Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36rK8tgWRDyBBnZSPvgp7NVyCkuvLPEXu15yKNgzrvzY/0/323830343a383765343a3a2f33322d3438203d3e20323732373338.roa
File:                     323830343a383765343a3a2f33322d3438203d3e20323732373338.roa (raw, json)
Hash identifier:          guSv9FGHBrw12mEu87mZu4ILlZJ/WPis3pLBcYOpGgM=
Subject key identifier:   16:BE:A7:A1:2C:14:72:1F:D1:4C:28:8A:75:98:C7:C1:5D:FD:AB:99
Certificate issuer:       /CN=EC13AA2E18756D69B8E633A6D658A56F15C5F37E
Certificate serial:       25E53979C01581CFC20C484FF5E9BA59303D61C7
Authority key identifier: EC:13:AA:2E:18:75:6D:69:B8:E6:33:A6:D6:58:A5:6F:15:C5:F3:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC13AA2E18756D69B8E633A6D658A56F15C5F37E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36rK8tgWRDyBBnZSPvgp7NVyCkuvLPEXu15yKNgzrvzY/0/323830343a383765343a3a2f33322d3438203d3e20323732373338.roa
Signing time:             Thu 05 Jun 2025 17:31:57 +0000
ROA not before:           Thu 05 Jun 2025 17:26:57 +0000
ROA not after:            Thu 04 Jun 2026 17:31:57 +0000
asID:                     272738
IP address blocks:        2804:87e4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/36rK8tgWRDyBBnZSPvgp7NVyCkuvLPEXu15yKNgzrvzY/0/EC13AA2E18756D69B8E633A6D658A56F15C5F37E.crl
                          rsync://rpki-repo.registro.br/repo/36rK8tgWRDyBBnZSPvgp7NVyCkuvLPEXu15yKNgzrvzY/0/EC13AA2E18756D69B8E633A6D658A56F15C5F37E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC13AA2E18756D69B8E633A6D658A56F15C5F37E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 07:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e5:39:79:c0:15:81:cf:c2:0c:48:4f:f5:e9:ba:59:30:3d:61:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC13AA2E18756D69B8E633A6D658A56F15C5F37E
        Validity
            Not Before: Jun  5 17:26:57 2025 GMT
            Not After : Jun  4 17:31:57 2026 GMT
        Subject: CN=16BEA7A12C14721FD14C288A7598C7C15DFDAB99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:20:38:bd:fa:87:a2:bf:5d:d1:f9:24:41:d3:
                    a3:45:62:ee:6a:d6:83:cc:bd:aa:c5:35:37:bf:c0:
                    16:6a:06:ad:7e:bf:f3:5e:bc:18:3b:61:f9:c3:e8:
                    92:43:5f:e3:74:21:13:8e:86:91:57:76:47:94:2e:
                    6c:54:f0:e0:40:92:38:f1:d7:86:8f:a7:b0:b8:60:
                    63:6d:25:63:11:09:2c:61:0a:fe:5d:c7:ee:bd:2f:
                    8c:cd:a0:7e:5b:4b:ef:bb:f8:c8:1f:ae:ee:7e:e9:
                    40:c8:9d:01:ad:1f:be:b6:66:9e:54:4f:cc:fa:68:
                    49:66:43:e5:e4:2d:1f:e3:9d:cf:21:8f:3c:45:54:
                    46:ab:83:d0:1a:c1:b4:5a:30:0c:11:2a:56:e0:90:
                    e8:cb:13:17:96:94:76:9c:c3:d0:63:56:dc:e3:9b:
                    28:1a:df:48:1f:b5:4c:4e:ea:48:b9:d2:57:c4:59:
                    78:56:b5:0f:58:30:51:d8:76:08:49:62:5c:7e:2d:
                    a1:82:a5:54:aa:ed:4f:ba:a2:97:3d:37:4d:6d:be:
                    b9:57:68:f8:a3:11:78:a0:ac:a7:72:3a:49:4e:a2:
                    8e:cf:11:c9:3d:c8:66:61:db:3f:e1:78:3b:98:77:
                    d1:2f:5c:32:da:71:7c:77:4c:07:e4:e3:ac:e2:a8:
                    4a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BE:A7:A1:2C:14:72:1F:D1:4C:28:8A:75:98:C7:C1:5D:FD:AB:99
            X509v3 Authority Key Identifier:
                keyid:EC:13:AA:2E:18:75:6D:69:B8:E6:33:A6:D6:58:A5:6F:15:C5:F3:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36rK8tgWRDyBBnZSPvgp7NVyCkuvLPEXu15yKNgzrvzY/0/EC13AA2E18756D69B8E633A6D658A56F15C5F37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC13AA2E18756D69B8E633A6D658A56F15C5F37E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36rK8tgWRDyBBnZSPvgp7NVyCkuvLPEXu15yKNgzrvzY/0/323830343a383765343a3a2f33322d3438203d3e20323732373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:ff:10:08:e3:86:90:a2:01:aa:20:fe:43:08:21:18:1e:f1:
         b5:da:96:dd:ee:5e:66:e2:37:43:6d:64:09:83:13:1a:c0:16:
         06:ef:43:ab:e8:7d:5c:88:61:dd:79:41:18:24:58:1b:4e:d4:
         2e:27:d8:7a:e8:33:d9:2e:1c:ca:33:4c:5d:51:4e:a2:e1:9b:
         03:ec:32:5c:51:d2:af:eb:0c:68:38:6d:97:35:cb:dd:d2:0f:
         3e:d0:87:5f:9d:77:39:b6:3f:0a:fb:fe:4e:3b:b1:3a:13:4a:
         23:c2:0a:57:4a:5d:be:f2:ae:d0:90:22:25:52:72:c0:fc:9e:
         88:ef:54:b0:da:bb:0e:21:4f:1b:94:e5:37:33:6d:f5:1e:66:
         73:70:91:4a:22:20:60:2f:1b:c4:14:73:28:f9:56:bf:48:bd:
         65:02:7e:2a:67:d2:f5:d1:3a:46:79:c1:c6:c1:11:a4:63:21:
         7c:87:39:58:f8:a7:9a:1f:58:cf:24:f8:81:f2:f7:68:d8:44:
         b6:5a:12:30:72:6d:1a:95:d1:2c:0b:e4:01:1c:d6:44:8b:bd:
         f8:1e:43:73:96:33:bd:ed:12:f6:31:c5:8f:e4:bd:d9:1b:62:
         ab:a0:fd:80:c8:34:ea:c5:3a:17:9d:4e:36:45:1c:13:56:5d:
         49:e1:c7:9d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJeU5ecAVgc/CDEhP9em6WTA9YccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMxM0FBMkUxODc1NkQ2OUI4RTYzM0E2RDY1OEE1NkYx
NUM1RjM3RTAeFw0yNTA2MDUxNzI2NTdaFw0yNjA2MDQxNzMxNTdaMDMxMTAvBgNV
BAMTKDE2QkVBN0ExMkMxNDcyMUZEMTRDMjg4QTc1OThDN0MxNURGREFCOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChIDi9+oeiv13R+SRB06NFYu5q
1oPMvarFNTe/wBZqBq1+v/NevBg7YfnD6JJDX+N0IROOhpFXdkeULmxU8OBAkjjx
14aPp7C4YGNtJWMRCSxhCv5dx+69L4zNoH5bS++7+Mgfru5+6UDInQGtH762Zp5U
T8z6aElmQ+XkLR/jnc8hjzxFVEarg9AawbRaMAwRKlbgkOjLExeWlHacw9BjVtzj
myga30gftUxO6ki50lfEWXhWtQ9YMFHYdghJYlx+LaGCpVSq7U+6opc9N01tvrlX
aPijEXigrKdyOklOoo7PEck9yGZh2z/heDuYd9EvXDLacXx3TAfk46ziqErlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUFr6noSwUch/RTCiKdZjHwV39q5kwHwYDVR0j
BBgwFoAU7BOqLhh1bWm45jOm1lilbxXF834wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzZySzh0Z1dSRHlCQm5aU1B2Z3A3TlZ5Q2t1dkxQRVh1MTV5S05nenJ2
elkvMC9FQzEzQUEyRTE4NzU2RDY5QjhFNjMzQTZENjU4QTU2RjE1QzVGMzdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDMTNBQTJFMTg3NTZENjlC
OEU2MzNBNkQ2NThBNTZGMTVDNUYzN0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM2cks4dGdXUkR5QkJuWlNQdmdwN05WeUNrdXZMUEVYdTE1eUtOZ3pydnpZLzAv
MzIzODMwMzQzYTM4Mzc2NTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMy
MzczMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASH5DANBgkqhkiG9w0BAQsFAAOCAQEAB/8QCOOG
kKIBqiD+QwghGB7xtdqW3e5eZuI3Q21kCYMTGsAWBu9Dq+h9XIhh3XlBGCRYG07U
LifYeugz2S4cyjNMXVFOouGbA+wyXFHSr+sMaDhtlzXL3dIPPtCHX513ObY/Cvv+
TjuxOhNKI8IKV0pdvvKu0JAiJVJywPyeiO9UsNq7DiFPG5TlNzNt9R5mc3CRSiIg
YC8bxBRzKPlWv0i9ZQJ+KmfS9dE6RnnBxsERpGMhfIc5WPinmh9YzyT4gfL3aNhE
tloSMHJtGpXRLAvkARzWRIu9+B5Dc5Yzve0S9jHFj+S92Rtiq6D9gMg06sU6F51O
NkUcE1ZdSeHHnQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 22:06:30 2025 by rpki-client