Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343030303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a343030303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          lmsxMSD5Z57LZM899u+ujX1pgxodUAj04eCJQs8OM1s=
Subject key identifier:   8C:75:8C:40:07:23:63:C7:78:47:EF:FC:B7:B2:AF:80:A8:D5:2A:9E
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       6F0C63D96A75A956428DA4DB2DEB980192D64C70
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343030303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:33 +0000
ROA not before:           Tue 03 Jun 2025 16:50:33 +0000
ROA not after:            Tue 02 Jun 2026 16:55:33 +0000
asID:                     264344
IP address blocks:        2804:2674:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 21:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:0c:63:d9:6a:75:a9:56:42:8d:a4:db:2d:eb:98:01:92:d6:4c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:33 2025 GMT
            Not After : Jun  2 16:55:33 2026 GMT
        Subject: CN=8C758C40072363C77847EFFCB7B2AF80A8D52A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4e:5c:fa:2e:0e:7b:94:31:a6:6c:cf:02:33:
                    aa:65:13:06:bc:99:82:b6:41:5c:28:bf:47:fa:86:
                    91:ca:26:61:2a:1f:1c:8d:64:03:f7:f4:87:de:db:
                    fe:7c:92:d5:ce:9c:62:1d:58:a8:f5:26:cc:96:ba:
                    88:24:02:e9:24:ae:1a:96:af:8b:20:f3:57:d0:a1:
                    19:be:2b:df:eb:53:4c:e3:66:03:3b:eb:88:ad:e2:
                    c1:21:9b:e9:57:cc:66:f2:45:44:32:61:a7:53:6c:
                    3e:ca:52:88:84:0f:38:38:91:17:4a:d6:a7:ce:35:
                    41:e6:3c:7c:2b:b0:2b:7b:21:de:23:30:0a:d6:1f:
                    ef:a2:74:8a:11:08:46:46:8c:98:60:03:1e:a8:85:
                    57:ee:7c:db:23:06:a5:8d:69:de:58:50:29:e9:07:
                    dd:79:cc:64:df:69:65:de:ed:0d:d9:94:56:7e:0b:
                    97:4f:37:28:40:1f:d8:a9:45:7e:ea:1e:05:78:09:
                    d2:ec:d5:2d:95:4b:d4:bf:29:d4:08:cb:74:0e:4e:
                    d8:f1:a5:33:21:b5:df:7c:e7:ca:5a:bf:8f:49:23:
                    9b:43:c2:f2:4e:14:c6:dc:bf:05:c6:34:b5:6c:7f:
                    0a:40:39:b3:a6:ca:c7:9e:e0:4e:56:3d:2a:5d:f7:
                    fc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:75:8C:40:07:23:63:C7:78:47:EF:FC:B7:B2:AF:80:A8:D5:2A:9E
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343030303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ca:75:ac:67:3d:ad:b5:05:35:d2:ba:28:61:78:04:34:bc:98:
         09:17:b5:5f:72:c3:0b:ff:37:73:ac:f0:ab:c8:d5:4a:ad:0b:
         c6:c0:74:73:12:80:d4:a7:11:25:98:60:e2:29:1e:52:3d:5a:
         44:ad:3a:97:d3:3d:4b:c2:58:3c:03:7c:0e:ec:94:99:5c:f9:
         29:98:b6:74:9d:2b:12:d1:71:3d:34:b6:ea:74:89:57:11:5f:
         40:6f:ee:e8:d8:02:e5:62:a9:7b:92:49:4c:db:ae:8a:27:6f:
         af:11:bf:fa:8c:24:c1:0b:48:4c:6f:f3:26:a6:b6:3d:a1:ce:
         83:ab:21:23:a1:38:e2:05:47:6b:89:28:bc:63:ba:1b:30:6b:
         92:99:1a:cc:38:22:73:dd:35:14:fd:8d:97:58:f3:07:a5:73:
         0f:8f:00:d0:41:bb:ae:68:7a:b2:3e:6d:68:50:d1:f8:5b:10:
         67:86:b1:95:73:61:90:cf:cc:de:90:f5:e0:cd:97:4b:84:5b:
         ba:dd:2e:2f:f4:18:dc:a2:40:39:fc:ce:6d:4f:5f:9b:23:1c:
         9f:e0:a1:c1:e6:2d:33:97:fc:28:7f:52:d3:09:8f:e0:06:3f:
         03:40:0a:6b:1d:b5:75:33:86:a5:9b:db:68:32:09:42:f4:df:
         ef:11:1a:4d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUbwxj2Wp1qVZCjaTbLeuYAZLWTHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMyRjIzMjkzNzhBMTU4MzBDMTUwQzAzMTk0M0RBQTA0
NzNGRUE0MjAeFw0yNTA2MDMxNjUwMzNaFw0yNjA2MDIxNjU1MzNaMDMxMTAvBgNV
BAMTKDhDNzU4QzQwMDcyMzYzQzc3ODQ3RUZGQ0I3QjJBRjgwQThENTJBOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhTlz6Lg57lDGmbM8CM6plEwa8
mYK2QVwov0f6hpHKJmEqHxyNZAP39Ife2/58ktXOnGIdWKj1JsyWuogkAukkrhqW
r4sg81fQoRm+K9/rU0zjZgM764it4sEhm+lXzGbyRUQyYadTbD7KUoiEDzg4kRdK
1qfONUHmPHwrsCt7Id4jMArWH++idIoRCEZGjJhgAx6ohVfufNsjBqWNad5YUCnp
B915zGTfaWXe7Q3ZlFZ+C5dPNyhAH9ipRX7qHgV4CdLs1S2VS9S/KdQIy3QOTtjx
pTMhtd9858pav49JI5tDwvJOFMbcvwXGNLVsfwpAObOmysee4E5WPSpd9/wFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUjHWMQAcjY8d4R+/8t7KvgKjVKp4wHwYDVR0j
BBgwFoAUDC8jKTeKFYMMFQwDGUPaoEc/6kIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxzbWRwc0ZRV0JuemhYNlJQVHRjbVNKaUtLc2p2NlFwQnI0UThrd013
NUEvMC8wQzJGMjMyOTM3OEExNTgzMEMxNTBDMDMxOTQzREFBMDQ3M0ZFQTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDMkYyMzI5Mzc4QTE1ODMw
QzE1MEMwMzE5NDNEQUEwNDczRkVBNDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMc21kcHNGUVdCbnpoWDZSUFR0Y21TSmlLS3NqdjZRcEJyNFE4a3dNdzVBLzAv
MzIzODMwMzQzYTMyMzYzNzM0M2EzNDMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDMzMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEJnRAMA0GCSqGSIb3DQEBCwUA
A4IBAQDKdaxnPa21BTXSuihheAQ0vJgJF7VfcsML/zdzrPCryNVKrQvGwHRzEoDU
pxElmGDiKR5SPVpErTqX0z1Lwlg8A3wO7JSZXPkpmLZ0nSsS0XE9NLbqdIlXEV9A
b+7o2ALlYql7kklM266KJ2+vEb/6jCTBC0hMb/MmprY9oc6DqyEjoTjiBUdriSi8
Y7obMGuSmRrMOCJz3TUU/Y2XWPMHpXMPjwDQQbuuaHqyPm1oUNH4WxBnhrGVc2GQ
z8zekPXgzZdLhFu63S4v9BjcokA5/M5tT1+bIxyf4KHB5i0zl/wof1LTCY/gBj8D
QAprHbV1M4alm9toMglC9N/vERpN
-----END CERTIFICATE-----
Generated at Sat Jun 7 06:26:38 2025 by rpki-client