Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/323830343a393363343a3a2f33322d3334203d3e20323734373939.roa
File:                     323830343a393363343a3a2f33322d3334203d3e20323734373939.roa (raw, json)
Hash identifier:          t/gZ4cjylinH0ISO1oFP4SuwOPt3V4e2F5CZjsTQlcU=
Subject key identifier:   AD:03:6C:04:A4:5E:0E:89:63:02:A7:12:A1:C3:82:50:12:E8:0D:5B
Certificate issuer:       /CN=CA70F9A507FA2985459107906414142C8199804F
Certificate serial:       396BCB930952831ED843CA5B37AAC0D1D06E3126
Authority key identifier: CA:70:F9:A5:07:FA:29:85:45:91:07:90:64:14:14:2C:81:99:80:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA70F9A507FA2985459107906414142C8199804F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/323830343a393363343a3a2f33322d3334203d3e20323734373939.roa
Signing time:             Fri 16 May 2025 15:29:11 +0000
ROA not before:           Fri 16 May 2025 15:24:11 +0000
ROA not after:            Fri 15 May 2026 15:29:11 +0000
asID:                     274799
IP address blocks:        2804:93c4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.crl
                          rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA70F9A507FA2985459107906414142C8199804F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 23:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6b:cb:93:09:52:83:1e:d8:43:ca:5b:37:aa:c0:d1:d0:6e:31:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA70F9A507FA2985459107906414142C8199804F
        Validity
            Not Before: May 16 15:24:11 2025 GMT
            Not After : May 15 15:29:11 2026 GMT
        Subject: CN=AD036C04A45E0E896302A712A1C3825012E80D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:15:8b:4c:42:69:09:71:7d:2a:bf:ec:df:
                    6a:2e:c8:9a:7b:67:de:a2:ed:5d:cc:b0:58:f7:15:
                    08:50:b8:f1:d1:4c:db:03:c0:cd:e4:74:54:39:1a:
                    42:44:b5:24:19:64:e9:fa:01:e3:5d:a9:5f:52:88:
                    04:58:3e:5b:22:04:4e:df:81:80:42:0c:b6:32:03:
                    c6:07:f7:d5:fe:77:22:a6:ac:88:0f:59:45:d6:05:
                    90:b4:f1:b5:0a:85:9d:0d:0b:4a:bb:e9:a1:0e:0f:
                    1e:95:09:e5:9f:67:e8:1b:30:4d:81:e2:97:db:9a:
                    9a:a6:69:d0:3d:0f:a6:e9:2e:d4:9e:3d:87:65:7c:
                    d5:ad:24:f0:b0:a7:8c:a8:c1:f5:87:e6:28:aa:cb:
                    4a:3e:57:9f:9a:3a:ec:cc:dd:1c:ba:b5:68:43:92:
                    6f:14:25:3b:1d:68:26:c9:78:d5:88:b1:4b:1d:eb:
                    c2:e3:18:25:f3:b3:ad:11:25:13:d5:5f:67:78:30:
                    17:2f:ba:83:a8:dd:fb:79:78:4f:9e:5c:7f:df:32:
                    74:78:14:26:03:f1:9b:40:15:92:a2:c0:16:e2:93:
                    95:60:f1:d4:64:d6:ef:11:65:4b:28:be:94:68:a8:
                    f9:19:dd:68:b6:80:ca:f0:9d:16:00:47:fe:21:78:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:03:6C:04:A4:5E:0E:89:63:02:A7:12:A1:C3:82:50:12:E8:0D:5B
            X509v3 Authority Key Identifier:
                keyid:CA:70:F9:A5:07:FA:29:85:45:91:07:90:64:14:14:2C:81:99:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/CA70F9A507FA2985459107906414142C8199804F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA70F9A507FA2985459107906414142C8199804F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FK2Z5CDvn74NRsiFv723PpSchtMFhqJPeRAT6SEj2sY/0/323830343a393363343a3a2f33322d3334203d3e20323734373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:93c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:c3:96:4f:c6:e8:7b:30:ea:9c:fd:aa:f0:67:06:89:94:2f:
         d0:29:69:1f:32:77:c5:e2:18:7c:25:39:ea:3b:35:13:7f:c4:
         2a:2d:fa:f6:c3:92:7f:c5:7d:c8:d9:c7:b3:83:b4:77:36:b3:
         a3:f3:06:8e:62:af:6f:f8:e2:54:73:7d:64:be:e6:10:e0:ea:
         ef:4b:0f:77:3a:e5:29:38:30:34:e9:20:ef:bf:b4:57:b5:a7:
         56:15:99:02:e8:dd:fe:96:c2:5b:9f:57:99:98:00:ff:46:7c:
         78:8f:6e:28:d3:96:34:ca:5f:72:fa:fd:de:53:46:9b:47:c9:
         f2:0a:e2:36:7a:7f:4b:89:bd:6b:04:d8:46:e8:48:50:23:c1:
         2a:7d:bc:b1:3f:24:75:78:97:0c:c8:d5:a9:25:c2:93:4f:dd:
         ae:73:19:9e:63:4e:e0:09:d5:bb:23:08:02:d3:af:32:c7:d0:
         7f:75:ee:80:fa:07:a6:75:1e:6c:37:86:c6:b4:e7:ef:e4:c8:
         3e:45:8c:5a:d4:87:3b:15:f4:9c:7f:82:5a:6b:d8:50:96:1c:
         57:b2:6d:a4:9f:a6:f8:5f:24:d3:67:52:66:d6:c3:63:05:53:
         9b:ae:88:43:97:9a:ab:21:3d:cf:3a:7f:db:fd:89:ea:77:3d:
         f3:c9:9b:f7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOWvLkwlSgx7YQ8pbN6rA0dBuMSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E3MEY5QTUwN0ZBMjk4NTQ1OTEwNzkwNjQxNDE0MkM4
MTk5ODA0RjAeFw0yNTA1MTYxNTI0MTFaFw0yNjA1MTUxNTI5MTFaMDMxMTAvBgNV
BAMTKEFEMDM2QzA0QTQ1RTBFODk2MzAyQTcxMkExQzM4MjUwMTJFODBENUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgExWLTEJpCXF9Kr/s32ouyJp7
Z96i7V3MsFj3FQhQuPHRTNsDwM3kdFQ5GkJEtSQZZOn6AeNdqV9SiARYPlsiBE7f
gYBCDLYyA8YH99X+dyKmrIgPWUXWBZC08bUKhZ0NC0q76aEODx6VCeWfZ+gbME2B
4pfbmpqmadA9D6bpLtSePYdlfNWtJPCwp4yowfWH5iiqy0o+V5+aOuzM3Ry6tWhD
km8UJTsdaCbJeNWIsUsd68LjGCXzs60RJRPVX2d4MBcvuoOo3ft5eE+eXH/fMnR4
FCYD8ZtAFZKiwBbik5Vg8dRk1u8RZUsovpRoqPkZ3Wi2gMrwnRYAR/4heGIdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUrQNsBKReDoljAqcSocOCUBLoDVswHwYDVR0j
BBgwFoAUynD5pQf6KYVFkQeQZBQULIGZgE8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkZLMlo1Q0R2bjc0TlJzaUZ2NzIzUHBTY2h0TUZocUpQZVJBVDZTRWoy
c1kvMC9DQTcwRjlBNTA3RkEyOTg1NDU5MTA3OTA2NDE0MTQyQzgxOTk4MDRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNzBGOUE1MDdGQTI5ODU0
NTkxMDc5MDY0MTQxNDJDODE5OTgwNEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZGSzJaNUNEdm43NE5Sc2lGdjcyM1BwU2NodE1GaHFKUGVSQVQ2U0VqMnNZLzAv
MzIzODMwMzQzYTM5MzM2MzM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzM0
MzczOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASTxDANBgkqhkiG9w0BAQsFAAOCAQEANcOWT8bo
ezDqnP2q8GcGiZQv0ClpHzJ3xeIYfCU56js1E3/EKi369sOSf8V9yNnHs4O0dzaz
o/MGjmKvb/jiVHN9ZL7mEODq70sPdzrlKTgwNOkg77+0V7WnVhWZAujd/pbCW59X
mZgA/0Z8eI9uKNOWNMpfcvr93lNGm0fJ8griNnp/S4m9awTYRuhIUCPBKn28sT8k
dXiXDMjVqSXCk0/drnMZnmNO4AnVuyMIAtOvMsfQf3XugPoHpnUebDeGxrTn7+TI
PkWMWtSHOxX0nH+CWmvYUJYcV7JtpJ+m+F8k02dSZtbDYwVTm66IQ5eaqyE9zzp/
2/2J6nc988mb9w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:53:56 2025 by rpki-client