Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a3a2f33332d3333203d3e20323639343131.roa
File:                     323830343a363432633a3a2f33332d3333203d3e20323639343131.roa (raw, json)
Hash identifier:          /THxSH1EosZhPT6khRmxx0VZiJM3VNNCaJh/I8rn/64=
Subject key identifier:   ED:9C:3F:5F:2B:A7:70:B0:0A:3F:7B:07:09:70:13:7F:B7:74:9C:48
Certificate issuer:       /CN=91D0CB672455E2525CA585B9DB73D420AE011D8D
Certificate serial:       26F563A3D2D451F592BC0D06B69120338CA86628
Authority key identifier: 91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a3a2f33332d3333203d3e20323639343131.roa
Signing time:             Thu 19 Jun 2025 13:13:06 +0000
ROA not before:           Thu 19 Jun 2025 13:08:06 +0000
ROA not after:            Thu 18 Jun 2026 13:13:06 +0000
asID:                     269411
IP address blocks:        2804:642c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.crl
                          rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 07:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f5:63:a3:d2:d4:51:f5:92:bc:0d:06:b6:91:20:33:8c:a8:66:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D0CB672455E2525CA585B9DB73D420AE011D8D
        Validity
            Not Before: Jun 19 13:08:06 2025 GMT
            Not After : Jun 18 13:13:06 2026 GMT
        Subject: CN=ED9C3F5F2BA770B00A3F7B070970137FB7749C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:02:f7:f4:f6:f8:a1:18:cc:51:14:72:d2:
                    dc:f6:94:e7:f1:a5:66:db:03:9a:aa:30:2e:fd:30:
                    9e:f1:6a:86:ab:9f:c3:31:9a:3e:11:dc:19:56:4e:
                    54:d9:86:d0:48:ee:72:58:29:c5:a4:ee:8b:91:a6:
                    58:31:3b:a4:93:0c:af:af:99:8a:b1:3b:9e:72:bb:
                    fa:cc:a8:d8:d9:be:61:8a:e1:a2:86:ec:1d:07:e1:
                    f5:cf:d4:09:78:8a:ac:b4:0f:56:aa:4d:5f:69:3d:
                    61:c4:b7:12:e4:c5:8a:7d:57:28:ea:17:38:c4:9c:
                    bc:e9:42:f4:1d:9a:3b:fb:8f:c7:f1:86:73:e4:a0:
                    86:6f:42:a2:d7:d0:46:c4:66:d2:b1:be:6d:d1:74:
                    e8:ce:61:bd:dd:d6:20:c3:75:ec:6f:89:43:59:11:
                    a5:73:56:56:ee:7d:dc:70:0e:41:b3:32:ce:3d:80:
                    44:52:b9:c4:44:4e:f9:e0:df:97:a0:08:56:a0:5b:
                    c8:45:e9:29:fe:c7:db:2a:de:bb:1e:73:10:2e:cd:
                    d7:6e:df:5a:a9:97:b5:0a:65:70:8c:dd:2a:bc:ae:
                    27:de:38:c8:73:4e:e1:b9:20:c6:56:81:ae:8a:5d:
                    a0:3b:92:44:bd:29:aa:aa:a8:1e:66:ae:f2:39:b2:
                    82:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9C:3F:5F:2B:A7:70:B0:0A:3F:7B:07:09:70:13:7F:B7:74:9C:48
            X509v3 Authority Key Identifier:
                keyid:91:D0:CB:67:24:55:E2:52:5C:A5:85:B9:DB:73:D4:20:AE:01:1D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/91D0CB672455E2525CA585B9DB73D420AE011D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D0CB672455E2525CA585B9DB73D420AE011D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/323830343a363432633a3a2f33332d3333203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:642c::/33

    Signature Algorithm: sha256WithRSAEncryption
         43:d0:50:bd:64:20:ce:79:75:d2:c9:26:cc:be:a1:e8:e8:e8:
         f9:0d:f3:b7:54:dc:bb:9c:bc:35:a4:7a:ae:c9:11:c9:62:8b:
         ce:75:05:ff:a7:79:08:5f:08:d3:98:2d:b0:56:bc:3a:5b:bd:
         2d:6e:b5:f5:f7:7a:d1:0d:d9:50:f3:ee:7b:ca:dd:ba:44:28:
         b3:b3:d4:bf:cf:74:6b:b4:5c:81:08:c1:d7:77:07:4e:63:82:
         b1:11:8f:0d:29:62:0d:06:02:ed:05:a2:e9:db:13:d5:02:1e:
         31:0a:7d:1d:2a:b7:33:9c:b3:24:fe:cd:22:42:58:62:6d:fe:
         19:0f:ab:6b:8c:91:e7:0f:b5:82:ee:c3:09:9a:10:ab:6e:0f:
         02:34:b5:81:b0:ea:c5:43:ca:65:fe:2f:aa:18:79:10:32:6f:
         f3:7e:f3:7d:00:29:f6:a4:19:d1:6d:f7:da:5a:78:71:b1:34:
         65:f9:02:d5:d9:80:42:47:25:11:a1:c5:a1:73:3d:4a:a4:c5:
         74:ca:64:9b:47:06:85:30:2a:c3:e2:f7:59:8d:3e:c6:e4:59:
         ef:bb:43:0f:01:bd:50:ba:83:1f:5f:49:60:29:39:5b:9e:d3:
         9e:9b:ca:8a:1c:ef:4a:7f:b1:8e:12:78:27:cd:fa:92:8a:82:
         38:33:f0:22
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJvVjo9LUUfWSvA0GtpEgM4yoZigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFEMENCNjcyNDU1RTI1MjVDQTU4NUI5REI3M0Q0MjBB
RTAxMUQ4RDAeFw0yNTA2MTkxMzA4MDZaFw0yNjA2MTgxMzEzMDZaMDMxMTAvBgNV
BAMTKEVEOUMzRjVGMkJBNzcwQjAwQTNGN0IwNzA5NzAxMzdGQjc3NDlDNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQvgL39Pb4oRjMURRy0tz2lOfx
pWbbA5qqMC79MJ7xaoarn8Mxmj4R3BlWTlTZhtBI7nJYKcWk7ouRplgxO6STDK+v
mYqxO55yu/rMqNjZvmGK4aKG7B0H4fXP1Al4iqy0D1aqTV9pPWHEtxLkxYp9Vyjq
FzjEnLzpQvQdmjv7j8fxhnPkoIZvQqLX0EbEZtKxvm3RdOjOYb3d1iDDdexviUNZ
EaVzVlbufdxwDkGzMs49gERSucRETvng35egCFagW8hF6Sn+x9sq3rsecxAuzddu
31qpl7UKZXCM3Sq8rifeOMhzTuG5IMZWga6KXaA7kkS9KaqqqB5mrvI5soK5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7Zw/XyuncLAKP3sHCXATf7d0nEgwHwYDVR0j
BBgwFoAUkdDLZyRV4lJcpYW523PUIK4BHY0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR
eEUvMC85MUQwQ0I2NzI0NTVFMjUyNUNBNTg1QjlEQjczRDQyMEFFMDExRDhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxRDBDQjY3MjQ1NUUyNTI1
Q0E1ODVCOURCNzNENDIwQUUwMTFEOEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzAv
MzIzODMwMzQzYTM2MzQzMjYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM5
MzQzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARkLAAwDQYJKoZIhvcNAQELBQADggEBAEPQUL1k
IM55ddLJJsy+oejo6PkN87dU3LucvDWkeq7JEclii851Bf+neQhfCNOYLbBWvDpb
vS1utfX3etEN2VDz7nvK3bpEKLOz1L/PdGu0XIEIwdd3B05jgrERjw0pYg0GAu0F
ounbE9UCHjEKfR0qtzOcsyT+zSJCWGJt/hkPq2uMkecPtYLuwwmaEKtuDwI0tYGw
6sVDymX+L6oYeRAyb/N+830AKfakGdFt99paeHGxNGX5AtXZgEJHJRGhxaFzPUqk
xXTKZJtHBoUwKsPi91mNPsbkWe+7Qw8BvVC6gx9fSWApOVue056byooc70p/sY4S
eCfN+pKKgjgz8CI=
-----END CERTIFICATE-----
Generated at Fri Jun 20 22:15:25 2025 by rpki-client