Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/323830343a316162633a3a2f33322d3438203d3e203631383832.roa
File:                     323830343a316162633a3a2f33322d3438203d3e203631383832.roa (raw, json)
Hash identifier:          N9ruoGLMhy36IxoZsmaBHKvteHLr0b7Ia/kj800MKVY=
Subject key identifier:   FC:17:D4:02:E8:30:85:32:0D:6C:BF:62:E5:F5:32:F1:D0:5D:41:75
Certificate issuer:       /CN=B838C46840DE2B5CF4614820A0D12EFEF2960C8D
Certificate serial:       7399FA30DA9CA0E4C21CF84FA806C010B80183F2
Authority key identifier: B8:38:C4:68:40:DE:2B:5C:F4:61:48:20:A0:D1:2E:FE:F2:96:0C:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/323830343a316162633a3a2f33322d3438203d3e203631383832.roa
Signing time:             Mon 16 Jun 2025 18:24:09 +0000
ROA not before:           Mon 16 Jun 2025 18:19:09 +0000
ROA not after:            Mon 15 Jun 2026 18:24:09 +0000
asID:                     61882
IP address blocks:        2804:1abc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.crl
                          rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 14:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:99:fa:30:da:9c:a0:e4:c2:1c:f8:4f:a8:06:c0:10:b8:01:83:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B838C46840DE2B5CF4614820A0D12EFEF2960C8D
        Validity
            Not Before: Jun 16 18:19:09 2025 GMT
            Not After : Jun 15 18:24:09 2026 GMT
        Subject: CN=FC17D402E83085320D6CBF62E5F532F1D05D4175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:2b:b0:c9:78:b3:35:36:58:ea:c9:03:ae:
                    6f:8c:e2:3b:af:a3:67:97:b6:bb:50:1d:ba:57:1a:
                    06:63:0a:d7:88:d5:b0:b0:62:12:cb:b2:4f:8a:18:
                    c3:6b:8c:d9:76:f7:50:ae:3c:6c:a3:34:92:cf:ef:
                    e7:52:c1:76:43:90:27:e4:74:95:60:bf:11:37:58:
                    d8:13:1c:c7:50:09:0f:8f:0c:d7:a2:b9:74:59:49:
                    a7:22:32:5d:2d:38:4f:f6:87:03:65:11:a4:1a:45:
                    5c:05:24:a4:02:a5:6e:c7:1d:5e:e0:37:00:a9:5f:
                    d5:75:48:07:39:1d:05:d8:6b:61:9a:c6:0d:0b:a5:
                    aa:5f:af:47:22:63:00:ff:e0:20:47:50:ff:6a:35:
                    57:30:7a:50:8c:f2:2e:3a:30:49:87:66:35:cc:dd:
                    00:62:f9:a6:79:15:7c:21:07:99:c5:00:e5:96:b7:
                    90:86:c6:2f:2c:42:58:54:3f:45:b6:96:5a:6e:62:
                    4b:3a:2b:22:93:78:08:81:e2:83:eb:0b:bc:f3:73:
                    da:3a:ba:6f:d2:0d:51:5d:de:eb:9b:1e:1e:27:20:
                    fe:f8:0e:4c:0e:f4:6e:37:f7:b7:97:ba:41:bc:b4:
                    e8:d9:e6:4e:2f:17:d2:df:0a:35:7b:cf:8d:50:95:
                    d9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:17:D4:02:E8:30:85:32:0D:6C:BF:62:E5:F5:32:F1:D0:5D:41:75
            X509v3 Authority Key Identifier:
                keyid:B8:38:C4:68:40:DE:2B:5C:F4:61:48:20:A0:D1:2E:FE:F2:96:0C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B838C46840DE2B5CF4614820A0D12EFEF2960C8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/323830343a316162633a3a2f33322d3438203d3e203631383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1abc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:92:98:31:30:da:dc:45:fb:1c:60:8c:9e:c8:6c:86:05:26:
         ac:45:35:14:ac:41:e5:9e:26:db:86:31:c0:74:18:6f:9e:1d:
         cc:cc:70:f1:42:32:54:fb:d5:49:0a:8b:20:09:a8:cc:15:ed:
         7c:5c:85:56:40:f1:b1:00:1b:6a:40:b4:9c:46:c3:2d:e2:18:
         c5:11:c1:87:e2:33:18:5f:db:c3:92:74:8f:99:c6:2c:ba:7d:
         6c:7f:73:06:de:a4:08:00:b1:91:0d:e3:27:cf:ab:0b:fa:1d:
         92:61:2d:b0:c6:6d:29:0f:55:2a:f5:78:f0:a6:f6:77:8a:78:
         bb:7d:fd:4b:6b:1b:2f:ce:25:e6:ae:58:f7:b7:c3:62:ac:ee:
         3a:37:17:6e:ec:5c:fe:98:3b:5b:08:aa:90:3a:6c:34:15:53:
         f1:db:bb:0e:33:25:d2:85:7e:6a:37:33:d2:9b:61:37:98:5a:
         ca:38:f9:8d:69:f5:ef:ee:12:a5:6f:12:fb:df:fe:94:f3:db:
         19:49:67:69:e7:3f:6a:bc:2a:c4:cd:d9:97:0f:9c:7a:4c:8d:
         7d:a5:e5:b8:b5:b9:02:45:93:23:22:0b:7c:6a:92:a6:4c:0a:
         e3:97:18:93:93:ab:b2:de:be:df:e1:d2:fe:21:91:05:44:9e:
         25:41:c5:7e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUc5n6MNqcoOTCHPhPqAbAELgBg/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgzOEM0Njg0MERFMkI1Q0Y0NjE0ODIwQTBEMTJFRkVG
Mjk2MEM4RDAeFw0yNTA2MTYxODE5MDlaFw0yNjA2MTUxODI0MDlaMDMxMTAvBgNV
BAMTKEZDMTdENDAyRTgzMDg1MzIwRDZDQkY2MkU1RjUzMkYxRDA1RDQxNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzyCuwyXizNTZY6skDrm+M4juv
o2eXtrtQHbpXGgZjCteI1bCwYhLLsk+KGMNrjNl291CuPGyjNJLP7+dSwXZDkCfk
dJVgvxE3WNgTHMdQCQ+PDNeiuXRZSaciMl0tOE/2hwNlEaQaRVwFJKQCpW7HHV7g
NwCpX9V1SAc5HQXYa2Gaxg0Lpapfr0ciYwD/4CBHUP9qNVcwelCM8i46MEmHZjXM
3QBi+aZ5FXwhB5nFAOWWt5CGxi8sQlhUP0W2llpuYks6KyKTeAiB4oPrC7zzc9o6
um/SDVFd3uubHh4nIP74DkwO9G4397eXukG8tOjZ5k4vF9LfCjV7z41QldmDAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU/BfUAugwhTINbL9i5fUy8dBdQXUwHwYDVR0j
BBgwFoAUuDjEaEDeK1z0YUggoNEu/vKWDI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpUSHBFWWE0eVJpMWZSTnFMekNUTG9GQ1RvNDRlUXdYU3JZTVBLQXY0
dUQvMC9CODM4QzQ2ODQwREUyQjVDRjQ2MTQ4MjBBMEQxMkVGRUYyOTYwQzhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4MzhDNDY4NDBERTJCNUNG
NDYxNDgyMEEwRDEyRUZFRjI5NjBDOEQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6VEhwRVlhNHlSaTFmUk5xTHpDVExvRkNUbzQ0ZVF3WFNyWU1QS0F2NHVELzAv
MzIzODMwMzQzYTMxNjE2MjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM4
MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGrwwDQYJKoZIhvcNAQELBQADggEBACySmDEw2txF
+xxgjJ7IbIYFJqxFNRSsQeWeJtuGMcB0GG+eHczMcPFCMlT71UkKiyAJqMwV7Xxc
hVZA8bEAG2pAtJxGwy3iGMURwYfiMxhf28OSdI+Zxiy6fWx/cwbepAgAsZEN4yfP
qwv6HZJhLbDGbSkPVSr1ePCm9neKeLt9/UtrGy/OJeauWPe3w2Ks7jo3F27sXP6Y
O1sIqpA6bDQVU/Hbuw4zJdKFfmo3M9KbYTeYWso4+Y1p9e/uEqVvEvvf/pTz2xlJ
Z2nnP2q8KsTN2ZcPnHpMjX2l5bi1uQJFkyMiC3xqkqZMCuOXGJOTq7Levt/h0v4h
kQVEniVBxX4=
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:18:15 2025 by rpki-client