Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/323830343a373134303a3a2f33322d3438203d3e20323730373737.roa
File:                     323830343a373134303a3a2f33322d3438203d3e20323730373737.roa (raw, json)
Hash identifier:          MMhCKs7wTHM0cIVNSMzH4yK4glHeC7HPR7sfn736yp8=
Subject key identifier:   8E:1D:5F:83:51:14:5D:8C:E4:73:CD:37:16:A6:AD:9B:08:FF:8D:14
Certificate issuer:       /CN=93564CC33EE53001901A2F9849EA295D1A0CECD5
Certificate serial:       3C8E35F4A993F94CA8FF86F7A5ABC82B2601442B
Authority key identifier: 93:56:4C:C3:3E:E5:30:01:90:1A:2F:98:49:EA:29:5D:1A:0C:EC:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/323830343a373134303a3a2f33322d3438203d3e20323730373737.roa
Signing time:             Sat 07 Jun 2025 12:52:29 +0000
ROA not before:           Sat 07 Jun 2025 12:47:29 +0000
ROA not after:            Sat 06 Jun 2026 12:52:29 +0000
asID:                     270777
IP address blocks:        2804:7140::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/93564CC33EE53001901A2F9849EA295D1A0CECD5.crl
                          rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/93564CC33EE53001901A2F9849EA295D1A0CECD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 00:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8e:35:f4:a9:93:f9:4c:a8:ff:86:f7:a5:ab:c8:2b:26:01:44:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93564CC33EE53001901A2F9849EA295D1A0CECD5
        Validity
            Not Before: Jun  7 12:47:29 2025 GMT
            Not After : Jun  6 12:52:29 2026 GMT
        Subject: CN=8E1D5F8351145D8CE473CD3716A6AD9B08FF8D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:6a:26:46:65:0d:30:72:e3:ae:f3:8c:f0:
                    90:6a:d6:9a:af:f7:08:b5:10:6d:d3:01:48:fd:2f:
                    db:52:bb:9d:29:70:29:be:1c:ff:5e:6d:fe:67:e7:
                    45:1f:85:5c:07:fa:67:bb:c8:a2:96:17:ab:c2:b1:
                    f5:59:62:5a:f4:4a:54:1e:38:e1:44:2e:af:53:c3:
                    fc:4a:21:97:7e:5a:dd:d0:df:27:49:fe:96:50:1e:
                    f6:10:a6:ff:38:4b:0c:29:8f:5a:f9:50:78:9d:fc:
                    14:a0:f2:c0:10:13:a2:15:eb:f1:db:f2:98:4b:b6:
                    c1:00:7f:7e:df:a5:4c:3e:e5:c2:bd:75:d6:54:33:
                    40:92:d5:17:f1:d9:8c:a4:b3:cf:64:73:1f:a5:64:
                    6b:83:ef:e0:76:8b:1f:b2:6b:b1:c9:0a:6d:fa:bc:
                    ed:80:68:2c:d1:01:98:1c:79:ea:87:c2:e5:01:62:
                    80:85:de:2d:c0:41:5d:25:fb:90:5a:49:9b:ae:40:
                    d5:19:42:60:7f:49:44:cc:af:b1:dd:dd:11:0d:08:
                    f8:ed:9a:ed:de:8b:d6:c1:b0:c1:d4:dd:22:39:d1:
                    8d:7e:ed:97:59:46:9b:25:d8:3e:5d:59:ca:2d:99:
                    7e:66:b7:f5:f2:05:ab:83:c7:fd:ef:d3:3f:9e:58:
                    15:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1D:5F:83:51:14:5D:8C:E4:73:CD:37:16:A6:AD:9B:08:FF:8D:14
            X509v3 Authority Key Identifier:
                keyid:93:56:4C:C3:3E:E5:30:01:90:1A:2F:98:49:EA:29:5D:1A:0C:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/93564CC33EE53001901A2F9849EA295D1A0CECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93564CC33EE53001901A2F9849EA295D1A0CECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/323830343a373134303a3a2f33322d3438203d3e20323730373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7140::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:d9:a1:a6:34:f4:79:f8:8a:57:37:9e:94:d3:a8:03:a5:05:
         73:b4:a0:d4:d0:40:61:0c:08:6e:c5:ae:52:e2:6d:40:d5:f8:
         46:a0:7e:ce:9c:ac:3a:d2:0a:14:0f:39:2f:43:ea:98:bd:9a:
         ec:9e:d2:59:5f:9e:41:6c:6a:13:cc:3e:29:3e:f2:79:76:41:
         08:7d:ef:72:37:98:37:7b:2f:59:e4:0e:ae:af:24:7c:83:23:
         75:3f:04:65:19:ac:68:97:95:0b:1f:a8:ec:2b:d4:34:5e:4d:
         9b:4b:56:1f:de:a7:c0:1c:44:bc:6a:bf:6c:30:d6:9e:d8:8b:
         f2:7c:93:15:8c:9d:bf:ce:d6:2b:d9:56:50:2b:66:e0:a0:2f:
         bd:66:7c:9f:e9:6b:94:63:84:df:3c:e5:ae:c6:dc:97:8b:64:
         9c:93:1b:c2:0a:76:4d:08:c9:03:9d:77:64:4e:c9:15:ed:d2:
         39:66:58:6e:67:e2:26:80:d5:28:cd:55:86:df:73:bf:ba:c0:
         6d:4f:54:60:12:2d:d7:b7:5a:ad:79:ac:0f:6a:b2:81:b3:ba:
         e0:40:bd:8f:39:d4:d8:f7:bb:5b:cf:1a:31:52:67:fe:c8:38:
         15:ed:82:72:42:1a:e4:2d:ee:48:8c:34:fa:27:87:1d:7a:e4:
         e1:9d:7a:02
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPI419KmT+Uyo/4b3pavIKyYBRCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM1NjRDQzMzRUU1MzAwMTkwMUEyRjk4NDlFQTI5NUQx
QTBDRUNENTAeFw0yNTA2MDcxMjQ3MjlaFw0yNjA2MDYxMjUyMjlaMDMxMTAvBgNV
BAMTKDhFMUQ1RjgzNTExNDVEOENFNDczQ0QzNzE2QTZBRDlCMDhGRjhEMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/WomRmUNMHLjrvOM8JBq1pqv
9wi1EG3TAUj9L9tSu50pcCm+HP9ebf5n50UfhVwH+me7yKKWF6vCsfVZYlr0SlQe
OOFELq9Tw/xKIZd+Wt3Q3ydJ/pZQHvYQpv84Swwpj1r5UHid/BSg8sAQE6IV6/Hb
8phLtsEAf37fpUw+5cK9ddZUM0CS1Rfx2Yyks89kcx+lZGuD7+B2ix+ya7HJCm36
vO2AaCzRAZgceeqHwuUBYoCF3i3AQV0l+5BaSZuuQNUZQmB/SUTMr7Hd3RENCPjt
mu3ei9bBsMHU3SI50Y1+7ZdZRpsl2D5dWcotmX5mt/XyBauDx/3v0z+eWBVHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUjh1fg1EUXYzkc803Fqatmwj/jRQwHwYDVR0j
BBgwFoAUk1ZMwz7lMAGQGi+YSeopXRoM7NUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzU1SlVQSHV5Z05WQ3lwN2JEOG1ldGpzb0xQckRUNUJRQWZnRTdGcmpi
WGsvMC85MzU2NENDMzNFRTUzMDAxOTAxQTJGOTg0OUVBMjk1RDFBMENFQ0Q1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzNTY0Q0MzM0VFNTMwMDE5
MDFBMkY5ODQ5RUEyOTVEMUEwQ0VDRDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M1NUpVUEh1eWdOVkN5cDdiRDhtZXRqc29MUHJEVDVCUUFmZ0U3RnJqYlhrLzAv
MzIzODMwMzQzYTM3MzEzNDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzczNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARxQDANBgkqhkiG9w0BAQsFAAOCAQEAAdmhpjT0
efiKVzeelNOoA6UFc7Sg1NBAYQwIbsWuUuJtQNX4RqB+zpysOtIKFA85L0PqmL2a
7J7SWV+eQWxqE8w+KT7yeXZBCH3vcjeYN3svWeQOrq8kfIMjdT8EZRmsaJeVCx+o
7CvUNF5Nm0tWH96nwBxEvGq/bDDWntiL8nyTFYydv87WK9lWUCtm4KAvvWZ8n+lr
lGOE3zzlrsbcl4tknJMbwgp2TQjJA513ZE7JFe3SOWZYbmfiJoDVKM1Vht9zv7rA
bU9UYBIt17darXmsD2qygbO64EC9jznU2Pe7W88aMVJn/sg4Fe2CckIa5C3uSIw0
+ieHHXrk4Z16Ag==
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:44:36 2025 by rpki-client