Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a623030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a623030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          2S6e9BNg/O8An0vRG+qlVRxI72KPHuPvd2n4nPA87o8=
Subject key identifier:   12:12:7D:CC:0E:AA:0C:E0:BC:35:E0:85:02:90:C6:44:27:05:9C:B5
Certificate issuer:       /CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
Certificate serial:       03F8B47F995AAC38D8A97D7EF84307E10BD799C4
Authority key identifier: 78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a623030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 16 May 2025 13:05:04 +0000
ROA not before:           Fri 16 May 2025 13:00:04 +0000
ROA not after:            Fri 15 May 2026 13:05:04 +0000
asID:                     268296
IP address blocks:        2804:4efc:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 04:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f8:b4:7f:99:5a:ac:38:d8:a9:7d:7e:f8:43:07:e1:0b:d7:99:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
        Validity
            Not Before: May 16 13:00:04 2025 GMT
            Not After : May 15 13:05:04 2026 GMT
        Subject: CN=12127DCC0EAA0CE0BC35E0850290C64427059CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:07:d8:f4:5b:0d:7f:59:f5:5e:89:05:4e:ab:
                    eb:bf:81:93:fb:ce:3f:8f:0e:90:90:2c:eb:3f:de:
                    e1:a4:17:4d:20:ab:17:58:50:0e:7d:5e:a0:83:d7:
                    ad:85:45:cf:1e:04:a1:e1:a1:5f:90:51:40:94:c0:
                    f7:e2:7b:b5:0f:6d:25:c7:e6:13:ea:07:9f:d9:88:
                    08:1e:56:ee:58:63:5d:47:b7:e7:d4:d1:f0:b9:3e:
                    5c:8e:56:68:56:27:20:8d:c0:e9:9d:38:07:3f:b6:
                    6a:81:0d:52:52:bc:90:1b:66:96:f2:a2:d7:5b:e1:
                    c2:94:99:c8:c5:39:d5:31:dd:95:35:70:48:16:57:
                    ca:52:5f:8c:fd:58:bc:72:97:4a:1b:9c:9d:27:81:
                    e2:f2:53:aa:ce:4c:2d:c4:b2:8a:f1:ac:79:16:33:
                    f3:67:4e:5d:cb:f6:ec:24:5e:8f:6a:a5:2e:ed:8e:
                    e6:ac:ca:76:22:1f:c2:85:d0:e2:3e:50:13:bd:a5:
                    d6:c1:79:e5:50:35:33:cd:d4:a4:dc:38:c0:da:48:
                    9a:5a:32:01:5a:02:30:70:15:c0:53:4a:18:9c:24:
                    4a:48:49:96:d6:25:0a:9f:26:60:ee:db:f9:a6:ab:
                    29:39:97:26:b1:ac:7b:9c:62:32:a9:14:d6:aa:b6:
                    87:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:12:7D:CC:0E:AA:0C:E0:BC:35:E0:85:02:90:C6:44:27:05:9C:B5
            X509v3 Authority Key Identifier:
                keyid:78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a623030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         39:4b:93:b5:06:b8:64:4f:49:a1:48:af:bc:09:b7:14:bf:b4:
         2a:45:ce:fb:d0:d3:e5:9f:ef:53:37:67:23:5f:2f:32:b0:71:
         7d:e1:66:91:96:0b:6d:49:e1:a5:28:76:cf:77:f4:1e:92:70:
         7c:84:11:05:e9:a0:4c:af:b4:61:69:66:6c:47:08:c8:33:2d:
         c4:9f:c3:6f:e6:d4:5e:25:e5:2b:00:a2:32:42:50:89:2a:b8:
         b3:a7:5e:2b:e3:3d:24:36:bc:0d:25:30:bb:21:59:86:98:ad:
         72:2a:84:55:2b:d7:de:42:c5:90:67:2e:5c:a5:1a:db:db:bf:
         67:4e:e5:cc:88:3b:46:2e:d0:68:84:8e:90:7b:fc:68:92:d4:
         38:fe:de:81:96:80:4e:2a:2f:5e:3e:c9:a7:9b:49:f1:e1:dc:
         e2:0f:ae:8b:13:71:53:e6:49:c6:f3:8b:d8:ca:d1:09:77:b3:
         51:56:e2:ea:2b:d7:56:40:0b:29:2b:b0:dc:e6:6e:6a:6f:84:
         2b:fc:63:86:0b:f7:81:f1:2d:37:31:3b:d6:a4:1b:82:4e:5d:
         69:27:a8:45:7c:d5:b3:09:c9:76:61:62:25:22:d4:ef:99:8b:
         de:96:ec:80:e3:eb:8d:a0:f7:9b:40:ec:4c:2c:89:d1:95:0c:
         55:92:99:8d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUA/i0f5larDjYqX1++EMH4QvXmcQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhERUM4QzA0MjQ4OUYxQUU2OEY5QzhBMUQ4QzBEMjlE
Q0NCNDM3QzAeFw0yNTA1MTYxMzAwMDRaFw0yNjA1MTUxMzA1MDRaMDMxMTAvBgNV
BAMTKDEyMTI3RENDMEVBQTBDRTBCQzM1RTA4NTAyOTBDNjQ0MjcwNTlDQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdB9j0Ww1/WfVeiQVOq+u/gZP7
zj+PDpCQLOs/3uGkF00gqxdYUA59XqCD162FRc8eBKHhoV+QUUCUwPfie7UPbSXH
5hPqB5/ZiAgeVu5YY11Ht+fU0fC5PlyOVmhWJyCNwOmdOAc/tmqBDVJSvJAbZpby
otdb4cKUmcjFOdUx3ZU1cEgWV8pSX4z9WLxyl0obnJ0ngeLyU6rOTC3EsorxrHkW
M/NnTl3L9uwkXo9qpS7tjuasynYiH8KF0OI+UBO9pdbBeeVQNTPN1KTcOMDaSJpa
MgFaAjBwFcBTShicJEpISZbWJQqfJmDu2/mmqyk5lyaxrHucYjKpFNaqtoeLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUEhJ9zA6qDOC8NeCFApDGRCcFnLUwHwYDVR0j
BBgwFoAUeN7IwEJInxrmj5yKHYwNKdzLQ3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMC83OERFQzhDMDQyNDg5RjFBRTY4RjlDOEExRDhDMEQyOURDQ0I0MzdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4REVDOEMwNDI0ODlGMUFF
NjhGOUM4QTFEOEMwRDI5RENDQjQzN0MuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv
MzIzODMwMzQzYTM0NjU2NjYzM2E2MjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgETvywMA0GCSqGSIb3DQEBCwUA
A4IBAQA5S5O1BrhkT0mhSK+8CbcUv7QqRc770NPln+9TN2cjXy8ysHF94WaRlgtt
SeGlKHbPd/QeknB8hBEF6aBMr7RhaWZsRwjIMy3En8Nv5tReJeUrAKIyQlCJKriz
p14r4z0kNrwNJTC7IVmGmK1yKoRVK9feQsWQZy5cpRrb279nTuXMiDtGLtBohI6Q
e/xoktQ4/t6BloBOKi9ePsmnm0nx4dziD66LE3FT5knG84vYytEJd7NRVuLqK9dW
QAspK7Dc5m5qb4Qr/GOGC/eB8S03MTvWpBuCTl1pJ6hFfNWzCcl2YWIlItTvmYve
luyA4+uNoPebQOxMLInRlQxVkpmN
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:19:27 2025 by rpki-client