Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a34313a3a2f34382d3438203d3e20323632373239.roa
File:                     323830343a313664383a34313a3a2f34382d3438203d3e20323632373239.roa (raw, json)
Hash identifier:          XMYDSEcWdXpZRKDCXZFkn15DZdQr2+MUbBi8NgnLrLo=
Subject key identifier:   6D:F0:97:1B:33:CF:3D:2F:02:90:BC:48:40:C1:C5:85:33:77:B1:45
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       437B67C8C61725E7D4F766DB037F9BDE9F519913
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a34313a3a2f34382d3438203d3e20323632373239.roa
Signing time:             Mon 16 Jun 2025 14:10:47 +0000
ROA not before:           Mon 16 Jun 2025 14:05:47 +0000
ROA not after:            Mon 15 Jun 2026 14:10:47 +0000
asID:                     262729
IP address blocks:        2804:16d8:41::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 02:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7b:67:c8:c6:17:25:e7:d4:f7:66:db:03:7f:9b:de:9f:51:99:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jun 16 14:05:47 2025 GMT
            Not After : Jun 15 14:10:47 2026 GMT
        Subject: CN=6DF0971B33CF3D2F0290BC4840C1C5853377B145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:c8:18:fc:40:ad:8d:96:50:8f:1f:1a:9e:
                    ac:46:f6:78:af:17:7f:23:58:26:bb:d7:bc:6b:56:
                    5d:30:dc:ec:4f:b9:8c:d2:37:32:a4:11:5f:f5:85:
                    2f:7b:97:8f:af:27:82:24:39:90:65:15:a5:f4:06:
                    ec:b5:2a:a4:6a:66:0b:80:b5:90:48:c4:0e:c6:29:
                    97:4b:0b:05:96:40:4b:7f:47:97:4b:86:7a:70:2f:
                    e3:c8:6e:ba:07:b1:13:45:24:47:b9:d8:f1:97:bf:
                    7e:40:b6:7f:6e:77:43:18:d3:36:22:0e:46:8a:30:
                    f3:80:57:2b:75:a6:21:38:8e:9a:62:38:08:b3:b3:
                    a4:0d:70:1b:52:fa:91:7d:d1:d0:fb:47:17:a8:9f:
                    c4:4c:48:24:43:e7:d4:b5:34:aa:c9:ac:4f:73:35:
                    66:8c:ed:5b:47:cb:4f:f0:27:86:6e:00:53:d6:08:
                    cf:3e:77:39:55:b5:06:a3:e3:71:6d:c2:14:5a:ce:
                    a5:b5:06:84:e0:f4:0c:11:ba:bc:d6:d5:90:84:41:
                    c2:0b:c2:9d:e7:2f:1a:21:40:12:4a:6d:5c:7f:31:
                    1c:c2:e5:10:ce:f2:3a:45:78:de:c2:6d:83:1b:4f:
                    4f:01:d5:b4:d7:14:0c:4c:ab:2e:cd:92:fc:d7:67:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F0:97:1B:33:CF:3D:2F:02:90:BC:48:40:C1:C5:85:33:77:B1:45
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a34313a3a2f34382d3438203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:41::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:89:e4:92:7d:25:31:13:2d:e2:91:d2:d8:05:b1:e8:30:9f:
         f4:b3:07:69:cb:99:05:c0:55:ba:c0:09:39:0c:5b:73:d2:4e:
         ce:83:d7:0c:d9:16:54:d6:7b:eb:e2:7b:77:49:f8:24:f0:16:
         8b:5e:e5:d8:5e:3a:eb:35:9e:bc:8c:36:19:1c:37:28:39:b2:
         e3:7c:40:a1:bf:c9:25:94:50:82:8d:53:cd:a1:bc:10:98:6b:
         6c:ae:0f:73:e3:65:61:31:74:25:c5:77:ad:f6:65:fc:e3:9b:
         f4:fe:30:46:b2:e3:18:40:63:1b:5d:24:98:f2:f9:06:da:15:
         0e:83:92:c7:1d:02:5a:90:0f:86:4b:dd:5a:92:51:9d:60:36:
         80:e9:63:b9:3e:8e:a0:c3:80:1e:51:cf:28:ab:3e:79:23:15:
         97:3c:72:fb:41:44:3b:ad:ec:cc:b8:7c:08:7f:7c:dc:48:89:
         0a:4f:5d:fd:7e:e5:3b:d9:11:bd:97:5a:27:95:0d:c7:2c:87:
         1a:57:fa:45:c6:dc:0d:ac:ae:00:18:83:d1:b2:5b:4a:e1:6b:
         87:24:db:ca:bf:64:44:6a:b1:06:1c:45:6c:85:71:07:47:52:
         c2:e8:d6:a9:ca:f5:dc:45:f6:31:05:cb:30:5b:5d:6d:2c:c9:
         14:13:13:f4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUQ3tnyMYXJefU92bbA3+b3p9RmRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNTA2MTYxNDA1NDdaFw0yNjA2MTUxNDEwNDdaMDMxMTAvBgNV
BAMTKDZERjA5NzFCMzNDRjNEMkYwMjkwQkM0ODQwQzFDNTg1MzM3N0IxNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2MgY/ECtjZZQjx8anqxG9niv
F38jWCa717xrVl0w3OxPuYzSNzKkEV/1hS97l4+vJ4IkOZBlFaX0Buy1KqRqZguA
tZBIxA7GKZdLCwWWQEt/R5dLhnpwL+PIbroHsRNFJEe52PGXv35Atn9ud0MY0zYi
DkaKMPOAVyt1piE4jppiOAizs6QNcBtS+pF90dD7Rxeon8RMSCRD59S1NKrJrE9z
NWaM7VtHy0/wJ4ZuAFPWCM8+dzlVtQaj43FtwhRazqW1BoTg9AwRurzW1ZCEQcIL
wp3nLxohQBJKbVx/MRzC5RDO8jpFeN7CbYMbT08B1bTXFAxMqy7NkvzXZ4+DAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUbfCXGzPPPS8CkLxIQMHFhTN3sUUwHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzIzODMwMzQzYTMxMzY2NDM4M2EzNDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzNjMyMzczMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAQW2ABBMA0GCSqGSIb3DQEBCwUAA4IB
AQATieSSfSUxEy3ikdLYBbHoMJ/0swdpy5kFwFW6wAk5DFtz0k7Og9cM2RZU1nvr
4nt3Sfgk8BaLXuXYXjrrNZ68jDYZHDcoObLjfEChv8kllFCCjVPNobwQmGtsrg9z
42VhMXQlxXet9mX845v0/jBGsuMYQGMbXSSY8vkG2hUOg5LHHQJakA+GS91aklGd
YDaA6WO5Po6gw4AeUc8oqz55IxWXPHL7QUQ7rezMuHwIf3zcSIkKT139fuU72RG9
l1onlQ3HLIcaV/pFxtwNrK4AGIPRsltK4WuHJNvKv2REarEGHEVshXEHR1LC6Nap
yvXcRfYxBcswW11tLMkUExP0
-----END CERTIFICATE-----
Generated at Wed Jun 18 04:51:48 2025 by rpki-client