Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/323830343a383130303a3a2f33322d313238203d3e20323632333036.roa
File:                     323830343a383130303a3a2f33322d313238203d3e20323632333036.roa (raw, json)
Hash identifier:          TCyWKf/BDcRR8Y0zNUFswoE290bm1AWCSOCK4VOwur4=
Subject key identifier:   95:9C:64:7C:8D:B7:66:0D:00:6E:2F:6D:E0:73:51:B9:C7:6B:B2:18
Certificate issuer:       /CN=29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17
Certificate serial:       6B6D31C196AAD867A3E0152E7453C65DC566E8AE
Authority key identifier: 29:D7:11:2C:7B:6B:D3:94:11:33:D8:A2:DB:0F:BA:B6:CA:08:1C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/323830343a383130303a3a2f33322d313238203d3e20323632333036.roa
Signing time:             Mon 09 Jun 2025 16:37:39 +0000
ROA not before:           Mon 09 Jun 2025 16:32:39 +0000
ROA not after:            Mon 08 Jun 2026 16:37:39 +0000
asID:                     262306
IP address blocks:        2804:8100::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.crl
                          rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 08:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6d:31:c1:96:aa:d8:67:a3:e0:15:2e:74:53:c6:5d:c5:66:e8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17
        Validity
            Not Before: Jun  9 16:32:39 2025 GMT
            Not After : Jun  8 16:37:39 2026 GMT
        Subject: CN=959C647C8DB7660D006E2F6DE07351B9C76BB218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:7a:ba:53:af:b1:0a:01:f9:ae:bd:4b:c3:
                    4c:2b:b8:de:93:86:37:ea:61:2e:f9:4f:c1:9c:a4:
                    ec:83:d3:5c:a6:fa:72:2c:99:ba:54:74:1a:a7:bc:
                    a2:f1:bf:66:40:6f:4f:21:5e:c6:20:b7:45:0b:99:
                    de:8f:67:51:fc:83:c4:85:3f:11:ba:f1:13:66:5a:
                    fb:2c:16:1e:d7:6e:bb:4c:01:19:ad:b0:4b:a4:00:
                    a2:46:77:26:21:bc:f3:0a:e8:46:8e:79:8e:1c:14:
                    58:a4:a5:fe:e6:cf:83:e9:b6:3b:f1:65:a0:d8:5f:
                    c8:cd:43:50:ee:6a:17:64:1a:87:21:4f:bc:48:4e:
                    f7:7f:d5:59:82:8d:d5:06:c8:e2:4e:a3:fd:0e:5a:
                    1c:1a:f1:e5:ee:9b:56:98:f7:fa:af:01:6d:3d:c9:
                    85:b3:34:47:be:96:72:fe:55:9b:41:70:cc:56:72:
                    23:48:d7:da:97:c3:c0:06:bb:f4:12:9e:73:f4:87:
                    ef:03:3f:46:07:85:80:f8:84:bb:7b:3f:de:67:13:
                    8c:ad:d5:81:10:ee:f1:c8:e6:5f:7f:cb:e2:82:c3:
                    11:33:af:a2:b3:87:b9:c1:ad:55:5d:86:c4:88:43:
                    fd:51:2b:a2:bf:1a:db:ce:4c:12:44:da:c0:7b:71:
                    db:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9C:64:7C:8D:B7:66:0D:00:6E:2F:6D:E0:73:51:B9:C7:6B:B2:18
            X509v3 Authority Key Identifier:
                keyid:29:D7:11:2C:7B:6B:D3:94:11:33:D8:A2:DB:0F:BA:B6:CA:08:1C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29D7112C7B6BD3941133D8A2DB0FBAB6CA081C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6LkTXxze96Br9ZPm8iHZjWgAbFS8U5xdQiryN6N8adfU/0/323830343a383130303a3a2f33322d313238203d3e20323632333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8100::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:20:d3:31:d3:0a:6d:ae:24:e9:3c:57:b7:2a:9d:4e:ae:63:
         9b:18:9b:23:7b:5e:24:b6:96:6a:a3:03:da:55:5c:b4:e7:1c:
         c9:1d:75:15:0b:a7:73:63:ca:dd:b1:0c:cf:a3:27:9d:b5:39:
         6a:aa:ac:95:d4:ce:47:ef:24:6d:49:34:bb:e8:56:09:1d:17:
         7f:94:de:4d:4b:e3:60:8b:18:d5:92:64:c6:2d:c0:00:ce:2a:
         60:5d:5b:7f:2d:01:18:3e:9a:56:a4:0f:39:81:ff:9a:e1:28:
         3d:5b:73:c5:9a:66:60:ed:01:45:41:b9:97:f1:5e:7e:71:a7:
         cb:28:64:86:11:3c:d1:03:3d:c9:49:63:6e:eb:7f:35:e9:ea:
         04:a0:2a:27:73:2f:04:5d:96:15:e2:47:67:60:3e:8e:59:68:
         81:25:b7:b6:64:d5:b8:2c:98:3b:a1:89:e2:02:1a:d0:2f:96:
         b5:bb:f6:37:b3:bd:b4:40:2d:28:0c:dd:ab:24:5a:b2:c9:0f:
         96:65:26:48:7b:79:16:93:8d:46:4a:a3:df:a5:5c:4c:39:95:
         1c:b3:7b:e3:0a:34:99:bd:e5:94:a6:fc:64:18:64:51:eb:3b:
         43:69:ad:72:83:53:11:c3:d4:84:99:7a:9f:d3:52:ba:23:f9:
         a3:c0:cf:39
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUa20xwZaq2Gej4BUudFPGXcVm6K4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlENzExMkM3QjZCRDM5NDExMzNEOEEyREIwRkJBQjZD
QTA4MUMxNzAeFw0yNTA2MDkxNjMyMzlaFw0yNjA2MDgxNjM3MzlaMDMxMTAvBgNV
BAMTKDk1OUM2NDdDOERCNzY2MEQwMDZFMkY2REUwNzM1MUI5Qzc2QkIyMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqOnq6U6+xCgH5rr1Lw0wruN6T
hjfqYS75T8GcpOyD01ym+nIsmbpUdBqnvKLxv2ZAb08hXsYgt0ULmd6PZ1H8g8SF
PxG68RNmWvssFh7XbrtMARmtsEukAKJGdyYhvPMK6EaOeY4cFFikpf7mz4Pptjvx
ZaDYX8jNQ1DuahdkGochT7xITvd/1VmCjdUGyOJOo/0OWhwa8eXum1aY9/qvAW09
yYWzNEe+lnL+VZtBcMxWciNI19qXw8AGu/QSnnP0h+8DP0YHhYD4hLt7P95nE4yt
1YEQ7vHI5l9/y+KCwxEzr6Kzh7nBrVVdhsSIQ/1RK6K/GtvOTBJE2sB7cdsTAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUlZxkfI23Zg0Abi9t4HNRucdrshgwHwYDVR0j
BBgwFoAUKdcRLHtr05QRM9ii2w+6tsoIHBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkxrVFh4emU5NkJyOVpQbThpSFpqV2dBYkZTOFU1eGRRaXJ5TjZOOGFk
ZlUvMC8yOUQ3MTEyQzdCNkJEMzk0MTEzM0Q4QTJEQjBGQkFCNkNBMDgxQzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5RDcxMTJDN0I2QkQzOTQx
MTMzRDhBMkRCMEZCQUI2Q0EwODFDMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZMa1RYeHplOTZCcjlaUG04aUhaaldnQWJGUzhVNXhkUWlyeU42TjhhZGZVLzAv
MzIzODMwMzQzYTM4MzEzMDMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzIzMzMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBIEAMA0GCSqGSIb3DQEBCwUAA4IBAQDCINMx
0wptriTpPFe3Kp1OrmObGJsje14ktpZqowPaVVy05xzJHXUVC6dzY8rdsQzPoyed
tTlqqqyV1M5H7yRtSTS76FYJHRd/lN5NS+NgixjVkmTGLcAAzipgXVt/LQEYPppW
pA85gf+a4Sg9W3PFmmZg7QFFQbmX8V5+cafLKGSGETzRAz3JSWNu63816eoEoCon
cy8EXZYV4kdnYD6OWWiBJbe2ZNW4LJg7oYniAhrQL5a1u/Y3s720QC0oDN2rJFqy
yQ+WZSZIe3kWk41GSqPfpVxMOZUcs3vjCjSZveWUpvxkGGRR6ztDaa1yg1MRw9SE
mXqf01K6I/mjwM85
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:31:52 2025 by rpki-client