Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MHBziK2hr4VEkDyMzt8GzeW3WLB5RmqhoMm1yum4JzJ/0/323830343a343366383a3a2f33322d3438203d3e20323637363133.roa
File:                     323830343a343366383a3a2f33322d3438203d3e20323637363133.roa (raw, json)
Hash identifier:          tOXuTuNnN7cD0O7AS6eGv+hap/GlD8rVfhAfRTiSXT8=
Subject key identifier:   46:EA:EB:D0:0B:8A:FB:9D:E1:76:D7:3E:DC:B2:DD:1F:BA:67:CE:C8
Certificate issuer:       /CN=7202FAC3569E0649A162EFEC1618827275191219
Certificate serial:       600570D0D0026AFE7FEEA3E7D6D261372BFDE416
Authority key identifier: 72:02:FA:C3:56:9E:06:49:A1:62:EF:EC:16:18:82:72:75:19:12:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7202FAC3569E0649A162EFEC1618827275191219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MHBziK2hr4VEkDyMzt8GzeW3WLB5RmqhoMm1yum4JzJ/0/323830343a343366383a3a2f33322d3438203d3e20323637363133.roa
Signing time:             Thu 05 Jun 2025 14:02:11 +0000
ROA not before:           Thu 05 Jun 2025 13:57:11 +0000
ROA not after:            Thu 04 Jun 2026 14:02:11 +0000
asID:                     267613
IP address blocks:        2804:43f8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MHBziK2hr4VEkDyMzt8GzeW3WLB5RmqhoMm1yum4JzJ/0/7202FAC3569E0649A162EFEC1618827275191219.crl
                          rsync://rpki-repo.registro.br/repo/2MHBziK2hr4VEkDyMzt8GzeW3WLB5RmqhoMm1yum4JzJ/0/7202FAC3569E0649A162EFEC1618827275191219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7202FAC3569E0649A162EFEC1618827275191219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 03:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:05:70:d0:d0:02:6a:fe:7f:ee:a3:e7:d6:d2:61:37:2b:fd:e4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7202FAC3569E0649A162EFEC1618827275191219
        Validity
            Not Before: Jun  5 13:57:11 2025 GMT
            Not After : Jun  4 14:02:11 2026 GMT
        Subject: CN=46EAEBD00B8AFB9DE176D73EDCB2DD1FBA67CEC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:74:1c:45:37:c4:8b:e2:53:ef:70:e8:16:ca:
                    a4:3a:42:3b:83:61:94:83:16:7a:e2:be:d8:0a:72:
                    69:54:ea:20:01:6f:c4:92:2e:e4:f3:e7:e0:10:49:
                    59:98:26:b3:dd:bf:c8:90:44:25:68:34:ff:34:24:
                    30:33:44:20:d6:f7:e0:b7:33:93:78:09:92:6f:59:
                    aa:29:49:4a:43:8b:2c:ef:77:35:15:55:9e:c3:f2:
                    e5:f6:c4:a8:fa:96:56:85:42:f9:2c:a6:e5:77:d0:
                    8e:b9:d1:91:6e:e1:24:68:0f:4b:fa:0a:1e:52:62:
                    a0:a6:b9:4b:3f:71:60:d3:61:5b:84:3c:52:f2:0b:
                    2f:de:28:69:29:5a:60:3a:aa:3e:10:0a:72:92:14:
                    00:e4:7c:06:a9:d8:a9:75:28:86:ca:c7:68:30:aa:
                    48:2f:a1:ff:ba:da:bb:84:4f:22:45:7a:65:2f:58:
                    65:a0:82:71:cf:61:3b:a6:31:8e:d9:4f:7f:c9:ac:
                    51:42:be:59:d6:6d:a0:47:04:78:0e:97:0c:a3:b0:
                    1e:2c:bc:76:1e:56:c7:7f:7e:3a:38:d1:6b:bc:fa:
                    2f:5a:92:cc:49:be:fd:d8:3b:f1:a5:23:3a:15:94:
                    39:3f:40:69:87:ca:b0:62:49:a6:87:16:7b:3f:ac:
                    9e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EA:EB:D0:0B:8A:FB:9D:E1:76:D7:3E:DC:B2:DD:1F:BA:67:CE:C8
            X509v3 Authority Key Identifier:
                keyid:72:02:FA:C3:56:9E:06:49:A1:62:EF:EC:16:18:82:72:75:19:12:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MHBziK2hr4VEkDyMzt8GzeW3WLB5RmqhoMm1yum4JzJ/0/7202FAC3569E0649A162EFEC1618827275191219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7202FAC3569E0649A162EFEC1618827275191219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MHBziK2hr4VEkDyMzt8GzeW3WLB5RmqhoMm1yum4JzJ/0/323830343a343366383a3a2f33322d3438203d3e20323637363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:bc:cf:fd:33:33:f3:d0:99:70:20:01:35:b6:a1:4e:be:5f:
         40:e0:f7:0d:54:91:7d:04:79:61:61:27:f4:31:fe:f9:81:0f:
         d0:3c:f1:7f:bd:fd:f9:4a:5e:88:91:49:d1:8c:4c:1c:99:5c:
         87:1a:d5:87:8c:bc:08:19:b7:9b:d7:3d:7c:b2:c1:c0:2d:d7:
         0f:d6:3a:c0:b9:10:a7:97:3e:ac:3d:2f:24:5a:ed:65:03:76:
         36:2a:97:a6:c3:13:f6:cf:41:1d:d4:ea:8a:e4:01:40:fe:8f:
         67:4a:0a:bf:96:75:35:11:a0:55:83:25:23:b0:7f:7f:12:c6:
         12:6e:b4:ea:30:55:d6:c0:68:fe:1c:ef:66:ff:bd:c1:fc:86:
         32:82:a7:5f:a2:ba:36:3d:04:1b:7a:49:20:36:50:c2:40:17:
         ef:94:0f:c5:cf:27:0a:02:a4:18:3d:d3:25:07:d0:6f:3a:13:
         18:01:e3:e4:e3:e2:41:f4:39:b1:d7:01:f6:bb:81:23:82:8f:
         04:44:73:4e:65:de:36:35:a8:ed:74:6a:30:57:90:e9:4c:4b:
         49:ba:75:d4:47:8e:95:45:8b:d3:76:1f:a7:78:af:ba:c2:f8:
         f0:5f:e7:d3:63:a9:6c:36:81:31:4b:d7:2d:3d:0f:ca:0d:4b:
         c9:1a:80:c3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYAVw0NACav5/7qPn1tJhNyv95BYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzIwMkZBQzM1NjlFMDY0OUExNjJFRkVDMTYxODgyNzI3
NTE5MTIxOTAeFw0yNTA2MDUxMzU3MTFaFw0yNjA2MDQxNDAyMTFaMDMxMTAvBgNV
BAMTKDQ2RUFFQkQwMEI4QUZCOURFMTc2RDczRURDQjJERDFGQkE2N0NFQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHdBxFN8SL4lPvcOgWyqQ6QjuD
YZSDFnrivtgKcmlU6iABb8SSLuTz5+AQSVmYJrPdv8iQRCVoNP80JDAzRCDW9+C3
M5N4CZJvWaopSUpDiyzvdzUVVZ7D8uX2xKj6llaFQvkspuV30I650ZFu4SRoD0v6
Ch5SYqCmuUs/cWDTYVuEPFLyCy/eKGkpWmA6qj4QCnKSFADkfAap2Kl1KIbKx2gw
qkgvof+62ruETyJFemUvWGWggnHPYTumMY7ZT3/JrFFCvlnWbaBHBHgOlwyjsB4s
vHYeVsd/fjo40Wu8+i9aksxJvv3YO/GlIzoVlDk/QGmHyrBiSaaHFns/rJ6pAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQURurr0AuK+53hdtc+3LLdH7pnzsgwHwYDVR0j
BBgwFoAUcgL6w1aeBkmhYu/sFhiCcnUZEhkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1IQnppSzJocjRWRWtEeU16dDhHemVXM1dMQjVSbXFob01tMXl1bTRK
ekovMC83MjAyRkFDMzU2OUUwNjQ5QTE2MkVGRUMxNjE4ODI3Mjc1MTkxMjE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyMDJGQUMzNTY5RTA2NDlB
MTYyRUZFQzE2MTg4MjcyNzUxOTEyMTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNSEJ6aUsyaHI0VkVrRHlNenQ4R3plVzNXTEI1Um1xaG9NbTF5dW00SnpKLzAv
MzIzODMwMzQzYTM0MzM2NjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzYzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARD+DANBgkqhkiG9w0BAQsFAAOCAQEAGLzP/TMz
89CZcCABNbahTr5fQOD3DVSRfQR5YWEn9DH++YEP0Dzxf739+UpeiJFJ0YxMHJlc
hxrVh4y8CBm3m9c9fLLBwC3XD9Y6wLkQp5c+rD0vJFrtZQN2NiqXpsMT9s9BHdTq
iuQBQP6PZ0oKv5Z1NRGgVYMlI7B/fxLGEm606jBV1sBo/hzvZv+9wfyGMoKnX6K6
Nj0EG3pJIDZQwkAX75QPxc8nCgKkGD3TJQfQbzoTGAHj5OPiQfQ5sdcB9ruBI4KP
BERzTmXeNjWo7XRqMFeQ6UxLSbp11EeOlUWL03Yfp3ivusL48F/n02OpbDaBMUvX
LT0Pyg1LyRqAww==
-----END CERTIFICATE-----
Generated at Fri Jun 13 07:24:28 2025 by rpki-client