Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a3a2f33342d3334203d3e203532373231.roa
File:                     323830343a323636343a3a2f33342d3334203d3e203532373231.roa (raw, json)
Hash identifier:          wsbmOwj5Lxh02iTa3/u1hz01J8Qrid0dmKSPRKqB3Fk=
Subject key identifier:   41:AB:0F:85:23:17:2B:E7:43:82:A2:E7:B1:6E:D5:12:BB:87:17:84
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       5D7F43B27E47C2E55B08C33ED76414F5DB3344EA
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a3a2f33342d3334203d3e203532373231.roa
Signing time:             Fri 25 Apr 2025 14:50:32 +0000
ROA not before:           Fri 25 Apr 2025 14:45:32 +0000
ROA not after:            Fri 24 Apr 2026 14:50:32 +0000
asID:                     52721
IP address blocks:        2804:2664::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 15:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7f:43:b2:7e:47:c2:e5:5b:08:c3:3e:d7:64:14:f5:db:33:44:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:32 2025 GMT
            Not After : Apr 24 14:50:32 2026 GMT
        Subject: CN=41AB0F8523172BE74382A2E7B16ED512BB871784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:83:9f:16:98:26:0e:ce:88:c8:c5:bf:95:f6:
                    ef:ea:f1:72:e4:58:c0:78:75:6d:66:2e:96:2e:cf:
                    2c:ea:0b:14:44:d0:8e:51:fd:db:35:12:0a:11:dd:
                    6b:fc:cb:9e:7c:be:6c:b0:dd:65:38:0d:05:27:52:
                    db:6f:ec:30:31:35:59:1c:5e:ad:c2:9e:1a:c6:ca:
                    8b:6b:cf:86:27:bb:a4:23:c3:60:d3:1f:bc:31:87:
                    38:53:64:08:e0:ac:4e:ac:f8:f4:f1:e0:e8:d0:3c:
                    94:6d:94:e1:4f:9b:1d:8c:0f:8d:62:8a:1b:62:42:
                    9f:03:65:9f:99:14:73:14:71:6b:94:3f:99:fa:e7:
                    95:90:88:d7:5d:61:c6:b2:f4:98:9a:70:f3:46:23:
                    78:15:55:ae:81:ad:06:a4:86:d4:6c:55:6f:36:74:
                    92:a6:b4:45:7f:e3:e8:b3:21:20:16:d9:4e:dc:c7:
                    ec:a0:f0:bb:4b:0d:cd:e0:e5:33:f0:1e:cd:bf:bb:
                    5c:bc:5d:33:73:ff:8a:60:40:39:4a:3c:c8:b4:ab:
                    44:ac:aa:7a:c6:6a:06:ff:63:53:13:c9:5d:a8:64:
                    00:c8:5f:d0:6c:c6:ac:0a:2b:09:2e:7c:0d:8f:18:
                    44:83:4c:81:53:7f:85:c1:c9:24:f2:87:92:9f:80:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AB:0F:85:23:17:2B:E7:43:82:A2:E7:B1:6E:D5:12:BB:87:17:84
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a3a2f33342d3334203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2664::/34

    Signature Algorithm: sha256WithRSAEncryption
         03:d8:f7:16:fa:88:1e:9d:90:25:2b:16:ee:57:c8:7f:13:44:
         32:21:64:2d:88:3d:a2:7e:fb:46:06:b6:f5:00:f9:87:af:da:
         e1:a1:c8:df:29:43:67:69:4d:89:83:b1:e8:07:6a:1e:2c:fe:
         4f:4e:ae:33:ba:80:7e:6e:cc:1d:a4:e4:e4:af:15:ee:12:de:
         1f:6b:ec:43:5c:a8:e8:53:4a:ff:33:90:e6:e3:fd:88:2a:be:
         3a:19:de:e1:2a:d4:bc:b1:a0:32:70:17:8a:95:95:91:5b:ef:
         ba:42:c9:fc:b9:95:14:88:3f:cf:39:90:7a:d1:22:fc:17:35:
         69:d5:71:81:8c:42:26:c3:4a:23:ce:89:f7:92:89:9b:b5:73:
         61:0a:aa:ce:25:fc:eb:57:26:8f:cb:94:3e:30:61:6e:96:f2:
         32:c8:d7:bb:89:8f:b4:7c:e1:9c:cd:be:76:07:95:d4:ac:53:
         16:f1:03:9b:dc:5b:12:72:31:44:08:72:18:43:3e:c8:db:84:
         7d:0d:fe:71:8f:b9:69:3f:f1:9e:9c:1b:d3:28:ce:07:1c:de:
         c6:42:44:f9:be:88:f3:fe:15:9d:a1:d6:97:5d:b3:0b:ab:4d:
         65:d8:9e:46:72:e7:e1:8b:41:f4:61:5f:89:c4:37:cd:52:27:
         9b:8d:66:e3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXX9Dsn5HwuVbCMM+12QU9dszROowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNGMTcyQjRDNjkyQUFBOTU4QTkzRjBDN0Q1NzdBNUFF
OEQ3MDgyRjAeFw0yNTA0MjUxNDQ1MzJaFw0yNjA0MjQxNDUwMzJaMDMxMTAvBgNV
BAMTKDQxQUIwRjg1MjMxNzJCRTc0MzgyQTJFN0IxNkVENTEyQkI4NzE3ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkg58WmCYOzojIxb+V9u/q8XLk
WMB4dW1mLpYuzyzqCxRE0I5R/ds1EgoR3Wv8y558vmyw3WU4DQUnUttv7DAxNVkc
Xq3CnhrGyotrz4Ynu6Qjw2DTH7wxhzhTZAjgrE6s+PTx4OjQPJRtlOFPmx2MD41i
ihtiQp8DZZ+ZFHMUcWuUP5n655WQiNddYcay9JiacPNGI3gVVa6BrQakhtRsVW82
dJKmtEV/4+izISAW2U7cx+yg8LtLDc3g5TPwHs2/u1y8XTNz/4pgQDlKPMi0q0Ss
qnrGagb/Y1MTyV2oZADIX9BsxqwKKwkufA2PGESDTIFTf4XBySTyh5KfgAlPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQasPhSMXK+dDgqLnsW7VEruHF4QwHwYDVR0j
BBgwFoAU4/FytMaSqqlYqT8MfVd6WujXCC8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlJSelB1MjNaM2FkSkM5ZHF2ZVdLc2pSaHVyVnpXem1iNEphQm9BQlhZ
cWUvMC9FM0YxNzJCNEM2OTJBQUE5NThBOTNGMEM3RDU3N0E1QUU4RDcwODJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzRjE3MkI0QzY5MkFBQTk1
OEE5M0YwQzdENTc3QTVBRThENzA4MkYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJSUnpQdTIzWjNhZEpDOWRxdmVXS3NqUmh1clZ6V3ptYjRKYUJvQUJYWXFlLzAv
MzIzODMwMzQzYTMyMzYzNjM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzUzMjM3
MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBigEJmQAMA0GCSqGSIb3DQEBCwUAA4IBAQAD2PcW+oge
nZAlKxbuV8h/E0QyIWQtiD2ifvtGBrb1APmHr9rhocjfKUNnaU2Jg7HoB2oeLP5P
Tq4zuoB+bswdpOTkrxXuEt4fa+xDXKjoU0r/M5Dm4/2IKr46Gd7hKtS8saAycBeK
lZWRW++6Qsn8uZUUiD/POZB60SL8FzVp1XGBjEImw0ojzon3kombtXNhCqrOJfzr
VyaPy5Q+MGFulvIyyNe7iY+0fOGczb52B5XUrFMW8QOb3FsScjFECHIYQz7I24R9
Df5xj7lpP/GenBvTKM4HHN7GQkT5vojz/hWdodaXXbMLq01l2J5Gcufhi0H0YV+J
xDfNUiebjWbj
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:23:42 2025 by rpki-client