Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a3a2f33322d3332203d3e20323633393334.roa
File:                     323830343a323830303a3a2f33322d3332203d3e20323633393334.roa (raw, json)
Hash identifier:          vJzWwj7FgeoReYUGWconwzC6V1+DHbMaR1DQnZ0/Gb0=
Subject key identifier:   C2:4D:78:11:F6:C4:DA:D5:BA:78:50:59:1A:0A:D3:D3:35:C9:F9:42
Certificate issuer:       /CN=40E949830CC8643940DE6930F8D9D7E92FFA9152
Certificate serial:       22FA721C1023A68EBA5F28DA53C6DF24F281DBA1
Authority key identifier: 40:E9:49:83:0C:C8:64:39:40:DE:69:30:F8:D9:D7:E9:2F:FA:91:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40E949830CC8643940DE6930F8D9D7E92FFA9152.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a3a2f33322d3332203d3e20323633393334.roa
Signing time:             Wed 04 Jun 2025 15:46:50 +0000
ROA not before:           Wed 04 Jun 2025 15:41:50 +0000
ROA not after:            Wed 03 Jun 2026 15:46:50 +0000
asID:                     263934
IP address blocks:        2804:2800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.crl
                          rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40E949830CC8643940DE6930F8D9D7E92FFA9152.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 21:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:fa:72:1c:10:23:a6:8e:ba:5f:28:da:53:c6:df:24:f2:81:db:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40E949830CC8643940DE6930F8D9D7E92FFA9152
        Validity
            Not Before: Jun  4 15:41:50 2025 GMT
            Not After : Jun  3 15:46:50 2026 GMT
        Subject: CN=C24D7811F6C4DAD5BA7850591A0AD3D335C9F942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:22:39:56:1d:a3:44:20:fe:4c:3c:ba:f1:48:
                    73:8f:ef:d7:81:aa:04:01:01:af:91:6a:c1:b1:01:
                    6b:7d:78:4b:17:a5:3a:39:21:34:f1:79:03:03:c4:
                    cd:da:59:70:5e:d8:76:8d:81:a0:c6:70:0a:3f:e2:
                    28:cd:3b:c4:1e:13:e2:41:db:aa:33:ea:0a:e8:03:
                    48:37:83:21:fb:73:a4:b8:86:e4:ee:36:2a:36:78:
                    7f:5b:7b:9e:c9:7d:2b:ca:63:17:3b:e1:92:13:4a:
                    45:90:39:1b:a8:02:22:bd:4f:f9:6e:b2:85:40:34:
                    ba:4f:29:a1:c3:80:ca:d0:2b:1e:0f:ec:eb:25:d7:
                    68:d5:e9:0d:4f:58:04:2e:83:d0:54:bc:d7:de:34:
                    24:09:07:5b:e3:a9:58:e1:74:ee:58:15:e2:2b:df:
                    86:0e:1a:1e:4b:2f:bb:66:b9:d9:bc:85:6b:70:1c:
                    0e:80:80:80:b1:ed:d9:f0:a4:92:64:dc:f4:4f:e5:
                    7e:29:f5:6c:af:91:9c:cd:06:34:77:3b:50:60:8c:
                    af:38:d5:93:c1:8d:24:10:76:92:16:b9:f8:eb:37:
                    b8:92:d5:ac:49:2d:dd:1e:54:e7:77:59:68:30:c3:
                    b4:30:28:bf:2c:30:15:40:5f:9d:ba:8c:04:80:16:
                    9c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4D:78:11:F6:C4:DA:D5:BA:78:50:59:1A:0A:D3:D3:35:C9:F9:42
            X509v3 Authority Key Identifier:
                keyid:40:E9:49:83:0C:C8:64:39:40:DE:69:30:F8:D9:D7:E9:2F:FA:91:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40E949830CC8643940DE6930F8D9D7E92FFA9152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a3a2f33322d3332203d3e20323633393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2800::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:04:5d:a1:a0:8f:9e:df:c5:1d:45:9c:76:33:36:94:b2:03:
         40:f7:36:1d:3d:07:f1:45:27:63:12:33:e7:5f:45:5f:99:35:
         4a:a7:de:c9:0c:c6:b4:cc:30:0c:c8:8e:c8:28:45:ed:ad:52:
         39:33:c3:94:8f:c2:27:2a:18:d2:2a:bc:cc:b3:9d:fd:b3:65:
         64:75:31:73:a9:19:8b:53:3c:64:0f:bf:c2:88:4c:a5:44:0c:
         e6:21:4b:c9:f8:4d:43:27:a8:04:33:f6:84:1f:99:eb:18:3e:
         05:0c:c0:38:46:3a:ec:7e:aa:12:50:e3:7a:98:60:d6:d1:50:
         07:58:3c:c6:34:65:e0:77:3f:e7:53:d6:a6:93:2f:af:cc:d2:
         32:65:5d:67:b2:c8:6e:06:20:74:99:14:99:6f:6f:c7:6a:cc:
         4a:70:9a:fc:86:89:65:6e:fc:65:f9:5a:eb:09:51:46:72:e1:
         90:67:33:eb:4f:04:f2:c6:44:61:d8:db:79:14:a6:d5:af:15:
         fb:dd:80:c0:cb:3c:35:99:69:1c:62:e8:21:5f:25:99:cc:72:
         1a:d2:09:0a:0d:76:0d:63:33:92:45:2c:a2:6e:ec:c8:0b:26:
         20:18:03:4e:6c:40:63:00:76:a2:05:70:94:6c:bb:4b:b8:4e:
         a2:90:07:b2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIvpyHBAjpo66XyjaU8bfJPKB26EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBFOTQ5ODMwQ0M4NjQzOTQwREU2OTMwRjhEOUQ3RTky
RkZBOTE1MjAeFw0yNTA2MDQxNTQxNTBaFw0yNjA2MDMxNTQ2NTBaMDMxMTAvBgNV
BAMTKEMyNEQ3ODExRjZDNERBRDVCQTc4NTA1OTFBMEFEM0QzMzVDOUY5NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZIjlWHaNEIP5MPLrxSHOP79eB
qgQBAa+RasGxAWt9eEsXpTo5ITTxeQMDxM3aWXBe2HaNgaDGcAo/4ijNO8QeE+JB
26oz6groA0g3gyH7c6S4huTuNio2eH9be57JfSvKYxc74ZITSkWQORuoAiK9T/lu
soVANLpPKaHDgMrQKx4P7Osl12jV6Q1PWAQug9BUvNfeNCQJB1vjqVjhdO5YFeIr
34YOGh5LL7tmudm8hWtwHA6AgICx7dnwpJJk3PRP5X4p9WyvkZzNBjR3O1BgjK84
1ZPBjSQQdpIWufjrN7iS1axJLd0eVOd3WWgww7QwKL8sMBVAX526jASAFpxnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUwk14EfbE2tW6eFBZGgrT0zXJ+UIwHwYDVR0j
BBgwFoAUQOlJgwzIZDlA3mkw+NnX6S/6kVIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkU1a25DUWFpbnFkanJlazFIYVR6R3RxTk1adTFwakNDaTRac3ZUMnY2
cDQvMC80MEU5NDk4MzBDQzg2NDM5NDBERTY5MzBGOEQ5RDdFOTJGRkE5MTUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwRTk0OTgzMENDODY0Mzk0
MERFNjkzMEY4RDlEN0U5MkZGQTkxNTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZFNWtuQ1FhaW5xZGpyZWsxSGFUekd0cU5NWnUxcGpDQ2k0WnN2VDJ2NnA0LzAv
MzIzODMwMzQzYTMyMzgzMDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzkzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQoADANBgkqhkiG9w0BAQsFAAOCAQEADwRdoaCP
nt/FHUWcdjM2lLIDQPc2HT0H8UUnYxIz519FX5k1SqfeyQzGtMwwDMiOyChF7a1S
OTPDlI/CJyoY0iq8zLOd/bNlZHUxc6kZi1M8ZA+/wohMpUQM5iFLyfhNQyeoBDP2
hB+Z6xg+BQzAOEY67H6qElDjephg1tFQB1g8xjRl4Hc/51PWppMvr8zSMmVdZ7LI
bgYgdJkUmW9vx2rMSnCa/IaJZW78Zfla6wlRRnLhkGcz608E8sZEYdjbeRSm1a8V
+92AwMs8NZlpHGLoIV8lmcxyGtIJCg12DWMzkkUsom7syAsmIBgDTmxAYwB2ogVw
lGy7S7hOopAHsg==
-----END CERTIFICATE-----
Generated at Sun Jun 22 01:31:19 2025 by rpki-client