Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a383030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a383030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          ry8uMyIwHYucprw7060pshSZ8zm15O5HdetRk759X0I=
Subject key identifier:   21:13:AD:1C:43:1F:19:FE:8E:FB:69:31:89:1E:EC:08:3B:BB:20:3C
Certificate issuer:       /CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
Certificate serial:       700B9369BF97A1DB00B2DB7A7E9A9A185880127B
Authority key identifier: 78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a383030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 16 May 2025 13:05:02 +0000
ROA not before:           Fri 16 May 2025 13:00:02 +0000
ROA not after:            Fri 15 May 2026 13:05:02 +0000
asID:                     268296
IP address blocks:        2804:4efc:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 14:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0b:93:69:bf:97:a1:db:00:b2:db:7a:7e:9a:9a:18:58:80:12:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
        Validity
            Not Before: May 16 13:00:02 2025 GMT
            Not After : May 15 13:05:02 2026 GMT
        Subject: CN=2113AD1C431F19FE8EFB6931891EEC083BBB203C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d9:75:90:75:ab:5a:bd:08:17:4a:b5:69:09:
                    92:d4:a3:58:56:93:25:51:e2:1b:a5:81:10:f8:5d:
                    55:99:7a:a7:91:c8:14:88:1e:1e:17:d8:28:46:b8:
                    5b:af:43:0a:9b:ec:31:e3:af:87:85:2e:02:3a:e2:
                    04:4e:24:97:7a:19:2d:66:25:4a:79:40:c6:36:a1:
                    22:55:be:53:e7:15:0e:3c:9d:ab:c1:6e:be:20:df:
                    6c:96:b0:a7:06:c6:82:9e:0b:fc:17:e7:15:98:4c:
                    4a:b9:bb:5f:d1:e6:9b:8e:09:9b:00:7d:a4:ae:c0:
                    14:8e:1e:70:19:bf:38:97:b9:3b:c3:b8:ca:14:92:
                    9f:80:d0:7c:6f:97:b9:00:67:a3:de:c9:53:35:3c:
                    29:7e:b9:96:f2:75:81:07:fc:41:32:09:9e:61:d2:
                    c6:e4:26:2b:78:b9:3d:69:e6:62:c8:cf:9b:65:01:
                    cc:2d:e0:d0:5b:81:af:0d:e8:59:2f:bb:bd:c5:b9:
                    ce:0a:b9:dc:e6:cf:57:0f:0a:4a:21:d5:19:fd:6e:
                    0d:05:94:ba:70:24:9f:fe:2e:e8:89:cf:a2:32:20:
                    53:05:88:e5:f4:d6:ff:a3:35:0a:db:f8:8e:6f:7e:
                    d2:c5:02:de:74:a6:b2:5f:90:ae:43:42:e1:3b:92:
                    61:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:13:AD:1C:43:1F:19:FE:8E:FB:69:31:89:1E:EC:08:3B:BB:20:3C
            X509v3 Authority Key Identifier:
                keyid:78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a383030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         95:ae:dd:09:88:07:fd:1a:89:f7:57:1f:bb:ea:8a:59:4d:5f:
         b4:b4:27:86:61:a9:3d:ce:a3:fd:ba:30:6f:c9:1f:79:6a:8b:
         92:9b:fb:8b:78:c1:e9:d9:39:f1:27:f7:ba:57:42:f7:cb:2f:
         b1:39:44:bb:34:ce:95:7b:7f:02:db:08:59:98:6e:08:28:30:
         3e:55:25:e2:d9:f4:42:bf:11:61:18:72:95:27:2f:19:4d:f1:
         16:31:15:a2:b8:c9:46:6a:6c:ad:50:ce:57:f9:c4:f2:b6:64:
         eb:d5:93:6a:a3:e5:df:3a:7f:4f:dc:c9:5e:04:93:d9:fd:31:
         0b:93:e1:9d:45:e4:0d:88:50:25:12:8f:02:fc:68:9f:89:e5:
         5f:ef:b8:04:4c:34:d5:a8:d0:d9:44:fc:9b:49:81:89:73:db:
         f9:3e:86:34:02:0f:ff:63:9f:c8:11:c2:8b:41:6e:74:70:43:
         d6:68:f1:6f:5c:cd:d2:2d:0d:b9:99:0c:85:00:2f:45:6c:bb:
         4c:b5:ca:bf:f1:1f:04:57:91:41:92:a2:23:67:36:43:45:bd:
         43:07:6d:71:64:06:08:2d:48:a6:a5:64:4a:d8:36:05:7d:1e:
         65:a2:af:d3:9d:e9:47:93:d0:0e:ff:80:cf:ab:e1:06:34:9e:
         84:a1:3e:31
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUcAuTab+XodsAstt6fpqaGFiAEnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhERUM4QzA0MjQ4OUYxQUU2OEY5QzhBMUQ4QzBEMjlE
Q0NCNDM3QzAeFw0yNTA1MTYxMzAwMDJaFw0yNjA1MTUxMzA1MDJaMDMxMTAvBgNV
BAMTKDIxMTNBRDFDNDMxRjE5RkU4RUZCNjkzMTg5MUVFQzA4M0JCQjIwM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2XWQdatavQgXSrVpCZLUo1hW
kyVR4hulgRD4XVWZeqeRyBSIHh4X2ChGuFuvQwqb7DHjr4eFLgI64gROJJd6GS1m
JUp5QMY2oSJVvlPnFQ48navBbr4g32yWsKcGxoKeC/wX5xWYTEq5u1/R5puOCZsA
faSuwBSOHnAZvziXuTvDuMoUkp+A0Hxvl7kAZ6PeyVM1PCl+uZbydYEH/EEyCZ5h
0sbkJit4uT1p5mLIz5tlAcwt4NBbga8N6Fkvu73Fuc4Kudzmz1cPCkoh1Rn9bg0F
lLpwJJ/+LuiJz6IyIFMFiOX01v+jNQrb+I5vftLFAt50prJfkK5DQuE7kmHHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUIROtHEMfGf6O+2kxiR7sCDu7IDwwHwYDVR0j
BBgwFoAUeN7IwEJInxrmj5yKHYwNKdzLQ3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMC83OERFQzhDMDQyNDg5RjFBRTY4RjlDOEExRDhDMEQyOURDQ0I0MzdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4REVDOEMwNDI0ODlGMUFF
NjhGOUM4QTFEOEMwRDI5RENDQjQzN0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv
MzIzODMwMzQzYTM0NjU2NjYzM2EzODMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgETvyAMA0GCSqGSIb3DQEBCwUA
A4IBAQCVrt0JiAf9Gon3Vx+76opZTV+0tCeGYak9zqP9ujBvyR95aouSm/uLeMHp
2TnxJ/e6V0L3yy+xOUS7NM6Ve38C2whZmG4IKDA+VSXi2fRCvxFhGHKVJy8ZTfEW
MRWiuMlGamytUM5X+cTytmTr1ZNqo+XfOn9P3MleBJPZ/TELk+GdReQNiFAlEo8C
/GifieVf77gETDTVqNDZRPybSYGJc9v5PoY0Ag//Y5/IEcKLQW50cEPWaPFvXM3S
LQ25mQyFAC9FbLtMtcq/8R8EV5FBkqIjZzZDRb1DB21xZAYILUimpWRK2DYFfR5l
oq/TnelHk9AO/4DPq+EGNJ6EoT4x
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:29:13 2025 by rpki-client