Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/323830343a353337343a343030303a3a2f33342d3334203d3e20323638353835.roa
File:                     323830343a353337343a343030303a3a2f33342d3334203d3e20323638353835.roa (raw, json)
Hash identifier:          6qGQWTjvQtKWHcmkMnx/fnXwDrhSaK85wewA997lCDY=
Subject key identifier:   0B:36:D6:7C:AB:85:65:FE:6B:AF:09:FA:6D:97:D3:77:1A:27:AE:D9
Certificate issuer:       /CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
Certificate serial:       13372A96B771A9F20619C9F8133DA1575D015C8B
Authority key identifier: AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/323830343a353337343a343030303a3a2f33342d3334203d3e20323638353835.roa
Signing time:             Wed 04 Jun 2025 20:29:16 +0000
ROA not before:           Wed 04 Jun 2025 20:24:16 +0000
ROA not after:            Wed 03 Jun 2026 20:29:16 +0000
asID:                     268585
IP address blocks:        2804:5374:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl
                          rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 22:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:37:2a:96:b7:71:a9:f2:06:19:c9:f8:13:3d:a1:57:5d:01:5c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
        Validity
            Not Before: Jun  4 20:24:16 2025 GMT
            Not After : Jun  3 20:29:16 2026 GMT
        Subject: CN=0B36D67CAB8565FE6BAF09FA6D97D3771A27AED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:91:3b:5b:86:48:8b:93:f2:36:f7:48:9a:
                    c5:69:af:81:15:c9:a2:a4:d2:64:01:f9:2b:2b:03:
                    9d:50:40:67:2a:a3:3e:a5:2b:eb:24:ee:02:6a:b3:
                    d3:cc:2e:fb:aa:e7:cf:81:df:71:74:d0:bb:e9:49:
                    f6:17:bc:55:2e:47:0c:e5:3b:ea:b5:f1:00:fa:24:
                    de:80:72:5d:96:e9:f5:14:27:a8:90:39:28:43:a9:
                    b6:17:ca:5c:36:be:fb:ae:34:ff:a4:f7:7e:b8:99:
                    c1:d5:47:6c:41:a1:20:db:78:b4:3e:f7:21:ba:f9:
                    b2:09:57:6a:38:9d:65:13:46:17:8f:0a:e5:cc:53:
                    08:ae:b2:6a:be:c1:40:b6:73:aa:1a:15:8d:0b:61:
                    1d:d1:5e:2b:e5:11:01:9e:41:a5:47:83:61:d4:26:
                    1a:1c:f8:1c:18:a6:29:38:9d:ed:b7:51:f5:68:b9:
                    9e:81:2b:a9:0a:51:c0:d6:95:bb:26:13:c6:ee:41:
                    12:b4:e7:72:5f:32:a7:83:1a:b8:8b:33:50:4f:1a:
                    43:95:65:27:79:50:25:1d:22:da:f4:a1:83:80:3e:
                    97:7d:16:5d:74:dd:da:de:a2:8a:e1:29:b1:fb:aa:
                    91:6d:df:f8:6d:ad:84:bf:e4:19:45:da:fa:23:f5:
                    bc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:36:D6:7C:AB:85:65:FE:6B:AF:09:FA:6D:97:D3:77:1A:27:AE:D9
            X509v3 Authority Key Identifier:
                keyid:AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/323830343a353337343a343030303a3a2f33342d3334203d3e20323638353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5374:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6f:5b:30:78:65:20:77:9b:21:01:79:c2:69:af:5e:69:7f:9b:
         9c:89:40:40:87:a2:64:46:47:79:b5:12:fa:5f:5c:a5:6e:77:
         bc:25:70:79:d0:4c:82:53:40:6e:03:54:03:1e:cc:0e:9e:1c:
         d3:4e:97:94:79:5c:c7:5d:11:f7:64:43:ef:c5:c6:d8:c5:9d:
         9b:3e:46:ba:a2:3d:d0:cf:11:5f:aa:8d:31:cc:24:42:80:19:
         a8:04:c2:59:74:cf:4d:ce:86:83:83:2c:83:57:e9:8f:47:d6:
         0e:ac:6b:38:a4:4b:f4:c4:35:d1:60:1f:c5:e7:96:57:ad:d1:
         86:a7:89:b6:43:40:e9:f2:4e:47:35:4c:b9:7a:1e:8d:0f:83:
         19:83:6b:58:51:84:93:73:18:01:dc:92:99:7f:98:0e:87:f4:
         99:69:f9:e0:37:bb:63:0d:cd:e2:38:47:03:cb:6c:d6:b5:d5:
         0d:7b:e2:1a:6b:ec:d5:64:c7:f9:e6:3f:13:f1:ee:d1:fb:c5:
         6d:5b:76:8e:0c:e5:5a:8f:cd:5a:2d:6d:68:b5:d6:48:37:36:
         aa:10:21:83:b6:73:6e:c4:03:e4:82:a2:9b:4e:81:d7:30:54:
         c2:a8:6c:55:a1:b3:e3:37:9c:4b:7e:cb:3a:cc:65:a9:65:66:
         c1:eb:7d:d1
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEzcqlrdxqfIGGcn4Ez2hV10BXIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNERDQwODMxOUU1MjY1NzVGMEUzMjdEQkZDMjhFQzlD
RUNERjQxMjAeFw0yNTA2MDQyMDI0MTZaFw0yNjA2MDMyMDI5MTZaMDMxMTAvBgNV
BAMTKDBCMzZENjdDQUI4NTY1RkU2QkFGMDlGQTZEOTdEMzc3MUEyN0FFRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7S5E7W4ZIi5PyNvdImsVpr4EV
yaKk0mQB+SsrA51QQGcqoz6lK+sk7gJqs9PMLvuq58+B33F00LvpSfYXvFUuRwzl
O+q18QD6JN6Acl2W6fUUJ6iQOShDqbYXylw2vvuuNP+k9364mcHVR2xBoSDbeLQ+
9yG6+bIJV2o4nWUTRhePCuXMUwiusmq+wUC2c6oaFY0LYR3RXivlEQGeQaVHg2HU
Jhoc+BwYpik4ne23UfVouZ6BK6kKUcDWlbsmE8buQRK053JfMqeDGriLM1BPGkOV
ZSd5UCUdItr0oYOAPpd9Fl103dreoorhKbH7qpFt3/htrYS/5BlF2voj9bw3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUCzbWfKuFZf5rrwn6bZfTdxonrtkwHwYDVR0j
BBgwFoAUrN1AgxnlJldfDjJ9v8KOyc7N9BIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkRlRGNhNlMzZXhYUlZIVmJVdHZYUmp2Mk5EUnVTTGRjclNBOVFUcWZp
NHYvMS9BQ0RENDA4MzE5RTUyNjU3NUYwRTMyN0RCRkMyOEVDOUNFQ0RGNDEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDREQ0MDgzMTlFNTI2NTc1
RjBFMzI3REJGQzI4RUM5Q0VDREY0MTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJEZURjYTZTM2V4WFJWSFZiVXR2WFJqdjJORFJ1U0xkY3JTQTlRVHFmaTR2LzEv
MzIzODMwMzQzYTM1MzMzNzM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzODM1MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEU3RAMA0GCSqGSIb3DQEBCwUA
A4IBAQBvWzB4ZSB3myEBecJpr15pf5uciUBAh6JkRkd5tRL6X1ylbne8JXB50EyC
U0BuA1QDHswOnhzTTpeUeVzHXRH3ZEPvxcbYxZ2bPka6oj3QzxFfqo0xzCRCgBmo
BMJZdM9NzoaDgyyDV+mPR9YOrGs4pEv0xDXRYB/F55ZXrdGGp4m2Q0Dp8k5HNUy5
eh6ND4MZg2tYUYSTcxgB3JKZf5gOh/SZafngN7tjDc3iOEcDy2zWtdUNe+Iaa+zV
ZMf55j8T8e7R+8VtW3aODOVaj81aLW1otdZINzaqECGDtnNuxAPkgqKbToHXMFTC
qGxVobPjN5xLfss6zGWpZWbB633R
-----END CERTIFICATE-----
Generated at Sat Jun 7 05:06:31 2025 by rpki-client