Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/323830343a343630633a3a2f33332d3333203d3e20323636393635.roa
File:                     323830343a343630633a3a2f33332d3333203d3e20323636393635.roa (raw, json)
Hash identifier:          TU0ewYjIermJIjrFpBCANhEWCuiLQ5nuo/0suSVIhQo=
Subject key identifier:   7E:55:2C:DD:8A:39:A5:CB:2B:E5:F1:20:79:29:BC:64:92:15:58:D7
Certificate issuer:       /CN=CC96ED49391396FC76164F871315FEAD2DEE5F35
Certificate serial:       262C6418061035E6DC188E62C1FFDDD3C4ED6FCE
Authority key identifier: CC:96:ED:49:39:13:96:FC:76:16:4F:87:13:15:FE:AD:2D:EE:5F:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/323830343a343630633a3a2f33332d3333203d3e20323636393635.roa
Signing time:             Mon 02 Jun 2025 21:47:09 +0000
ROA not before:           Mon 02 Jun 2025 21:42:09 +0000
ROA not after:            Mon 01 Jun 2026 21:47:09 +0000
asID:                     266965
IP address blocks:        2804:460c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.crl
                          rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 04:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2c:64:18:06:10:35:e6:dc:18:8e:62:c1:ff:dd:d3:c4:ed:6f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC96ED49391396FC76164F871315FEAD2DEE5F35
        Validity
            Not Before: Jun  2 21:42:09 2025 GMT
            Not After : Jun  1 21:47:09 2026 GMT
        Subject: CN=7E552CDD8A39A5CB2BE5F1207929BC64921558D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:6e:18:eb:52:0c:d7:34:04:ab:4e:37:a2:
                    ed:aa:62:36:21:45:36:05:15:ef:57:94:cd:97:46:
                    2c:cd:7f:37:f6:58:54:22:d7:02:a9:28:da:73:5a:
                    e7:f0:5f:7e:8d:bd:7e:fa:c7:5f:77:2c:0c:58:8f:
                    7e:19:34:f5:d7:12:bc:04:fd:7b:dd:d4:d3:08:58:
                    b7:7a:48:99:99:fd:ae:ad:7a:57:f9:15:8d:62:30:
                    c2:bd:09:1c:be:04:91:3a:5e:64:a1:c1:3a:29:c7:
                    ef:a6:48:e9:ad:62:c2:31:e8:f5:5c:b1:5b:ad:27:
                    ed:ea:75:c0:6a:0d:b6:ea:85:ea:36:3b:13:fe:6a:
                    bc:9b:76:ab:13:27:a5:c2:5b:3c:cd:58:d9:35:ab:
                    ff:2e:cc:88:2b:20:cb:45:1c:41:4a:45:14:2a:d5:
                    9f:d0:d0:7e:5e:ef:5e:9e:85:93:f5:0a:2e:da:6d:
                    05:7c:67:c9:ec:43:24:a2:57:29:9c:7e:b8:9c:93:
                    a2:f4:9c:44:4c:88:64:a6:4d:20:67:05:4c:6c:86:
                    e0:9c:c1:6b:9e:08:93:cb:ca:37:9a:bf:5c:71:2f:
                    76:e4:53:05:81:39:fb:4a:bf:3b:fd:fd:6c:27:1a:
                    44:24:e7:94:39:a5:27:fa:a5:cf:2f:27:8c:f4:32:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:55:2C:DD:8A:39:A5:CB:2B:E5:F1:20:79:29:BC:64:92:15:58:D7
            X509v3 Authority Key Identifier:
                keyid:CC:96:ED:49:39:13:96:FC:76:16:4F:87:13:15:FE:AD:2D:EE:5F:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/323830343a343630633a3a2f33332d3333203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:460c::/33

    Signature Algorithm: sha256WithRSAEncryption
         a6:dd:ee:2e:3e:8f:7a:92:ee:e6:8f:65:8a:a7:31:c1:eb:71:
         11:79:8a:0b:1d:f9:18:f3:00:33:1f:98:4d:76:54:44:6b:10:
         ff:30:9e:02:e4:27:dc:5a:4e:f5:4f:1e:38:e6:d0:9c:72:00:
         d0:f6:17:fb:c1:61:d6:7b:c1:bd:15:17:07:84:5a:82:2e:d7:
         c4:4f:d6:fa:b9:32:83:b6:57:1c:55:a9:6f:bd:e8:c4:39:6d:
         02:90:d0:df:a5:04:16:5b:99:c9:53:73:0f:b1:74:44:be:d0:
         0e:34:bd:42:4d:39:e2:77:54:69:e2:39:ef:f1:79:ea:68:31:
         8b:9e:72:2a:b2:1f:80:c2:3c:c8:15:7c:f3:ee:e0:da:d4:09:
         fc:eb:94:dc:fe:cb:ac:87:64:61:35:bb:0a:56:9d:94:09:6f:
         9f:64:ec:7a:64:36:f3:80:c7:29:c0:17:91:b0:db:4e:76:2a:
         d4:41:49:0a:87:41:27:89:f0:9e:e7:d9:62:23:d7:a5:5b:50:
         de:23:25:70:bc:a0:6d:b3:9a:45:ba:3b:11:d1:fe:58:28:88:
         44:49:d2:6d:83:5a:9f:cd:e8:f0:d5:6c:1c:37:4c:67:cf:f7:
         ac:1a:c3:19:ef:77:f2:98:ac:cd:34:c2:dd:77:d7:a0:1f:91:
         f6:62:32:3a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJixkGAYQNebcGI5iwf/d08Ttb84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M5NkVENDkzOTEzOTZGQzc2MTY0Rjg3MTMxNUZFQUQy
REVFNUYzNTAeFw0yNTA2MDIyMTQyMDlaFw0yNjA2MDEyMTQ3MDlaMDMxMTAvBgNV
BAMTKDdFNTUyQ0REOEEzOUE1Q0IyQkU1RjEyMDc5MjlCQzY0OTIxNTU4RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQG4Y61IM1zQEq043ou2qYjYh
RTYFFe9XlM2XRizNfzf2WFQi1wKpKNpzWufwX36NvX76x193LAxYj34ZNPXXErwE
/Xvd1NMIWLd6SJmZ/a6telf5FY1iMMK9CRy+BJE6XmShwTopx++mSOmtYsIx6PVc
sVutJ+3qdcBqDbbqheo2OxP+arybdqsTJ6XCWzzNWNk1q/8uzIgrIMtFHEFKRRQq
1Z/Q0H5e716ehZP1Ci7abQV8Z8nsQySiVymcfrick6L0nERMiGSmTSBnBUxshuCc
wWueCJPLyjeav1xxL3bkUwWBOftKvzv9/WwnGkQk55Q5pSf6pc8vJ4z0MldbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUflUs3Yo5pcsr5fEgeSm8ZJIVWNcwHwYDVR0j
BBgwFoAUzJbtSTkTlvx2Fk+HExX+rS3uXzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlZDUktMeXBRbXVTaXV5a1FNVmFjOEU5ZUE4QlF1M1V4Y0QxbXJWOHFT
a3gvMC9DQzk2RUQ0OTM5MTM5NkZDNzYxNjRGODcxMzE1RkVBRDJERUU1RjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDOTZFRDQ5MzkxMzk2RkM3
NjE2NEY4NzEzMTVGRUFEMkRFRTVGMzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZWQ1JLTHlwUW11U2l1eWtRTVZhYzhFOWVBOEJRdTNVeGNEMW1yVjhxU2t4LzAv
MzIzODMwMzQzYTM0MzYzMDYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM2
MzkzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARGDAAwDQYJKoZIhvcNAQELBQADggEBAKbd7i4+
j3qS7uaPZYqnMcHrcRF5igsd+RjzADMfmE12VERrEP8wngLkJ9xaTvVPHjjm0Jxy
AND2F/vBYdZ7wb0VFweEWoIu18RP1vq5MoO2VxxVqW+96MQ5bQKQ0N+lBBZbmclT
cw+xdES+0A40vUJNOeJ3VGniOe/xeepoMYueciqyH4DCPMgVfPPu4NrUCfzrlNz+
y6yHZGE1uwpWnZQJb59k7HpkNvOAxynAF5Gw2052KtRBSQqHQSeJ8J7n2WIj16Vb
UN4jJXC8oG2zmkW6OxHR/lgoiERJ0m2DWp/N6PDVbBw3TGfP96wawxnvd/KYrM00
wt1316AfkfZiMjo=
-----END CERTIFICATE-----
Generated at Mon Jun 9 21:05:32 2025 by rpki-client