Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/323830343a353565303a3a2f33322d3438203d3e20323637393632.roa
File:                     323830343a353565303a3a2f33322d3438203d3e20323637393632.roa (raw, json)
Hash identifier:          zOuQ60gBJ0AamnW+HULpwLkNhP1+20wPQkoYWT6vK0s=
Subject key identifier:   17:35:9A:9F:13:D9:F0:EC:F7:5F:09:F6:9C:1F:E8:48:4F:62:87:35
Certificate issuer:       /CN=93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B
Certificate serial:       4402B57AEEDC868D18ECD0D938CBF69161565820
Authority key identifier: 93:40:43:25:EF:A1:1B:DB:A0:40:1F:5D:1F:F2:DA:84:D0:A5:7F:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/323830343a353565303a3a2f33322d3438203d3e20323637393632.roa
Signing time:             Wed 07 May 2025 06:27:14 +0000
ROA not before:           Wed 07 May 2025 06:22:14 +0000
ROA not after:            Wed 06 May 2026 06:27:14 +0000
asID:                     267962
IP address blocks:        2804:55e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.crl
                          rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:02:b5:7a:ee:dc:86:8d:18:ec:d0:d9:38:cb:f6:91:61:56:58:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B
        Validity
            Not Before: May  7 06:22:14 2025 GMT
            Not After : May  6 06:27:14 2026 GMT
        Subject: CN=17359A9F13D9F0ECF75F09F69C1FE8484F628735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2c:37:24:e1:46:a7:05:1b:6d:10:c5:a1:f6:
                    39:b2:5a:b8:3c:c6:7f:e1:1e:10:07:c7:64:b3:58:
                    26:2d:48:d5:a7:1b:c9:44:3c:51:18:9e:68:a2:c9:
                    9d:ea:b5:55:bf:e7:4d:34:92:15:29:52:7d:24:5a:
                    40:5d:a5:a3:b9:48:12:8d:20:46:f4:6b:d4:ba:4a:
                    63:a5:6e:c1:46:3b:4e:85:3f:28:fd:66:d1:13:0a:
                    1b:df:74:5f:7c:c1:fc:e5:6c:fe:96:24:c2:ff:4b:
                    5d:22:a3:70:80:64:01:35:61:69:fd:63:76:4d:e6:
                    1a:6d:5b:dd:60:7e:f5:e8:d5:25:1c:90:10:43:83:
                    33:23:df:2d:df:10:88:2d:b5:68:d5:31:1a:cf:69:
                    48:c0:c0:9b:04:ed:01:38:9b:15:a2:fd:3d:97:d4:
                    f4:77:bb:a8:07:a7:eb:7c:36:08:b2:6e:78:cc:0f:
                    0f:f9:87:da:41:a5:94:76:27:e6:96:90:9c:14:14:
                    2e:31:6d:07:e4:96:3a:20:77:82:4b:0c:6e:bf:7f:
                    34:f1:a6:2a:68:6d:f8:19:0f:42:85:7a:03:d0:c6:
                    4e:a6:3d:52:cc:f0:6b:45:77:42:b3:d7:77:0c:c1:
                    8f:b0:42:ca:5f:ad:53:10:b0:7e:a5:80:e4:31:9f:
                    0f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:35:9A:9F:13:D9:F0:EC:F7:5F:09:F6:9C:1F:E8:48:4F:62:87:35
            X509v3 Authority Key Identifier:
                keyid:93:40:43:25:EF:A1:1B:DB:A0:40:1F:5D:1F:F2:DA:84:D0:A5:7F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93404325EFA11BDBA0401F5D1FF2DA84D0A57F8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZBzyiPfkC5Zfs5Jiy2YuizepSDe6TWpLTqh5Rfsv5KK/0/323830343a353565303a3a2f33322d3438203d3e20323637393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:f5:8e:12:1d:f4:59:83:c0:bb:40:de:20:5e:94:8c:c6:db:
         5f:c7:58:b9:7b:78:a7:37:77:94:3d:eb:78:32:35:fa:f7:4b:
         5b:9c:01:cd:15:3e:46:4e:15:14:2a:ca:b1:22:47:60:fe:c9:
         17:23:92:79:94:13:8b:c6:12:2c:bd:c4:07:f0:47:93:2c:ab:
         a3:48:9e:9e:a4:ed:78:47:a1:06:9e:f5:4a:89:2e:d1:03:50:
         00:73:e9:d3:f6:ed:a1:be:34:d4:1c:75:c2:26:ea:d8:3a:6c:
         09:69:55:22:ba:cb:89:0d:fe:ee:66:90:85:76:1d:53:5e:d7:
         65:6a:7c:5f:9e:cf:28:48:f3:4d:3f:f7:b0:43:83:63:88:92:
         ae:83:0f:6a:a1:22:db:26:a2:c4:42:46:b3:bc:23:ff:2f:06:
         fb:13:8a:ab:db:2c:90:4b:b9:99:fd:23:cb:54:82:c8:4f:33:
         82:5d:95:96:a9:e3:37:a7:b4:ee:ef:5c:fa:c4:a2:40:8b:73:
         fd:68:98:dd:89:fd:d5:1a:5c:1a:32:ca:c3:bc:02:90:68:2d:
         35:49:f5:03:4d:e7:98:72:12:bb:98:aa:50:52:9d:70:52:f5:
         f9:8b:cd:12:ed:65:ff:7d:66:40:b6:c3:b4:40:48:bc:3e:95:
         80:3b:1d:05
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURAK1eu7cho0Y7NDZOMv2kWFWWCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM0MDQzMjVFRkExMUJEQkEwNDAxRjVEMUZGMkRBODRE
MEE1N0Y4QjAeFw0yNTA1MDcwNjIyMTRaFw0yNjA1MDYwNjI3MTRaMDMxMTAvBgNV
BAMTKDE3MzU5QTlGMTNEOUYwRUNGNzVGMDlGNjlDMUZFODQ4NEY2Mjg3MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeLDck4UanBRttEMWh9jmyWrg8
xn/hHhAHx2SzWCYtSNWnG8lEPFEYnmiiyZ3qtVW/5000khUpUn0kWkBdpaO5SBKN
IEb0a9S6SmOlbsFGO06FPyj9ZtETChvfdF98wfzlbP6WJML/S10io3CAZAE1YWn9
Y3ZN5hptW91gfvXo1SUckBBDgzMj3y3fEIgttWjVMRrPaUjAwJsE7QE4mxWi/T2X
1PR3u6gHp+t8NgiybnjMDw/5h9pBpZR2J+aWkJwUFC4xbQfkljogd4JLDG6/fzTx
pipobfgZD0KFegPQxk6mPVLM8GtFd0Kz13cMwY+wQspfrVMQsH6lgOQxnw/9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUFzWanxPZ8Oz3Xwn2nB/oSE9ihzUwHwYDVR0j
BBgwFoAUk0BDJe+hG9ugQB9dH/LahNClf4swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlpCenlpUGZrQzVaZnM1Sml5Mll1aXplcFNEZTZUV3BMVHFoNVJmc3Y1
S0svMC85MzQwNDMyNUVGQTExQkRCQTA0MDFGNUQxRkYyREE4NEQwQTU3RjhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzNDA0MzI1RUZBMTFCREJB
MDQwMUY1RDFGRjJEQTg0RDBBNTdGOEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJaQnp5aVBma0M1WmZzNUppeTJZdWl6ZXBTRGU2VFdwTFRxaDVSZnN2NUtLLzAv
MzIzODMwMzQzYTM1MzU2NTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzkzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARV4DANBgkqhkiG9w0BAQsFAAOCAQEAXvWOEh30
WYPAu0DeIF6UjMbbX8dYuXt4pzd3lD3reDI1+vdLW5wBzRU+Rk4VFCrKsSJHYP7J
FyOSeZQTi8YSLL3EB/BHkyyro0ienqTteEehBp71Soku0QNQAHPp0/btob401Bx1
wibq2DpsCWlVIrrLiQ3+7maQhXYdU17XZWp8X57PKEjzTT/3sEODY4iSroMPaqEi
2yaixEJGs7wj/y8G+xOKq9sskEu5mf0jy1SCyE8zgl2VlqnjN6e07u9c+sSiQItz
/WiY3Yn91RpcGjLKw7wCkGgtNUn1A03nmHISu5iqUFKdcFL1+YvNEu1l/31mQLbD
tEBIvD6VgDsdBQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 17:41:29 2025 by rpki-client