Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/323830343a313735633a3a2f33322d313238203d3e20323633313430.roa
File:                     323830343a313735633a3a2f33322d313238203d3e20323633313430.roa (raw, json)
Hash identifier:          LcxgBvhys26dh3eN+AkNblIZ169BBg5L/bmL0RHyz5I=
Subject key identifier:   ED:40:6E:6D:88:86:53:8A:56:0A:44:65:F4:C0:8C:B8:9C:48:96:D0
Certificate issuer:       /CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810
Certificate serial:       355941F56B7DA1DC71331BCE8BCA9FCAD9C7BAB9
Authority key identifier: 8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/323830343a313735633a3a2f33322d313238203d3e20323633313430.roa
Signing time:             Wed 11 Jun 2025 17:26:24 +0000
ROA not before:           Wed 11 Jun 2025 17:21:24 +0000
ROA not after:            Wed 10 Jun 2026 17:26:24 +0000
asID:                     263140
IP address blocks:        2804:175c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl
                          rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 02:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:59:41:f5:6b:7d:a1:dc:71:33:1b:ce:8b:ca:9f:ca:d9:c7:ba:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810
        Validity
            Not Before: Jun 11 17:21:24 2025 GMT
            Not After : Jun 10 17:26:24 2026 GMT
        Subject: CN=ED406E6D8886538A560A4465F4C08CB89C4896D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:ab:2f:4e:f2:12:cb:76:4f:0b:da:cc:e0:
                    bb:24:7c:8b:50:fd:23:fa:29:c7:0f:e4:e2:0e:c0:
                    b1:a2:e0:7f:fc:66:6a:69:fd:58:05:f3:63:d3:38:
                    71:eb:12:09:75:66:76:5e:41:88:16:36:03:be:55:
                    92:84:3b:f7:82:64:5b:27:3c:c4:d6:6a:99:93:f3:
                    ed:53:4a:bb:6d:f9:65:12:04:88:6b:b2:76:16:f8:
                    09:e5:9a:a5:04:8a:62:fe:47:df:6c:ad:c4:1e:36:
                    a1:99:95:a7:61:51:e3:55:ec:10:70:2f:d7:09:1a:
                    a4:52:32:e6:9a:8d:ac:45:1c:c7:96:df:e6:30:b2:
                    80:07:1b:37:2d:f7:68:07:96:4c:1b:56:cf:cc:a8:
                    59:a7:e2:3c:bb:b2:98:18:01:36:51:77:9b:e6:14:
                    8c:39:2c:ba:97:d0:97:6f:2b:41:1f:16:c8:3e:79:
                    ca:20:7d:e1:28:60:78:b1:df:01:f1:94:b1:1e:ae:
                    2e:93:c3:16:d6:c2:b6:9f:42:36:4a:9d:1e:ab:05:
                    53:5c:ad:70:09:57:ba:ba:9b:d8:6e:9e:45:fc:1c:
                    99:99:15:47:99:56:19:89:7a:5a:25:b5:2c:0a:fe:
                    04:96:8d:81:c6:de:13:44:18:45:b9:df:34:b7:c2:
                    83:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:40:6E:6D:88:86:53:8A:56:0A:44:65:F4:C0:8C:B8:9C:48:96:D0
            X509v3 Authority Key Identifier:
                keyid:8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/323830343a313735633a3a2f33322d313238203d3e20323633313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:175c::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:c1:6c:e4:d5:d3:c1:9e:bb:50:5a:74:bf:3f:1b:d9:bb:b1:
         10:1b:1a:8a:8e:8a:9f:48:16:07:fb:fa:0c:14:df:7d:ba:c1:
         6b:92:2a:ac:85:4b:53:a6:73:47:f2:1c:ad:0c:0d:44:32:d7:
         96:04:3d:9f:17:74:57:a5:ce:b2:17:cd:3f:63:36:bb:de:29:
         75:c9:e2:0e:79:4e:19:66:80:57:52:08:9e:14:f4:00:8a:00:
         ed:e9:13:48:14:77:f5:cb:b3:c6:f6:38:6c:e4:49:1f:5f:93:
         98:fe:b1:08:bc:10:c9:c0:9c:63:b1:35:68:4d:b0:7a:07:15:
         44:37:0d:ce:18:89:9b:07:d3:54:3f:c4:7e:64:c2:d4:51:3a:
         08:03:69:38:7b:2f:c9:22:a3:d6:b9:d5:03:5f:7e:2b:21:a8:
         a0:10:6e:d7:a3:87:f4:86:e4:07:4e:ed:17:48:d5:89:09:d7:
         58:e1:21:ef:09:c2:fe:00:a8:46:34:a5:72:8b:5a:53:5a:02:
         0c:2e:28:a1:0f:08:13:17:6c:25:b3:e0:4d:aa:e7:db:7b:b4:
         da:5a:95:fd:6e:46:a9:06:38:14:9e:27:fd:05:d2:73:11:5b:
         85:67:5d:c5:8a:9b:41:1e:b4:62:14:f3:d0:f8:85:d4:7d:d3:
         20:16:15:59
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUNVlB9Wt9odxxMxvOi8qfytnHurkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEYzMjdGRUZBNEU4Nzg4RkZDRkRDRDdDNkQxOTA2NDBG
OEE2MjgxMDAeFw0yNTA2MTExNzIxMjRaFw0yNjA2MTAxNzI2MjRaMDMxMTAvBgNV
BAMTKEVENDA2RTZEODg4NjUzOEE1NjBBNDQ2NUY0QzA4Q0I4OUM0ODk2RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbXqsvTvISy3ZPC9rM4LskfItQ
/SP6KccP5OIOwLGi4H/8Zmpp/VgF82PTOHHrEgl1ZnZeQYgWNgO+VZKEO/eCZFsn
PMTWapmT8+1TSrtt+WUSBIhrsnYW+AnlmqUEimL+R99srcQeNqGZladhUeNV7BBw
L9cJGqRSMuaajaxFHMeW3+YwsoAHGzct92gHlkwbVs/MqFmn4jy7spgYATZRd5vm
FIw5LLqX0JdvK0EfFsg+ecogfeEoYHix3wHxlLEeri6TwxbWwrafQjZKnR6rBVNc
rXAJV7q6m9hunkX8HJmZFUeZVhmJeloltSwK/gSWjYHG3hNEGEW53zS3woObAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU7UBubYiGU4pWCkRl9MCMuJxIltAwHwYDVR0j
BBgwFoAUjzJ/76ToeI/8/c18bRkGQPimKBAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnpWUjI5bmhrRkFyam0zYm9HNnhySkNWUFEzNmI1RGFlVnN5bjQ0U1p0
QUIvMC84RjMyN0ZFRkE0RTg3ODhGRkNGRENEN0M2RDE5MDY0MEY4QTYyODEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGMzI3RkVGQTRFODc4OEZG
Q0ZEQ0Q3QzZEMTkwNjQwRjhBNjI4MTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ6VlIyOW5oa0ZBcmptM2JvRzZ4ckpDVlBRMzZiNURhZVZzeW40NFNadEFCLzAv
MzIzODMwMzQzYTMxMzczNTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzMTM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBBdcMA0GCSqGSIb3DQEBCwUAA4IBAQBVwWzk
1dPBnrtQWnS/PxvZu7EQGxqKjoqfSBYH+/oMFN99usFrkiqshUtTpnNH8hytDA1E
MteWBD2fF3RXpc6yF80/Yza73il1yeIOeU4ZZoBXUgieFPQAigDt6RNIFHf1y7PG
9jhs5EkfX5OY/rEIvBDJwJxjsTVoTbB6BxVENw3OGImbB9NUP8R+ZMLUUToIA2k4
ey/JIqPWudUDX34rIaigEG7Xo4f0huQHTu0XSNWJCddY4SHvCcL+AKhGNKVyi1pT
WgIMLiihDwgTF2wls+BNqufbe7TaWpX9bkapBjgUnif9BdJzEVuFZ13FiptBHrRi
FPPQ+IXUfdMgFhVZ
-----END CERTIFICATE-----
Generated at Mon Jun 23 12:39:29 2025 by rpki-client