Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a3a2f33322d3332203d3e20323733343637.roa
File:                     323830343a386631383a3a2f33322d3332203d3e20323733343637.roa (raw, json)
Hash identifier:          +Ly7zBBP9JC++r+Glud0NN6OxjvwMlIWOM/vYlhsXCU=
Subject key identifier:   7B:9C:BD:15:D8:BF:C9:B6:7C:6E:0F:1F:F3:76:EE:EF:1D:B0:41:3E
Certificate issuer:       /CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
Certificate serial:       662AB75642A42CAB650FAF3F68116C442C3B53D2
Authority key identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a3a2f33322d3332203d3e20323733343637.roa
Signing time:             Fri 25 Apr 2025 14:05:00 +0000
ROA not before:           Fri 25 Apr 2025 14:00:00 +0000
ROA not after:            Fri 24 Apr 2026 14:05:00 +0000
asID:                     273467
IP address blocks:        2804:8f18::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl
                          rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 08:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2a:b7:56:42:a4:2c:ab:65:0f:af:3f:68:11:6c:44:2c:3b:53:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
        Validity
            Not Before: Apr 25 14:00:00 2025 GMT
            Not After : Apr 24 14:05:00 2026 GMT
        Subject: CN=7B9CBD15D8BFC9B67C6E0F1FF376EEEF1DB0413E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:36:77:42:4d:da:ae:a2:67:4e:7a:40:f4:
                    0e:ee:1f:79:85:4e:26:e5:8e:b8:d8:33:6d:44:be:
                    16:0e:91:23:2d:bf:5f:3e:67:4c:ec:7e:43:9e:4f:
                    67:da:22:20:c0:11:54:e4:79:87:f5:21:63:ba:d3:
                    8a:06:a1:cc:cb:65:cd:64:5e:57:f7:81:2e:39:71:
                    9b:47:d4:33:a5:92:5e:8a:94:e4:26:42:d4:45:a1:
                    fa:48:0f:ae:65:ff:ac:b2:62:74:54:03:08:28:48:
                    48:82:41:8b:e5:2a:ff:e8:ca:96:bb:b8:31:fd:e4:
                    2b:50:1c:cd:86:91:d8:8f:ce:a6:fc:b5:59:ed:16:
                    6a:c1:70:c2:b3:93:16:38:92:98:2a:ab:2a:ef:8b:
                    58:ce:a2:fe:bc:5e:04:e7:b6:71:b5:1e:27:87:95:
                    86:59:f2:d1:66:b0:96:08:7a:b0:5e:c6:e1:d3:0a:
                    a1:48:14:ca:a8:fe:80:29:5c:9c:92:77:0b:a7:d7:
                    f5:49:a5:af:98:1e:06:1d:79:10:a4:b7:8b:f2:e1:
                    6d:f6:18:33:0d:e2:eb:67:5b:08:b2:df:ad:09:d8:
                    1d:3d:59:c5:22:c2:fb:46:39:ee:b6:4b:24:7b:9c:
                    2d:14:26:47:fa:e4:ac:e8:10:70:32:bc:cd:8e:e0:
                    18:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9C:BD:15:D8:BF:C9:B6:7C:6E:0F:1F:F3:76:EE:EF:1D:B0:41:3E
            X509v3 Authority Key Identifier:
                keyid:E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a3a2f33322d3332203d3e20323733343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f18::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:bc:a8:49:49:2a:f7:01:7a:cd:f5:bf:46:da:b4:3e:65:3e:
         1e:21:05:45:2c:36:0b:a5:54:ec:60:49:1a:d6:0e:e2:6b:08:
         e4:e2:6b:e1:10:ad:06:05:e3:63:e7:07:68:6d:8b:f5:d1:3a:
         a8:e3:d6:67:24:d0:d4:5b:95:01:4c:1b:2e:a6:bc:fe:e6:51:
         fc:ba:34:1c:2e:ed:f9:01:af:94:a8:ba:5f:cf:33:48:34:77:
         fc:80:04:d7:32:d0:73:82:bf:08:fc:b5:99:ef:91:de:4b:a3:
         9f:71:86:7a:e6:c2:98:2d:5b:9f:31:1e:6f:17:60:54:76:85:
         b1:c0:ea:0b:2a:26:fa:d4:87:5a:c7:cf:0c:10:a1:78:9d:54:
         72:8e:3f:44:e7:f7:d8:71:8e:0d:f0:84:d2:f9:c5:81:09:2f:
         e7:05:cf:9d:4b:a5:7b:72:ef:ca:54:e3:c8:ce:ac:e7:24:04:
         79:0e:ab:72:ec:74:6e:fe:67:00:76:38:47:50:2a:d7:fc:c9:
         6b:be:14:be:6e:09:fa:11:27:45:d9:10:40:56:fc:af:d8:a5:
         fb:e7:e0:76:7d:92:3a:df:7a:cc:2e:23:93:da:fa:e5:62:08:
         57:f2:5e:9c:66:38:84:0f:69:48:fc:12:48:3f:e2:1e:89:19:
         0f:41:53:52
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZiq3VkKkLKtlD68/aBFsRCw7U9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdBQzZCQzhEMTlDRDM1OERBMDdENzA4M0NFNjRCMzdB
RDk1RDI4QzAeFw0yNTA0MjUxNDAwMDBaFw0yNjA0MjQxNDA1MDBaMDMxMTAvBgNV
BAMTKDdCOUNCRDE1RDhCRkM5QjY3QzZFMEYxRkYzNzZFRUVGMURCMDQxM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0AjZ3Qk3arqJnTnpA9A7uH3mF
TibljrjYM21EvhYOkSMtv18+Z0zsfkOeT2faIiDAEVTkeYf1IWO604oGoczLZc1k
Xlf3gS45cZtH1DOlkl6KlOQmQtRFofpID65l/6yyYnRUAwgoSEiCQYvlKv/oypa7
uDH95CtQHM2GkdiPzqb8tVntFmrBcMKzkxY4kpgqqyrvi1jOov68XgTntnG1HieH
lYZZ8tFmsJYIerBexuHTCqFIFMqo/oApXJySdwun1/VJpa+YHgYdeRCkt4vy4W32
GDMN4utnWwiy360J2B09WcUiwvtGOe62SyR7nC0UJkf65KzoEHAyvM2O4BilAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUe5y9Fdi/ybZ8bg8f83bu7x2wQT4wHwYDVR0j
BBgwFoAU56xryNGc01jaB9cIPOZLN62V0owwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkNFdkVCd05hOHBzNkNhb0hWYmozSGJjdzYyaVFlejJUTnJ1N3M2OHZL
R1AvMC9FN0FDNkJDOEQxOUNEMzU4REEwN0Q3MDgzQ0U2NEIzN0FEOTVEMjhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3QUM2QkM4RDE5Q0QzNThE
QTA3RDcwODNDRTY0QjM3QUQ5NUQyOEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZDRXZFQndOYThwczZDYW9IVmJqM0hiY3c2MmlRZXoyVE5ydTdzNjh2S0dQLzAv
MzIzODMwMzQzYTM4NjYzMTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzQzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASPGDANBgkqhkiG9w0BAQsFAAOCAQEAa7yoSUkq
9wF6zfW/Rtq0PmU+HiEFRSw2C6VU7GBJGtYO4msI5OJr4RCtBgXjY+cHaG2L9dE6
qOPWZyTQ1FuVAUwbLqa8/uZR/Lo0HC7t+QGvlKi6X88zSDR3/IAE1zLQc4K/CPy1
me+R3kujn3GGeubCmC1bnzEebxdgVHaFscDqCyom+tSHWsfPDBCheJ1Uco4/ROf3
2HGODfCE0vnFgQkv5wXPnUule3LvylTjyM6s5yQEeQ6rcux0bv5nAHY4R1Aq1/zJ
a74Uvm4J+hEnRdkQQFb8r9il++fgdn2SOt96zC4jk9r65WIIV/JenGY4hA9pSPwS
SD/iHokZD0FTUg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 14:24:37 2025 by rpki-client