Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a643a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a643a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          /njwEvvWRBfu0BOJLLgpp8b4j6/CcwVAilG2x3NGFGw=
Subject key identifier:   78:D4:ED:AC:C4:24:AD:86:B1:78:C9:DB:E6:D1:D9:AA:CC:AD:84:35
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       4EB234F63AEE8667A8BE9EF78396D914E6445C66
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a643a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:33 +0000
ROA not before:           Tue 03 Jun 2025 16:50:33 +0000
ROA not after:            Tue 02 Jun 2026 16:55:33 +0000
asID:                     264344
IP address blocks:        2804:2674:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 01:29:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b2:34:f6:3a:ee:86:67:a8:be:9e:f7:83:96:d9:14:e6:44:5c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:33 2025 GMT
            Not After : Jun  2 16:55:33 2026 GMT
        Subject: CN=78D4EDACC424AD86B178C9DBE6D1D9AACCAD8435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9f:02:d3:4f:bc:32:5b:cb:f7:c3:87:aa:60:
                    3a:93:96:e8:3c:60:eb:f6:67:26:9f:cd:84:85:e0:
                    59:f6:a1:63:70:6f:09:22:00:ae:fc:af:a9:93:82:
                    ae:d5:b5:9d:71:ed:fd:d0:f5:c1:c5:5c:8a:b5:66:
                    e7:18:5c:62:d4:ab:cc:31:f7:c9:97:eb:c2:d6:96:
                    aa:89:45:4f:07:ec:76:9d:63:ea:d9:b4:d2:5b:61:
                    68:b2:55:b4:b2:d3:46:04:a2:0b:d8:46:cb:67:b4:
                    79:82:06:1c:04:06:a2:06:8d:57:17:55:2e:a0:2d:
                    d5:20:03:78:da:80:a6:e1:6b:e6:41:0c:d0:35:49:
                    05:74:e3:85:ba:fb:0d:cb:1b:83:c3:b7:b3:0a:93:
                    e1:40:48:f0:2d:ca:79:09:c2:ea:07:14:c5:73:96:
                    e9:22:af:5d:9e:36:3d:e1:c0:6b:f4:d5:0c:57:94:
                    f2:1a:ee:4f:d8:1e:6d:ea:4e:68:12:3d:c4:6e:e9:
                    8c:15:09:0a:18:c3:ab:8c:65:f5:3d:61:3a:a9:83:
                    5f:59:08:84:94:ef:c9:83:51:6e:bf:24:82:b2:a8:
                    98:d8:56:f7:dd:c8:13:d8:72:ac:ac:6a:dd:10:1f:
                    f3:7c:cb:e9:21:2a:73:0c:0d:ed:a6:31:56:69:98:
                    af:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D4:ED:AC:C4:24:AD:86:B1:78:C9:DB:E6:D1:D9:AA:CC:AD:84:35
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a643a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:0e:7d:2b:0e:3e:b5:4f:ab:b1:a0:d1:46:af:47:d6:ec:26:
         65:13:53:23:54:e9:b9:9d:57:7b:48:03:bb:bb:01:c0:a8:a2:
         a3:70:96:9a:44:f6:31:17:6c:ae:db:a3:62:2e:68:0a:a0:f2:
         68:37:96:9b:dd:8b:0c:fc:87:42:8f:bd:7b:03:ac:9c:d3:e4:
         97:c2:b1:ed:77:2c:23:dd:9a:5c:cf:bd:8b:72:7b:2b:23:dd:
         d8:33:e4:d4:f7:cb:88:41:99:ad:b3:cc:d0:bb:9a:b5:dd:6b:
         9b:3a:a9:6f:b1:d4:de:51:6d:16:83:93:d0:bf:4f:c8:32:d5:
         5e:51:e1:0b:71:08:b8:a4:10:ad:d8:71:78:1d:a6:7a:7a:86:
         92:b4:74:65:aa:10:79:2f:22:df:a9:88:c6:45:a1:d2:c4:f1:
         8e:bf:97:49:37:65:77:13:d4:52:58:b4:a5:65:a4:ae:ff:38:
         42:f0:dd:05:bf:09:51:93:79:73:89:81:5c:ed:b9:13:b2:40:
         17:e8:5c:02:12:af:29:1d:0d:aa:67:b0:76:ed:77:0f:cf:3a:
         23:66:19:7b:3c:76:bf:ea:df:d1:0f:37:2d:09:ec:ef:2f:5d:
         6a:06:85:9e:1e:c1:50:dc:01:94:c2:47:98:8c:f5:7a:f4:42:
         75:a6:74:03
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUTrI09jruhmeovp73g5bZFOZEXGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMyRjIzMjkzNzhBMTU4MzBDMTUwQzAzMTk0M0RBQTA0
NzNGRUE0MjAeFw0yNTA2MDMxNjUwMzNaFw0yNjA2MDIxNjU1MzNaMDMxMTAvBgNV
BAMTKDc4RDRFREFDQzQyNEFEODZCMTc4QzlEQkU2RDFEOUFBQ0NBRDg0MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpnwLTT7wyW8v3w4eqYDqTlug8
YOv2ZyafzYSF4Fn2oWNwbwkiAK78r6mTgq7VtZ1x7f3Q9cHFXIq1ZucYXGLUq8wx
98mX68LWlqqJRU8H7HadY+rZtNJbYWiyVbSy00YEogvYRstntHmCBhwEBqIGjVcX
VS6gLdUgA3jagKbha+ZBDNA1SQV044W6+w3LG4PDt7MKk+FASPAtynkJwuoHFMVz
lukir12eNj3hwGv01QxXlPIa7k/YHm3qTmgSPcRu6YwVCQoYw6uMZfU9YTqpg19Z
CISU78mDUW6/JIKyqJjYVvfdyBPYcqysat0QH/N8y+khKnMMDe2mMVZpmK8TAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUeNTtrMQkrYaxeMnb5tHZqsythDUwHwYDVR0j
BBgwFoAUDC8jKTeKFYMMFQwDGUPaoEc/6kIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxzbWRwc0ZRV0JuemhYNlJQVHRjbVNKaUtLc2p2NlFwQnI0UThrd013
NUEvMC8wQzJGMjMyOTM3OEExNTgzMEMxNTBDMDMxOTQzREFBMDQ3M0ZFQTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDMkYyMzI5Mzc4QTE1ODMw
QzE1MEMwMzE5NDNEQUEwNDczRkVBNDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMc21kcHNGUVdCbnpoWDZSUFR0Y21TSmlLS3NqdjZRcEJyNFE4a3dNdzVBLzAv
MzIzODMwMzQzYTMyMzYzNzM0M2E2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzNDMzMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEJnQADTANBgkqhkiG9w0BAQsFAAOCAQEA
JA59Kw4+tU+rsaDRRq9H1uwmZRNTI1TpuZ1Xe0gDu7sBwKiio3CWmkT2MRdsrtuj
Yi5oCqDyaDeWm92LDPyHQo+9ewOsnNPkl8Kx7XcsI92aXM+9i3J7KyPd2DPk1PfL
iEGZrbPM0Luatd1rmzqpb7HU3lFtFoOT0L9PyDLVXlHhC3EIuKQQrdhxeB2menqG
krR0ZaoQeS8i36mIxkWh0sTxjr+XSTdldxPUUli0pWWkrv84QvDdBb8JUZN5c4mB
XO25E7JAF+hcAhKvKR0Nqmewdu13D886I2YZezx2v+rf0Q83LQns7y9dagaFnh7B
UNwBlMJHmIz1evRCdaZ0Aw==
-----END CERTIFICATE-----
Generated at Thu Jun 19 05:50:04 2025 by rpki-client