Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/323830343a366538633a3a2f33322d3438203d3e20323730363034.roa
File:                     323830343a366538633a3a2f33322d3438203d3e20323730363034.roa (raw, json)
Hash identifier:          tVAXeFC+iq/fAtqRcKPxlG6knqs2WS7puPZb+Uyp8i8=
Subject key identifier:   39:B1:7E:8B:1F:01:B4:07:05:6A:4D:1A:3E:07:32:5D:00:9A:34:2D
Certificate issuer:       /CN=275FC0A044B8CD48293C24A67DA64C8E18845376
Certificate serial:       6441CBA0F180C6FC327D5B3569B7FF2D7BE17E65
Authority key identifier: 27:5F:C0:A0:44:B8:CD:48:29:3C:24:A6:7D:A6:4C:8E:18:84:53:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275FC0A044B8CD48293C24A67DA64C8E18845376.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/323830343a366538633a3a2f33322d3438203d3e20323730363034.roa
Signing time:             Tue 03 Jun 2025 19:04:03 +0000
ROA not before:           Tue 03 Jun 2025 18:59:03 +0000
ROA not after:            Tue 02 Jun 2026 19:04:03 +0000
asID:                     270604
IP address blocks:        2804:6e8c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/275FC0A044B8CD48293C24A67DA64C8E18845376.crl
                          rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/275FC0A044B8CD48293C24A67DA64C8E18845376.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275FC0A044B8CD48293C24A67DA64C8E18845376.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 17:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:41:cb:a0:f1:80:c6:fc:32:7d:5b:35:69:b7:ff:2d:7b:e1:7e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275FC0A044B8CD48293C24A67DA64C8E18845376
        Validity
            Not Before: Jun  3 18:59:03 2025 GMT
            Not After : Jun  2 19:04:03 2026 GMT
        Subject: CN=39B17E8B1F01B407056A4D1A3E07325D009A342D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d1:c8:3d:26:ea:a4:f7:08:3c:ef:95:e9:9f:
                    31:7c:3f:c3:dc:fb:b2:f5:33:2d:d3:d4:ca:f2:b2:
                    d6:eb:51:d3:01:30:d4:59:f6:00:8e:14:69:8e:b9:
                    52:0e:27:75:84:b7:41:df:60:03:41:26:63:42:e6:
                    f6:fb:7e:77:95:31:c8:46:dd:fc:f6:cb:4d:97:24:
                    51:8d:c8:14:24:99:bc:40:d1:22:65:55:a3:f9:6f:
                    79:a1:e8:73:d3:da:a9:3b:0c:59:58:62:45:b6:b6:
                    5b:33:b4:a4:c5:c9:a7:2b:44:ae:cf:ad:3b:74:78:
                    9c:e3:ce:c7:d6:b6:ef:79:23:36:f0:d2:4b:5f:c6:
                    c6:71:21:0d:76:3b:3d:f8:ba:99:06:a8:fb:33:2e:
                    2e:61:fa:1a:b5:5b:5b:c9:16:ab:0c:41:e8:93:f3:
                    0b:c6:91:c1:07:d6:e3:05:c9:c0:25:de:40:e8:2e:
                    e2:f6:b8:8c:fc:aa:53:1b:04:b5:1d:b8:2e:15:b1:
                    10:fe:cd:d3:96:75:64:37:7a:e4:46:e4:5a:cd:dc:
                    98:01:ec:cc:61:57:3b:ee:c3:60:71:6a:10:33:ed:
                    1e:7f:28:d5:0a:49:74:92:3a:7f:dc:0f:33:33:10:
                    65:0e:4c:1d:38:b3:61:0e:d4:21:b4:9c:65:67:61:
                    88:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B1:7E:8B:1F:01:B4:07:05:6A:4D:1A:3E:07:32:5D:00:9A:34:2D
            X509v3 Authority Key Identifier:
                keyid:27:5F:C0:A0:44:B8:CD:48:29:3C:24:A6:7D:A6:4C:8E:18:84:53:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/275FC0A044B8CD48293C24A67DA64C8E18845376.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275FC0A044B8CD48293C24A67DA64C8E18845376.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/323830343a366538633a3a2f33322d3438203d3e20323730363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:47:15:03:98:27:11:59:e1:e6:fb:bf:c7:7f:05:de:70:af:
         3f:82:3b:c2:62:fb:c5:7a:30:30:93:2b:00:3e:75:95:5d:ad:
         5f:01:68:fd:65:b9:5b:38:30:42:60:e5:83:b2:60:10:20:cf:
         23:e6:ef:98:c8:32:b6:0e:db:e6:a5:88:cd:1a:c7:87:95:3e:
         3a:89:46:4d:b6:23:8e:af:56:e1:76:be:e2:9f:6d:33:ed:8e:
         f3:81:e2:3b:8a:2e:5b:37:e4:5f:2c:26:91:8a:8f:dd:d6:a4:
         79:0b:0e:99:2c:1e:f2:42:b7:e8:b4:df:3a:07:42:e7:3f:c7:
         6f:10:74:c2:62:36:75:61:06:3b:e3:4f:ea:32:ac:ad:fa:d4:
         63:f5:93:e0:ff:25:b7:5e:3a:45:6b:96:58:99:3d:3b:ea:ea:
         47:20:bc:11:0d:65:ba:5d:72:46:94:6f:db:d8:86:22:51:9b:
         4c:76:b9:e6:22:cd:d0:f6:52:b0:9a:29:7b:4f:ed:77:67:ac:
         46:fd:c7:52:dc:6e:2b:f6:ab:6c:fd:1d:5b:71:74:de:4c:f8:
         b7:20:95:f5:13:44:f1:42:72:d5:13:a7:96:a0:ba:f9:e9:6e:
         80:87:04:84:4d:0e:a0:48:42:e8:ec:04:3e:19:01:de:52:9b:
         93:e4:a3:05
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZEHLoPGAxvwyfVs1abf/LXvhfmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc1RkMwQTA0NEI4Q0Q0ODI5M0MyNEE2N0RBNjRDOEUx
ODg0NTM3NjAeFw0yNTA2MDMxODU5MDNaFw0yNjA2MDIxOTA0MDNaMDMxMTAvBgNV
BAMTKDM5QjE3RThCMUYwMUI0MDcwNTZBNEQxQTNFMDczMjVEMDA5QTM0MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb0cg9Juqk9wg875XpnzF8P8Pc
+7L1My3T1MrystbrUdMBMNRZ9gCOFGmOuVIOJ3WEt0HfYANBJmNC5vb7fneVMchG
3fz2y02XJFGNyBQkmbxA0SJlVaP5b3mh6HPT2qk7DFlYYkW2tlsztKTFyacrRK7P
rTt0eJzjzsfWtu95Izbw0ktfxsZxIQ12Oz34upkGqPszLi5h+hq1W1vJFqsMQeiT
8wvGkcEH1uMFycAl3kDoLuL2uIz8qlMbBLUduC4VsRD+zdOWdWQ3euRG5FrN3JgB
7MxhVzvuw2BxahAz7R5/KNUKSXSSOn/cDzMzEGUOTB04s2EO1CG0nGVnYYhnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUObF+ix8BtAcFak0aPgcyXQCaNC0wHwYDVR0j
BBgwFoAUJ1/AoES4zUgpPCSmfaZMjhiEU3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVkb011ZWFFUHZEdkNrUUhMWFBqZXY3UFQ4UGl4M2kzRTVMdE11U1hI
RFMvMC8yNzVGQzBBMDQ0QjhDRDQ4MjkzQzI0QTY3REE2NEM4RTE4ODQ1Mzc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3NUZDMEEwNDRCOENENDgy
OTNDMjRBNjdEQTY0QzhFMTg4NDUzNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRFZG9NdWVhRVB2RHZDa1FITFhQamV2N1BUOFBpeDNpM0U1THRNdVNYSERTLzAv
MzIzODMwMzQzYTM2NjUzODYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzYzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARujDANBgkqhkiG9w0BAQsFAAOCAQEAI0cVA5gn
EVnh5vu/x38F3nCvP4I7wmL7xXowMJMrAD51lV2tXwFo/WW5WzgwQmDlg7JgECDP
I+bvmMgytg7b5qWIzRrHh5U+OolGTbYjjq9W4Xa+4p9tM+2O84HiO4ouWzfkXywm
kYqP3dakeQsOmSwe8kK36LTfOgdC5z/HbxB0wmI2dWEGO+NP6jKsrfrUY/WT4P8l
t146RWuWWJk9O+rqRyC8EQ1lul1yRpRv29iGIlGbTHa55iLN0PZSsJope0/td2es
Rv3HUtxuK/arbP0dW3F03kz4tyCV9RNE8UJy1ROnlqC6+elugIcEhE0OoEhC6OwE
PhkB3lKbk+SjBQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:04:25 2025 by rpki-client