Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a313030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a313030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          UvmTIrhPhRE+mGK7e0R0RShgfMoX5MurVFxvS2THt3s=
Subject key identifier:   43:A7:01:49:5E:2F:F7:1B:91:19:5C:D7:5A:F0:47:C9:78:AC:70:F8
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       36E412EDDE1D55EEAA4016F721D5F1265C04E279
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a313030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:07:21 +0000
ROA not before:           Mon 09 Jun 2025 18:02:21 +0000
ROA not after:            Mon 08 Jun 2026 18:07:21 +0000
asID:                     272569
IP address blocks:        2804:8548:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 04:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e4:12:ed:de:1d:55:ee:aa:40:16:f7:21:d5:f1:26:5c:04:e2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:02:21 2025 GMT
            Not After : Jun  8 18:07:21 2026 GMT
        Subject: CN=43A701495E2FF71B91195CD75AF047C978AC70F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:17:b0:59:e8:cd:cc:0a:12:68:da:2e:d2:a5:
                    e6:e6:0b:33:9d:d3:d8:2c:b8:4a:a5:95:26:12:27:
                    c9:02:ce:e1:69:c4:23:07:f7:29:5e:00:2e:cc:39:
                    45:45:02:9c:4e:7d:55:d7:43:ac:b6:79:f0:46:8b:
                    bb:20:87:ec:80:72:03:a7:a0:10:d9:81:6c:fe:ac:
                    f0:41:92:d9:29:d1:8e:ee:57:91:d6:f4:4d:b5:e7:
                    f8:ca:8b:48:d6:32:fe:3b:43:82:34:37:9d:a1:6e:
                    fc:6b:82:81:d9:c0:c5:7d:73:2f:e1:06:39:ac:b9:
                    a7:21:6e:83:7e:42:be:58:b9:59:ed:f8:c2:fa:cb:
                    f0:ff:00:8c:2e:a2:de:6a:a0:63:ac:9f:b0:9f:49:
                    97:c5:81:7d:4d:b8:8c:fa:82:d0:a9:ea:c5:2b:06:
                    ef:b8:17:35:fc:ff:40:a4:4a:46:6e:9c:59:9e:95:
                    e4:e9:91:38:83:19:5b:07:d5:73:74:87:6e:e7:62:
                    dc:b2:da:35:bb:46:eb:b8:95:bd:e9:b9:a7:bc:cf:
                    d7:e3:ab:fb:22:2c:5e:77:5b:b9:ed:33:9a:36:10:
                    26:1f:07:fe:ca:ae:ff:07:69:d6:17:b1:5d:06:88:
                    3f:d4:11:8b:a8:b4:99:fc:5d:81:b3:92:4c:31:88:
                    fd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A7:01:49:5E:2F:F7:1B:91:19:5C:D7:5A:F0:47:C9:78:AC:70:F8
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a313030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c1:6a:8d:a4:40:dc:f0:e0:07:69:29:4b:cd:b1:1b:a8:4a:38:
         54:16:36:24:16:d5:f8:3e:22:ca:b0:dd:63:0a:0e:f6:8c:db:
         12:78:01:7d:51:3c:ad:11:df:9a:84:fd:9b:76:9c:fe:48:f4:
         8b:67:68:80:e7:b9:e7:ca:e6:f8:dc:86:d3:d9:5a:81:6e:a4:
         98:9a:a2:e5:45:c7:de:03:71:5e:c0:da:79:db:2d:1f:1c:78:
         75:86:e7:62:0b:92:a9:df:84:5a:2c:47:9e:ee:6e:b1:2d:4c:
         e7:0d:05:c1:5d:58:22:7c:6a:86:dd:75:18:a4:8d:b0:bc:2e:
         fc:e8:44:71:93:3b:fc:70:1a:7c:d1:49:85:18:19:af:83:d3:
         2c:dd:b2:62:a9:77:5e:db:9c:b2:fd:e6:71:37:10:d4:bc:71:
         ea:a7:98:ba:cb:1e:29:a7:7c:07:d2:dc:10:4e:99:d3:5e:13:
         0e:04:6b:05:2c:44:d6:c5:7a:3f:37:f3:d3:55:c3:9b:27:3e:
         af:cf:e7:7c:f0:75:66:4d:88:b9:fa:1a:b4:3e:b8:35:5c:d5:
         28:d3:55:e8:b7:6d:32:7b:08:39:a4:04:38:57:02:19:9a:41:
         a7:a8:ef:71:f5:d9:a3:70:3b:f4:af:68:95:f9:f5:e7:8c:92:
         da:d4:5d:5b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUNuQS7d4dVe6qQBb3IdXxJlwE4nkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE0ODk0Mjg0QThBNDkyQkVBODgxNUIzMDIxMUI5NDZF
MDkxNTc1QzAeFw0yNTA2MDkxODAyMjFaFw0yNjA2MDgxODA3MjFaMDMxMTAvBgNV
BAMTKDQzQTcwMTQ5NUUyRkY3MUI5MTE5NUNENzVBRjA0N0M5NzhBQzcwRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJF7BZ6M3MChJo2i7SpebmCzOd
09gsuEqllSYSJ8kCzuFpxCMH9yleAC7MOUVFApxOfVXXQ6y2efBGi7sgh+yAcgOn
oBDZgWz+rPBBktkp0Y7uV5HW9E215/jKi0jWMv47Q4I0N52hbvxrgoHZwMV9cy/h
BjmsuachboN+Qr5YuVnt+ML6y/D/AIwuot5qoGOsn7CfSZfFgX1NuIz6gtCp6sUr
Bu+4FzX8/0CkSkZunFmeleTpkTiDGVsH1XN0h27nYtyy2jW7Ruu4lb3puae8z9fj
q/siLF53W7ntM5o2ECYfB/7Krv8HadYXsV0GiD/UEYuotJn8XYGzkkwxiP3nAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQ6cBSV4v9xuRGVzXWvBHyXiscPgwHwYDVR0j
BBgwFoAU6kiUKEqKSSvqiBWzAhG5RuCRV1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWQ2Zm5GOVRiUUh3NWgzYnZOeTlneEdxTnZ3Tk15NTdnYkpqQjR1VFd1
UHMvMC9FQTQ4OTQyODRBOEE0OTJCRUE4ODE1QjMwMjExQjk0NkUwOTE1NzVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBNDg5NDI4NEE4QTQ5MkJF
QTg4MTVCMzAyMTFCOTQ2RTA5MTU3NUMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVkNmZuRjlUYlFIdzVoM2J2Tnk5Z3hHcU52d05NeTU3Z2JKakI0dVRXdVBzLzAv
MzIzODMwMzQzYTM4MzUzNDM4M2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMjM1MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEhUgQMA0GCSqGSIb3DQEBCwUA
A4IBAQDBao2kQNzw4AdpKUvNsRuoSjhUFjYkFtX4PiLKsN1jCg72jNsSeAF9UTyt
Ed+ahP2bdpz+SPSLZ2iA57nnyub43IbT2VqBbqSYmqLlRcfeA3FewNp52y0fHHh1
hudiC5Kp34RaLEee7m6xLUznDQXBXVgifGqG3XUYpI2wvC786ERxkzv8cBp80UmF
GBmvg9Ms3bJiqXde25yy/eZxNxDUvHHqp5i6yx4pp3wH0twQTpnTXhMOBGsFLETW
xXo/N/PTVcObJz6vz+d88HVmTYi5+hq0Prg1XNUo01Xot20yewg5pAQ4VwIZmkGn
qO9x9dmjcDv0r2iV+fXnjJLa1F1b
-----END CERTIFICATE-----
Generated at Thu Jun 12 12:47:40 2025 by rpki-client