Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/323830343a366435303a3a2f33322d3332203d3e20323730353234.roa
File:                     323830343a366435303a3a2f33322d3332203d3e20323730353234.roa (raw, json)
Hash identifier:          Rquw0JmEuUld/GNpmbPjGz5YcaHfCe9YRAk9cvuS+b4=
Subject key identifier:   D5:F7:50:49:B9:90:B2:A8:86:86:DA:95:9C:F7:95:DC:38:02:1C:91
Certificate issuer:       /CN=4582BF5F264D259FE997D22E716C8A5B71A0BB83
Certificate serial:       662DB6FEB764BB4F24FBB08C8780FDC8796E1E15
Authority key identifier: 45:82:BF:5F:26:4D:25:9F:E9:97:D2:2E:71:6C:8A:5B:71:A0:BB:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4582BF5F264D259FE997D22E716C8A5B71A0BB83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/323830343a366435303a3a2f33322d3332203d3e20323730353234.roa
Signing time:             Fri 16 May 2025 16:28:48 +0000
ROA not before:           Fri 16 May 2025 16:23:48 +0000
ROA not after:            Fri 15 May 2026 16:28:48 +0000
asID:                     270524
IP address blocks:        2804:6d50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/4582BF5F264D259FE997D22E716C8A5B71A0BB83.crl
                          rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/4582BF5F264D259FE997D22E716C8A5B71A0BB83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4582BF5F264D259FE997D22E716C8A5B71A0BB83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 20:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2d:b6:fe:b7:64:bb:4f:24:fb:b0:8c:87:80:fd:c8:79:6e:1e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4582BF5F264D259FE997D22E716C8A5B71A0BB83
        Validity
            Not Before: May 16 16:23:48 2025 GMT
            Not After : May 15 16:28:48 2026 GMT
        Subject: CN=D5F75049B990B2A88686DA959CF795DC38021C91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:01:e5:27:df:07:2e:0e:5d:bd:77:c7:f8:
                    b4:42:4f:55:77:28:47:47:65:06:af:99:72:f2:3d:
                    53:71:fb:bd:cd:87:fe:1f:32:84:91:4c:03:a7:d6:
                    5c:c6:32:cc:2e:7f:52:9d:c5:22:f3:1f:7e:ca:9c:
                    8a:ba:99:eb:77:3c:27:9e:cf:37:0b:dc:6d:fc:42:
                    f2:54:25:21:a8:0d:1e:55:f1:70:7e:08:8c:0f:c2:
                    7d:9c:a9:16:22:d5:ef:64:3e:e4:f1:fc:57:e8:04:
                    4d:45:6b:e8:66:bd:e0:42:0e:92:c9:7e:27:44:8c:
                    4d:a3:0e:63:99:e9:a6:f1:b7:a0:ba:d0:d5:7d:c8:
                    4c:2c:ff:0a:66:66:e7:ac:3a:77:ed:1d:35:c9:a6:
                    e9:b0:52:46:04:f3:03:a7:89:6e:41:46:ef:d3:24:
                    7d:66:39:35:5c:d1:9a:03:de:4b:28:80:e6:25:06:
                    97:80:22:67:61:c7:fb:9c:59:7a:24:59:f4:b1:f4:
                    76:96:4e:5c:23:18:db:65:52:72:21:1f:e8:77:f4:
                    96:f6:a4:d3:6a:8b:d8:29:d6:67:88:d9:ab:4d:d6:
                    71:fb:c6:e9:f0:47:1f:81:5d:46:85:8f:a6:cf:34:
                    55:cd:62:02:84:2a:97:13:f0:01:fe:cb:b4:c2:a4:
                    40:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F7:50:49:B9:90:B2:A8:86:86:DA:95:9C:F7:95:DC:38:02:1C:91
            X509v3 Authority Key Identifier:
                keyid:45:82:BF:5F:26:4D:25:9F:E9:97:D2:2E:71:6C:8A:5B:71:A0:BB:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/4582BF5F264D259FE997D22E716C8A5B71A0BB83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4582BF5F264D259FE997D22E716C8A5B71A0BB83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/323830343a366435303a3a2f33322d3332203d3e20323730353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d50::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:6d:8e:f2:f7:f9:23:d2:4c:c6:fe:b9:38:2d:8a:0c:ae:18:
         5d:46:f8:3a:ba:e2:7e:d2:76:96:8f:1e:31:4d:90:4c:dc:c3:
         dd:aa:03:5b:36:18:bf:e4:31:c8:f4:e5:32:30:3b:3a:49:11:
         89:03:7e:d1:f9:83:ce:7c:23:af:a7:d4:61:0d:20:fd:fb:47:
         58:47:89:ba:7a:59:e8:e0:30:80:44:0f:5c:4c:77:04:03:37:
         97:5b:da:ee:b2:ed:13:81:84:c1:12:37:b9:e6:b0:66:69:d5:
         18:e1:60:68:aa:9e:67:df:5c:55:28:a0:88:1b:fc:42:9c:43:
         22:0d:b9:09:d3:c7:0d:a1:56:f6:86:10:a9:81:b7:07:00:b7:
         4f:dc:c2:24:6c:06:b0:20:3c:27:cc:29:8c:db:55:e5:14:2a:
         74:dc:87:4e:67:0d:49:ce:06:9b:a0:4d:d2:af:b8:7a:67:70:
         82:f4:43:70:d9:4a:f7:f7:9d:df:8f:92:69:ad:92:58:35:4b:
         32:02:93:ee:77:d6:f5:c1:90:6d:72:7f:36:ef:36:c6:02:b8:
         6d:e4:a3:44:44:d6:c8:d5:0c:b4:23:ee:0f:e0:66:b8:8f:e5:
         27:30:7b:c0:ad:3c:3a:37:1d:86:14:f9:73:ef:9a:09:8a:c8:
         7b:b3:cc:d0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZi22/rdku08k+7CMh4D9yHluHhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU4MkJGNUYyNjREMjU5RkU5OTdEMjJFNzE2QzhBNUI3
MUEwQkI4MzAeFw0yNTA1MTYxNjIzNDhaFw0yNjA1MTUxNjI4NDhaMDMxMTAvBgNV
BAMTKEQ1Rjc1MDQ5Qjk5MEIyQTg4Njg2REE5NTlDRjc5NURDMzgwMjFDOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDlgHlJ98HLg5dvXfH+LRCT1V3
KEdHZQavmXLyPVNx+73Nh/4fMoSRTAOn1lzGMswuf1KdxSLzH37KnIq6met3PCee
zzcL3G38QvJUJSGoDR5V8XB+CIwPwn2cqRYi1e9kPuTx/FfoBE1Fa+hmveBCDpLJ
fidEjE2jDmOZ6abxt6C60NV9yEws/wpmZuesOnftHTXJpumwUkYE8wOniW5BRu/T
JH1mOTVc0ZoD3ksogOYlBpeAImdhx/ucWXokWfSx9HaWTlwjGNtlUnIhH+h39Jb2
pNNqi9gp1meI2atN1nH7xunwRx+BXUaFj6bPNFXNYgKEKpcT8AH+y7TCpEBnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1fdQSbmQsqiGhtqVnPeV3DgCHJEwHwYDVR0j
BBgwFoAURYK/XyZNJZ/pl9IucWyKW3Ggu4MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTN1WUxSVHN4dEtIRllqTTVNWm1nVFhBUW52eUdzMmc1dHdEWVVwa2Zm
MW8vMC80NTgyQkY1RjI2NEQyNTlGRTk5N0QyMkU3MTZDOEE1QjcxQTBCQjgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1ODJCRjVGMjY0RDI1OUZF
OTk3RDIyRTcxNkM4QTVCNzFBMEJCODMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkzdVlMUlRzeHRLSEZZak01TVptZ1RYQVFudnlHczJnNXR3RFlVcGtmZjFvLzAv
MzIzODMwMzQzYTM2NjQzNTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzUzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARtUDANBgkqhkiG9w0BAQsFAAOCAQEAIm2O8vf5
I9JMxv65OC2KDK4YXUb4OrriftJ2lo8eMU2QTNzD3aoDWzYYv+QxyPTlMjA7OkkR
iQN+0fmDznwjr6fUYQ0g/ftHWEeJunpZ6OAwgEQPXEx3BAM3l1va7rLtE4GEwRI3
ueawZmnVGOFgaKqeZ99cVSigiBv8QpxDIg25CdPHDaFW9oYQqYG3BwC3T9zCJGwG
sCA8J8wpjNtV5RQqdNyHTmcNSc4Gm6BN0q+4emdwgvRDcNlK9/ed34+Saa2SWDVL
MgKT7nfW9cGQbXJ/Nu82xgK4beSjRETWyNUMtCPuD+BmuI/lJzB7wK08OjcdhhT5
c++aCYrIe7PM0A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:20:20 2025 by rpki-client