Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/2/323830343a373139303a3a2f33322d313238203d3e20323730373937.roa
File:                     323830343a373139303a3a2f33322d313238203d3e20323730373937.roa (raw, json)
Hash identifier:          w9TdZtsPmHI9QlW0pVjww2IrHLfHd5F16vl5dUt+RgY=
Subject key identifier:   41:1E:BF:53:47:21:56:49:75:29:67:35:40:79:7D:E1:D4:0A:1A:85
Certificate issuer:       /CN=6A5B0E2D7D062139F32F773048B52CB79728865B
Certificate serial:       35BBC82AA05A2207CEC5A0CD53B5C33905224DF7
Authority key identifier: 6A:5B:0E:2D:7D:06:21:39:F3:2F:77:30:48:B5:2C:B7:97:28:86:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5B0E2D7D062139F32F773048B52CB79728865B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/2/323830343a373139303a3a2f33322d313238203d3e20323730373937.roa
Signing time:             Mon 14 Jul 2025 23:49:20 +0000
ROA not before:           Mon 14 Jul 2025 23:44:20 +0000
ROA not after:            Mon 13 Jul 2026 23:49:20 +0000
asID:                     270797
IP address blocks:        2804:7190::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/2/6A5B0E2D7D062139F32F773048B52CB79728865B.crl
                          rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/2/6A5B0E2D7D062139F32F773048B52CB79728865B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5B0E2D7D062139F32F773048B52CB79728865B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 08:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:bb:c8:2a:a0:5a:22:07:ce:c5:a0:cd:53:b5:c3:39:05:22:4d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A5B0E2D7D062139F32F773048B52CB79728865B
        Validity
            Not Before: Jul 14 23:44:20 2025 GMT
            Not After : Jul 13 23:49:20 2026 GMT
        Subject: CN=411EBF53472156497529673540797DE1D40A1A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:52:d1:8f:30:a7:9a:6d:a3:f0:14:25:81:90:
                    0f:6c:75:ea:06:67:de:c7:bf:bf:16:19:e6:f3:b1:
                    ff:85:f5:a4:8a:7d:f4:f2:5d:68:dd:c2:b2:ee:0e:
                    e1:43:ae:b8:78:d3:76:ef:22:18:32:be:83:5a:24:
                    6d:7e:9c:5a:cb:42:3f:38:11:b0:37:27:d0:65:1c:
                    84:13:e4:8f:94:64:e1:98:24:d3:99:94:68:84:22:
                    16:72:e5:27:e7:44:6c:2a:5e:77:a4:17:7c:1a:75:
                    da:29:b2:61:e3:21:f4:9f:04:7e:5a:02:1f:70:bc:
                    6b:da:86:ea:3d:9e:2b:de:c8:96:f8:6a:c3:bc:ac:
                    7e:e6:6a:64:57:08:f6:df:11:3f:0e:84:61:36:1a:
                    2e:06:17:c7:43:96:0f:96:af:ba:7b:3a:f1:3c:1f:
                    ad:a5:c7:f8:86:d2:c7:eb:01:08:55:72:89:94:08:
                    57:97:6b:fd:ab:58:0f:d2:2e:28:81:eb:3d:08:ab:
                    cd:96:5d:29:ff:3f:76:36:68:da:47:b2:43:06:88:
                    37:e8:f3:b3:29:35:a4:88:90:c1:05:c8:05:d8:a4:
                    2d:1f:ca:7a:06:12:35:2e:00:b8:ef:cd:5d:4a:9a:
                    6b:93:9e:e3:38:0d:69:6e:c3:09:b6:bc:db:4c:05:
                    da:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1E:BF:53:47:21:56:49:75:29:67:35:40:79:7D:E1:D4:0A:1A:85
            X509v3 Authority Key Identifier:
                keyid:6A:5B:0E:2D:7D:06:21:39:F3:2F:77:30:48:B5:2C:B7:97:28:86:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/2/6A5B0E2D7D062139F32F773048B52CB79728865B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5B0E2D7D062139F32F773048B52CB79728865B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvxnNMuFmXAoGy54izDbRXo75gXwh3Q8odmw1v9UUB7F/2/323830343a373139303a3a2f33322d313238203d3e20323730373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7190::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:dc:d7:fb:34:d9:d1:e1:8c:56:84:8a:12:00:d4:d8:b2:6d:
         88:fe:27:ca:87:d8:77:18:d0:b6:fa:66:ab:55:0c:25:0e:0d:
         d0:74:09:cb:b8:63:11:9f:9d:3f:ac:33:71:8b:9c:9a:6b:52:
         0a:78:67:a0:48:68:4f:25:98:b5:2f:78:ee:8d:b4:c0:06:b7:
         46:8b:df:5a:8a:13:f3:d0:60:99:af:fc:f7:f9:a2:e1:cc:26:
         76:af:c5:f9:f4:87:a0:e3:2a:38:8f:c8:fa:b4:09:54:a3:ed:
         d4:6f:e4:2a:49:81:d9:ed:3e:25:b5:0c:44:04:f8:77:4a:a1:
         6b:e2:fa:95:cb:54:3a:13:2a:f5:4a:c4:ab:d9:9f:51:11:5c:
         3c:4b:52:e3:f8:0d:40:8d:95:6a:bc:1f:bb:dd:58:f3:45:92:
         65:ad:69:bb:cf:63:bc:ba:79:88:9b:51:2d:87:88:fd:b8:06:
         f1:bc:2a:e4:11:01:74:49:82:3e:a2:6f:64:e0:92:41:3e:65:
         71:ef:7c:8b:8a:22:d8:fc:bf:97:25:55:80:3c:af:63:b8:35:
         e5:f1:20:71:41:c4:46:9b:27:31:98:8c:35:23:fb:99:c7:3f:
         e7:70:db:55:53:c5:8c:5f:64:c5:41:4c:7f:77:dc:79:30:f9:
         01:1d:05:2e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUNbvIKqBaIgfOxaDNU7XDOQUiTfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE1QjBFMkQ3RDA2MjEzOUYzMkY3NzMwNDhCNTJDQjc5
NzI4ODY1QjAeFw0yNTA3MTQyMzQ0MjBaFw0yNjA3MTMyMzQ5MjBaMDMxMTAvBgNV
BAMTKDQxMUVCRjUzNDcyMTU2NDk3NTI5NjczNTQwNzk3REUxRDQwQTFBODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfUtGPMKeabaPwFCWBkA9sdeoG
Z97Hv78WGebzsf+F9aSKffTyXWjdwrLuDuFDrrh403bvIhgyvoNaJG1+nFrLQj84
EbA3J9BlHIQT5I+UZOGYJNOZlGiEIhZy5SfnRGwqXnekF3waddopsmHjIfSfBH5a
Ah9wvGvahuo9niveyJb4asO8rH7mamRXCPbfET8OhGE2Gi4GF8dDlg+Wr7p7OvE8
H62lx/iG0sfrAQhVcomUCFeXa/2rWA/SLiiB6z0Iq82WXSn/P3Y2aNpHskMGiDfo
87MpNaSIkMEFyAXYpC0fynoGEjUuALjvzV1KmmuTnuM4DWluwwm2vNtMBdr3AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUQR6/U0chVkl1KWc1QHl94dQKGoUwHwYDVR0j
BBgwFoAUalsOLX0GITnzL3cwSLUst5cohlswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXZ4bk5NdUZtWEFvR3k1NGl6RGJSWG83NWdYd2gzUThvZG13MXY5VVVC
N0YvMi82QTVCMEUyRDdEMDYyMTM5RjMyRjc3MzA0OEI1MkNCNzk3Mjg4NjVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBNUIwRTJEN0QwNjIxMzlG
MzJGNzczMDQ4QjUyQ0I3OTcyODg2NUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V2eG5OTXVGbVhBb0d5NTRpekRiUlhvNzVnWHdoM1E4b2RtdzF2OVVVQjdGLzIv
MzIzODMwMzQzYTM3MzEzOTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzAzNzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHGQMA0GCSqGSIb3DQEBCwUAA4IBAQBd3Nf7
NNnR4YxWhIoSANTYsm2I/ifKh9h3GNC2+marVQwlDg3QdAnLuGMRn50/rDNxi5ya
a1IKeGegSGhPJZi1L3jujbTABrdGi99aihPz0GCZr/z3+aLhzCZ2r8X59Ieg4yo4
j8j6tAlUo+3Ub+QqSYHZ7T4ltQxEBPh3SqFr4vqVy1Q6Eyr1SsSr2Z9REVw8S1Lj
+A1AjZVqvB+73VjzRZJlrWm7z2O8unmIm1Eth4j9uAbxvCrkEQF0SYI+om9k4JJB
PmVx73yLiiLY/L+XJVWAPK9juDXl8SBxQcRGmycxmIw1I/uZxz/ncNtVU8WMX2TF
QUx/d9x5MPkBHQUu
-----END CERTIFICATE-----
Generated at Fri Jul 25 13:08:27 2025 by rpki-client