Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/323830343a376531633a3a2f33322d3332203d3e20323731363033.roa
File:                     323830343a376531633a3a2f33322d3332203d3e20323731363033.roa (raw, json)
Hash identifier:          PJ5CTK9tgnaXCGNUaKUBmWgmsKVUtdMMCXGuudKgq24=
Subject key identifier:   21:0B:BC:77:42:DD:A9:30:DE:36:63:9E:B4:64:91:75:B3:77:C4:BF
Certificate issuer:       /CN=8A93F234754BF521193905D6EAF7AFDBB2811E48
Certificate serial:       2B6E27AEF24D99476734FC9FA3F61AED79C0E99C
Authority key identifier: 8A:93:F2:34:75:4B:F5:21:19:39:05:D6:EA:F7:AF:DB:B2:81:1E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A93F234754BF521193905D6EAF7AFDBB2811E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/323830343a376531633a3a2f33322d3332203d3e20323731363033.roa
Signing time:             Tue 04 Mar 2025 16:20:56 +0000
ROA not before:           Tue 04 Mar 2025 16:15:56 +0000
ROA not after:            Tue 03 Mar 2026 16:20:56 +0000
asID:                     271603
IP address blocks:        2804:7e1c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.crl
                          rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A93F234754BF521193905D6EAF7AFDBB2811E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 12:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6e:27:ae:f2:4d:99:47:67:34:fc:9f:a3:f6:1a:ed:79:c0:e9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A93F234754BF521193905D6EAF7AFDBB2811E48
        Validity
            Not Before: Mar  4 16:15:56 2025 GMT
            Not After : Mar  3 16:20:56 2026 GMT
        Subject: CN=210BBC7742DDA930DE36639EB4649175B377C4BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:47:97:f0:72:f8:ef:63:a6:f7:8a:40:3b:
                    1e:08:7e:bf:0a:a0:ab:83:06:55:d5:89:c2:8a:4f:
                    ae:2a:e4:32:cb:f3:68:28:a4:e4:be:84:4b:99:ad:
                    6d:3a:3c:82:15:e7:b6:9d:67:e9:45:93:53:26:04:
                    07:8c:19:b1:f5:1c:c5:98:c7:89:c9:ec:07:07:b3:
                    fe:56:0c:19:2d:17:da:43:aa:18:0d:86:5a:b5:04:
                    ac:7d:b8:db:37:9b:68:37:30:50:a3:b2:ad:c8:ed:
                    e4:5f:af:e5:fa:40:db:44:81:c1:cb:a4:70:e9:59:
                    77:f3:1b:22:59:dd:d7:d1:bd:2e:36:2d:39:be:8a:
                    7b:1f:d8:f8:cf:f1:8f:a1:89:6a:78:af:66:74:33:
                    2d:e0:7d:f0:f2:2f:a9:42:46:c7:19:71:88:a9:54:
                    82:18:81:b6:c6:0b:ea:1b:d0:98:17:80:87:1e:32:
                    e0:47:83:5f:31:49:d7:76:c7:3f:17:5c:fc:e8:d7:
                    40:6a:da:cb:77:56:b1:db:a4:f3:46:8d:77:cc:c1:
                    41:6e:62:fe:af:55:7e:e1:8d:d1:89:17:27:79:e8:
                    2b:d0:9b:9b:91:5c:a8:ef:49:15:af:6c:27:57:d3:
                    6c:ea:dd:0e:bc:cf:a3:bf:dc:7b:e5:5e:9a:de:19:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0B:BC:77:42:DD:A9:30:DE:36:63:9E:B4:64:91:75:B3:77:C4:BF
            X509v3 Authority Key Identifier:
                keyid:8A:93:F2:34:75:4B:F5:21:19:39:05:D6:EA:F7:AF:DB:B2:81:1E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/8A93F234754BF521193905D6EAF7AFDBB2811E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A93F234754BF521193905D6EAF7AFDBB2811E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/323830343a376531633a3a2f33322d3332203d3e20323731363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:41:46:c6:27:3f:b1:59:02:5a:21:4d:dc:ea:9c:ad:46:6b:
         cf:10:a2:d5:9c:01:65:69:4b:0f:4d:6a:0e:63:ef:a2:53:87:
         9c:8c:47:d7:c5:62:2d:40:0f:0f:0d:43:57:0f:9a:ad:a1:6b:
         9e:a3:be:ce:c4:02:e7:97:a7:7f:51:56:3f:32:01:28:73:37:
         c0:47:80:b1:24:74:35:c8:ff:cd:44:4d:d9:cc:37:e2:d7:23:
         c5:dd:12:66:48:e7:38:4d:d0:43:78:5e:80:d1:6e:5e:71:ae:
         b5:f0:09:c5:9d:f8:3e:0b:f7:12:a6:57:79:bd:66:7c:9a:d9:
         ee:e0:f3:9d:fa:8f:4e:28:a4:57:aa:e9:51:59:08:5d:22:2d:
         7d:34:e6:f0:7e:86:b1:dd:2e:f4:54:ad:2c:78:a6:49:1a:2a:
         25:60:f4:57:43:21:4f:37:99:cd:52:25:54:cb:d6:bc:22:41:
         da:eb:0f:3d:65:26:f3:6d:73:11:7b:c7:7f:be:ae:6e:4d:02:
         48:4b:d5:1c:92:38:f3:fa:db:bd:be:e3:98:20:42:0d:a4:2b:
         c5:5c:6a:9e:5e:23:59:7e:6e:94:d8:b7:46:64:37:17:4c:5a:
         30:28:b6:33:19:93:eb:ec:3a:b1:7a:1d:19:6b:66:0e:03:1c:
         d3:7b:e4:b3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUK24nrvJNmUdnNPyfo/Ya7XnA6ZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE5M0YyMzQ3NTRCRjUyMTE5MzkwNUQ2RUFGN0FGREJC
MjgxMUU0ODAeFw0yNTAzMDQxNjE1NTZaFw0yNjAzMDMxNjIwNTZaMDMxMTAvBgNV
BAMTKDIxMEJCQzc3NDJEREE5MzBERTM2NjM5RUI0NjQ5MTc1QjM3N0M0QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb9UeX8HL472Om94pAOx4Ifr8K
oKuDBlXVicKKT64q5DLL82gopOS+hEuZrW06PIIV57adZ+lFk1MmBAeMGbH1HMWY
x4nJ7AcHs/5WDBktF9pDqhgNhlq1BKx9uNs3m2g3MFCjsq3I7eRfr+X6QNtEgcHL
pHDpWXfzGyJZ3dfRvS42LTm+insf2PjP8Y+hiWp4r2Z0My3gffDyL6lCRscZcYip
VIIYgbbGC+ob0JgXgIceMuBHg18xSdd2xz8XXPzo10Bq2st3VrHbpPNGjXfMwUFu
Yv6vVX7hjdGJFyd56CvQm5uRXKjvSRWvbCdX02zq3Q68z6O/3HvlXpreGTrrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUIQu8d0LdqTDeNmOetGSRdbN3xL8wHwYDVR0j
BBgwFoAUipPyNHVL9SEZOQXW6vev27KBHkgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SZEpuNUVmbW1nYkhuWkxDOEZaaVd1Vmo2eEhEYXgzTXduV1lUYVVhd3lL
LzAvOEE5M0YyMzQ3NTRCRjUyMTE5MzkwNUQ2RUFGN0FGREJCMjgxMUU0OC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84QTkzRjIzNDc1NEJGNTIxMTkz
OTA1RDZFQUY3QUZEQkIyODExRTQ4LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
ZEpuNUVmbW1nYkhuWkxDOEZaaVd1Vmo2eEhEYXgzTXduV1lUYVVhd3lLLzAvMzIz
ODMwMzQzYTM3NjUzMTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMxMzYz
MDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAR+HDANBgkqhkiG9w0BAQsFAAOCAQEAWkFGxic/sVkC
WiFN3OqcrUZrzxCi1ZwBZWlLD01qDmPvolOHnIxH18ViLUAPDw1DVw+araFrnqO+
zsQC55enf1FWPzIBKHM3wEeAsSR0Ncj/zURN2cw34tcjxd0SZkjnOE3QQ3hegNFu
XnGutfAJxZ34Pgv3EqZXeb1mfJrZ7uDznfqPTiikV6rpUVkIXSItfTTm8H6Gsd0u
9FStLHimSRoqJWD0V0MhTzeZzVIlVMvWvCJB2usPPWUm821zEXvHf76ubk0CSEvV
HJI48/rbvb7jmCBCDaQrxVxqnl4jWX5ulNi3RmQ3F0xaMCi2MxmT6+w6sXodGWtm
DgMc03vksw==
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:55:30 2025 by rpki-client