Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a663030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a663030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          QYG5nxcZ9JlVOZrx5HuXqIuf2uhrYkjpyV15pt+2kdc=
Subject key identifier:   3F:A6:EA:FD:66:18:56:D7:CE:43:36:27:F3:24:73:A5:DA:56:B3:9F
Certificate issuer:       /CN=ADFB743F78B2F288155F57415C2B114473B48D92
Certificate serial:       197192E159E6B4B6E2F0B00721047288696BE81A
Authority key identifier: AD:FB:74:3F:78:B2:F2:88:15:5F:57:41:5C:2B:11:44:73:B4:8D:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADFB743F78B2F288155F57415C2B114473B48D92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a663030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Sat 14 Jun 2025 17:27:31 +0000
ROA not before:           Sat 14 Jun 2025 17:22:31 +0000
ROA not after:            Sat 13 Jun 2026 17:27:31 +0000
asID:                     274726
IP address blocks:        2804:92a8:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/ADFB743F78B2F288155F57415C2B114473B48D92.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/ADFB743F78B2F288155F57415C2B114473B48D92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADFB743F78B2F288155F57415C2B114473B48D92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 01:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:71:92:e1:59:e6:b4:b6:e2:f0:b0:07:21:04:72:88:69:6b:e8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFB743F78B2F288155F57415C2B114473B48D92
        Validity
            Not Before: Jun 14 17:22:31 2025 GMT
            Not After : Jun 13 17:27:31 2026 GMT
        Subject: CN=3FA6EAFD661856D7CE433627F32473A5DA56B39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:62:49:73:a8:b2:e5:21:35:6a:90:2e:85:2b:
                    6a:19:5c:6c:75:77:74:1b:32:9c:40:c9:e8:75:9a:
                    aa:cc:16:b0:0c:ac:c4:5a:be:7d:43:1b:4e:3e:41:
                    e2:ff:0f:11:77:57:82:3e:34:dd:35:3d:c5:38:0f:
                    86:a0:39:0a:58:76:a2:d7:d5:4b:e7:e2:a4:1a:e9:
                    bb:5a:4a:46:38:fd:da:07:f6:81:5e:0b:69:9f:d2:
                    20:9d:15:ee:a9:d0:77:27:4e:b7:3b:53:53:0d:50:
                    c3:04:ba:69:ab:46:a2:3d:58:de:ee:a4:08:c6:5c:
                    7e:58:62:ca:3f:78:e1:7f:ae:45:53:11:1b:79:c6:
                    2f:dd:0b:32:1e:d5:35:ff:a9:c1:7a:f4:91:88:2a:
                    a2:b7:4c:af:d6:db:b6:49:2d:83:4a:b8:f5:ae:1a:
                    c7:45:19:96:ff:85:41:5a:5c:bb:08:2d:a3:44:4c:
                    bf:44:e2:b2:e3:8e:12:fa:fd:da:23:7e:1a:14:a2:
                    90:07:2a:f5:11:6d:69:39:f1:18:b3:ba:37:45:19:
                    b4:a8:71:a1:9b:62:80:11:15:86:38:dd:08:bb:cb:
                    8a:89:38:56:78:8a:93:81:dd:84:6e:1c:73:dd:4b:
                    05:6c:93:f3:0c:fb:f9:b0:80:79:aa:b3:e2:72:77:
                    89:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A6:EA:FD:66:18:56:D7:CE:43:36:27:F3:24:73:A5:DA:56:B3:9F
            X509v3 Authority Key Identifier:
                keyid:AD:FB:74:3F:78:B2:F2:88:15:5F:57:41:5C:2B:11:44:73:B4:8D:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/ADFB743F78B2F288155F57415C2B114473B48D92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADFB743F78B2F288155F57415C2B114473B48D92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a663030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         28:ef:20:88:33:a5:6f:dc:ae:a5:ed:be:5e:35:61:50:cc:52:
         02:e3:37:ee:4d:a6:c3:0f:21:6c:d1:3d:00:9a:d6:96:b9:b1:
         73:48:9e:41:59:32:0b:bc:42:96:38:23:35:b3:39:07:d3:47:
         11:09:c4:99:21:c0:4a:a2:08:43:26:7d:5f:75:7c:82:f6:93:
         3a:d5:9f:90:8e:c9:08:9c:3b:1e:48:25:39:41:f0:dd:52:a1:
         5f:3a:e5:de:44:4b:22:37:34:b6:b5:4d:d9:cb:24:86:61:9b:
         a9:3e:0a:2a:ab:72:0e:39:f9:04:18:d1:23:8c:b2:c6:b8:b9:
         d3:07:18:5f:3d:a2:d7:16:b5:f7:a2:60:54:63:d6:35:5f:31:
         32:48:0d:7a:c1:8b:55:01:86:7c:88:69:15:79:03:77:c3:a4:
         c3:64:c9:7e:d9:7a:29:ce:8b:d5:4d:80:31:15:60:71:75:5e:
         03:7e:9c:ee:fd:46:50:b1:7b:94:1d:83:24:a6:6c:23:d0:df:
         4c:bf:72:a7:28:4d:1e:0d:67:5b:ac:a3:14:a0:71:fb:6b:26:
         78:05:e7:b2:6c:e1:35:dc:e8:72:27:36:11:84:1e:b8:f0:32:
         63:02:ce:6d:f6:05:f3:9f:38:6a:cf:2a:6c:24:9e:d2:ec:d8:
         72:e3:3f:c3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGXGS4VnmtLbi8LAHIQRyiGlr6BowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURGQjc0M0Y3OEIyRjI4ODE1NUY1NzQxNUMyQjExNDQ3
M0I0OEQ5MjAeFw0yNTA2MTQxNzIyMzFaFw0yNjA2MTMxNzI3MzFaMDMxMTAvBgNV
BAMTKDNGQTZFQUZENjYxODU2RDdDRTQzMzYyN0YzMjQ3M0E1REE1NkIzOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIYklzqLLlITVqkC6FK2oZXGx1
d3QbMpxAyeh1mqrMFrAMrMRavn1DG04+QeL/DxF3V4I+NN01PcU4D4agOQpYdqLX
1Uvn4qQa6btaSkY4/doH9oFeC2mf0iCdFe6p0HcnTrc7U1MNUMMEummrRqI9WN7u
pAjGXH5YYso/eOF/rkVTERt5xi/dCzIe1TX/qcF69JGIKqK3TK/W27ZJLYNKuPWu
GsdFGZb/hUFaXLsILaNETL9E4rLjjhL6/dojfhoUopAHKvURbWk58RizujdFGbSo
caGbYoARFYY43Qi7y4qJOFZ4ipOB3YRuHHPdSwVsk/MM+/mwgHmqs+Jyd4kZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUP6bq/WYYVtfOQzYn8yRzpdpWs58wHwYDVR0j
BBgwFoAUrft0P3iy8ogVX1dBXCsRRHO0jZIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNMbnR3b2tva3cyb3hHcFh5WW9IeDNpYnRtbURTUkhFeHhWdFRLNlFx
ODEvMC9BREZCNzQzRjc4QjJGMjg4MTU1RjU3NDE1QzJCMTE0NDczQjQ4RDkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FERkI3NDNGNzhCMkYyODgx
NTVGNTc0MTVDMkIxMTQ0NzNCNDhEOTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzTG50d29rb2t3Mm94R3BYeVlvSHgzaWJ0bW1EU1JIRXh4VnRUSzZRcTgxLzAv
MzIzODMwMzQzYTM5MzI2MTM4M2E2NjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczNDM3MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEkqjwMA0GCSqGSIb3DQEBCwUA
A4IBAQAo7yCIM6Vv3K6l7b5eNWFQzFIC4zfuTabDDyFs0T0AmtaWubFzSJ5BWTIL
vEKWOCM1szkH00cRCcSZIcBKoghDJn1fdXyC9pM61Z+QjskInDseSCU5QfDdUqFf
OuXeREsiNzS2tU3ZyySGYZupPgoqq3IOOfkEGNEjjLLGuLnTBxhfPaLXFrX3omBU
Y9Y1XzEySA16wYtVAYZ8iGkVeQN3w6TDZMl+2XopzovVTYAxFWBxdV4Dfpzu/UZQ
sXuUHYMkpmwj0N9Mv3KnKE0eDWdbrKMUoHH7ayZ4BeeybOE13OhyJzYRhB648DJj
As5t9gXznzhqzypsJJ7S7Nhy4z/D
-----END CERTIFICATE-----
Generated at Fri Jun 20 04:08:53 2025 by rpki-client