Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353130303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a353130303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          CzM328Av3GGJDboUCE+Z1WLMJWs2yny0B9+Wej75w8g=
Subject key identifier:   EC:EB:F1:E3:CF:5F:90:E8:A6:DC:4E:1E:D8:9B:89:0F:5D:30:01:8B
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       61693A35787E1C267737947FB527138F172D609B
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353130303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:31 +0000
ROA not before:           Tue 03 Jun 2025 16:50:31 +0000
ROA not after:            Tue 02 Jun 2026 16:55:31 +0000
asID:                     264344
IP address blocks:        2804:2674:5100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 01:29:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:69:3a:35:78:7e:1c:26:77:37:94:7f:b5:27:13:8f:17:2d:60:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:31 2025 GMT
            Not After : Jun  2 16:55:31 2026 GMT
        Subject: CN=ECEBF1E3CF5F90E8A6DC4E1ED89B890F5D30018B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:7c:d7:46:d2:96:b1:3b:36:af:1e:64:65:
                    80:94:36:d2:d9:74:8b:6f:67:3b:53:f0:78:d8:58:
                    45:26:eb:6a:69:44:89:3e:9b:96:47:ee:7b:b5:95:
                    3b:cd:c3:b8:8d:84:7e:91:2b:13:53:1d:ee:f9:8a:
                    70:1b:c8:ef:69:b4:68:90:3a:39:15:93:d0:20:c4:
                    52:8e:1d:0c:d1:19:ba:58:1b:c8:35:98:df:68:b2:
                    17:15:68:59:39:c4:e3:fd:d1:11:f8:15:dc:78:d0:
                    1a:da:bd:5d:c3:93:e6:39:b6:b2:b9:c2:30:69:1b:
                    3c:6f:6b:39:7c:fd:09:2f:f9:38:91:ac:6f:e5:f8:
                    7f:11:e2:35:e0:63:e0:a9:ed:11:a1:c6:da:db:ce:
                    3c:97:f1:6e:b4:07:46:f0:55:cc:35:9a:d0:44:40:
                    23:8a:18:84:bb:fe:cb:1d:80:43:df:6d:b1:e8:11:
                    1b:00:f5:76:04:4e:5e:92:e4:ce:ed:02:b5:f8:1c:
                    79:bf:ad:0c:d0:dd:27:1e:e3:9d:45:b5:91:9d:c1:
                    c2:52:c7:b2:61:ef:6c:93:4e:71:33:3a:a1:96:bb:
                    03:f3:6a:ee:55:7a:77:b3:09:ee:1e:d9:68:ef:92:
                    66:69:bb:7a:4e:7a:80:b1:b0:89:53:28:73:06:a8:
                    50:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EB:F1:E3:CF:5F:90:E8:A6:DC:4E:1E:D8:9B:89:0F:5D:30:01:8B
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353130303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:5100::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:6f:c0:35:88:c7:02:92:93:3a:87:47:50:01:21:ab:76:49:
         d3:14:13:25:42:d3:63:0d:04:d1:88:85:b9:53:86:cb:31:4c:
         e3:a9:09:36:9b:ee:ec:e6:8d:49:8b:9a:89:b6:51:d1:35:0d:
         ba:08:a2:25:7e:9b:ca:f7:11:d7:ae:f6:98:cf:14:d3:89:54:
         4b:22:e5:c8:e9:3f:7e:58:e6:29:d6:c4:2e:80:dc:84:1e:0e:
         dc:09:17:a4:42:3c:92:d6:38:f1:1d:6c:05:28:8c:22:c0:11:
         0f:93:fe:7d:ef:eb:96:c5:bb:a0:49:da:87:54:af:3f:76:19:
         c8:2e:57:7d:71:95:86:59:d7:04:5b:01:49:76:54:ad:81:f7:
         31:2f:6f:cb:3f:c7:39:97:9b:79:ea:e4:d7:da:34:a6:07:26:
         88:0b:9e:e1:d8:ed:1d:3c:1c:0f:56:24:ea:a2:84:76:60:86:
         71:a3:7a:ae:22:cb:4d:79:1b:68:39:33:30:bd:9d:4f:0e:07:
         bd:73:53:7b:cd:05:34:12:df:cb:60:5f:37:af:fc:d8:9e:92:
         ee:6e:a5:97:ed:ad:d4:a6:34:b5:3c:0f:3b:a2:be:2f:83:17:
         5b:bc:5f:37:af:5a:4d:43:6d:c2:62:0d:fe:d1:80:47:1f:56:
         79:61:05:88
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYWk6NXh+HCZ3N5R/tScTjxctYJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMyRjIzMjkzNzhBMTU4MzBDMTUwQzAzMTk0M0RBQTA0
NzNGRUE0MjAeFw0yNTA2MDMxNjUwMzFaFw0yNjA2MDIxNjU1MzFaMDMxMTAvBgNV
BAMTKEVDRUJGMUUzQ0Y1RjkwRThBNkRDNEUxRUQ4OUI4OTBGNUQzMDAxOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3kHzXRtKWsTs2rx5kZYCUNtLZ
dItvZztT8HjYWEUm62ppRIk+m5ZH7nu1lTvNw7iNhH6RKxNTHe75inAbyO9ptGiQ
OjkVk9AgxFKOHQzRGbpYG8g1mN9oshcVaFk5xOP90RH4Fdx40BravV3Dk+Y5trK5
wjBpGzxvazl8/Qkv+TiRrG/l+H8R4jXgY+Cp7RGhxtrbzjyX8W60B0bwVcw1mtBE
QCOKGIS7/ssdgEPfbbHoERsA9XYETl6S5M7tArX4HHm/rQzQ3Sce451FtZGdwcJS
x7Jh72yTTnEzOqGWuwPzau5VenezCe4e2WjvkmZpu3pOeoCxsIlTKHMGqFCdAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU7Ovx489fkOim3E4e2JuJD10wAYswHwYDVR0j
BBgwFoAUDC8jKTeKFYMMFQwDGUPaoEc/6kIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxzbWRwc0ZRV0JuemhYNlJQVHRjbVNKaUtLc2p2NlFwQnI0UThrd013
NUEvMC8wQzJGMjMyOTM3OEExNTgzMEMxNTBDMDMxOTQzREFBMDQ3M0ZFQTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDMkYyMzI5Mzc4QTE1ODMw
QzE1MEMwMzE5NDNEQUEwNDczRkVBNDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMc21kcHNGUVdCbnpoWDZSUFR0Y21TSmlLS3NqdjZRcEJyNFE4a3dNdzVBLzAv
MzIzODMwMzQzYTMyMzYzNzM0M2EzNTMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDMzMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEJnRRMA0GCSqGSIb3DQEBCwUA
A4IBAQBxb8A1iMcCkpM6h0dQASGrdknTFBMlQtNjDQTRiIW5U4bLMUzjqQk2m+7s
5o1Ji5qJtlHRNQ26CKIlfpvK9xHXrvaYzxTTiVRLIuXI6T9+WOYp1sQugNyEHg7c
CRekQjyS1jjxHWwFKIwiwBEPk/597+uWxbugSdqHVK8/dhnILld9cZWGWdcEWwFJ
dlStgfcxL2/LP8c5l5t56uTX2jSmByaIC57h2O0dPBwPViTqooR2YIZxo3quIstN
eRtoOTMwvZ1PDge9c1N7zQU0Et/LYF83r/zYnpLubqWX7a3UpjS1PA87or4vgxdb
vF83r1pNQ23CYg3+0YBHH1Z5YQWI
-----END CERTIFICATE-----
Generated at Thu Jun 19 06:15:43 2025 by rpki-client