Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a3130303a3a2f34302d3430203d3e20323730363532.roa
File:                     323830343a366635303a3130303a3a2f34302d3430203d3e20323730363532.roa (raw, json)
Hash identifier:          guWzVWdZDSS3vHkNkAmE5el4RHx6iRZVqybu7ipDh6o=
Subject key identifier:   0E:94:6E:CE:C2:BC:AF:4B:BC:F0:97:C3:2A:E0:CF:84:77:7D:19:55
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       320A975B360C69C65ED3803B626E748D4490C6F6
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a3130303a3a2f34302d3430203d3e20323730363532.roa
Signing time:             Sat 31 May 2025 13:37:26 +0000
ROA not before:           Sat 31 May 2025 13:32:26 +0000
ROA not after:            Sat 30 May 2026 13:37:26 +0000
asID:                     270652
IP address blocks:        2804:6f50:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl
                          rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 19:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0a:97:5b:36:0c:69:c6:5e:d3:80:3b:62:6e:74:8d:44:90:c6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: May 31 13:32:26 2025 GMT
            Not After : May 30 13:37:26 2026 GMT
        Subject: CN=0E946ECEC2BCAF4BBCF097C32AE0CF84777D1955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:0e:25:ba:45:47:f1:00:62:14:24:44:f1:
                    b1:f0:b3:cf:37:61:30:ac:d1:27:ef:0c:f0:42:98:
                    82:e8:da:fd:50:b3:55:47:ab:e4:b5:dd:b4:c3:0a:
                    fe:e6:73:cc:56:7e:39:b8:62:f8:4c:df:88:4d:ab:
                    80:ca:34:e3:17:36:9c:48:c5:0e:01:ac:04:61:b7:
                    fa:19:5b:1c:9b:d6:c7:7c:40:09:27:b5:29:79:f7:
                    e6:f4:0d:66:9b:b0:ce:2c:9d:a7:8d:9b:69:b7:21:
                    07:51:93:1d:a2:d5:df:7a:bd:55:4b:6b:a0:e2:cb:
                    68:77:e6:0d:04:ce:e3:66:e2:ae:d1:71:5a:0c:28:
                    a8:71:9b:d0:ed:ba:12:6b:65:a9:23:3e:78:62:5e:
                    d9:58:76:a6:a1:e3:c1:f7:ff:cb:2e:8f:3f:16:10:
                    fa:e8:f9:f9:e8:5f:0d:a1:e2:a1:c3:e7:3e:ba:6c:
                    51:3b:1c:1f:22:b7:a1:04:33:a0:f3:21:ea:67:f7:
                    66:be:77:e1:7d:e9:be:d2:73:13:d4:84:e5:02:e5:
                    94:fd:e7:6b:88:76:d0:85:30:d4:bd:ce:30:7d:5a:
                    8f:f8:e8:3f:0a:a1:8a:14:78:56:8f:a9:cb:b0:a6:
                    b2:d0:94:ac:62:00:b3:9d:df:a9:76:98:87:e1:8e:
                    31:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:94:6E:CE:C2:BC:AF:4B:BC:F0:97:C3:2A:E0:CF:84:77:7D:19:55
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/323830343a366635303a3130303a3a2f34302d3430203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f50:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:b9:68:89:61:61:13:cc:90:c1:65:14:41:ac:d5:cc:d9:02:
         fb:f8:09:0c:a1:69:de:9d:88:6b:8c:2b:5d:51:9f:92:0e:5a:
         df:a8:a2:28:35:a0:56:11:e3:32:13:ea:5d:46:44:ed:7a:98:
         5b:b2:e4:ee:6c:83:3d:95:9e:2b:eb:17:24:9e:db:e7:b4:66:
         ae:db:69:ae:66:3d:fe:6e:cf:fc:28:e3:27:c7:c2:03:a6:7b:
         c2:24:e9:18:da:67:0d:91:ab:77:64:e3:1a:60:a2:b4:22:e7:
         30:31:3e:00:2b:03:fa:d3:b3:75:ef:c4:78:52:ca:9d:05:ea:
         77:bd:d7:64:c2:b0:7d:56:b5:ee:5c:89:35:d1:27:32:cf:d0:
         c3:b1:12:0e:06:df:96:82:31:60:64:f8:be:e3:1c:de:d7:ad:
         22:d9:e9:0f:f2:3c:3e:e9:aa:df:ad:5a:56:42:62:57:be:99:
         18:8d:1b:3a:ec:a2:39:9f:94:a7:ec:2d:57:b5:ec:a6:60:9f:
         59:51:8f:26:4f:c2:3c:54:ad:83:db:9b:50:31:63:f9:74:53:
         c3:b6:b7:41:26:f0:07:8e:45:3c:02:10:f8:aa:0a:cd:74:04:
         6c:b5:8f:39:25:f5:2b:48:d4:b8:cf:14:cf:ad:00:e2:f7:62:
         df:f0:dc:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUMgqXWzYMacZe04A7Ym50jUSQxvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE0NDc2NURDMEEzRDlEMEVBREE4NDU2MjVDNUU3RjE0
QzU1MjY5MDAeFw0yNTA1MzExMzMyMjZaFw0yNjA1MzAxMzM3MjZaMDMxMTAvBgNV
BAMTKDBFOTQ2RUNFQzJCQ0FGNEJCQ0YwOTdDMzJBRTBDRjg0Nzc3RDE5NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BA4lukVH8QBiFCRE8bHws883
YTCs0SfvDPBCmILo2v1Qs1VHq+S13bTDCv7mc8xWfjm4YvhM34hNq4DKNOMXNpxI
xQ4BrARht/oZWxyb1sd8QAkntSl59+b0DWabsM4snaeNm2m3IQdRkx2i1d96vVVL
a6Diy2h35g0EzuNm4q7RcVoMKKhxm9DtuhJrZakjPnhiXtlYdqah48H3/8sujz8W
EPro+fnoXw2h4qHD5z66bFE7HB8it6EEM6DzIepn92a+d+F96b7ScxPUhOUC5ZT9
52uIdtCFMNS9zjB9Wo/46D8KoYoUeFaPqcuwprLQlKxiALOd36l2mIfhjjF5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUDpRuzsK8r0u88JfDKuDPhHd9GVUwHwYDVR0j
BBgwFoAUAUR2XcCj2dDq2oRWJcXn8UxVJpAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnpvaUxNWmduVlhaVWRkUjloQ1JVY2tWaWtMaFA4ZWhFVTVoeFJlTFk3
bkMvMS8wMTQ0NzY1REMwQTNEOUQwRUFEQTg0NTYyNUM1RTdGMTRDNTUyNjkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxNDQ3NjVEQzBBM0Q5RDBF
QURBODQ1NjI1QzVFN0YxNEM1NTI2OTAuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ6b2lMTVpnblZYWlVkZFI5aENSVWNrVmlrTGhQOGVoRVU1aHhSZUxZN25DLzEv
MzIzODMwMzQzYTM2NjYzNTMwM2EzMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM3MzAzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBG9QATANBgkqhkiG9w0BAQsFAAOC
AQEAKrloiWFhE8yQwWUUQazVzNkC+/gJDKFp3p2Ia4wrXVGfkg5a36iiKDWgVhHj
MhPqXUZE7XqYW7Lk7myDPZWeK+sXJJ7b57RmrttprmY9/m7P/CjjJ8fCA6Z7wiTp
GNpnDZGrd2TjGmCitCLnMDE+ACsD+tOzde/EeFLKnQXqd73XZMKwfVa17lyJNdEn
Ms/Qw7ESDgbfloIxYGT4vuMc3tetItnpD/I8Pumq361aVkJiV76ZGI0bOuyiOZ+U
p+wtV7XspmCfWVGPJk/CPFStg9ubUDFj+XRTw7a3QSbwB45FPAIQ+KoKzXQEbLWP
OSX1K0jUuM8Uz60A4vdi3/Dcdw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:55:20 2025 by rpki-client