Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/323830343a343432633a3a2f33322d3438203d3e20323637363037.roa
File:                     323830343a343432633a3a2f33322d3438203d3e20323637363037.roa (raw, json)
Hash identifier:          iXRCKIA/c+OWhYcHY9hA8PvUWlSQRbO+pGhqqpHRn2c=
Subject key identifier:   92:51:D4:2B:C0:57:AF:0C:7E:38:7D:EB:01:5D:B6:2A:9A:1B:73:02
Certificate issuer:       /CN=C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7
Certificate serial:       3C6C3CDE133928021D0E63612FD57813A60D902F
Authority key identifier: C6:41:0E:6C:8E:F5:E4:9E:E8:94:AE:BA:9A:C1:62:D0:C2:BB:AA:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/323830343a343432633a3a2f33322d3438203d3e20323637363037.roa
Signing time:             Tue 10 Jun 2025 18:39:22 +0000
ROA not before:           Tue 10 Jun 2025 18:34:22 +0000
ROA not after:            Tue 09 Jun 2026 18:39:22 +0000
asID:                     267607
IP address blocks:        2804:442c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.crl
                          rsync://rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 12:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6c:3c:de:13:39:28:02:1d:0e:63:61:2f:d5:78:13:a6:0d:90:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7
        Validity
            Not Before: Jun 10 18:34:22 2025 GMT
            Not After : Jun  9 18:39:22 2026 GMT
        Subject: CN=9251D42BC057AF0C7E387DEB015DB62A9A1B7302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:f7:23:f0:78:f1:f0:aa:9c:12:06:43:83:
                    eb:58:50:b0:ee:87:43:b1:6e:2b:ed:f9:32:b6:17:
                    e2:e4:21:c7:1e:d5:b6:3d:77:bc:13:a6:2c:3e:f6:
                    b2:74:ba:67:e0:d7:41:3c:de:f5:5a:d4:48:ab:7e:
                    97:26:b9:24:54:91:05:ff:6e:de:9f:21:5e:25:5f:
                    fb:9d:2c:57:e8:84:2e:1d:4d:30:ce:3c:e3:a8:5c:
                    dd:37:bb:d5:55:fe:6f:08:96:a7:00:19:79:d9:1c:
                    2c:47:c4:ea:64:3f:93:84:eb:4a:c3:85:f0:8e:9a:
                    9d:9b:d5:30:6b:0b:3e:2c:1d:a7:01:2b:a7:b3:6f:
                    af:e1:82:7e:02:62:ec:65:32:8e:b7:db:27:9c:c8:
                    5f:37:db:71:44:05:2b:59:78:59:60:08:3f:a1:ee:
                    59:8c:cd:fc:af:5d:d0:9a:28:9c:0e:98:61:5d:e1:
                    e8:99:1e:fc:b6:49:10:62:a2:1c:eb:ff:0f:bb:8f:
                    e3:b3:aa:ec:c3:da:8e:b7:92:61:aa:ac:6f:23:66:
                    99:72:7a:1e:3f:d4:e1:1f:3d:ae:54:23:83:4e:1f:
                    be:55:f8:5d:8d:c9:51:d5:4b:4e:8e:97:25:11:8a:
                    da:ec:ab:6a:5b:3c:65:77:7c:0f:35:7f:c7:6f:9a:
                    8f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:51:D4:2B:C0:57:AF:0C:7E:38:7D:EB:01:5D:B6:2A:9A:1B:73:02
            X509v3 Authority Key Identifier:
                keyid:C6:41:0E:6C:8E:F5:E4:9E:E8:94:AE:BA:9A:C1:62:D0:C2:BB:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6410E6C8EF5E49EE894AEBA9AC162D0C2BBAAA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hayp8sXb8M1MNHFeFKWxQMhZ9HJTbXX9tKVpgZhyezRA/0/323830343a343432633a3a2f33322d3438203d3e20323637363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:442c::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:af:8f:51:f8:6a:e5:f4:65:eb:86:50:b4:0f:bc:56:a6:a7:
         43:7c:87:0e:22:9c:d4:76:6a:e2:e2:8a:3a:ca:d6:22:5c:0a:
         ff:fc:de:75:1f:88:b8:12:b3:2b:ad:b7:00:93:c4:a6:05:67:
         a9:a4:ca:c6:e2:68:91:05:e6:11:5d:bc:b3:39:42:c7:91:2a:
         d8:88:32:cf:70:69:51:37:c7:a0:36:b6:ba:94:9b:ad:2b:08:
         de:6a:99:86:98:6a:51:e7:e5:20:8c:e3:99:66:a9:66:75:84:
         ae:3b:c2:16:c2:57:ef:8d:ed:fa:1c:41:fc:0b:f0:c2:2d:76:
         85:bc:23:f9:f2:7f:df:9d:a6:52:a8:8c:a3:a8:5d:58:37:08:
         9e:f9:6d:e5:d7:67:35:00:ec:01:da:1d:27:55:85:79:2b:f6:
         f1:00:85:62:4b:34:53:67:73:ae:13:c9:96:79:b7:68:d7:02:
         b8:36:61:19:c6:0e:da:bf:b0:44:82:d8:6a:64:fa:df:dd:88:
         2c:84:ac:9d:e1:22:9e:58:7b:d1:4c:c6:c6:d2:c8:d2:de:97:
         80:49:ef:6f:7d:06:1e:96:83:17:e3:5d:b9:90:4d:2c:3b:cc:
         ee:7c:46:10:d3:37:af:63:e4:c5:13:75:b6:a1:f1:37:99:10:
         1d:a3:e7:be
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPGw83hM5KAIdDmNhL9V4E6YNkC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY0MTBFNkM4RUY1RTQ5RUU4OTRBRUJBOUFDMTYyRDBD
MkJCQUFBNzAeFw0yNTA2MTAxODM0MjJaFw0yNjA2MDkxODM5MjJaMDMxMTAvBgNV
BAMTKDkyNTFENDJCQzA1N0FGMEM3RTM4N0RFQjAxNURCNjJBOUExQjczMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dvcj8Hjx8KqcEgZDg+tYULDu
h0Oxbivt+TK2F+LkIcce1bY9d7wTpiw+9rJ0umfg10E83vVa1EirfpcmuSRUkQX/
bt6fIV4lX/udLFfohC4dTTDOPOOoXN03u9VV/m8IlqcAGXnZHCxHxOpkP5OE60rD
hfCOmp2b1TBrCz4sHacBK6ezb6/hgn4CYuxlMo632yecyF8323FEBStZeFlgCD+h
7lmMzfyvXdCaKJwOmGFd4eiZHvy2SRBiohzr/w+7j+OzquzD2o63kmGqrG8jZply
eh4/1OEfPa5UI4NOH75V+F2NyVHVS06OlyURitrsq2pbPGV3fA81f8dvmo/ZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUklHUK8BXrwx+OH3rAV22KpobcwIwHwYDVR0j
BBgwFoAUxkEObI715J7olK66msFi0MK7qqcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGF5cDhzWGI4TTFNTkhGZUZLV3hRTWhaOUhKVGJYWDl0S1ZwZ1poeWV6
UkEvMC9DNjQxMEU2QzhFRjVFNDlFRTg5NEFFQkE5QUMxNjJEMEMyQkJBQUE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2NDEwRTZDOEVGNUU0OUVF
ODk0QUVCQTlBQzE2MkQwQzJCQkFBQTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hheXA4c1hiOE0xTU5IRmVGS1d4UU1oWjlISlRiWFg5dEtWcGdaaHllelJBLzAv
MzIzODMwMzQzYTM0MzQzMjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzYzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARELDANBgkqhkiG9w0BAQsFAAOCAQEAWa+PUfhq
5fRl64ZQtA+8VqanQ3yHDiKc1HZq4uKKOsrWIlwK//zedR+IuBKzK623AJPEpgVn
qaTKxuJokQXmEV28szlCx5Eq2Igyz3BpUTfHoDa2upSbrSsI3mqZhphqUeflIIzj
mWapZnWErjvCFsJX743t+hxB/Avwwi12hbwj+fJ/352mUqiMo6hdWDcInvlt5ddn
NQDsAdodJ1WFeSv28QCFYks0U2dzrhPJlnm3aNcCuDZhGcYO2r+wRILYamT6392I
LISsneEinlh70UzGxtLI0t6XgEnvb30GHpaDF+NduZBNLDvM7nxGENM3r2PkxRN1
tqHxN5kQHaPnvg==
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:23:49 2025 by rpki-client