Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33322d3336203d3e20323633343434.roa
File:                     323830343a313164633a3a2f33322d3336203d3e20323633343434.roa (raw, json)
Hash identifier:          KI2nY30F25mgW4uEcm8thIQ25osJ2CykXxxz+8eOvLo=
Subject key identifier:   21:3B:34:56:C0:10:DD:FC:14:8A:C3:1B:E8:31:3A:5D:F6:72:61:9F
Certificate issuer:       /CN=944D1D572BAB1051387200BA68477F359EA492CF
Certificate serial:       07CEB85BC2B7E1A417986947E3F4351DFC03179D
Authority key identifier: 94:4D:1D:57:2B:AB:10:51:38:72:00:BA:68:47:7F:35:9E:A4:92:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D1D572BAB1051387200BA68477F359EA492CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33322d3336203d3e20323633343434.roa
Signing time:             Fri 06 Jun 2025 13:20:50 +0000
ROA not before:           Fri 06 Jun 2025 13:15:50 +0000
ROA not after:            Fri 05 Jun 2026 13:20:50 +0000
asID:                     263444
IP address blocks:        2804:11dc::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/944D1D572BAB1051387200BA68477F359EA492CF.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/944D1D572BAB1051387200BA68477F359EA492CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D1D572BAB1051387200BA68477F359EA492CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 23:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ce:b8:5b:c2:b7:e1:a4:17:98:69:47:e3:f4:35:1d:fc:03:17:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=944D1D572BAB1051387200BA68477F359EA492CF
        Validity
            Not Before: Jun  6 13:15:50 2025 GMT
            Not After : Jun  5 13:20:50 2026 GMT
        Subject: CN=213B3456C010DDFC148AC31BE8313A5DF672619F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:6d:db:24:e0:7d:c0:e4:d0:22:1a:14:48:
                    89:c8:2d:47:99:44:36:42:c0:b5:2b:e6:ba:3e:a8:
                    4f:86:62:01:11:8a:4e:34:e5:2a:09:84:52:51:7e:
                    b9:63:d3:6f:26:3d:70:01:02:7c:b8:7b:50:89:db:
                    83:da:83:94:ca:69:8b:17:82:a7:d0:fa:67:a9:1d:
                    50:f9:29:13:b8:32:41:bd:e8:e5:2d:ef:af:0e:11:
                    43:9e:1c:92:94:a6:a4:b4:ba:62:a1:73:ef:74:74:
                    24:76:07:9d:cd:16:a7:43:b1:b1:53:26:07:05:14:
                    a6:b2:61:ab:50:7e:39:c8:b5:a0:c5:34:f2:b6:16:
                    6a:c4:60:c6:8c:57:aa:10:0d:17:64:66:92:1f:5e:
                    a8:ac:01:e2:70:28:f7:21:3c:12:15:79:72:86:2c:
                    9f:b1:e0:61:ed:61:2f:de:6b:bb:df:d3:27:65:f4:
                    cf:96:c6:c3:d2:fa:a9:11:4b:b6:f6:a1:0c:2c:f3:
                    f4:b5:80:91:48:d0:0b:87:2b:be:e2:38:34:9a:db:
                    f0:f3:67:39:04:5c:95:2d:ca:37:f1:fb:2a:7d:5c:
                    87:ba:b5:cd:4c:af:75:dd:fb:18:3f:4c:ad:d2:b9:
                    fa:7d:c8:bf:17:85:b9:59:3f:e3:c3:2b:45:0e:41:
                    2a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3B:34:56:C0:10:DD:FC:14:8A:C3:1B:E8:31:3A:5D:F6:72:61:9F
            X509v3 Authority Key Identifier:
                keyid:94:4D:1D:57:2B:AB:10:51:38:72:00:BA:68:47:7F:35:9E:A4:92:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/944D1D572BAB1051387200BA68477F359EA492CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D1D572BAB1051387200BA68477F359EA492CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/323830343a313164633a3a2f33322d3336203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:8c:cd:23:32:99:32:71:72:d3:7e:66:80:34:ec:16:74:c2:
         a2:1b:02:b0:2e:7c:46:9e:af:1f:11:64:43:01:81:3b:28:68:
         68:92:fe:01:f2:72:6e:96:7e:3b:a6:90:16:2b:92:66:ee:93:
         c7:20:87:ea:fa:c4:48:31:c3:c5:5e:be:86:e6:25:26:27:4e:
         44:60:f0:bb:52:59:73:54:d6:39:a8:f9:68:4e:34:68:bb:da:
         51:37:1c:a2:3b:e3:ac:4a:2b:c8:0a:6d:85:de:49:86:63:c5:
         1e:e3:0a:dd:0a:7f:90:87:bc:f6:9a:3d:cc:67:4e:17:a2:76:
         4a:c5:90:85:43:78:c1:d3:96:b7:51:ee:26:ea:8f:eb:89:d2:
         f9:16:ed:c8:15:21:7c:8f:f7:11:d6:25:57:aa:38:90:10:14:
         29:97:d6:9e:09:29:4f:b3:ff:a9:05:29:bf:6c:09:b6:3e:a6:
         ee:0d:94:bc:d5:5e:f2:9a:c0:55:94:ab:fe:4c:ee:18:5c:d1:
         26:38:60:34:86:ba:3a:95:0f:7d:a8:d3:ca:87:42:50:ef:d5:
         aa:4d:b6:dd:fe:32:5b:6d:0d:96:d9:bb:32:7e:18:b8:d7:45:
         3e:b3:a7:0b:06:b2:e9:b1:89:7b:6a:0e:11:9a:82:9b:2a:44:
         cf:03:d5:73
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUB864W8K34aQXmGlH4/Q1HfwDF50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ0RDFENTcyQkFCMTA1MTM4NzIwMEJBNjg0NzdGMzU5
RUE0OTJDRjAeFw0yNTA2MDYxMzE1NTBaFw0yNjA2MDUxMzIwNTBaMDMxMTAvBgNV
BAMTKDIxM0IzNDU2QzAxMERERkMxNDhBQzMxQkU4MzEzQTVERjY3MjYxOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JW3bJOB9wOTQIhoUSInILUeZ
RDZCwLUr5ro+qE+GYgERik405SoJhFJRfrlj028mPXABAny4e1CJ24Pag5TKaYsX
gqfQ+mepHVD5KRO4MkG96OUt768OEUOeHJKUpqS0umKhc+90dCR2B53NFqdDsbFT
JgcFFKayYatQfjnItaDFNPK2FmrEYMaMV6oQDRdkZpIfXqisAeJwKPchPBIVeXKG
LJ+x4GHtYS/ea7vf0ydl9M+WxsPS+qkRS7b2oQws8/S1gJFI0AuHK77iODSa2/Dz
ZzkEXJUtyjfx+yp9XIe6tc1Mr3Xd+xg/TK3Sufp9yL8XhblZP+PDK0UOQSonAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUITs0VsAQ3fwUisMb6DE6XfZyYZ8wHwYDVR0j
BBgwFoAUlE0dVyurEFE4cgC6aEd/NZ6kks8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO
dUMvMC85NDREMUQ1NzJCQUIxMDUxMzg3MjAwQkE2ODQ3N0YzNTlFQTQ5MkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0NEQxRDU3MkJBQjEwNTEz
ODcyMDBCQTY4NDc3RjM1OUVBNDkyQ0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl6TTlyemhvTGlkWXR3VXNUR3d3WEx5MkYzYUZRZVlGc0RINDlZTHBrTnVDLzAv
MzIzODMwMzQzYTMxMzE2NDYzM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjMz
MzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQR3DANBgkqhkiG9w0BAQsFAAOCAQEAWozNIzKZ
MnFy035mgDTsFnTCohsCsC58Rp6vHxFkQwGBOyhoaJL+AfJybpZ+O6aQFiuSZu6T
xyCH6vrESDHDxV6+huYlJidORGDwu1JZc1TWOaj5aE40aLvaUTccojvjrEoryApt
hd5JhmPFHuMK3Qp/kIe89po9zGdOF6J2SsWQhUN4wdOWt1HuJuqP64nS+RbtyBUh
fI/3EdYlV6o4kBAUKZfWngkpT7P/qQUpv2wJtj6m7g2UvNVe8prAVZSr/kzuGFzR
JjhgNIa6OpUPfajTyodCUO/Vqk223f4yW20Nltm7Mn4YuNdFPrOnCway6bGJe2oO
EZqCmypEzwPVcw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 13:43:55 2025 by rpki-client