Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a343030303a3a2f33342d3334203d3e20323734363633.roa
File:                     323830343a393163343a343030303a3a2f33342d3334203d3e20323734363633.roa (raw, json)
Hash identifier:          rnWLMlNci2GTtQW0eXO7DqAmrDw80bXn9AvtXvR5L8U=
Subject key identifier:   43:EA:D8:35:9A:F6:D8:28:22:41:E8:9B:68:65:87:AD:2D:5F:5F:95
Certificate issuer:       /CN=9B960A59EA8645B0F7C4C5D1C2D1EC8D938DAC1D
Certificate serial:       657785688ECED18ECB373F73539B067CDA6206FA
Authority key identifier: 9B:96:0A:59:EA:86:45:B0:F7:C4:C5:D1:C2:D1:EC:8D:93:8D:AC:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B960A59EA8645B0F7C4C5D1C2D1EC8D938DAC1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a343030303a3a2f33342d3334203d3e20323734363633.roa
Signing time:             Wed 30 Apr 2025 12:50:51 +0000
ROA not before:           Wed 30 Apr 2025 12:45:51 +0000
ROA not after:            Wed 29 Apr 2026 12:50:51 +0000
asID:                     274663
IP address blocks:        2804:91c4:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/9B960A59EA8645B0F7C4C5D1C2D1EC8D938DAC1D.crl
                          rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/9B960A59EA8645B0F7C4C5D1C2D1EC8D938DAC1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B960A59EA8645B0F7C4C5D1C2D1EC8D938DAC1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 19:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:77:85:68:8e:ce:d1:8e:cb:37:3f:73:53:9b:06:7c:da:62:06:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B960A59EA8645B0F7C4C5D1C2D1EC8D938DAC1D
        Validity
            Not Before: Apr 30 12:45:51 2025 GMT
            Not After : Apr 29 12:50:51 2026 GMT
        Subject: CN=43EAD8359AF6D8282241E89B686587AD2D5F5F95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:41:de:22:38:3b:23:19:90:bd:1d:82:b6:
                    a3:a3:7a:b9:7c:61:30:38:f3:63:8a:23:ec:f2:f4:
                    88:78:7d:ff:d0:ad:74:e7:52:bc:f8:65:43:1b:2f:
                    31:03:68:ae:d6:31:f8:eb:a1:cd:5f:08:b5:f0:df:
                    4f:18:9c:cc:b4:dd:92:4e:d0:6f:b4:84:0d:ce:dd:
                    34:03:9b:2e:6e:5d:08:ef:a8:f1:33:59:d6:aa:64:
                    1c:d9:46:7b:80:5c:12:31:28:9e:e3:3c:e5:7e:3c:
                    84:a4:09:18:d9:cb:f4:88:78:ea:11:4a:3d:69:b6:
                    02:92:b5:1f:82:67:6f:d3:17:74:ba:d2:0b:a2:97:
                    73:24:27:58:2e:20:cd:33:16:a7:30:d9:53:20:29:
                    2e:f5:0e:80:3b:7d:ff:c1:f3:4d:ca:8f:70:93:41:
                    cd:71:7d:5a:01:b4:34:11:be:1e:43:e8:1e:83:bf:
                    bd:cd:69:04:69:27:bd:06:57:07:a9:96:a9:ad:fb:
                    0c:d0:6d:96:8c:0f:eb:d3:b6:11:eb:39:39:80:97:
                    f8:cc:fc:1f:30:cf:d1:36:90:9c:a9:05:4e:5a:6c:
                    fc:ed:3d:7f:db:12:c7:6f:94:14:a7:10:2b:0a:36:
                    68:6c:58:a8:de:1d:8e:6e:86:13:e4:f9:e9:83:b6:
                    9b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EA:D8:35:9A:F6:D8:28:22:41:E8:9B:68:65:87:AD:2D:5F:5F:95
            X509v3 Authority Key Identifier:
                keyid:9B:96:0A:59:EA:86:45:B0:F7:C4:C5:D1:C2:D1:EC:8D:93:8D:AC:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/9B960A59EA8645B0F7C4C5D1C2D1EC8D938DAC1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B960A59EA8645B0F7C4C5D1C2D1EC8D938DAC1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a343030303a3a2f33342d3334203d3e20323734363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91c4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9d:23:42:81:ba:86:af:42:6e:00:6f:a3:4b:ec:85:81:84:f9:
         c8:3b:79:80:af:25:b4:eb:6c:1c:29:2f:09:1b:8e:62:83:f3:
         ff:a3:c7:15:73:7e:c6:0b:ac:2b:fd:2e:0e:6c:73:19:a2:20:
         bf:d3:d3:88:40:c6:61:f9:94:a9:ba:b9:5f:ed:4b:6c:8e:2b:
         41:08:53:26:38:f3:90:52:83:95:8d:64:bb:70:5a:fc:e7:58:
         3c:7d:28:7c:d3:38:57:48:a3:1a:17:6e:c7:93:08:83:19:50:
         e9:0c:2c:42:58:c1:cb:af:ef:78:7f:af:d8:d1:6e:75:a5:ba:
         0a:b5:56:b2:6f:7e:9d:51:eb:f0:d4:4d:33:77:85:df:95:ff:
         1d:08:43:92:0a:d6:06:3c:51:8d:13:c2:bc:b4:19:d3:53:ba:
         9c:e2:07:8e:4d:ff:e8:b2:5d:34:c7:50:80:4b:45:e9:35:fa:
         3b:2c:d2:ae:ab:d4:3e:87:96:9a:c9:c3:2f:ae:61:bb:dc:5c:
         05:95:6f:56:ab:62:f8:84:a6:b6:e6:8b:30:78:3c:59:d4:98:
         52:d9:10:d7:d0:ef:fc:c6:0f:ab:96:1f:0f:80:58:ad:6a:4e:
         76:91:8a:48:6d:9e:79:e5:bb:1e:db:ef:4e:5b:d2:e8:29:36:
         e6:7b:7b:b5
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZXeFaI7O0Y7LNz9zU5sGfNpiBvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI5NjBBNTlFQTg2NDVCMEY3QzRDNUQxQzJEMUVDOEQ5
MzhEQUMxRDAeFw0yNTA0MzAxMjQ1NTFaFw0yNjA0MjkxMjUwNTFaMDMxMTAvBgNV
BAMTKDQzRUFEODM1OUFGNkQ4MjgyMjQxRTg5QjY4NjU4N0FEMkQ1RjVGOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcL0HeIjg7IxmQvR2CtqOjerl8
YTA482OKI+zy9Ih4ff/QrXTnUrz4ZUMbLzEDaK7WMfjroc1fCLXw308YnMy03ZJO
0G+0hA3O3TQDmy5uXQjvqPEzWdaqZBzZRnuAXBIxKJ7jPOV+PISkCRjZy/SIeOoR
Sj1ptgKStR+CZ2/TF3S60guil3MkJ1guIM0zFqcw2VMgKS71DoA7ff/B803Kj3CT
Qc1xfVoBtDQRvh5D6B6Dv73NaQRpJ70GVweplqmt+wzQbZaMD+vTthHrOTmAl/jM
/B8wz9E2kJypBU5abPztPX/bEsdvlBSnECsKNmhsWKjeHY5uhhPk+emDtps7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQ+rYNZr22CgiQeibaGWHrS1fX5UwHwYDVR0j
BBgwFoAUm5YKWeqGRbD3xMXRwtHsjZONrB0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1g4WEdDaFJTTkxMZ2t3eWJKYnU4QjkzRXdXRllVb0dQQmRtS2J5a0Vt
YmQvMC85Qjk2MEE1OUVBODY0NUIwRjdDNEM1RDFDMkQxRUM4RDkzOERBQzFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCOTYwQTU5RUE4NjQ1QjBG
N0M0QzVEMUMyRDFFQzhEOTM4REFDMUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdYOFhHQ2hSU05MTGdrd3liSmJ1OEI5M0V3V0ZZVW9HUEJkbUtieWtFbWJkLzAv
MzIzODMwMzQzYTM5MzE2MzM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczNDM2MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEkcRAMA0GCSqGSIb3DQEBCwUA
A4IBAQCdI0KBuoavQm4Ab6NL7IWBhPnIO3mAryW062wcKS8JG45ig/P/o8cVc37G
C6wr/S4ObHMZoiC/09OIQMZh+ZSpurlf7UtsjitBCFMmOPOQUoOVjWS7cFr851g8
fSh80zhXSKMaF27HkwiDGVDpDCxCWMHLr+94f6/Y0W51pboKtVayb36dUevw1E0z
d4Xflf8dCEOSCtYGPFGNE8K8tBnTU7qc4geOTf/osl00x1CAS0XpNfo7LNKuq9Q+
h5aaycMvrmG73FwFlW9Wq2L4hKa25osweDxZ1JhS2RDX0O/8xg+rlh8PgFitak52
kYpIbZ555bse2+9OW9LoKTbme3u1
-----END CERTIFICATE-----
Generated at Sat May 3 09:05:10 2025 by rpki-client