Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a393030303a3a2f33362d3336203d3e20323633323930.roa
File:                     323830343a313638383a393030303a3a2f33362d3336203d3e20323633323930.roa (raw, json)
Hash identifier:          Q9S6eBujlvpwnfRFTrvV3pHSQtYKbDqLCWnpimOFnMQ=
Subject key identifier:   D7:66:FA:C9:16:A9:87:A3:54:99:4B:FC:3B:C7:1A:76:54:0E:40:D9
Certificate issuer:       /CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7
Certificate serial:       100363BE506C590F62CCC86670174855E314EAC9
Authority key identifier: 66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a393030303a3a2f33362d3336203d3e20323633323930.roa
Signing time:             Tue 03 Jun 2025 13:54:13 +0000
ROA not before:           Tue 03 Jun 2025 13:49:13 +0000
ROA not after:            Tue 02 Jun 2026 13:54:13 +0000
asID:                     263290
IP address blocks:        2804:1688:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl
                          rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:03:63:be:50:6c:59:0f:62:cc:c8:66:70:17:48:55:e3:14:ea:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7
        Validity
            Not Before: Jun  3 13:49:13 2025 GMT
            Not After : Jun  2 13:54:13 2026 GMT
        Subject: CN=D766FAC916A987A354994BFC3BC71A76540E40D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:ab:02:de:49:b5:fe:bc:ec:31:fa:d7:c8:
                    35:a0:44:d9:50:03:ed:df:4f:bc:22:83:cc:5e:65:
                    2d:1a:56:4e:79:d3:18:3a:f7:54:5a:6a:90:4f:79:
                    f9:66:dc:61:c9:8b:26:af:f4:76:f9:11:9d:69:e1:
                    56:08:43:66:13:ce:64:98:d6:9b:88:af:35:cd:05:
                    cf:d4:7d:80:97:d7:df:ed:30:68:5e:dc:ad:4b:af:
                    97:27:9c:cd:a0:95:3c:12:3b:1d:f5:c7:3d:69:f0:
                    c8:54:e1:5c:b4:83:f2:6d:de:b9:c0:9c:7d:7d:57:
                    58:db:01:a9:f8:0d:5f:e0:89:95:15:f4:b5:64:79:
                    50:34:c5:e6:62:29:f5:e9:fd:fa:91:ef:46:56:52:
                    f8:dc:b6:65:cb:42:6f:48:5e:24:db:ef:bc:64:cd:
                    4e:7f:10:23:8a:96:e0:bc:a4:6b:df:73:ba:08:6b:
                    ca:21:4c:22:2a:5f:4f:8f:40:25:20:d6:e7:e6:47:
                    07:d4:89:cb:82:84:35:0c:ea:25:29:72:b9:2f:6a:
                    05:5b:56:ee:37:bf:ba:a9:4c:3d:54:22:d5:6c:78:
                    50:ce:e7:3d:61:96:d6:8e:15:86:6c:37:c4:52:f8:
                    bd:dc:93:ef:dc:00:23:98:69:d8:36:6e:e5:c1:19:
                    d1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:66:FA:C9:16:A9:87:A3:54:99:4B:FC:3B:C7:1A:76:54:0E:40:D9
            X509v3 Authority Key Identifier:
                keyid:66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a393030303a3a2f33362d3336203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1688:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5c:8c:11:6b:5b:54:67:01:66:e9:18:05:04:68:ed:f9:82:cc:
         69:cc:9b:c6:82:8b:fb:9d:62:c1:7e:79:b4:fc:bd:34:8d:a9:
         e5:a7:2f:d2:fc:40:a1:41:f9:b2:04:76:ad:a4:20:26:16:97:
         0d:75:bb:5c:8f:7b:0d:43:d4:36:94:eb:da:2d:17:65:66:03:
         1d:00:1b:53:be:f4:4f:61:20:1c:e4:eb:6a:3f:42:4c:94:be:
         2d:58:fc:46:c9:41:c1:a4:78:e7:9f:9b:0d:d9:a8:92:7d:d1:
         ea:3d:43:24:14:b9:4a:c0:39:5e:b4:32:8d:56:41:cc:04:18:
         73:af:61:24:c9:c3:2f:3e:f8:c5:bf:53:87:37:0d:17:99:50:
         7b:48:82:5d:c7:88:38:a9:e7:97:00:9c:42:eb:30:22:9d:ab:
         d1:8f:d9:bc:6c:62:ca:21:9b:37:1f:1f:96:f4:a1:63:e9:e6:
         97:4a:a7:da:55:5d:2d:ee:07:4d:85:c6:76:79:d1:b0:f8:7a:
         67:64:0b:28:9b:a2:9c:a7:ef:98:ed:26:30:aa:96:30:1e:82:
         77:de:ce:0a:b6:b3:9e:45:27:67:f5:53:d9:2a:d0:b9:69:78:
         46:32:c5:48:2d:5e:15:75:51:4e:98:10:99:d7:58:75:19:fb:
         08:d9:ee:db
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUEANjvlBsWQ9izMhmcBdIVeMU6skwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1MzYxQ0IzQUNBNDE5N0I0QUNGRDI1N0VDRkVBM0Uw
RDIxQzlCNzAeFw0yNTA2MDMxMzQ5MTNaFw0yNjA2MDIxMzU0MTNaMDMxMTAvBgNV
BAMTKEQ3NjZGQUM5MTZBOTg3QTM1NDk5NEJGQzNCQzcxQTc2NTQwRTQwRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3M6sC3km1/rzsMfrXyDWgRNlQ
A+3fT7wig8xeZS0aVk550xg691RaapBPeflm3GHJiyav9Hb5EZ1p4VYIQ2YTzmSY
1puIrzXNBc/UfYCX19/tMGhe3K1Lr5cnnM2glTwSOx31xz1p8MhU4Vy0g/Jt3rnA
nH19V1jbAan4DV/giZUV9LVkeVA0xeZiKfXp/fqR70ZWUvjctmXLQm9IXiTb77xk
zU5/ECOKluC8pGvfc7oIa8ohTCIqX0+PQCUg1ufmRwfUicuChDUM6iUpcrkvagVb
Vu43v7qpTD1UItVseFDO5z1hltaOFYZsN8RS+L3ck+/cACOYadg2buXBGdHdAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU12b6yRaph6NUmUv8O8cadlQOQNkwHwYDVR0j
BBgwFoAUZlNhyzrKQZe0rP0lfs/qPg0hybcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODg0Q2NFVmdjOHZ2Q0JnNENVQTE4MXZheFpwc2NMdEEzdHBCc0JmcjZ3
b3kvMC82NjUzNjFDQjNBQ0E0MTk3QjRBQ0ZEMjU3RUNGRUEzRTBEMjFDOUI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2NTM2MUNCM0FDQTQxOTdC
NEFDRkQyNTdFQ0ZFQTNFMEQyMUM5QjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4NENjRVZnYzh2dkNCZzRDVUExODF2YXhacHNjTHRBM3RwQnNCZnI2d295LzAv
MzIzODMwMzQzYTMxMzYzODM4M2EzOTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzMzMyMzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEFoiQMA0GCSqGSIb3DQEBCwUA
A4IBAQBcjBFrW1RnAWbpGAUEaO35gsxpzJvGgov7nWLBfnm0/L00janlpy/S/ECh
QfmyBHatpCAmFpcNdbtcj3sNQ9Q2lOvaLRdlZgMdABtTvvRPYSAc5OtqP0JMlL4t
WPxGyUHBpHjnn5sN2aiSfdHqPUMkFLlKwDletDKNVkHMBBhzr2EkycMvPvjFv1OH
Nw0XmVB7SIJdx4g4qeeXAJxC6zAinavRj9m8bGLKIZs3Hx+W9KFj6eaXSqfaVV0t
7gdNhcZ2edGw+HpnZAsom6Kcp++Y7SYwqpYwHoJ33s4KtrOeRSdn9VPZKtC5aXhG
MsVILV4VdVFOmBCZ11h1GfsI2e7b
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:08:24 2025 by rpki-client