Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/323830343a336338303a3a2f33322d3438203d3e20323636323136.roa
File:                     323830343a336338303a3a2f33322d3438203d3e20323636323136.roa (raw, json)
Hash identifier:          tSSIbS/TBIAyAuSJldorLPMVCV6GTStK7lsX5yJ55PY=
Subject key identifier:   41:C0:AD:BC:BB:8D:66:49:95:AF:17:F8:98:84:71:FE:FB:CA:A1:0D
Certificate issuer:       /CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD
Certificate serial:       3A46437D626FC50E3F3ADB3B5E5746DC1E84DCB2
Authority key identifier: 8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/323830343a336338303a3a2f33322d3438203d3e20323636323136.roa
Signing time:             Sun 08 Jun 2025 20:01:40 +0000
ROA not before:           Sun 08 Jun 2025 19:56:40 +0000
ROA not after:            Sun 07 Jun 2026 20:01:40 +0000
asID:                     266216
IP address blocks:        2804:3c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl
                          rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 12:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:46:43:7d:62:6f:c5:0e:3f:3a:db:3b:5e:57:46:dc:1e:84:dc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD
        Validity
            Not Before: Jun  8 19:56:40 2025 GMT
            Not After : Jun  7 20:01:40 2026 GMT
        Subject: CN=41C0ADBCBB8D664995AF17F8988471FEFBCAA10D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:94:2f:8f:2d:2b:71:16:29:ae:68:ab:02:2e:
                    20:fa:50:a8:83:62:a8:7b:7b:d0:90:8f:0b:17:ae:
                    be:83:30:4a:be:58:65:36:97:4d:e2:b0:55:79:a9:
                    50:d9:58:aa:7f:e4:6f:27:f3:b1:4f:bb:d3:c6:c6:
                    f1:95:e1:42:6c:ca:2d:6a:d0:84:e8:a9:60:bd:e5:
                    d4:60:37:d8:e8:3e:22:eb:5e:a5:01:86:75:c7:d6:
                    62:dd:91:ad:9e:a8:0f:43:95:eb:4a:7f:9e:a8:ff:
                    e2:bb:f4:22:d5:3d:a2:4a:50:f1:c7:f2:0f:b7:22:
                    42:6a:02:fa:d9:fc:79:db:7e:ef:40:e2:b7:a2:1a:
                    ad:94:84:c4:c7:6e:86:5a:bd:3f:7c:0f:5f:7e:78:
                    c8:58:1f:40:6f:58:2f:4c:de:67:b7:0a:1a:c3:e9:
                    9e:a4:5d:dc:dc:e9:c4:89:f3:f8:88:09:c2:d0:c4:
                    41:10:de:48:68:b4:39:45:f8:55:15:8b:48:af:c7:
                    41:9b:f8:37:5a:6c:ab:b2:9d:de:ab:fb:63:a9:e3:
                    31:51:02:aa:e7:cc:17:ef:75:f0:f3:61:f1:46:d3:
                    01:28:d1:02:09:13:71:64:42:47:58:5e:69:91:ca:
                    f4:d4:f4:09:3a:ba:5a:25:35:59:c4:ea:3a:b3:10:
                    3d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C0:AD:BC:BB:8D:66:49:95:AF:17:F8:98:84:71:FE:FB:CA:A1:0D
            X509v3 Authority Key Identifier:
                keyid:8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/323830343a336338303a3a2f33322d3438203d3e20323636323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:2b:a6:17:fe:b0:a5:8f:7f:1f:00:b7:be:73:9d:79:b1:12:
         aa:92:97:ff:fb:1e:1a:fe:36:ca:7d:b4:1c:3f:3d:60:b7:6f:
         f3:7c:2f:80:46:57:68:8d:50:f7:1b:fc:91:72:77:d9:c7:d4:
         6d:69:7c:0c:9d:09:90:33:78:c7:10:96:8a:47:cf:9b:d7:7e:
         f5:0c:d9:2a:55:f3:ac:f6:c6:2d:44:5e:c8:da:50:d9:83:0a:
         7c:29:39:b5:dd:99:08:6f:49:0e:61:ee:d4:4a:4e:ec:d8:7a:
         02:d0:09:46:84:ee:b0:ca:fc:43:bd:39:54:ce:19:59:db:39:
         0a:98:30:bd:47:2e:74:d9:db:94:11:3c:38:13:2e:c0:b9:f7:
         62:9d:39:fd:8c:0c:cb:ff:e8:6b:1e:33:34:d2:38:32:f4:92:
         f3:0f:b3:4b:84:4f:28:ea:b9:90:97:4e:4d:1d:68:1e:93:1e:
         d5:93:b3:28:5e:31:26:d2:34:ca:89:4c:d4:d9:77:61:97:b3:
         d3:a4:8c:a6:58:24:c9:bc:ff:9a:65:fa:9a:83:0e:42:de:99:
         75:29:7a:5b:f2:b2:ec:c5:21:fd:ad:41:98:87:a6:13:69:3a:
         14:49:ce:a1:6f:dc:fb:7f:c8:4b:33:b8:a6:bb:22:b9:10:a2:
         8c:c4:d5:f9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUOkZDfWJvxQ4/Ots7XldG3B6E3LIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERFMUVCRjRFRTMzNDQ1RTM5OEJGNTVDN0JGQkIwNTRF
ODU0NkZGRDAeFw0yNTA2MDgxOTU2NDBaFw0yNjA2MDcyMDAxNDBaMDMxMTAvBgNV
BAMTKDQxQzBBREJDQkI4RDY2NDk5NUFGMTdGODk4ODQ3MUZFRkJDQUExMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2lC+PLStxFimuaKsCLiD6UKiD
Yqh7e9CQjwsXrr6DMEq+WGU2l03isFV5qVDZWKp/5G8n87FPu9PGxvGV4UJsyi1q
0IToqWC95dRgN9joPiLrXqUBhnXH1mLdka2eqA9DletKf56o/+K79CLVPaJKUPHH
8g+3IkJqAvrZ/Hnbfu9A4reiGq2UhMTHboZavT98D19+eMhYH0BvWC9M3me3ChrD
6Z6kXdzc6cSJ8/iICcLQxEEQ3khotDlF+FUVi0ivx0Gb+DdabKuynd6r+2Op4zFR
AqrnzBfvdfDzYfFG0wEo0QIJE3FkQkdYXmmRyvTU9Ak6ulolNVnE6jqzED39AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUQcCtvLuNZkmVrxf4mIRx/vvKoQ0wHwYDVR0j
BBgwFoAUjeHr9O4zRF45i/Vce/uwVOhUb/0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG5YZDduZzVEQUtWNzh0bkhWeHdKQXFETExMaHd2WW5UbzdFOFNGdlQ2
clYvMC84REUxRUJGNEVFMzM0NDVFMzk4QkY1NUM3QkZCQjA1NEU4NTQ2RkZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhERTFFQkY0RUUzMzQ0NUUz
OThCRjU1QzdCRkJCMDU0RTg1NDZGRkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhuWGQ3bmc1REFLVjc4dG5IVnh3SkFxRExMTGh3dlluVG83RThTRnZUNnJWLzAv
MzIzODMwMzQzYTMzNjMzODMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzIzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ8gDANBgkqhkiG9w0BAQsFAAOCAQEAuyumF/6w
pY9/HwC3vnOdebESqpKX//seGv42yn20HD89YLdv83wvgEZXaI1Q9xv8kXJ32cfU
bWl8DJ0JkDN4xxCWikfPm9d+9QzZKlXzrPbGLUReyNpQ2YMKfCk5td2ZCG9JDmHu
1EpO7Nh6AtAJRoTusMr8Q705VM4ZWds5CpgwvUcudNnblBE8OBMuwLn3Yp05/YwM
y//oax4zNNI4MvSS8w+zS4RPKOq5kJdOTR1oHpMe1ZOzKF4xJtI0yolM1Nl3YZez
06SMplgkybz/mmX6moMOQt6ZdSl6W/Ky7MUh/a1BmIemE2k6FEnOoW/c+3/ISzO4
prsiuRCijMTV+Q==
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:39:59 2025 by rpki-client