Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a383030303a3a2f33342d3334203d3e20323730393830.roa
File:                     323830343a373436633a383030303a3a2f33342d3334203d3e20323730393830.roa (raw, json)
Hash identifier:          twaepjlVykAD8kXkjd99QNb/W6xXjAW8zDBRKbOLpoQ=
Subject key identifier:   C6:9B:C9:56:47:DE:43:82:7D:5E:27:B4:D9:75:2A:96:01:37:36:00
Certificate issuer:       /CN=DB57D586E31A5D34EC7A70EA663E9A2D315A0125
Certificate serial:       1B06128EDE067DDD32B9BE80237D90C8E9D770B0
Authority key identifier: DB:57:D5:86:E3:1A:5D:34:EC:7A:70:EA:66:3E:9A:2D:31:5A:01:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a383030303a3a2f33342d3334203d3e20323730393830.roa
Signing time:             Fri 02 May 2025 21:22:42 +0000
ROA not before:           Fri 02 May 2025 21:17:42 +0000
ROA not after:            Fri 01 May 2026 21:22:42 +0000
asID:                     270980
IP address blocks:        2804:746c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.crl
                          rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 00:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:06:12:8e:de:06:7d:dd:32:b9:be:80:23:7d:90:c8:e9:d7:70:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB57D586E31A5D34EC7A70EA663E9A2D315A0125
        Validity
            Not Before: May  2 21:17:42 2025 GMT
            Not After : May  1 21:22:42 2026 GMT
        Subject: CN=C69BC95647DE43827D5E27B4D9752A9601373600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:25:b6:fd:66:27:6a:45:08:1a:26:e4:84:3a:
                    9e:09:42:40:eb:eb:08:8f:7a:7b:12:24:52:3a:93:
                    28:61:90:9e:e4:19:9c:01:13:bd:d2:6f:cd:c5:86:
                    a8:ae:80:e6:08:bb:fb:25:26:ea:80:9c:fb:3c:c6:
                    86:27:82:8f:b5:7a:1e:a6:8f:a1:89:e4:43:6c:c6:
                    dd:05:fe:f4:6f:83:bc:d2:d2:22:33:26:9d:9e:af:
                    02:84:1a:da:b6:f7:8a:26:1d:b8:1f:0c:a2:af:46:
                    19:f6:43:84:af:27:c3:d5:70:ff:9f:38:54:8a:bd:
                    a5:29:8a:2e:b0:ad:2c:ac:dd:89:14:bc:1f:cb:6b:
                    ad:49:23:63:34:2e:a5:81:d2:8e:f8:af:c2:ba:c4:
                    c3:91:e1:79:d3:89:87:4c:22:99:0e:9e:0f:7f:53:
                    a1:83:5c:e8:0c:4b:ec:6f:f6:17:8f:10:6b:1f:7d:
                    97:7a:bb:00:bb:62:62:e0:41:7e:c0:f2:31:e6:96:
                    2e:ce:08:c3:72:fd:28:d5:f5:ac:16:3e:e3:0b:b0:
                    e9:58:b4:73:04:b3:66:2d:54:10:c4:38:ea:7d:2e:
                    70:90:a6:35:0c:f8:d9:3b:34:46:e0:95:1d:62:b8:
                    f9:13:06:91:6b:63:d8:8d:88:14:92:ce:7b:31:30:
                    bf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9B:C9:56:47:DE:43:82:7D:5E:27:B4:D9:75:2A:96:01:37:36:00
            X509v3 Authority Key Identifier:
                keyid:DB:57:D5:86:E3:1A:5D:34:EC:7A:70:EA:66:3E:9A:2D:31:5A:01:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a383030303a3a2f33342d3334203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:746c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b9:6e:49:2f:49:6b:fb:0c:dd:52:63:a7:bc:58:47:e8:6b:20:
         4d:1c:bd:27:97:d1:15:72:7a:82:fb:08:b6:72:e5:05:33:1c:
         05:30:33:a8:06:fb:9f:9f:70:39:11:a7:2a:eb:bb:eb:d3:cb:
         52:d6:3b:b0:85:fb:f1:d8:94:bb:70:90:8e:75:31:c1:fa:a9:
         08:de:00:c0:2a:b6:3b:c7:55:d7:81:26:09:4e:16:74:ff:56:
         6d:59:2e:65:c8:74:eb:45:c9:c1:6a:f7:48:8b:05:2e:6d:01:
         d4:2c:a6:b5:10:3b:f9:6b:09:92:b9:f0:42:b9:49:84:bb:82:
         c5:e8:21:32:9a:87:76:b3:b0:1d:25:42:82:6e:28:c3:97:8a:
         af:ad:53:f3:9f:1c:5d:ff:1a:b0:7c:c9:d6:a5:c6:2e:f4:e8:
         2a:31:ce:06:12:49:bd:73:91:a8:c2:87:52:df:e3:9e:0b:61:
         e4:23:82:1a:ca:57:20:f6:96:3a:2b:5a:f4:a3:1e:2d:ec:58:
         00:e7:12:cc:b0:bd:99:25:d2:3a:d1:fa:5c:56:36:57:a2:68:
         a3:4c:f2:43:68:de:1d:90:c3:9d:16:25:0c:cf:35:0f:92:bc:
         5e:e1:9e:8f:64:fc:0b:b0:b4:53:b5:52:d4:83:30:d3:aa:b8:
         76:dc:a4:98
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGwYSjt4Gfd0yub6AI32QyOnXcLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI1N0Q1ODZFMzFBNUQzNEVDN0E3MEVBNjYzRTlBMkQz
MTVBMDEyNTAeFw0yNTA1MDIyMTE3NDJaFw0yNjA1MDEyMTIyNDJaMDMxMTAvBgNV
BAMTKEM2OUJDOTU2NDdERTQzODI3RDVFMjdCNEQ5NzUyQTk2MDEzNzM2MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJJbb9ZidqRQgaJuSEOp4JQkDr
6wiPensSJFI6kyhhkJ7kGZwBE73Sb83FhqiugOYIu/slJuqAnPs8xoYngo+1eh6m
j6GJ5ENsxt0F/vRvg7zS0iIzJp2erwKEGtq294omHbgfDKKvRhn2Q4SvJ8PVcP+f
OFSKvaUpii6wrSys3YkUvB/La61JI2M0LqWB0o74r8K6xMOR4XnTiYdMIpkOng9/
U6GDXOgMS+xv9hePEGsffZd6uwC7YmLgQX7A8jHmli7OCMNy/SjV9awWPuMLsOlY
tHMEs2YtVBDEOOp9LnCQpjUM+Nk7NEbglR1iuPkTBpFrY9iNiBSSznsxML+LAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUxpvJVkfeQ4J9Xie02XUqlgE3NgAwHwYDVR0j
BBgwFoAU21fVhuMaXTTsenDqZj6aLTFaASUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHd6ckZQejNxc0Jha0NDRHdnQ3EzSHJtaUZHRVdiRGNtQ04xZEhVSzE3
a28vMC9EQjU3RDU4NkUzMUE1RDM0RUM3QTcwRUE2NjNFOUEyRDMxNUEwMTI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCNTdENTg2RTMxQTVEMzRF
QzdBNzBFQTY2M0U5QTJEMzE1QTAxMjUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R3enJGUHozcXNCYWtDQ0R3Z0NxM0hybWlGR0VXYkRjbUNOMWRIVUsxN2tvLzAv
MzIzODMwMzQzYTM3MzQzNjYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDM5MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEdGyAMA0GCSqGSIb3DQEBCwUA
A4IBAQC5bkkvSWv7DN1SY6e8WEfoayBNHL0nl9EVcnqC+wi2cuUFMxwFMDOoBvuf
n3A5Eacq67vr08tS1juwhfvx2JS7cJCOdTHB+qkI3gDAKrY7x1XXgSYJThZ0/1Zt
WS5lyHTrRcnBavdIiwUubQHULKa1EDv5awmSufBCuUmEu4LF6CEymod2s7AdJUKC
bijDl4qvrVPznxxd/xqwfMnWpcYu9OgqMc4GEkm9c5GowodS3+OeC2HkI4Iaylcg
9pY6K1r0ox4t7FgA5xLMsL2ZJdI60fpcVjZXomijTPJDaN4dkMOdFiUMzzUPkrxe
4Z6PZPwLsLRTtVLUgzDTqrh23KSY
-----END CERTIFICATE-----
Generated at Sun May 11 17:11:55 2025 by rpki-client