Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33322d3334203d3e20323635323536.roa
File:                     323830343a326430303a3a2f33322d3334203d3e20323635323536.roa (raw, json)
Hash identifier:          /MFIheKEYZoB27rVKYgIUt2QkLyFF2KtDBq989z2dSA=
Subject key identifier:   06:97:5C:10:4E:0A:C3:A2:D8:D6:A5:90:87:F8:AB:24:7C:98:E0:22
Certificate issuer:       /CN=BE7415AD0D46EBFDA548114CE90CBE13B2F27B9D
Certificate serial:       7F3A2D008B7B207525B7E60563B1CDFC0F28946F
Authority key identifier: BE:74:15:AD:0D:46:EB:FD:A5:48:11:4C:E9:0C:BE:13:B2:F2:7B:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7415AD0D46EBFDA548114CE90CBE13B2F27B9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33322d3334203d3e20323635323536.roa
Signing time:             Thu 26 Jun 2025 22:55:57 +0000
ROA not before:           Thu 26 Jun 2025 22:50:57 +0000
ROA not after:            Thu 25 Jun 2026 22:55:57 +0000
asID:                     265256
IP address blocks:        2804:2d00::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/BE7415AD0D46EBFDA548114CE90CBE13B2F27B9D.crl
                          rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/BE7415AD0D46EBFDA548114CE90CBE13B2F27B9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7415AD0D46EBFDA548114CE90CBE13B2F27B9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 08:14:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3a:2d:00:8b:7b:20:75:25:b7:e6:05:63:b1:cd:fc:0f:28:94:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7415AD0D46EBFDA548114CE90CBE13B2F27B9D
        Validity
            Not Before: Jun 26 22:50:57 2025 GMT
            Not After : Jun 25 22:55:57 2026 GMT
        Subject: CN=06975C104E0AC3A2D8D6A59087F8AB247C98E022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8e:b6:4c:86:9d:18:9b:a8:1b:65:20:98:93:
                    26:4a:06:db:dc:91:e2:8b:19:b6:5f:26:95:62:06:
                    e2:6c:21:05:8e:a0:27:b9:8a:d3:99:f5:a3:0a:0e:
                    f6:1b:79:b0:3a:69:92:b1:ea:51:62:1d:a2:f9:5f:
                    8f:6c:7c:8e:3d:df:74:92:05:0e:a4:70:a0:08:dd:
                    9a:98:ac:41:fd:a6:da:5d:8b:81:48:f8:f4:1f:ed:
                    a9:ba:54:5e:b5:b2:ee:4c:84:4b:45:ee:77:4e:39:
                    d9:4b:6c:62:60:6d:bd:8f:33:2d:c0:65:75:26:85:
                    a7:9e:95:66:fa:74:52:02:92:e3:0e:f1:23:f2:ad:
                    a5:26:c5:e1:31:a6:b9:8e:9f:f5:b6:02:d0:e1:0c:
                    6b:91:80:d8:9c:32:f2:e6:cd:a7:14:ae:a7:db:14:
                    e4:43:ba:15:29:c4:0e:9a:fe:69:6b:f4:90:1d:d3:
                    40:f9:8b:48:32:76:b8:b4:47:89:3c:2a:79:7b:12:
                    fb:93:05:10:91:ba:49:33:0b:7d:55:a9:34:cb:82:
                    1b:5f:c2:c3:0b:a9:32:f9:2c:d6:00:53:59:00:92:
                    d7:c1:d1:cc:9d:0e:81:40:f9:87:32:20:aa:dd:04:
                    7a:34:4f:92:ba:64:51:75:0f:67:e2:9a:84:8a:49:
                    1b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:97:5C:10:4E:0A:C3:A2:D8:D6:A5:90:87:F8:AB:24:7C:98:E0:22
            X509v3 Authority Key Identifier:
                keyid:BE:74:15:AD:0D:46:EB:FD:A5:48:11:4C:E9:0C:BE:13:B2:F2:7B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/BE7415AD0D46EBFDA548114CE90CBE13B2F27B9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7415AD0D46EBFDA548114CE90CBE13B2F27B9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33322d3334203d3e20323635323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:59:06:6b:70:32:71:6b:b8:6d:80:21:a8:c3:2a:59:e0:fc:
         bd:46:c3:a1:e1:0d:34:9d:5e:df:ec:43:98:1a:b2:10:60:a7:
         7b:60:26:37:2c:9c:ed:9b:54:b5:79:45:a5:2a:77:1e:28:7c:
         14:c9:f0:58:32:bc:e7:ad:d1:a7:79:0a:04:36:f6:25:54:43:
         bd:a7:ca:65:5b:3b:87:25:8a:b6:60:9e:57:21:f1:2a:53:9a:
         5c:f3:df:c7:eb:75:1c:af:68:42:19:08:78:76:2b:f5:e9:23:
         15:ba:3e:3a:f4:f9:82:31:24:2b:3d:2b:89:50:e7:de:8c:4d:
         41:8f:f5:13:fe:57:ff:36:3c:e4:e1:69:72:eb:b7:0c:d9:ab:
         11:b2:03:e8:e2:77:73:c8:b6:2a:21:bf:a2:97:33:e9:39:b8:
         cd:8c:cb:32:11:d2:da:bb:a3:a0:a5:4a:10:fe:0b:cd:28:fc:
         5c:a0:36:ed:6b:d3:f6:2b:fd:e1:4d:8e:ce:50:72:65:36:da:
         b3:4b:4b:12:85:66:f9:d3:e6:1d:23:c4:90:c0:1d:89:b1:78:
         ad:4e:e0:6f:bc:8c:1d:8c:20:f2:5b:a0:9a:36:88:1b:47:60:
         0c:67:8b:4f:18:0a:1e:dc:de:0d:9e:89:19:71:b8:d0:92:e1:
         5b:67:e8:a2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfzotAIt7IHUlt+YFY7HN/A8olG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU3NDE1QUQwRDQ2RUJGREE1NDgxMTRDRTkwQ0JFMTNC
MkYyN0I5RDAeFw0yNTA2MjYyMjUwNTdaFw0yNjA2MjUyMjU1NTdaMDMxMTAvBgNV
BAMTKDA2OTc1QzEwNEUwQUMzQTJEOEQ2QTU5MDg3RjhBQjI0N0M5OEUwMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijrZMhp0Ym6gbZSCYkyZKBtvc
keKLGbZfJpViBuJsIQWOoCe5itOZ9aMKDvYbebA6aZKx6lFiHaL5X49sfI4933SS
BQ6kcKAI3ZqYrEH9ptpdi4FI+PQf7am6VF61su5MhEtF7ndOOdlLbGJgbb2PMy3A
ZXUmhaeelWb6dFICkuMO8SPyraUmxeExprmOn/W2AtDhDGuRgNicMvLmzacUrqfb
FORDuhUpxA6a/mlr9JAd00D5i0gydri0R4k8Knl7EvuTBRCRukkzC31VqTTLghtf
wsMLqTL5LNYAU1kAktfB0cydDoFA+YcyIKrdBHo0T5K6ZFF1D2fimoSKSRvTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUBpdcEE4Kw6LY1qWQh/irJHyY4CIwHwYDVR0j
BBgwFoAUvnQVrQ1G6/2lSBFM6Qy+E7Lye50wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWtoN1UxbWFCN0NFazk0TnljaEJwV2kxWXpYRkc5RVY1eFJhYW5MOXdW
M3YvMC9CRTc0MTVBRDBENDZFQkZEQTU0ODExNENFOTBDQkUxM0IyRjI3QjlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFNzQxNUFEMEQ0NkVCRkRB
NTQ4MTE0Q0U5MENCRTEzQjJGMjdCOUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVraDdVMW1hQjdDRWs5NE55Y2hCcFdpMVl6WEZHOUVWNXhSYWFuTDl3VjN2LzAv
MzIzODMwMzQzYTMyNjQzMDMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM1
MzIzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQtADANBgkqhkiG9w0BAQsFAAOCAQEAe1kGa3Ay
cWu4bYAhqMMqWeD8vUbDoeENNJ1e3+xDmBqyEGCne2AmNyyc7ZtUtXlFpSp3Hih8
FMnwWDK8563Rp3kKBDb2JVRDvafKZVs7hyWKtmCeVyHxKlOaXPPfx+t1HK9oQhkI
eHYr9ekjFbo+OvT5gjEkKz0riVDn3oxNQY/1E/5X/zY85OFpcuu3DNmrEbID6OJ3
c8i2KiG/opcz6Tm4zYzLMhHS2rujoKVKEP4LzSj8XKA27WvT9iv94U2OzlByZTba
s0tLEoVm+dPmHSPEkMAdibF4rU7gb7yMHYwg8lugmjaIG0dgDGeLTxgKHtzeDZ6J
GXG40JLhW2foog==
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:57:04 2025 by rpki-client