Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a3a2f33322d3332203d3e20323635333834.roa
File:                     323830343a333334303a3a2f33322d3332203d3e20323635333834.roa (raw, json)
Hash identifier:          d8VAoWUY5TmzMwGAEnwx6MTRMWFCKtL20+YRiAqZTLQ=
Subject key identifier:   0C:27:BF:3C:A5:1A:FA:AB:A3:35:E7:E4:F6:02:38:73:59:E2:70:5C
Certificate issuer:       /CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5
Certificate serial:       524871D8958C975E742F4A621DDDF31A1AF8E914
Authority key identifier: 1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a3a2f33322d3332203d3e20323635333834.roa
Signing time:             Thu 12 Jun 2025 03:38:01 +0000
ROA not before:           Thu 12 Jun 2025 03:33:01 +0000
ROA not after:            Thu 11 Jun 2026 03:38:01 +0000
asID:                     265384
IP address blocks:        2804:3340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl
                          rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 05:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:48:71:d8:95:8c:97:5e:74:2f:4a:62:1d:dd:f3:1a:1a:f8:e9:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5
        Validity
            Not Before: Jun 12 03:33:01 2025 GMT
            Not After : Jun 11 03:38:01 2026 GMT
        Subject: CN=0C27BF3CA51AFAABA335E7E4F602387359E2705C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f6:76:6e:02:0f:74:83:e3:3e:25:a1:ee:b5:
                    e8:81:0d:38:25:d8:73:b1:b2:65:67:f0:a4:b5:80:
                    12:b4:ff:7c:04:85:b6:21:1a:81:fc:78:18:c8:06:
                    61:e7:6f:9d:f9:d4:21:48:c2:0a:3d:85:7e:36:00:
                    77:a6:ae:24:25:91:ef:dc:07:0a:22:47:ed:63:ef:
                    4e:13:e3:d9:8f:cb:85:cc:a7:a6:db:79:73:7e:2e:
                    89:c2:b5:c5:86:da:48:a5:3c:11:36:50:3d:21:62:
                    16:15:5c:8c:48:c0:3f:b9:c0:3d:e1:75:98:88:70:
                    49:08:f3:f2:91:50:90:2d:46:67:43:6c:59:d2:87:
                    54:3e:95:98:60:0d:3e:92:a4:ec:95:bf:fa:d1:d0:
                    e4:a4:5b:e0:da:79:25:a4:cd:ae:77:68:b5:58:88:
                    c9:c0:32:fd:dc:6d:68:e0:f3:cd:40:ce:31:b1:ac:
                    0a:c1:f9:77:27:1d:67:38:36:e8:b1:6d:57:20:eb:
                    52:31:b8:51:42:ad:89:72:d9:66:49:f8:39:14:2f:
                    33:93:6f:c7:8f:99:67:ed:02:dc:f8:b1:2e:cc:91:
                    b4:86:8c:90:63:03:05:45:58:bf:14:af:12:c1:05:
                    ff:03:76:7a:91:08:ed:f8:4a:b1:64:78:71:e7:01:
                    d2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:27:BF:3C:A5:1A:FA:AB:A3:35:E7:E4:F6:02:38:73:59:E2:70:5C
            X509v3 Authority Key Identifier:
                keyid:1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a3a2f33322d3332203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3340::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:91:17:b8:fa:c6:8d:32:ac:5f:a7:76:21:5e:ab:b2:a8:9f:
         4e:ac:14:3e:8b:82:b1:b3:d9:ad:c5:40:61:73:1a:7e:35:95:
         5e:21:3b:1a:82:9e:15:cf:81:7d:4e:d8:d8:ff:04:12:83:78:
         5b:88:20:f9:26:67:71:c8:e4:d6:f3:9e:03:8d:75:c2:ef:63:
         79:6c:d2:77:13:37:ba:e3:37:03:ff:ff:27:58:de:92:49:af:
         e8:3c:55:fc:94:0b:13:2f:ba:b7:e8:48:c0:06:cf:f2:a9:c6:
         c8:89:5f:31:cc:60:15:b2:af:25:20:11:45:ec:ab:e0:a7:eb:
         e6:0c:a9:e0:e3:88:27:88:19:e7:e6:b2:e4:31:ff:37:dd:3f:
         86:13:9f:4a:39:68:9b:c3:a3:f7:1a:97:44:c6:2e:e1:d1:03:
         14:30:fd:06:84:7e:29:21:37:2e:29:79:ee:57:33:66:b3:6b:
         fb:26:e5:09:65:99:db:c2:2d:f2:af:e9:a4:05:75:2b:5a:9a:
         65:14:e2:ef:e6:bf:51:a4:6d:e0:1c:22:e3:a8:e0:f5:21:a0:
         15:2b:75:12:65:ee:0f:c7:c2:a7:1a:f2:8d:22:9e:13:2a:4b:
         5e:a3:54:fc:cd:3e:dc:18:2f:6e:0b:39:50:52:8f:64:aa:3c:
         db:39:1f:84
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUkhx2JWMl150L0piHd3zGhr46RQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI3QTQyODk2QTRGQkYyRTJFMkIwNDk0MzAwQUI2RjAw
OTRFRjlFNTAeFw0yNTA2MTIwMzMzMDFaFw0yNjA2MTEwMzM4MDFaMDMxMTAvBgNV
BAMTKDBDMjdCRjNDQTUxQUZBQUJBMzM1RTdFNEY2MDIzODczNTlFMjcwNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm9nZuAg90g+M+JaHuteiBDTgl
2HOxsmVn8KS1gBK0/3wEhbYhGoH8eBjIBmHnb5351CFIwgo9hX42AHemriQlke/c
BwoiR+1j704T49mPy4XMp6bbeXN+LonCtcWG2kilPBE2UD0hYhYVXIxIwD+5wD3h
dZiIcEkI8/KRUJAtRmdDbFnSh1Q+lZhgDT6SpOyVv/rR0OSkW+DaeSWkza53aLVY
iMnAMv3cbWjg881AzjGxrArB+XcnHWc4NuixbVcg61IxuFFCrYly2WZJ+DkULzOT
b8ePmWftAtz4sS7MkbSGjJBjAwVFWL8UrxLBBf8DdnqRCO34SrFkeHHnAdLhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUDCe/PKUa+qujNefk9gI4c1nicFwwHwYDVR0j
BBgwFoAUG3pCiWpPvy4uKwSUMAq28AlO+eUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5QOGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VR
cHQvMC8xQjdBNDI4OTZBNEZCRjJFMkUyQjA0OTQzMDBBQjZGMDA5NEVGOUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCN0E0Mjg5NkE0RkJGMkUy
RTJCMDQ5NDMwMEFCNkYwMDk0RUY5RTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJOUDhjUEQ0NFRqd2ZQV1BEdnBSVTN6U3hnWUo5WVZFV0NqYWlnZmNlUXB0LzAv
MzIzODMwMzQzYTMzMzMzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzMzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQzQDANBgkqhkiG9w0BAQsFAAOCAQEABJEXuPrG
jTKsX6d2IV6rsqifTqwUPouCsbPZrcVAYXMafjWVXiE7GoKeFc+BfU7Y2P8EEoN4
W4gg+SZnccjk1vOeA411wu9jeWzSdxM3uuM3A///J1jekkmv6DxV/JQLEy+6t+hI
wAbP8qnGyIlfMcxgFbKvJSARReyr4Kfr5gyp4OOIJ4gZ5+ay5DH/N90/hhOfSjlo
m8Oj9xqXRMYu4dEDFDD9BoR+KSE3Lil57lczZrNr+yblCWWZ28It8q/ppAV1K1qa
ZRTi7+a/UaRt4Bwi46jg9SGgFSt1EmXuD8fCpxryjSKeEypLXqNU/M0+3Bgvbgs5
UFKPZKo82zkfhA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 07:03:29 2025 by rpki-client