd:9d:65:2b:f9:ee:ad:0c:bd:9f:01:a1:17:27:
         00:c1:9a:e0:ea:34:16:aa:00:45:02:55:ef:60:ba:59:51:25:
         71:81:b2:cf:41:2f:09:d6:19:b4:66:ec:80:92:16:b6:a2:21:
         04:6e:75:32:b3:25:40:e2:52:ac:3b:12:70:e9:ee:d3:74:52:
         d8:31:14:ef:d0:c1:18:ea:77:87:28:af:68:e7:01:bd:4b:f6:
         11:06:bd:c0:57:ee:eb:87:5b:d9:d5:50:a4:21:26:3b:f1:35:
         dc:a2:29:39:87:75:f2:e1:20:2e:06:cf:5e:92:5d:6f:d8:71:
         20:13:cc:74:68:c5:75:a0:26:04:44:c2:7f:6a:5d:1d:ab:86:
         80:b2:f3:e6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEqyj7ScqTVRUXx7BBGidRh7Sv6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM0QjY2RkE2ODc4RURDRjg2NkNGMDg2MzRCMTY4MDMw
MUYxNDI5NTAeFw0yNTAzMDYwODQwMjFaFw0yNjAzMDUwODQ1MjFaMDMxMTAvBgNV
BAMTKDlBNzY1RUYwOTJBOTQyRTZEOUZFMEE2NzQ2NjAwQUQ4RDJFMDcyOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDILG2W+aIhk6GYxctM0V5l7Pu
7skq1dkPU4w4WspVw15L+GiJqYilgKM1NYUUCrjo2N/smU9qRvxtyJ4dWUCsL/+H
9I4hpmPkG8U0OT59nS9lMvMD7zGPbTIHmhX4mpJ0IWwsUUmOzmFeX0WUsPBSM7Rp
cDucM95IPLHzKH/rS5fqNYqqxGHMsQ8DyKM6YhrHXxdnxeNuFlRrgZuIhlJ1YZar
noaI1QmyeKUFKq96kdpaT3eWx34IqlDcFH0j49kIge4WJmEKaV1WdjHwxFhbD1Dn
MAzeGWE6TN+lPJ3oRllh8IIvBnb1FOCrPWT/QnIgCRZ1zrcilg4mMftUbfcZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmnZe8JKpQubZ/gpnRmAK2NLgco4wHwYDVR0j
BBgwFoAUc0tm+mh47c+GbPCGNLFoAwHxQpUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJkWEVrRGREQW9KQllmUUNXcWVIelRZNW5oYlJjZlZFaXlKa3lqelJC
Y3IvMS83MzRCNjZGQTY4NzhFRENGODY2Q0YwODYzNEIxNjgwMzAxRjE0Mjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczNEI2NkZBNjg3OEVEQ0Y4
NjZDRjA4NjM0QjE2ODAzMDFGMTQyOTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyZFhFa0RkREFvSkJZZlFDV3FlSHpUWTVuaGJSY2ZWRWl5Smt5anpSQmNyLzEv
MzIzODMwMzQzYTM0NjY2NTM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzUzMzMw
MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBigET+QAMA0GCSqGSIb3DQEBCwUAA4IBAQCW82kWMfj1
N38qoe+PsrOj+DniI0JYU4vtlSj0c9C7RPeWru1cfr7Vw4J3mucnQqPtViPj8TZ4
vcF/5V4ZozxOMTB+hftn25zPwDEZuzkeakRKfUCumD3uZ55ux3RLlILn1Vq/6GRU
RFNm93GZd6Gm/Z1lK/nurQy9nwGhFycAwZrg6jQWqgBFAlXvYLpZUSVxgbLPQS8J
1hm0ZuyAkha2oiEEbnUysyVA4lKsOxJw6e7TdFLYMRTv0MEY6neHKK9o5wG9S/YR
Br3AV+7rh1vZ1VCkISY78TXcoik5h3Xy4SAuBs9ekl1v2HEgE8x0aMV1oCYERMJ/
al0dq4aAsvPm
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:46 2025 by rpki-client