Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a343030303a3a2f33342d3334203d3e20323637343535.roa
File:                     323830343a343163343a343030303a3a2f33342d3334203d3e20323637343535.roa (raw, json)
Hash identifier:          JGbhOeWQ/Vx1Hbteh3VxrD3Ad9aWi9TqmGO5J5+7wkE=
Subject key identifier:   6E:CD:66:14:A9:29:D2:83:74:7E:64:4B:ED:B4:74:35:05:33:52:AB
Certificate issuer:       /CN=9CC2CE01A6286693B83AC51F507492F995DE365D
Certificate serial:       739BD5B62B8660978020F09FB4359EDA2AA5A2AF
Authority key identifier: 9C:C2:CE:01:A6:28:66:93:B8:3A:C5:1F:50:74:92:F9:95:DE:36:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CC2CE01A6286693B83AC51F507492F995DE365D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a343030303a3a2f33342d3334203d3e20323637343535.roa
Signing time:             Sun 01 Jun 2025 12:47:28 +0000
ROA not before:           Sun 01 Jun 2025 12:42:28 +0000
ROA not after:            Sun 31 May 2026 12:47:28 +0000
asID:                     267455
IP address blocks:        2804:41c4:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/9CC2CE01A6286693B83AC51F507492F995DE365D.crl
                          rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/9CC2CE01A6286693B83AC51F507492F995DE365D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CC2CE01A6286693B83AC51F507492F995DE365D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 22:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9b:d5:b6:2b:86:60:97:80:20:f0:9f:b4:35:9e:da:2a:a5:a2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC2CE01A6286693B83AC51F507492F995DE365D
        Validity
            Not Before: Jun  1 12:42:28 2025 GMT
            Not After : May 31 12:47:28 2026 GMT
        Subject: CN=6ECD6614A929D283747E644BEDB47435053352AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:fe:d9:dc:2a:98:06:37:54:cc:2a:05:8d:
                    eb:4c:4d:1b:cd:37:20:98:6c:14:0c:73:c4:7d:52:
                    97:55:ce:94:27:22:2d:b6:3e:68:5f:b6:00:72:47:
                    71:5c:35:93:89:c9:61:18:e2:d0:39:34:39:30:7e:
                    89:cb:48:31:7d:88:0c:1a:2f:17:e4:4f:f5:02:74:
                    e7:9e:f2:2d:13:43:e9:b8:f3:11:3e:6a:e1:03:97:
                    a8:64:77:ac:4c:65:fd:e1:d4:94:b3:14:a2:ed:e2:
                    ba:4d:4f:06:e4:d2:6f:be:ca:35:53:a5:76:ac:5a:
                    d3:71:40:a7:80:cc:99:c0:20:e5:a8:68:0e:99:ba:
                    71:d5:63:25:c2:e7:5d:93:95:a3:0b:e4:6e:0e:71:
                    a6:6b:c4:57:19:83:04:93:bd:e1:d1:34:12:13:32:
                    8b:87:7d:ce:b9:ba:98:35:4c:9e:55:f1:5e:5d:42:
                    98:ee:0f:07:77:63:c5:5f:0a:05:19:70:14:55:e0:
                    c4:98:f8:48:ae:eb:aa:e0:cf:16:8e:01:e8:7b:d6:
                    c1:19:4d:4c:73:01:37:86:57:f6:a9:41:59:4e:88:
                    f4:7d:37:30:08:fe:d0:77:3d:0e:fa:bc:cd:90:bd:
                    66:92:74:61:fe:a2:3a:cf:3f:9e:a0:8d:bd:08:7c:
                    16:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CD:66:14:A9:29:D2:83:74:7E:64:4B:ED:B4:74:35:05:33:52:AB
            X509v3 Authority Key Identifier:
                keyid:9C:C2:CE:01:A6:28:66:93:B8:3A:C5:1F:50:74:92:F9:95:DE:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/9CC2CE01A6286693B83AC51F507492F995DE365D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CC2CE01A6286693B83AC51F507492F995DE365D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a343030303a3a2f33342d3334203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41c4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7b:07:1a:94:57:b4:94:93:9e:f4:3c:43:71:db:b1:bf:7d:54:
         d8:46:2a:7a:c7:f6:a5:f4:ea:eb:d2:24:89:14:85:e7:fc:2c:
         4a:b7:6b:18:ef:7e:2a:91:71:4f:b4:bd:66:51:2a:df:ae:c1:
         7d:10:a0:65:c9:62:bc:13:3e:0c:dc:ce:6d:89:83:13:e0:83:
         e3:59:1b:4f:4d:77:42:64:e9:2c:e8:d0:70:39:54:82:da:13:
         ce:59:6c:d6:a7:99:42:5e:80:e7:5a:94:4d:dc:e3:be:62:82:
         fa:bc:88:59:3b:7b:99:9c:4c:a3:fa:dc:6c:82:b3:8d:71:cc:
         32:c3:7f:33:5c:50:11:a4:1c:9f:16:b2:f8:5a:c5:4e:57:77:
         61:4e:02:9f:02:34:07:b9:9d:3a:75:92:95:a1:20:35:79:3e:
         cd:f2:6f:15:d2:cf:ed:8d:9d:24:a2:e4:44:0a:bf:e6:54:6b:
         c6:1a:ae:3e:18:61:4a:10:e1:ec:f2:6b:23:ac:10:69:93:f9:
         30:eb:ff:bf:ed:84:99:a3:a2:bf:38:ff:e1:e3:c3:8a:45:a8:
         60:62:c6:71:67:31:e4:d9:e6:08:3a:60:86:6f:5a:a4:9f:e1:
         c1:4d:d3:67:68:10:93:d5:16:50:0e:cb:36:fb:74:e7:e5:4f:
         2d:a1:91:a0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUc5vVtiuGYJeAIPCftDWe2iqloq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNDMkNFMDFBNjI4NjY5M0I4M0FDNTFGNTA3NDkyRjk5
NURFMzY1RDAeFw0yNTA2MDExMjQyMjhaFw0yNjA1MzExMjQ3MjhaMDMxMTAvBgNV
BAMTKDZFQ0Q2NjE0QTkyOUQyODM3NDdFNjQ0QkVEQjQ3NDM1MDUzMzUyQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+//7Z3CqYBjdUzCoFjetMTRvN
NyCYbBQMc8R9UpdVzpQnIi22PmhftgByR3FcNZOJyWEY4tA5NDkwfonLSDF9iAwa
LxfkT/UCdOee8i0TQ+m48xE+auEDl6hkd6xMZf3h1JSzFKLt4rpNTwbk0m++yjVT
pXasWtNxQKeAzJnAIOWoaA6ZunHVYyXC512TlaML5G4OcaZrxFcZgwSTveHRNBIT
MouHfc65upg1TJ5V8V5dQpjuDwd3Y8VfCgUZcBRV4MSY+Eiu66rgzxaOAeh71sEZ
TUxzATeGV/apQVlOiPR9NzAI/tB3PQ76vM2QvWaSdGH+ojrPP56gjb0IfBZpAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUbs1mFKkp0oN0fmRL7bR0NQUzUqswHwYDVR0j
BBgwFoAUnMLOAaYoZpO4OsUfUHSS+ZXeNl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGVycUtVY0tnOUp2eE1zcFVndTlKamRrZkVyTmhwcTFLRE5nNjhQSnRI
ZzMvMC85Q0MyQ0UwMUE2Mjg2NjkzQjgzQUM1MUY1MDc0OTJGOTk1REUzNjVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQzJDRTAxQTYyODY2OTNC
ODNBQzUxRjUwNzQ5MkY5OTVERTM2NUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRlcnFLVWNLZzlKdnhNc3BVZ3U5Smpka2ZFck5ocHExS0ROZzY4UEp0SGczLzAv
MzIzODMwMzQzYTM0MzE2MzM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM0MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEQcRAMA0GCSqGSIb3DQEBCwUA
A4IBAQB7BxqUV7SUk570PENx27G/fVTYRip6x/al9Orr0iSJFIXn/CxKt2sY734q
kXFPtL1mUSrfrsF9EKBlyWK8Ez4M3M5tiYMT4IPjWRtPTXdCZOks6NBwOVSC2hPO
WWzWp5lCXoDnWpRN3OO+YoL6vIhZO3uZnEyj+txsgrONccwyw38zXFARpByfFrL4
WsVOV3dhTgKfAjQHuZ06dZKVoSA1eT7N8m8V0s/tjZ0kouRECr/mVGvGGq4+GGFK
EOHs8msjrBBpk/kw6/+/7YSZo6K/OP/h48OKRahgYsZxZzHk2eYIOmCGb1qkn+HB
TdNnaBCT1RZQDss2+3Tn5U8toZGg
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:59:45 2025 by rpki-client