Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/323830343a343630633a3a2f33342d3334203d3e20323636393635.roa
File:                     323830343a343630633a3a2f33342d3334203d3e20323636393635.roa (raw, json)
Hash identifier:          tmOkIERghMm8eIf8EmG18VCpNgdDC/iscyS8XvpLC24=
Subject key identifier:   C6:65:AD:2D:B6:D2:46:6D:DE:66:72:26:6A:2A:CA:34:81:30:8A:77
Certificate issuer:       /CN=CC96ED49391396FC76164F871315FEAD2DEE5F35
Certificate serial:       2EACE95EDB9E9C6DA167D5A3978E15008411EC16
Authority key identifier: CC:96:ED:49:39:13:96:FC:76:16:4F:87:13:15:FE:AD:2D:EE:5F:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/323830343a343630633a3a2f33342d3334203d3e20323636393635.roa
Signing time:             Mon 02 Jun 2025 21:47:38 +0000
ROA not before:           Mon 02 Jun 2025 21:42:38 +0000
ROA not after:            Mon 01 Jun 2026 21:47:38 +0000
asID:                     266965
IP address blocks:        2804:460c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.crl
                          rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 05:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ac:e9:5e:db:9e:9c:6d:a1:67:d5:a3:97:8e:15:00:84:11:ec:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC96ED49391396FC76164F871315FEAD2DEE5F35
        Validity
            Not Before: Jun  2 21:42:38 2025 GMT
            Not After : Jun  1 21:47:38 2026 GMT
        Subject: CN=C665AD2DB6D2466DDE6672266A2ACA3481308A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:2b:b4:72:da:d5:a2:8c:24:e4:6c:55:01:
                    6b:d4:6a:73:e4:f1:b5:90:76:04:79:c2:9e:a3:bb:
                    f3:5e:b8:40:31:0e:8f:02:07:6e:64:f5:93:44:b1:
                    de:44:67:d4:51:f6:81:aa:f1:0c:56:94:cb:72:cf:
                    e4:65:ad:13:8e:69:be:b2:37:ce:76:0a:9c:e7:c9:
                    68:db:25:c7:11:a3:df:e2:23:89:0f:f6:ce:d3:7b:
                    a0:e5:1f:a8:70:19:21:01:e8:49:85:ad:ca:67:75:
                    24:9b:35:15:ec:c9:3d:b0:6e:39:b0:68:57:c4:ee:
                    10:df:7f:b1:8e:67:c0:61:58:88:8a:1c:25:e9:06:
                    69:62:7f:a8:28:60:39:1d:68:1b:85:b7:d4:03:76:
                    2f:81:15:ce:96:42:1f:f8:0b:bd:e3:e6:c9:17:a2:
                    45:75:ed:96:2f:ed:f6:27:16:33:db:92:98:60:8f:
                    7e:74:4f:92:f3:6b:e9:af:35:a5:1f:c4:19:e8:02:
                    04:c7:d2:28:3e:be:87:ae:2d:a0:73:32:5c:43:2d:
                    d1:74:e1:39:1b:f0:b5:6d:23:5f:8c:4a:c2:1a:90:
                    b2:6f:1a:2e:a5:27:f9:f7:dc:c2:b1:79:6c:c7:7b:
                    45:a4:46:1b:a0:70:a3:ae:dc:cc:ba:34:84:e1:4d:
                    3f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:65:AD:2D:B6:D2:46:6D:DE:66:72:26:6A:2A:CA:34:81:30:8A:77
            X509v3 Authority Key Identifier:
                keyid:CC:96:ED:49:39:13:96:FC:76:16:4F:87:13:15:FE:AD:2D:EE:5F:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/323830343a343630633a3a2f33342d3334203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:460c::/34

    Signature Algorithm: sha256WithRSAEncryption
         3c:47:0f:4e:60:86:0c:bb:59:92:78:02:26:ba:32:36:d9:53:
         32:57:f6:90:cc:33:3f:bf:6e:ba:dd:96:6f:11:15:98:06:51:
         55:ae:8b:c3:70:fe:f4:6c:aa:78:79:46:d6:d2:13:8e:dc:08:
         38:fe:6b:4f:e2:12:ad:60:91:e1:0b:d3:78:b8:5e:90:55:e1:
         28:b9:9f:36:19:4c:35:a0:17:91:46:77:9f:70:13:cf:47:04:
         0e:97:d7:10:8f:58:73:04:1e:18:bd:73:68:19:b5:f2:64:ae:
         f6:18:95:0a:37:c9:63:c4:e2:5f:47:56:b4:19:61:dd:71:f1:
         9d:d6:67:2e:88:7e:88:74:03:1d:f0:6e:e3:65:f5:90:af:84:
         7d:39:39:d8:49:e6:9c:a7:d3:38:71:0f:62:78:15:f9:b7:1d:
         6a:75:06:44:79:7c:f0:bf:e0:59:56:f5:f2:65:aa:b8:62:30:
         a5:ce:e4:e4:66:82:a7:18:80:bb:2f:a8:a5:46:99:8a:78:d2:
         2e:0b:58:11:98:0d:5e:ed:96:70:d3:04:46:67:5d:43:7d:4a:
         20:be:44:ed:3b:50:ed:84:fb:90:fb:a0:3e:15:4a:5e:9a:37:
         6d:9c:9c:13:a2:a0:01:1b:a1:e0:64:bf:38:91:35:52:82:09:
         39:63:aa:a9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULqzpXtuenG2hZ9Wjl44VAIQR7BYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M5NkVENDkzOTEzOTZGQzc2MTY0Rjg3MTMxNUZFQUQy
REVFNUYzNTAeFw0yNTA2MDIyMTQyMzhaFw0yNjA2MDEyMTQ3MzhaMDMxMTAvBgNV
BAMTKEM2NjVBRDJEQjZEMjQ2NkRERTY2NzIyNjZBMkFDQTM0ODEzMDhBNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTCu0ctrVoowk5GxVAWvUanPk
8bWQdgR5wp6ju/NeuEAxDo8CB25k9ZNEsd5EZ9RR9oGq8QxWlMtyz+RlrROOab6y
N852CpznyWjbJccRo9/iI4kP9s7Te6DlH6hwGSEB6EmFrcpndSSbNRXsyT2wbjmw
aFfE7hDff7GOZ8BhWIiKHCXpBmlif6goYDkdaBuFt9QDdi+BFc6WQh/4C73j5skX
okV17ZYv7fYnFjPbkphgj350T5Lza+mvNaUfxBnoAgTH0ig+voeuLaBzMlxDLdF0
4Tkb8LVtI1+MSsIakLJvGi6lJ/n33MKxeWzHe0WkRhugcKOu3My6NIThTT9NAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxmWtLbbSRm3eZnImairKNIEwincwHwYDVR0j
BBgwFoAUzJbtSTkTlvx2Fk+HExX+rS3uXzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlZDUktMeXBRbXVTaXV5a1FNVmFjOEU5ZUE4QlF1M1V4Y0QxbXJWOHFT
a3gvMC9DQzk2RUQ0OTM5MTM5NkZDNzYxNjRGODcxMzE1RkVBRDJERUU1RjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDOTZFRDQ5MzkxMzk2RkM3
NjE2NEY4NzEzMTVGRUFEMkRFRTVGMzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZWQ1JLTHlwUW11U2l1eWtRTVZhYzhFOWVBOEJRdTNVeGNEMW1yVjhxU2t4LzAv
MzIzODMwMzQzYTM0MzYzMDYzM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM2
MzkzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKARGDAAwDQYJKoZIhvcNAQELBQADggEBADxHD05g
hgy7WZJ4Aia6MjbZUzJX9pDMMz+/brrdlm8RFZgGUVWui8Nw/vRsqnh5RtbSE47c
CDj+a0/iEq1gkeEL03i4XpBV4Si5nzYZTDWgF5FGd59wE89HBA6X1xCPWHMEHhi9
c2gZtfJkrvYYlQo3yWPE4l9HVrQZYd1x8Z3WZy6Ifoh0Ax3wbuNl9ZCvhH05OdhJ
5pyn0zhxD2J4Ffm3HWp1BkR5fPC/4FlW9fJlqrhiMKXO5ORmgqcYgLsvqKVGmYp4
0i4LWBGYDV7tlnDTBEZnXUN9SiC+RO07UO2E+5D7oD4VSl6aN22cnBOioAEboeBk
vziRNVKCCTljqqk=
-----END CERTIFICATE-----
Generated at Wed Jun 18 20:30:58 2025 by rpki-client