Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a31313a3a2f34382d3438203d3e20323635393530.roa
File:                     323830343a343034633a31313a3a2f34382d3438203d3e20323635393530.roa (raw, json)
Hash identifier:          FPQ8i6wP8lpdlpUATBJz+ax0D460SfrE3A+BjDwhMz4=
Subject key identifier:   9D:BC:FE:53:6F:45:79:B6:2C:93:14:EC:03:F0:02:26:2F:CB:1F:AE
Certificate issuer:       /CN=576471CF7577222B160C490BFEEA5C66CB21874F
Certificate serial:       7693E2D02AD27979C751FD27DC7CC8E5C1538454
Authority key identifier: 57:64:71:CF:75:77:22:2B:16:0C:49:0B:FE:EA:5C:66:CB:21:87:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576471CF7577222B160C490BFEEA5C66CB21874F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a31313a3a2f34382d3438203d3e20323635393530.roa
Signing time:             Wed 04 Jun 2025 08:12:09 +0000
ROA not before:           Wed 04 Jun 2025 08:07:09 +0000
ROA not after:            Wed 03 Jun 2026 08:12:09 +0000
asID:                     265950
IP address blocks:        2804:404c:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/576471CF7577222B160C490BFEEA5C66CB21874F.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/576471CF7577222B160C490BFEEA5C66CB21874F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576471CF7577222B160C490BFEEA5C66CB21874F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 01:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:93:e2:d0:2a:d2:79:79:c7:51:fd:27:dc:7c:c8:e5:c1:53:84:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576471CF7577222B160C490BFEEA5C66CB21874F
        Validity
            Not Before: Jun  4 08:07:09 2025 GMT
            Not After : Jun  3 08:12:09 2026 GMT
        Subject: CN=9DBCFE536F4579B62C9314EC03F002262FCB1FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cd:13:8b:b2:02:d3:aa:da:ec:5f:6b:17:30:
                    af:93:a4:18:a8:6b:a7:44:a1:ce:d2:79:04:f0:b9:
                    2c:6f:0f:09:0a:8e:f4:40:f5:c3:c2:23:8b:48:58:
                    5c:54:2f:10:10:eb:b6:87:b2:b2:be:1e:36:05:cd:
                    b1:f1:81:59:f0:3e:b2:a0:a9:be:32:e2:53:9a:48:
                    e7:89:f1:31:54:fc:89:a4:63:4c:d3:d2:5d:bb:54:
                    9b:a8:17:70:aa:06:01:e3:73:20:27:12:b4:21:50:
                    f9:10:f4:77:d3:02:0f:5f:e9:7e:27:56:31:ce:57:
                    5f:f9:f6:aa:60:73:34:ce:60:0a:b3:5d:b8:47:97:
                    69:a3:ca:c1:49:dc:9e:e2:f7:21:ca:b7:60:69:ab:
                    ff:1c:e2:02:04:d2:21:ab:f5:d7:de:f3:ed:59:89:
                    9c:dd:f7:bb:4f:81:fc:5b:72:f7:b2:7b:f3:88:89:
                    9d:f2:0b:5e:52:98:b8:b3:0e:93:9d:a9:15:26:26:
                    83:00:ea:b3:06:28:ac:7e:c5:cc:08:d8:02:e8:8c:
                    2b:df:dc:5b:4b:96:de:e5:5d:07:70:a2:85:fe:44:
                    4f:38:02:ee:ca:36:35:d8:a0:77:c3:90:02:f4:59:
                    a8:50:c1:4b:98:71:b9:8d:43:24:3e:d8:08:d1:fc:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BC:FE:53:6F:45:79:B6:2C:93:14:EC:03:F0:02:26:2F:CB:1F:AE
            X509v3 Authority Key Identifier:
                keyid:57:64:71:CF:75:77:22:2B:16:0C:49:0B:FE:EA:5C:66:CB:21:87:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/576471CF7577222B160C490BFEEA5C66CB21874F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576471CF7577222B160C490BFEEA5C66CB21874F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a31313a3a2f34382d3438203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:404c:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:9a:20:91:38:aa:20:b8:47:78:7d:69:3c:2e:a8:23:d0:a4:
         14:f6:30:07:00:78:4f:6b:2c:65:d2:91:30:2e:47:12:bd:f8:
         e2:59:ef:fc:f3:5d:3f:28:4b:88:8b:fc:7d:87:4e:a8:b9:48:
         f8:37:4c:16:a0:96:fa:0b:1a:08:67:85:11:53:b9:f9:d4:50:
         7a:c6:2a:73:3b:2b:c7:c5:09:51:f5:84:2f:ad:20:9c:cb:0e:
         d8:92:d1:36:ac:e6:64:1e:fd:a2:1e:a4:2e:5d:1e:cf:58:c4:
         0d:4a:38:e3:c0:37:75:6c:8e:fa:84:9a:0d:4a:89:88:99:ea:
         3c:f4:84:55:04:d1:47:50:9d:e3:d9:cb:27:62:da:73:e5:77:
         43:17:54:de:ab:02:2d:3a:37:57:af:ba:f7:c4:38:23:06:ea:
         6e:24:64:f4:1a:cb:a4:24:3b:76:8b:56:07:d0:55:7d:bd:a1:
         4d:32:5b:49:d1:15:d7:92:5e:ce:41:e4:dd:5a:e0:d1:0a:dd:
         37:61:cb:6f:1a:55:a7:96:92:80:79:08:21:b6:91:3d:bf:0e:
         68:80:f6:78:97:d2:aa:ba:aa:40:73:7c:39:57:a8:aa:c2:78:
         f8:70:1d:71:7c:1c:5a:f5:33:14:4f:fc:97:28:3d:20:cb:d5:
         c1:d2:9f:1b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUdpPi0CrSeXnHUf0n3HzI5cFThFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc2NDcxQ0Y3NTc3MjIyQjE2MEM0OTBCRkVFQTVDNjZD
QjIxODc0RjAeFw0yNTA2MDQwODA3MDlaFw0yNjA2MDMwODEyMDlaMDMxMTAvBgNV
BAMTKDlEQkNGRTUzNkY0NTc5QjYyQzkzMTRFQzAzRjAwMjI2MkZDQjFGQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfzROLsgLTqtrsX2sXMK+TpBio
a6dEoc7SeQTwuSxvDwkKjvRA9cPCI4tIWFxULxAQ67aHsrK+HjYFzbHxgVnwPrKg
qb4y4lOaSOeJ8TFU/ImkY0zT0l27VJuoF3CqBgHjcyAnErQhUPkQ9HfTAg9f6X4n
VjHOV1/59qpgczTOYAqzXbhHl2mjysFJ3J7i9yHKt2Bpq/8c4gIE0iGr9dfe8+1Z
iZzd97tPgfxbcveye/OIiZ3yC15SmLizDpOdqRUmJoMA6rMGKKx+xcwI2ALojCvf
3FtLlt7lXQdwooX+RE84Au7KNjXYoHfDkAL0WahQwUuYcbmNQyQ+2AjR/PZlAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUnbz+U29FebYskxTsA/ACJi/LH64wHwYDVR0j
BBgwFoAUV2Rxz3V3IisWDEkL/upcZsshh08wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnk1UTlDOUx3ZnJlU0xrSzhYc01GN3hBanc1aDlLcWp5Ym1OVnZQd2c0
dUMvMC81NzY0NzFDRjc1NzcyMjJCMTYwQzQ5MEJGRUVBNUM2NkNCMjE4NzRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3NjQ3MUNGNzU3NzIyMkIx
NjBDNDkwQkZFRUE1QzY2Q0IyMTg3NEYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ5NVE5QzlMd2ZyZVNMa0s4WHNNRjd4QWp3NWg5S3FqeWJtTlZ2UHdnNHVDLzAv
MzIzODMwMzQzYTM0MzAzNDYzM2EzMTMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzNjM1MzkzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKARATAARMA0GCSqGSIb3DQEBCwUAA4IB
AQCLmiCROKoguEd4fWk8Lqgj0KQU9jAHAHhPayxl0pEwLkcSvfjiWe/8810/KEuI
i/x9h06ouUj4N0wWoJb6CxoIZ4URU7n51FB6xipzOyvHxQlR9YQvrSCcyw7YktE2
rOZkHv2iHqQuXR7PWMQNSjjjwDd1bI76hJoNSomImeo89IRVBNFHUJ3j2csnYtpz
5XdDF1TeqwItOjdXr7r3xDgjBupuJGT0GsukJDt2i1YH0FV9vaFNMltJ0RXXkl7O
QeTdWuDRCt03YctvGlWnlpKAeQghtpE9vw5ogPZ4l9KquqpAc3w5V6iqwnj4cB1x
fBxa9TMUT/yXKD0gy9XB0p8b
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:46:25 2025 by rpki-client