Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343630303a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a343630303a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          9PIodE+9kTYA8ORgXmnC29zXhIts4XNIzDM2wp4qof0=
Subject key identifier:   DA:A7:9D:53:09:81:F1:00:53:CE:F4:13:9B:7F:73:DB:83:DE:FD:8A
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       3042507EB8922807E2C8FD87741B425E9771E2C5
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343630303a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Wed 04 Jun 2025 15:41:23 +0000
ROA not before:           Wed 04 Jun 2025 15:36:23 +0000
ROA not after:            Wed 03 Jun 2026 15:41:23 +0000
asID:                     264344
IP address blocks:        2804:2674:4600::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 07:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:42:50:7e:b8:92:28:07:e2:c8:fd:87:74:1b:42:5e:97:71:e2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  4 15:36:23 2025 GMT
            Not After : Jun  3 15:41:23 2026 GMT
        Subject: CN=DAA79D530981F10053CEF4139B7F73DB83DEFD8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:e8:15:35:8a:80:bb:09:39:99:ac:77:01:
                    a8:87:cc:02:eb:9b:21:10:e1:56:73:38:83:6f:d6:
                    e9:82:d0:1a:d9:26:9a:23:16:41:71:10:51:61:72:
                    ed:e4:3f:95:aa:02:0c:df:59:6b:2e:e6:3d:e4:9e:
                    29:96:22:87:bf:88:e1:84:66:5e:f8:22:50:3a:66:
                    9a:37:0a:f0:d0:d3:9a:1e:3e:be:aa:d2:bf:c0:bd:
                    74:61:30:eb:7e:d0:dc:11:8a:31:f4:2a:c2:47:81:
                    ce:0e:9c:8e:ae:20:d7:11:ff:91:5a:7d:6a:86:68:
                    4b:01:cd:cc:10:6b:c8:e7:b6:0b:be:5d:0e:2c:ab:
                    09:bf:91:2c:02:94:a1:77:8c:6a:43:fe:69:9a:0e:
                    0f:f4:74:aa:da:55:24:3a:19:0a:d5:d4:87:05:e5:
                    43:66:41:aa:5c:9c:be:85:c1:34:ea:2e:d2:52:64:
                    95:fe:c4:8a:87:35:d9:53:d6:d5:39:04:2e:56:09:
                    d5:ed:7f:5a:26:fa:6b:4a:9d:14:08:ba:08:51:e2:
                    65:fc:f3:20:52:b1:96:90:13:0c:db:61:cf:92:0d:
                    22:a3:ac:47:5c:be:d1:03:43:8d:22:cb:d6:55:33:
                    9e:d7:19:8b:48:e0:ab:c7:21:fe:d1:d0:7e:99:76:
                    8c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A7:9D:53:09:81:F1:00:53:CE:F4:13:9B:7F:73:DB:83:DE:FD:8A
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343630303a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4600::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:0e:d9:ef:4b:23:d2:2d:3c:99:68:d0:91:c0:a7:8a:3c:de:
         c5:a9:33:6d:c6:09:cf:70:d5:db:a7:43:b7:f7:76:63:1e:5a:
         3d:e0:83:a7:f6:e7:13:d9:09:76:3d:fb:75:cc:8a:d3:51:7e:
         bb:be:19:c4:a6:f4:91:3f:98:66:d9:94:f8:5f:2f:2e:a3:46:
         47:85:c4:38:e9:22:76:89:ce:02:f9:17:8b:f0:12:fd:12:ef:
         73:ba:5f:d8:44:27:3d:c9:8a:6d:b0:5f:af:d5:b0:f3:fe:b1:
         58:e7:fe:bb:4e:fb:3b:8b:7f:c0:b5:f1:10:9d:83:1e:9c:da:
         6b:a1:ae:4c:2d:1b:c3:a8:12:16:d8:4a:de:cf:34:e8:f5:7f:
         db:4e:45:71:f2:cb:ec:4b:08:9a:90:df:74:17:7c:67:a5:86:
         64:72:48:0e:84:8f:e5:b8:6e:8d:c3:51:92:de:7d:e2:ce:8b:
         5c:f4:06:b6:83:90:69:5a:93:c3:91:96:b5:6a:b3:5d:ed:aa:
         f3:0f:8b:f8:32:56:34:97:bc:87:db:e9:7c:d1:ba:d5:c7:78:
         60:74:4f:8f:10:fb:61:3c:bb:71:06:43:4d:f3:88:c6:3c:a1:
         3c:92:f1:6b:61:e4:32:75:74:38:e7:b3:69:d5:8a:ca:28:32:
         a3:e0:35:32
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUMEJQfriSKAfiyP2HdBtCXpdx4sUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMyRjIzMjkzNzhBMTU4MzBDMTUwQzAzMTk0M0RBQTA0
NzNGRUE0MjAeFw0yNTA2MDQxNTM2MjNaFw0yNjA2MDMxNTQxMjNaMDMxMTAvBgNV
BAMTKERBQTc5RDUzMDk4MUYxMDA1M0NFRjQxMzlCN0Y3M0RCODNERUZEOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDES+gVNYqAuwk5max3AaiHzALr
myEQ4VZzOINv1umC0BrZJpojFkFxEFFhcu3kP5WqAgzfWWsu5j3knimWIoe/iOGE
Zl74IlA6Zpo3CvDQ05oePr6q0r/AvXRhMOt+0NwRijH0KsJHgc4OnI6uINcR/5Fa
fWqGaEsBzcwQa8jntgu+XQ4sqwm/kSwClKF3jGpD/mmaDg/0dKraVSQ6GQrV1IcF
5UNmQapcnL6FwTTqLtJSZJX+xIqHNdlT1tU5BC5WCdXtf1om+mtKnRQIughR4mX8
8yBSsZaQEwzbYc+SDSKjrEdcvtEDQ40iy9ZVM57XGYtI4KvHIf7R0H6ZdozRAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU2qedUwmB8QBTzvQTm39z24Pe/YowHwYDVR0j
BBgwFoAUDC8jKTeKFYMMFQwDGUPaoEc/6kIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxzbWRwc0ZRV0JuemhYNlJQVHRjbVNKaUtLc2p2NlFwQnI0UThrd013
NUEvMC8wQzJGMjMyOTM3OEExNTgzMEMxNTBDMDMxOTQzREFBMDQ3M0ZFQTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDMkYyMzI5Mzc4QTE1ODMw
QzE1MEMwMzE5NDNEQUEwNDczRkVBNDIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMc21kcHNGUVdCbnpoWDZSUFR0Y21TSmlLS3NqdjZRcEJyNFE4a3dNdzVBLzAv
MzIzODMwMzQzYTMyMzYzNzM0M2EzNDM2MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDMzMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEJnRGADANBgkqhkiG9w0BAQsF
AAOCAQEAzw7Z70sj0i08mWjQkcCnijzexakzbcYJz3DV26dDt/d2Yx5aPeCDp/bn
E9kJdj37dcyK01F+u74ZxKb0kT+YZtmU+F8vLqNGR4XEOOkidonOAvkXi/AS/RLv
c7pf2EQnPcmKbbBfr9Ww8/6xWOf+u077O4t/wLXxEJ2DHpzaa6GuTC0bw6gSFthK
3s806PV/205FcfLL7EsImpDfdBd8Z6WGZHJIDoSP5bhujcNRkt594s6LXPQGtoOQ
aVqTw5GWtWqzXe2q8w+L+DJWNJe8h9vpfNG61cd4YHRPjxD7YTy7cQZDTfOIxjyh
PJLxa2HkMnV0OOezadWKyigyo+A1Mg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 01:03:49 2025 by rpki-client