Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiiUo1adcbpn2qXehdGNBqmjgRoPVjopbW8CcGuR9dFG/0/323830313a38303a336130303a3a2f34302d313238203d3e20323730343130.roa
File:                     323830313a38303a336130303a3a2f34302d313238203d3e20323730343130.roa (raw, json)
Hash identifier:          SpMmsLiPfn+Ouj68iMVdgifIsAq/lfIqenE+eiDLBwQ=
Subject key identifier:   3E:8E:B8:66:6D:E6:16:B3:E7:8E:D9:B7:1A:3E:1D:49:21:02:3E:E3
Certificate issuer:       /CN=2180F348977193EC0F02C27E2F27F245CBC49DB9
Certificate serial:       1AC58DE751F683B11E99AFDD2BBF218361A6B7BB
Authority key identifier: 21:80:F3:48:97:71:93:EC:0F:02:C2:7E:2F:27:F2:45:CB:C4:9D:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2180F348977193EC0F02C27E2F27F245CBC49DB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiiUo1adcbpn2qXehdGNBqmjgRoPVjopbW8CcGuR9dFG/0/323830313a38303a336130303a3a2f34302d313238203d3e20323730343130.roa
Signing time:             Mon 16 Jun 2025 19:13:33 +0000
ROA not before:           Mon 16 Jun 2025 19:08:33 +0000
ROA not after:            Mon 15 Jun 2026 19:13:33 +0000
asID:                     270410
IP address blocks:        2801:80:3a00::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EiiUo1adcbpn2qXehdGNBqmjgRoPVjopbW8CcGuR9dFG/0/2180F348977193EC0F02C27E2F27F245CBC49DB9.crl
                          rsync://rpki-repo.registro.br/repo/EiiUo1adcbpn2qXehdGNBqmjgRoPVjopbW8CcGuR9dFG/0/2180F348977193EC0F02C27E2F27F245CBC49DB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2180F348977193EC0F02C27E2F27F245CBC49DB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 21:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c5:8d:e7:51:f6:83:b1:1e:99:af:dd:2b:bf:21:83:61:a6:b7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2180F348977193EC0F02C27E2F27F245CBC49DB9
        Validity
            Not Before: Jun 16 19:08:33 2025 GMT
            Not After : Jun 15 19:13:33 2026 GMT
        Subject: CN=3E8EB8666DE616B3E78ED9B71A3E1D4921023EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:23:e7:44:19:55:e8:b9:6f:97:dc:2f:43:b8:
                    2f:0f:d2:8a:bb:65:96:a2:70:0a:a7:c3:49:57:85:
                    ac:5c:a0:89:b8:0d:19:d9:24:de:1a:08:4e:07:6d:
                    10:ba:0e:0a:fc:ed:32:69:2a:52:7d:54:20:2b:f2:
                    f2:b5:6d:a8:aa:40:e8:85:58:d1:87:82:7e:fc:76:
                    61:d0:ff:9d:2d:5b:98:a1:a0:02:73:13:e3:88:26:
                    45:92:b3:28:17:78:12:36:59:c1:80:39:ac:0f:b5:
                    95:53:ad:02:52:10:68:db:ff:a2:99:b7:0b:8d:f2:
                    d0:fa:26:f1:52:af:d5:49:67:0a:23:f8:39:62:d4:
                    12:8f:c7:10:4f:4b:b5:25:a8:19:3d:94:30:37:e8:
                    b0:e1:d5:96:ed:50:f8:de:73:e3:de:ab:c8:f9:80:
                    73:ca:cb:de:3d:bc:97:57:3b:a0:3a:26:c3:f3:e2:
                    43:85:d2:e9:7a:f8:94:0f:a9:e0:63:99:2f:8f:5f:
                    e9:f5:b0:1d:5e:4d:06:54:d0:38:91:d1:4b:6e:17:
                    08:59:6c:0a:10:d3:57:6d:c7:c0:ba:bc:4c:67:96:
                    1f:07:a9:df:4f:bc:20:e3:01:f7:e4:30:e0:84:62:
                    30:a2:99:79:f9:80:27:e6:6d:56:75:bc:2c:84:96:
                    46:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8E:B8:66:6D:E6:16:B3:E7:8E:D9:B7:1A:3E:1D:49:21:02:3E:E3
            X509v3 Authority Key Identifier:
                keyid:21:80:F3:48:97:71:93:EC:0F:02:C2:7E:2F:27:F2:45:CB:C4:9D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiiUo1adcbpn2qXehdGNBqmjgRoPVjopbW8CcGuR9dFG/0/2180F348977193EC0F02C27E2F27F245CBC49DB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2180F348977193EC0F02C27E2F27F245CBC49DB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiiUo1adcbpn2qXehdGNBqmjgRoPVjopbW8CcGuR9dFG/0/323830313a38303a336130303a3a2f34302d313238203d3e20323730343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:3a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:09:68:4a:df:dd:af:65:25:d8:57:d8:c1:b4:da:48:08:17:
         4b:57:f6:b6:ea:76:52:e5:77:7e:20:cc:e8:0a:7c:73:4e:e7:
         59:a7:a4:bb:1a:d9:c9:97:61:86:93:2e:12:0c:ac:56:d4:95:
         30:ac:46:0b:3f:28:36:89:86:b5:ed:03:8f:94:58:02:07:50:
         b9:6e:4a:fc:ee:dd:a5:8a:b2:ff:e8:75:fa:07:1e:8e:7a:26:
         da:be:be:16:dc:05:9c:48:e9:1b:fe:71:ad:5a:3e:e2:36:80:
         94:3b:f8:b2:f4:d0:e7:24:50:65:7d:ef:3b:8b:a2:d1:35:bf:
         6f:b4:bd:1e:72:38:83:e9:35:8a:27:0a:28:72:b9:50:be:0a:
         1e:71:85:54:eb:c2:fd:12:b0:0a:78:29:0e:25:e0:a4:7d:ae:
         24:12:c6:f8:9e:47:d0:37:5f:0f:46:9d:0e:0d:af:ef:bb:e6:
         8d:96:ae:85:7c:f9:e4:0f:6d:63:17:ca:75:f5:c5:27:2a:f8:
         46:11:6b:62:3b:06:4d:4c:5c:ad:94:8e:68:04:6a:5a:27:28:
         7c:7a:92:f2:41:61:5a:88:7d:ec:4f:ff:ce:4b:6b:87:1b:f2:
         a5:0b:67:12:ff:37:af:e9:5d:ec:c3:93:b3:e3:d6:cf:e5:36:
         fc:e3:09:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUGsWN51H2g7Eema/dK78hg2Gmt7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4MEYzNDg5NzcxOTNFQzBGMDJDMjdFMkYyN0YyNDVD
QkM0OURCOTAeFw0yNTA2MTYxOTA4MzNaFw0yNjA2MTUxOTEzMzNaMDMxMTAvBgNV
BAMTKDNFOEVCODY2NkRFNjE2QjNFNzhFRDlCNzFBM0UxRDQ5MjEwMjNFRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDII+dEGVXouW+X3C9DuC8P0oq7
ZZaicAqnw0lXhaxcoIm4DRnZJN4aCE4HbRC6Dgr87TJpKlJ9VCAr8vK1baiqQOiF
WNGHgn78dmHQ/50tW5ihoAJzE+OIJkWSsygXeBI2WcGAOawPtZVTrQJSEGjb/6KZ
twuN8tD6JvFSr9VJZwoj+Dli1BKPxxBPS7UlqBk9lDA36LDh1ZbtUPjec+Peq8j5
gHPKy949vJdXO6A6JsPz4kOF0ul6+JQPqeBjmS+PX+n1sB1eTQZU0DiR0UtuFwhZ
bAoQ01dtx8C6vExnlh8Hqd9PvCDjAffkMOCEYjCimXn5gCfmbVZ1vCyElkbvAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUPo64Zm3mFrPnjtm3Gj4dSSECPuMwHwYDVR0j
BBgwFoAUIYDzSJdxk+wPAsJ+LyfyRcvEnbkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWlpVW8xYWRjYnBuMnFYZWhkR05CcW1qZ1JvUFZqb3BiVzhDY0d1Ujlk
RkcvMC8yMTgwRjM0ODk3NzE5M0VDMEYwMkMyN0UyRjI3RjI0NUNCQzQ5REI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxODBGMzQ4OTc3MTkzRUMw
RjAyQzI3RTJGMjdGMjQ1Q0JDNDlEQjkuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VpaVVvMWFkY2JwbjJxWGVoZEdOQnFtamdSb1BWam9wYlc4Q2NHdVI5ZEZHLzAv
MzIzODMwMzEzYTM4MzAzYTMzNjEzMDMwM2EzYTJmMzQzMDJkMzEzMjM4MjAzZDNl
MjAzMjM3MzAzNDMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoAQCAOjANBgkqhkiG9w0BAQsFAAOC
AQEAhgloSt/dr2Ul2FfYwbTaSAgXS1f2tup2UuV3fiDM6Ap8c07nWaekuxrZyZdh
hpMuEgysVtSVMKxGCz8oNomGte0Dj5RYAgdQuW5K/O7dpYqy/+h1+gcejnom2r6+
FtwFnEjpG/5xrVo+4jaAlDv4svTQ5yRQZX3vO4ui0TW/b7S9HnI4g+k1iicKKHK5
UL4KHnGFVOvC/RKwCngpDiXgpH2uJBLG+J5H0DdfD0adDg2v77vmjZauhXz55A9t
YxfKdfXFJyr4RhFrYjsGTUxcrZSOaARqWicofHqS8kFhWoh97E//zktrhxvypQtn
Ev83r+ld7MOTs+PWz+U2/OMJNQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 02:34:36 2025 by rpki-client