Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/0/323830343a313631383a3a2f33322d3438203d3e20323633323637.roa
File:                     323830343a313631383a3a2f33322d3438203d3e20323633323637.roa (raw, json)
Hash identifier:          Wctm/tdbWiQ6t3oFvG4hqW/F0p0FRe54TPe/v43W07Q=
Subject key identifier:   2E:33:F2:DA:D2:81:18:FB:20:22:D0:DA:A0:E9:D5:33:9C:C8:54:32
Certificate issuer:       /CN=99EA0E806C73AF40C1309F38B18546C6C8B2FD00
Certificate serial:       62C825A85ED2E274AF906B9AA4BC8944BB57D51F
Authority key identifier: 99:EA:0E:80:6C:73:AF:40:C1:30:9F:38:B1:85:46:C6:C8:B2:FD:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99EA0E806C73AF40C1309F38B18546C6C8B2FD00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/0/323830343a313631383a3a2f33322d3438203d3e20323633323637.roa
Signing time:             Tue 27 May 2025 12:40:56 +0000
ROA not before:           Tue 27 May 2025 12:35:56 +0000
ROA not after:            Tue 26 May 2026 12:40:56 +0000
asID:                     263267
IP address blocks:        2804:1618::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/0/99EA0E806C73AF40C1309F38B18546C6C8B2FD00.crl
                          rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/0/99EA0E806C73AF40C1309F38B18546C6C8B2FD00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99EA0E806C73AF40C1309F38B18546C6C8B2FD00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 00:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c8:25:a8:5e:d2:e2:74:af:90:6b:9a:a4:bc:89:44:bb:57:d5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99EA0E806C73AF40C1309F38B18546C6C8B2FD00
        Validity
            Not Before: May 27 12:35:56 2025 GMT
            Not After : May 26 12:40:56 2026 GMT
        Subject: CN=2E33F2DAD28118FB2022D0DAA0E9D5339CC85432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e2:8e:21:03:5d:fc:8a:0d:a7:d8:2b:29:91:
                    cf:f7:50:eb:e7:6f:09:ae:85:00:44:41:90:22:82:
                    68:b3:fd:c3:af:46:86:b6:92:7e:06:ab:a1:a7:1b:
                    75:af:86:49:17:2c:d5:a2:2e:2c:a3:2b:cc:68:a8:
                    28:46:64:ff:e1:cf:28:f6:8d:f8:ac:c0:ec:fa:27:
                    02:86:4a:ff:0e:de:fc:b2:21:52:37:7c:49:38:be:
                    c1:74:3c:b0:1c:0e:d9:6a:af:4c:9c:49:65:df:4c:
                    f8:47:c8:36:e3:2d:c8:cc:c6:5c:89:a0:9c:f9:e4:
                    1a:f2:fc:ea:de:76:79:f0:da:76:b5:67:41:be:b5:
                    e5:24:af:cf:49:b9:8a:2f:9c:1f:6d:0f:89:b6:b5:
                    94:43:c6:d9:e7:a1:bc:7b:95:f3:d2:7c:ab:31:83:
                    00:92:16:ce:7f:c8:cd:68:3f:08:98:eb:c0:28:ad:
                    a4:e4:54:89:0d:5c:cd:ea:b6:5f:92:1e:8e:01:75:
                    98:66:ca:2a:7a:d3:5b:11:76:00:43:b0:89:cb:22:
                    db:83:64:19:cc:c4:0c:cd:a3:ee:df:57:db:ef:47:
                    a9:bf:77:ff:17:c1:5d:28:6c:31:1b:64:75:35:59:
                    76:1f:8b:0c:9a:b7:aa:20:9c:5e:6c:ef:22:13:be:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:33:F2:DA:D2:81:18:FB:20:22:D0:DA:A0:E9:D5:33:9C:C8:54:32
            X509v3 Authority Key Identifier:
                keyid:99:EA:0E:80:6C:73:AF:40:C1:30:9F:38:B1:85:46:C6:C8:B2:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/0/99EA0E806C73AF40C1309F38B18546C6C8B2FD00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99EA0E806C73AF40C1309F38B18546C6C8B2FD00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6F39u2iPg71fKSJwDZyYXP6cC9RDPqSgsvpUn2V9CPnc/0/323830343a313631383a3a2f33322d3438203d3e20323633323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1618::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:7d:06:bf:9c:c6:a6:42:95:34:7d:0b:ef:06:a5:22:6d:27:
         ab:4c:9c:68:2b:44:d1:d7:f2:02:0f:5f:4b:6c:89:02:d5:06:
         70:c4:0d:59:b7:1f:88:9c:49:ea:fa:83:29:cb:fe:7e:a8:8a:
         14:db:4d:ad:d5:40:a1:35:41:31:d1:b4:55:5f:25:1d:8c:03:
         01:c2:c8:92:6d:2b:6d:7a:51:3b:90:b8:c1:6f:bb:85:63:98:
         d6:aa:d7:1d:53:0c:10:ec:c7:9f:70:be:e2:9c:34:27:a8:c9:
         e7:f2:80:b6:45:55:8e:63:c4:7c:31:b3:2c:b7:4b:b3:f7:15:
         4e:a3:a5:3a:89:bb:4c:c3:84:86:eb:f3:06:80:ae:0c:0e:96:
         66:f1:34:04:58:51:f2:b9:55:9c:57:98:6b:02:50:81:dd:3a:
         0b:57:8c:32:d6:50:2d:98:27:67:12:3f:d0:0c:17:65:e6:f3:
         5f:2f:9e:b5:7e:a7:fb:a1:91:2a:aa:63:d2:b1:c5:46:95:d5:
         97:4d:52:a2:bd:ef:20:28:ec:13:ce:e7:6d:f1:14:7a:c3:96:
         49:69:fd:be:93:3d:bf:a2:33:a0:07:b2:a2:53:f9:9a:5b:bb:
         1d:5a:a2:98:b1:b5:03:c3:90:da:cb:46:51:ff:89:0f:e9:18:
         0c:48:6c:11
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUYsglqF7S4nSvkGuapLyJRLtX1R8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlFQTBFODA2QzczQUY0MEMxMzA5RjM4QjE4NTQ2QzZD
OEIyRkQwMDAeFw0yNTA1MjcxMjM1NTZaFw0yNjA1MjYxMjQwNTZaMDMxMTAvBgNV
BAMTKDJFMzNGMkRBRDI4MTE4RkIyMDIyRDBEQUEwRTlENTMzOUNDODU0MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI4o4hA138ig2n2Cspkc/3UOvn
bwmuhQBEQZAigmiz/cOvRoa2kn4Gq6GnG3WvhkkXLNWiLiyjK8xoqChGZP/hzyj2
jfiswOz6JwKGSv8O3vyyIVI3fEk4vsF0PLAcDtlqr0ycSWXfTPhHyDbjLcjMxlyJ
oJz55Bry/Orednnw2na1Z0G+teUkr89JuYovnB9tD4m2tZRDxtnnobx7lfPSfKsx
gwCSFs5/yM1oPwiY68AoraTkVIkNXM3qtl+SHo4BdZhmyip601sRdgBDsInLItuD
ZBnMxAzNo+7fV9vvR6m/d/8XwV0obDEbZHU1WXYfiwyat6ognF5s7yITvgB3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQULjPy2tKBGPsgItDaoOnVM5zIVDIwHwYDVR0j
BBgwFoAUmeoOgGxzr0DBMJ84sYVGxsiy/QAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkYzOXUyaVBnNzFmS1NKd0RaeVlYUDZjQzlSRFBxU2dzdnBVbjJWOUNQ
bmMvMC85OUVBMEU4MDZDNzNBRjQwQzEzMDlGMzhCMTg1NDZDNkM4QjJGRDAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5RUEwRTgwNkM3M0FGNDBD
MTMwOUYzOEIxODU0NkM2QzhCMkZEMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZGMzl1MmlQZzcxZktTSndEWnlZWFA2Y0M5UkRQcVNnc3ZwVW4yVjlDUG5jLzAv
MzIzODMwMzQzYTMxMzYzMTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzIzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQWGDANBgkqhkiG9w0BAQsFAAOCAQEAbX0Gv5zG
pkKVNH0L7walIm0nq0ycaCtE0dfyAg9fS2yJAtUGcMQNWbcfiJxJ6vqDKcv+fqiK
FNtNrdVAoTVBMdG0VV8lHYwDAcLIkm0rbXpRO5C4wW+7hWOY1qrXHVMMEOzHn3C+
4pw0J6jJ5/KAtkVVjmPEfDGzLLdLs/cVTqOlOom7TMOEhuvzBoCuDA6WZvE0BFhR
8rlVnFeYawJQgd06C1eMMtZQLZgnZxI/0AwXZebzXy+etX6n+6GRKqpj0rHFRpXV
l01Sor3vICjsE87nbfEUesOWSWn9vpM9v6IzoAeyolP5mlu7HVqimLG1A8OQ2stG
Uf+JD+kYDEhsEQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:15:24 2025 by rpki-client