Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/323830343a333535303a653030303a3a2f33362d3438203d3e20323636323830.roa
File:                     323830343a333535303a653030303a3a2f33362d3438203d3e20323636323830.roa (raw, json)
Hash identifier:          c7TzAQ1qYxjPFqrQI6yEYE48I0jeUYIK0uevUAVJrM8=
Subject key identifier:   36:05:79:19:1A:82:3E:39:F9:40:F2:4C:E8:71:DC:63:F4:84:9B:EA
Certificate issuer:       /CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA
Certificate serial:       35D4B2CA2AB61C535FA8B8BD0B1AB3BD3932E031
Authority key identifier: 53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/323830343a333535303a653030303a3a2f33362d3438203d3e20323636323830.roa
Signing time:             Tue 15 Jul 2025 14:48:16 +0000
ROA not before:           Tue 15 Jul 2025 14:43:16 +0000
ROA not after:            Tue 14 Jul 2026 14:48:16 +0000
asID:                     266280
IP address blocks:        2804:3550:e000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl
                          rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 05:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d4:b2:ca:2a:b6:1c:53:5f:a8:b8:bd:0b:1a:b3:bd:39:32:e0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA
        Validity
            Not Before: Jul 15 14:43:16 2025 GMT
            Not After : Jul 14 14:48:16 2026 GMT
        Subject: CN=360579191A823E39F940F24CE871DC63F4849BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:69:94:dd:4e:80:d6:a8:05:d1:55:3d:a8:c1:
                    19:b4:ed:40:c9:8d:44:ff:19:3d:fe:27:78:a8:38:
                    4c:11:91:d7:ed:37:f5:86:6c:e8:bc:82:13:22:67:
                    e3:67:75:12:99:cb:e4:ee:cd:f5:96:c8:9a:66:bb:
                    bb:66:72:15:af:c6:74:2e:aa:b7:df:f2:1b:79:e5:
                    c7:c4:da:75:11:9b:c8:b9:2f:73:77:ce:ec:ff:44:
                    65:23:9d:f8:d8:cd:a3:ee:b4:12:05:f3:c4:58:5e:
                    c9:fa:e1:54:8f:e1:78:87:bb:0b:8e:4d:5d:86:33:
                    39:40:1c:02:03:d5:b3:82:87:56:49:d4:6b:96:0e:
                    51:6d:19:8a:e9:25:b0:b1:21:c9:06:45:06:f6:5b:
                    92:87:04:cf:5f:c6:9c:1c:d4:15:9a:9a:84:c7:30:
                    ef:96:c3:db:17:f8:9a:40:d7:a4:6d:16:ee:18:a5:
                    79:8e:7e:33:e4:17:59:c1:98:a1:b9:f8:10:f9:4e:
                    4e:9c:a6:c6:d3:07:e9:45:86:83:9a:38:ba:17:30:
                    55:9c:09:7a:a8:dd:ac:e3:cd:5a:ed:41:3b:07:15:
                    65:43:0c:0c:b2:e4:30:31:b7:46:b9:c5:8a:14:36:
                    bc:2a:94:df:68:72:7e:9f:05:d8:a0:5a:70:18:be:
                    ff:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:05:79:19:1A:82:3E:39:F9:40:F2:4C:E8:71:DC:63:F4:84:9B:EA
            X509v3 Authority Key Identifier:
                keyid:53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/323830343a333535303a653030303a3a2f33362d3438203d3e20323636323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3550:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1c:5a:44:ed:7d:09:ba:1b:a5:b4:17:49:98:ab:28:d8:35:b1:
         93:1e:98:9a:f4:e9:20:c0:28:5f:2d:ac:e9:ca:51:f8:9d:ae:
         e0:32:9e:cd:1c:91:93:df:43:d2:6b:d0:ff:0f:ed:7f:20:17:
         81:db:10:df:99:8d:2d:30:31:b8:82:fd:d2:ff:0b:86:c7:cd:
         50:dd:eb:72:7d:b7:a7:7e:8f:27:53:29:3e:3e:74:79:7d:64:
         ea:f4:fc:8c:95:e7:5f:e8:c9:03:5b:d8:e1:ad:5c:0c:09:55:
         0a:46:71:70:6a:8d:d8:ab:aa:50:a3:81:be:17:c0:9d:a6:ee:
         f1:d0:44:8a:af:19:29:6f:04:09:cf:b8:13:a1:6c:57:71:b3:
         a7:0b:cb:4b:f9:d9:11:19:f3:19:50:fd:1e:84:52:a0:a0:61:
         b9:2c:77:c2:29:5d:67:86:dc:4f:c8:a9:7c:b6:49:85:6e:b9:
         60:ac:e2:43:10:c6:e0:d0:b2:a7:fd:cf:ed:49:63:f1:23:be:
         04:6a:4d:17:4e:3f:d6:f8:61:b9:70:29:a6:26:06:5a:57:b3:
         0a:63:df:f0:32:1b:48:88:d4:81:a8:7f:14:85:d3:39:73:06:
         32:ab:06:65:db:83:9c:15:11:65:d9:b9:69:5d:05:68:59:0a:
         4b:fe:20:c5
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUNdSyyiq2HFNfqLi9CxqzvTky4DEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNFQ0Q0RDFEMjkzNjAzQ0VDNDNDMEZCOENENzhERjlD
RjI0MTFBQTAeFw0yNTA3MTUxNDQzMTZaFw0yNjA3MTQxNDQ4MTZaMDMxMTAvBgNV
BAMTKDM2MDU3OTE5MUE4MjNFMzlGOTQwRjI0Q0U4NzFEQzYzRjQ4NDlCRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuaZTdToDWqAXRVT2owRm07UDJ
jUT/GT3+J3ioOEwRkdftN/WGbOi8ghMiZ+NndRKZy+TuzfWWyJpmu7tmchWvxnQu
qrff8ht55cfE2nURm8i5L3N3zuz/RGUjnfjYzaPutBIF88RYXsn64VSP4XiHuwuO
TV2GMzlAHAID1bOCh1ZJ1GuWDlFtGYrpJbCxIckGRQb2W5KHBM9fxpwc1BWamoTH
MO+Ww9sX+JpA16RtFu4YpXmOfjPkF1nBmKG5+BD5Tk6cpsbTB+lFhoOaOLoXMFWc
CXqo3azjzVrtQTsHFWVDDAyy5DAxt0a5xYoUNrwqlN9ocn6fBdigWnAYvv+9AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUNgV5GRqCPjn5QPJM6HHcY/SEm+owHwYDVR0j
BBgwFoAUU+zU0dKTYDzsQ8D7jNeN+c8kEaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVZCSDZHWWdLRlM3a0RoRUhGN2FZc29GV3VQTmpqNG1SR0FSOHBEa2l3
NDIvMC81M0VDRDREMUQyOTM2MDNDRUM0M0MwRkI4Q0Q3OERGOUNGMjQxMUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzRUNENEQxRDI5MzYwM0NF
QzQzQzBGQjhDRDc4REY5Q0YyNDExQUEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FWQkg2R1lnS0ZTN2tEaEVIRjdhWXNvRld1UE5qajRtUkdBUjhwRGtpdzQyLzAv
MzIzODMwMzQzYTMzMzUzNTMwM2E2NTMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNk
M2UyMDMyMzYzNjMyMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgENVDgMA0GCSqGSIb3DQEBCwUA
A4IBAQAcWkTtfQm6G6W0F0mYqyjYNbGTHpia9OkgwChfLazpylH4na7gMp7NHJGT
30PSa9D/D+1/IBeB2xDfmY0tMDG4gv3S/wuGx81Q3etyfbenfo8nUyk+PnR5fWTq
9PyMledf6MkDW9jhrVwMCVUKRnFwao3Yq6pQo4G+F8Cdpu7x0ESKrxkpbwQJz7gT
oWxXcbOnC8tL+dkRGfMZUP0ehFKgoGG5LHfCKV1nhtxPyKl8tkmFbrlgrOJDEMbg
0LKn/c/tSWPxI74Eak0XTj/W+GG5cCmmJgZaV7MKY9/wMhtIiNSBqH8UhdM5cwYy
qwZl24OcFRFl2blpXQVoWQpL/iDF
-----END CERTIFICATE-----
Generated at Sat Jul 26 05:47:35 2025 by rpki-client