Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/323830343a323162303a343030303a3a2f33342d3334203d3e20323634353637.roa
File:                     323830343a323162303a343030303a3a2f33342d3334203d3e20323634353637.roa (raw, json)
Hash identifier:          HWhjgTJM3uO/18R25ps8JMFDZWcKbXsVNXLVL6zn7x8=
Subject key identifier:   D1:11:DF:B8:EE:C1:45:0B:D8:A1:4B:2C:C1:68:FA:2E:B7:4C:6D:14
Certificate issuer:       /CN=6B14EA342D84DC5B584613046E346F9A5722784F
Certificate serial:       1D2DBFDC68D2549283C1EB41F2D88532D3462E29
Authority key identifier: 6B:14:EA:34:2D:84:DC:5B:58:46:13:04:6E:34:6F:9A:57:22:78:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B14EA342D84DC5B584613046E346F9A5722784F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/323830343a323162303a343030303a3a2f33342d3334203d3e20323634353637.roa
Signing time:             Thu 24 Jul 2025 17:40:12 +0000
ROA not before:           Thu 24 Jul 2025 17:35:12 +0000
ROA not after:            Thu 23 Jul 2026 17:40:12 +0000
asID:                     264567
IP address blocks:        2804:21b0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/6B14EA342D84DC5B584613046E346F9A5722784F.crl
                          rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/6B14EA342D84DC5B584613046E346F9A5722784F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B14EA342D84DC5B584613046E346F9A5722784F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2d:bf:dc:68:d2:54:92:83:c1:eb:41:f2:d8:85:32:d3:46:2e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B14EA342D84DC5B584613046E346F9A5722784F
        Validity
            Not Before: Jul 24 17:35:12 2025 GMT
            Not After : Jul 23 17:40:12 2026 GMT
        Subject: CN=D111DFB8EEC1450BD8A14B2CC168FA2EB74C6D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:c5:47:58:42:f1:be:73:fe:76:2f:b8:d8:
                    4f:37:d8:15:1f:b5:95:d0:63:ec:cc:67:1d:ac:22:
                    9f:7a:01:6d:18:94:7c:c1:71:db:ed:89:41:61:15:
                    25:b6:2d:01:98:25:46:d8:f8:d4:9f:91:38:1e:f8:
                    b7:12:63:a5:08:91:1b:e2:09:43:f3:16:fa:a7:75:
                    40:4b:a3:55:5f:37:1f:59:34:51:0a:7d:bf:f2:74:
                    46:2e:b9:95:87:d8:0c:58:77:d1:3f:d4:ca:76:6f:
                    1e:de:05:8e:41:f6:6a:7c:74:a0:d5:bd:be:f8:4c:
                    d3:5c:9a:40:10:2f:47:9c:25:71:cc:d1:3c:1d:fc:
                    59:e9:f9:d2:07:c0:8e:c9:9c:6f:44:46:65:72:30:
                    58:bd:89:e7:98:ef:2c:5a:35:d3:cf:af:a4:52:23:
                    23:ec:d0:17:08:2d:ee:17:26:4d:ff:48:43:d0:19:
                    df:32:d5:c1:0f:56:40:19:3c:a2:c0:eb:61:90:07:
                    57:b6:38:46:b6:d0:ca:73:8c:78:a4:05:89:6a:2c:
                    a6:d8:a2:70:7b:e6:38:f5:62:b8:43:f5:50:0b:c0:
                    e7:89:2b:30:1e:95:d9:11:38:8c:97:2e:85:63:93:
                    bf:9b:0c:de:87:0c:01:c9:f9:59:45:8d:02:2a:8c:
                    39:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:11:DF:B8:EE:C1:45:0B:D8:A1:4B:2C:C1:68:FA:2E:B7:4C:6D:14
            X509v3 Authority Key Identifier:
                keyid:6B:14:EA:34:2D:84:DC:5B:58:46:13:04:6E:34:6F:9A:57:22:78:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/6B14EA342D84DC5B584613046E346F9A5722784F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B14EA342D84DC5B584613046E346F9A5722784F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/323830343a323162303a343030303a3a2f33342d3334203d3e20323634353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21b0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:7d:bf:72:22:7d:0d:77:bd:a3:4c:b1:75:42:70:28:42:46:
         d3:c2:57:27:b4:65:28:78:40:2e:1b:7c:a7:3d:75:59:ad:ee:
         28:c0:ce:e1:63:ba:2c:a0:f2:ae:f2:68:6f:d6:38:f7:ef:fc:
         dd:63:27:de:96:44:42:71:0d:10:cb:46:58:5a:37:cf:10:f4:
         fd:3c:02:b4:49:dc:40:6e:fd:c0:ac:49:bf:35:c7:db:35:50:
         9c:5f:33:8d:e5:54:36:31:95:13:d0:93:a1:90:d7:10:ba:28:
         64:c3:b9:9e:fc:4a:e0:29:68:0e:f6:72:4b:c7:3c:dc:69:51:
         27:a4:f7:54:42:b2:04:eb:26:a9:9a:d8:ce:fe:8f:cd:16:bd:
         be:c2:39:d0:4f:fb:e0:6e:f8:1a:8a:4d:22:97:da:23:41:4b:
         0e:7a:2b:1f:76:fd:e8:4e:54:cd:c5:a1:ef:79:96:ff:d3:0c:
         16:da:03:d9:88:06:02:de:c5:9f:2f:6a:81:d8:04:2f:ba:e5:
         9e:44:76:c0:01:f6:b5:67:07:2f:f3:05:3f:3d:3b:60:1f:4c:
         b0:0c:c0:e9:55:87:f4:5c:83:30:da:fa:09:8b:72:f9:04:fd:
         7e:db:66:a1:aa:87:9d:cd:d9:58:c8:38:8f:84:bf:ff:58:65:
         4d:d2:4f:23
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHS2/3GjSVJKDwetB8tiFMtNGLikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIxNEVBMzQyRDg0REM1QjU4NDYxMzA0NkUzNDZGOUE1
NzIyNzg0RjAeFw0yNTA3MjQxNzM1MTJaFw0yNjA3MjMxNzQwMTJaMDMxMTAvBgNV
BAMTKEQxMTFERkI4RUVDMTQ1MEJEOEExNEIyQ0MxNjhGQTJFQjc0QzZEMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiMVHWELxvnP+di+42E832BUf
tZXQY+zMZx2sIp96AW0YlHzBcdvtiUFhFSW2LQGYJUbY+NSfkTge+LcSY6UIkRvi
CUPzFvqndUBLo1VfNx9ZNFEKfb/ydEYuuZWH2AxYd9E/1Mp2bx7eBY5B9mp8dKDV
vb74TNNcmkAQL0ecJXHM0Twd/Fnp+dIHwI7JnG9ERmVyMFi9ieeY7yxaNdPPr6RS
IyPs0BcILe4XJk3/SEPQGd8y1cEPVkAZPKLA62GQB1e2OEa20MpzjHikBYlqLKbY
onB75jj1YrhD9VALwOeJKzAeldkROIyXLoVjk7+bDN6HDAHJ+VlFjQIqjDk5AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU0RHfuO7BRQvYoUsswWj6LrdMbRQwHwYDVR0j
BBgwFoAUaxTqNC2E3FtYRhMEbjRvmlcieE8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdOMmFNY3ZYVDc4UzlMQnhSMk56ZnNxVVBNekVFS3A1MnlMQnJicVh6
WmQvMC82QjE0RUEzNDJEODREQzVCNTg0NjEzMDQ2RTM0NkY5QTU3MjI3ODRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCMTRFQTM0MkQ4NERDNUI1
ODQ2MTMwNDZFMzQ2RjlBNTcyMjc4NEYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHTjJhTWN2WFQ3OFM5TEJ4UjJOemZzcVVQTXpFRUtwNTJ5TEJyYnFYelpkLzAv
MzIzODMwMzQzYTMyMzE2MjMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDM1MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEIbBAMA0GCSqGSIb3DQEBCwUA
A4IBAQAifb9yIn0Nd72jTLF1QnAoQkbTwlcntGUoeEAuG3ynPXVZre4owM7hY7os
oPKu8mhv1jj37/zdYyfelkRCcQ0Qy0ZYWjfPEPT9PAK0SdxAbv3ArEm/NcfbNVCc
XzON5VQ2MZUT0JOhkNcQuihkw7me/ErgKWgO9nJLxzzcaVEnpPdUQrIE6yapmtjO
/o/NFr2+wjnQT/vgbvgaik0il9ojQUsOeisfdv3oTlTNxaHveZb/0wwW2gPZiAYC
3sWfL2qB2AQvuuWeRHbAAfa1Zwcv8wU/PTtgH0ywDMDpVYf0XIMw2voJi3L5BP1+
22ahqoedzdlYyDiPhL//WGVN0k8j
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:32:55 2025 by rpki-client