Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VCFXtWsYaCU13VmAbBMXwkvoMLC9cPyk4sHY8pvAvRs/0/323830343a363737303a3a2f33322d313238203d3e20323639363238.roa
File:                     323830343a363737303a3a2f33322d313238203d3e20323639363238.roa (raw, json)
Hash identifier:          VmWBz2dDviaFHIPjJajRLGO3xIcrIuqbQC69Srt5JQY=
Subject key identifier:   E6:B4:01:A9:E7:57:B5:AC:CA:A7:6F:97:0B:11:E1:8D:5B:0F:FA:F7
Certificate issuer:       /CN=6F09A078C883B22B659811B1730A4367F983222E
Certificate serial:       0552AA0D902B40CBC17BAA4B42036E6AC921C0C3
Authority key identifier: 6F:09:A0:78:C8:83:B2:2B:65:98:11:B1:73:0A:43:67:F9:83:22:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F09A078C883B22B659811B1730A4367F983222E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VCFXtWsYaCU13VmAbBMXwkvoMLC9cPyk4sHY8pvAvRs/0/323830343a363737303a3a2f33322d313238203d3e20323639363238.roa
Signing time:             Sat 12 Jul 2025 03:56:23 +0000
ROA not before:           Sat 12 Jul 2025 03:51:23 +0000
ROA not after:            Sat 11 Jul 2026 03:56:23 +0000
asID:                     269628
IP address blocks:        2804:6770::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VCFXtWsYaCU13VmAbBMXwkvoMLC9cPyk4sHY8pvAvRs/0/6F09A078C883B22B659811B1730A4367F983222E.crl
                          rsync://rpki-repo.registro.br/repo/2VCFXtWsYaCU13VmAbBMXwkvoMLC9cPyk4sHY8pvAvRs/0/6F09A078C883B22B659811B1730A4367F983222E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F09A078C883B22B659811B1730A4367F983222E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 12:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:52:aa:0d:90:2b:40:cb:c1:7b:aa:4b:42:03:6e:6a:c9:21:c0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F09A078C883B22B659811B1730A4367F983222E
        Validity
            Not Before: Jul 12 03:51:23 2025 GMT
            Not After : Jul 11 03:56:23 2026 GMT
        Subject: CN=E6B401A9E757B5ACCAA76F970B11E18D5B0FFAF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0c:e2:bd:37:76:a7:a2:33:5d:33:2d:9a:9b:
                    2e:de:88:50:e8:3a:3c:32:1a:47:27:52:45:81:bf:
                    2d:d1:61:99:fd:c2:00:4e:cb:10:15:1f:eb:6f:7f:
                    9d:af:a8:aa:d1:e0:2e:cc:de:c9:2b:af:d6:3d:8f:
                    81:2c:7f:5b:6d:de:a5:11:39:28:9f:39:84:ef:5e:
                    83:7c:d2:df:fa:ea:8a:00:6b:24:c6:4a:3d:10:e7:
                    89:38:95:63:72:8f:71:81:89:da:05:48:02:31:37:
                    14:7e:87:7b:b0:b8:f7:2d:a4:ec:e2:2c:e2:f6:19:
                    51:8d:15:dc:25:83:a1:7f:c7:be:4e:3f:98:88:35:
                    74:c1:94:3f:7c:c4:05:01:03:44:ce:e2:d7:5f:b4:
                    a8:46:81:33:a3:f2:0e:95:e8:c9:57:5b:54:30:04:
                    5a:d8:e3:1f:dc:a0:12:0f:ef:1f:ce:34:28:be:05:
                    55:28:6f:45:a5:31:30:fe:37:b0:6e:0f:d6:2d:a3:
                    54:12:24:e3:7c:b8:d9:f3:e5:41:c1:eb:d7:7f:fe:
                    1b:0c:7f:a2:0d:79:30:a5:40:6e:fa:d2:1b:4d:9a:
                    e0:d1:c9:bd:88:96:51:7b:b9:99:b0:cb:8c:27:ae:
                    4d:a8:e8:bc:1f:ca:4d:19:ce:ee:a4:74:eb:31:fc:
                    42:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B4:01:A9:E7:57:B5:AC:CA:A7:6F:97:0B:11:E1:8D:5B:0F:FA:F7
            X509v3 Authority Key Identifier:
                keyid:6F:09:A0:78:C8:83:B2:2B:65:98:11:B1:73:0A:43:67:F9:83:22:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VCFXtWsYaCU13VmAbBMXwkvoMLC9cPyk4sHY8pvAvRs/0/6F09A078C883B22B659811B1730A4367F983222E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F09A078C883B22B659811B1730A4367F983222E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VCFXtWsYaCU13VmAbBMXwkvoMLC9cPyk4sHY8pvAvRs/0/323830343a363737303a3a2f33322d313238203d3e20323639363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6770::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:21:5f:65:e9:08:75:03:e3:19:fd:5a:7e:88:77:ef:be:4a:
         54:1c:61:20:a8:a8:b4:5c:f0:3c:4d:b0:fc:f0:a2:71:f8:f4:
         53:bf:bd:31:1e:27:e0:8a:8b:2e:d5:63:49:9a:a7:a8:cf:f7:
         66:09:3a:80:1b:69:2f:a7:1f:32:ca:2c:76:5a:4e:d1:a2:b1:
         9b:2a:0e:6d:e4:38:1d:1b:70:c3:b2:c7:26:c7:ee:d3:e1:23:
         f4:74:ec:a1:a6:b0:96:d1:77:39:7e:e0:71:26:26:d7:0e:5e:
         e2:d1:8d:07:c4:c5:fb:66:77:dd:0b:7b:ac:01:6a:f2:10:ec:
         29:75:f4:07:40:8f:f4:0f:40:8e:5f:5c:00:1e:51:ad:a8:dd:
         ad:02:13:45:70:58:35:81:f2:be:9e:cc:ad:92:77:72:a8:d2:
         85:cb:d8:67:c0:8d:da:db:c4:1c:fb:64:b6:35:6e:a7:37:0f:
         cd:55:9e:c5:ab:2c:46:38:af:1a:3e:e4:e8:d3:25:2b:d0:50:
         7d:3a:83:b6:28:27:7a:ac:72:ee:be:9e:75:99:9d:e1:a6:a7:
         3d:f7:f0:47:a6:a8:52:b5:d6:ef:ab:b4:3e:b0:38:b5:6f:4f:
         5d:d6:ad:a4:31:09:cf:b9:bd:d2:88:2a:56:5b:e8:94:28:c1:
         07:c9:8d:e0
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUBVKqDZArQMvBe6pLQgNuaskhwMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYwOUEwNzhDODgzQjIyQjY1OTgxMUIxNzMwQTQzNjdG
OTgzMjIyRTAeFw0yNTA3MTIwMzUxMjNaFw0yNjA3MTEwMzU2MjNaMDMxMTAvBgNV
BAMTKEU2QjQwMUE5RTc1N0I1QUNDQUE3NkY5NzBCMTFFMThENUIwRkZBRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNDOK9N3anojNdMy2amy7eiFDo
OjwyGkcnUkWBvy3RYZn9wgBOyxAVH+tvf52vqKrR4C7M3skrr9Y9j4Esf1tt3qUR
OSifOYTvXoN80t/66ooAayTGSj0Q54k4lWNyj3GBidoFSAIxNxR+h3uwuPctpOzi
LOL2GVGNFdwlg6F/x75OP5iINXTBlD98xAUBA0TO4tdftKhGgTOj8g6V6MlXW1Qw
BFrY4x/coBIP7x/ONCi+BVUob0WlMTD+N7BuD9Yto1QSJON8uNnz5UHB69d//hsM
f6INeTClQG760htNmuDRyb2IllF7uZmwy4wnrk2o6Lwfyk0Zzu6kdOsx/EJbAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU5rQBqedXtazKp2+XCxHhjVsP+vcwHwYDVR0j
BBgwFoAUbwmgeMiDsitlmBGxcwpDZ/mDIi4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlZDRlh0V3NZYUNVMTNWbUFiQk1Yd2t2b01MQzljUHlrNHNIWThwdkF2
UnMvMC82RjA5QTA3OEM4ODNCMjJCNjU5ODExQjE3MzBBNDM2N0Y5ODMyMjJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGMDlBMDc4Qzg4M0IyMkI2
NTk4MTFCMTczMEE0MzY3Rjk4MzIyMkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJWQ0ZYdFdzWWFDVTEzVm1BYkJNWHdrdm9NTEM5Y1B5azRzSFk4cHZBdlJzLzAv
MzIzODMwMzQzYTM2MzczNzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzNjMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGdwMA0GCSqGSIb3DQEBCwUAA4IBAQAHIV9l
6Qh1A+MZ/Vp+iHfvvkpUHGEgqKi0XPA8TbD88KJx+PRTv70xHifgiosu1WNJmqeo
z/dmCTqAG2kvpx8yyix2Wk7RorGbKg5t5DgdG3DDsscmx+7T4SP0dOyhprCW0Xc5
fuBxJibXDl7i0Y0HxMX7ZnfdC3usAWryEOwpdfQHQI/0D0COX1wAHlGtqN2tAhNF
cFg1gfK+nsytkndyqNKFy9hnwI3a28Qc+2S2NW6nNw/NVZ7FqyxGOK8aPuTo0yUr
0FB9OoO2KCd6rHLuvp51mZ3hpqc99/BHpqhStdbvq7Q+sDi1b09d1q2kMQnPub3S
iCpWW+iUKMEHyY3g
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:39:59 2025 by rpki-client