Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a353030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a353030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          MdPGu07LINRFFcAuMkKzd2J7XeOFhcCErVFCkkYo8XI=
Subject key identifier:   03:09:C5:CC:EB:87:D4:36:2E:1A:5E:37:C4:A5:92:13:C2:76:6C:9E
Certificate issuer:       /CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
Certificate serial:       07E04A212D9D6EF6EBB9458309AD8A8BF8DE2E9A
Authority key identifier: BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a353030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Fri 16 May 2025 13:17:45 +0000
ROA not before:           Fri 16 May 2025 13:12:45 +0000
ROA not after:            Fri 15 May 2026 13:17:45 +0000
asID:                     270760
IP address blocks:        2804:70fc:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 02:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e0:4a:21:2d:9d:6e:f6:eb:b9:45:83:09:ad:8a:8b:f8:de:2e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
        Validity
            Not Before: May 16 13:12:45 2025 GMT
            Not After : May 15 13:17:45 2026 GMT
        Subject: CN=0309C5CCEB87D4362E1A5E37C4A59213C2766C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:46:cb:da:09:20:ea:c1:04:33:62:c2:ea:
                    7c:99:da:5f:64:dc:77:00:5f:db:5f:9e:19:3b:a2:
                    da:21:e8:74:10:4a:b0:f9:9f:e9:df:bc:4b:78:94:
                    0c:f9:35:f8:4d:af:48:68:65:d4:5f:16:5a:4a:52:
                    62:d6:db:95:90:05:14:3e:d3:a2:57:b8:38:09:38:
                    dd:b0:ec:de:b3:91:3d:22:0a:12:69:f6:bd:ca:63:
                    9d:fc:e0:23:d9:ba:ac:bb:dd:49:a6:c5:b1:be:4a:
                    58:bb:48:9d:bf:d2:07:61:28:49:f2:34:cb:ff:51:
                    48:73:03:7a:9e:73:48:8f:25:9e:e5:b1:7b:4d:ae:
                    8b:a0:13:7e:aa:86:02:43:ca:20:4e:1b:ae:14:68:
                    68:ef:cf:9d:1a:db:c9:9b:28:81:ab:4b:24:7e:0c:
                    08:a7:7b:87:2b:10:65:f5:2d:e2:04:5a:38:cb:4a:
                    a9:68:37:37:c9:d4:aa:4f:d0:96:48:0a:a0:d7:f5:
                    5d:a2:7c:78:9c:17:9f:2b:fc:22:d8:e7:82:86:25:
                    d8:98:f4:a3:7e:94:0f:83:2e:e6:19:5b:32:5f:96:
                    17:5f:4e:a7:c1:a9:9c:dc:0e:f3:ca:97:0e:8b:0c:
                    6d:76:91:3f:9c:25:43:d9:44:7a:77:18:ef:37:99:
                    2e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:09:C5:CC:EB:87:D4:36:2E:1A:5E:37:C4:A5:92:13:C2:76:6C:9E
            X509v3 Authority Key Identifier:
                keyid:BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a353030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         32:d2:b3:88:cc:f6:1d:6e:fb:7d:3a:c5:c0:1b:aa:cc:51:f6:
         ef:63:27:9a:b2:6f:c7:6a:fc:2d:10:22:b9:da:1d:d4:62:24:
         9e:d0:9a:24:b4:bb:41:b3:a4:e9:e2:05:ff:a6:ea:84:74:9a:
         79:5f:ec:f4:cb:b4:65:bc:01:ea:2b:76:2f:b1:b0:e0:06:01:
         d0:44:1d:54:f4:bd:f5:ff:78:0e:1a:ef:2f:bc:42:cc:0c:10:
         3f:8c:f8:42:fb:79:0c:42:50:01:4d:9b:b3:5e:e3:0a:24:9d:
         ba:a5:b6:2b:71:fb:d6:83:3c:25:73:bd:17:b9:f8:56:12:49:
         15:8b:f5:c7:92:89:8d:1a:fb:b5:a6:d2:fa:e5:80:53:38:c5:
         09:b6:87:ba:86:5f:53:5d:8d:91:79:de:aa:05:51:02:23:ae:
         0e:cb:8c:25:d2:bc:60:da:af:16:cd:bd:03:f7:36:ee:55:87:
         41:1f:89:c2:b6:28:88:e7:44:b6:d3:9e:c6:d0:0a:11:17:51:
         ae:ca:6b:3c:a7:1e:15:03:a7:cc:90:88:27:5e:0c:bb:d7:64:
         3f:b4:a9:66:61:15:d0:90:f0:60:65:57:7e:06:68:36:c1:f7:
         05:ea:74:54:fb:06:de:80:0c:2e:a0:79:ec:0f:b0:68:89:5c:
         40:55:f6:d5
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUB+BKIS2dbvbruUWDCa2Ki/jeLpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRGOTg0QUE3QjVGMzFFQ0IyRUNFMkI1Njg4ODNDMDk4
NjU0NDNDQjAeFw0yNTA1MTYxMzEyNDVaFw0yNjA1MTUxMzE3NDVaMDMxMTAvBgNV
BAMTKDAzMDlDNUNDRUI4N0Q0MzYyRTFBNUUzN0M0QTU5MjEzQzI3NjZDOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUVEbL2gkg6sEEM2LC6nyZ2l9k
3HcAX9tfnhk7otoh6HQQSrD5n+nfvEt4lAz5NfhNr0hoZdRfFlpKUmLW25WQBRQ+
06JXuDgJON2w7N6zkT0iChJp9r3KY5384CPZuqy73UmmxbG+Sli7SJ2/0gdhKEny
NMv/UUhzA3qec0iPJZ7lsXtNrougE36qhgJDyiBOG64UaGjvz50a28mbKIGrSyR+
DAine4crEGX1LeIEWjjLSqloNzfJ1KpP0JZICqDX9V2ifHicF58r/CLY54KGJdiY
9KN+lA+DLuYZWzJflhdfTqfBqZzcDvPKlw6LDG12kT+cJUPZRHp3GO83mS4hAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUAwnFzOuH1DYuGl43xKWSE8J2bJ4wHwYDVR0j
BBgwFoAUvfmEqntfMeyy7OK1aIg8CYZUQ8swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXgxREJyNXVpajlyVXVjMzlwSlRpMlBCWXpFaXlCalhtWlBpY0t5NUFl
VU0vMC9CREY5ODRBQTdCNUYzMUVDQjJFQ0UyQjU2ODg4M0MwOTg2NTQ0M0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERjk4NEFBN0I1RjMxRUNC
MkVDRTJCNTY4ODgzQzA5ODY1NDQzQ0IuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV4MURCcjV1aWo5clV1YzM5cEpUaTJQQll6RWl5QmpYbVpQaWNLeTVBZVVNLzAv
MzIzODMwMzQzYTM3MzA2NjYzM2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMDM3MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEcPxQMA0GCSqGSIb3DQEBCwUA
A4IBAQAy0rOIzPYdbvt9OsXAG6rMUfbvYyeasm/HavwtECK52h3UYiSe0JoktLtB
s6Tp4gX/puqEdJp5X+z0y7RlvAHqK3YvsbDgBgHQRB1U9L31/3gOGu8vvELMDBA/
jPhC+3kMQlABTZuzXuMKJJ26pbYrcfvWgzwlc70XufhWEkkVi/XHkomNGvu1ptL6
5YBTOMUJtoe6hl9TXY2Red6qBVECI64Oy4wl0rxg2q8Wzb0D9zbuVYdBH4nCtiiI
50S2057G0AoRF1Guyms8px4VA6fMkIgnXgy712Q/tKlmYRXQkPBgZVd+Bmg2wfcF
6nRU+wbegAwuoHnsD7BoiVxAVfbV
-----END CERTIFICATE-----
Generated at Fri Jun 20 02:55:26 2025 by rpki-client