Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a3130303a3a2f34322d3432203d3e20323636313636.roa
File:                     323830343a336262343a3130303a3a2f34322d3432203d3e20323636313636.roa (raw, json)
Hash identifier:          Q/e5JNvth+tys9ahk2QNSwJyg8xAf9CQ474kBmTAFxQ=
Subject key identifier:   45:1B:46:52:0C:62:F4:25:56:D4:50:6B:4F:00:B1:9F:E3:73:38:08
Certificate issuer:       /CN=A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63
Certificate serial:       776B12E453D75EDED62608728F70AAE19CA185C0
Authority key identifier: A0:E7:81:7C:46:BA:B0:14:CC:0A:8E:B2:B6:DC:C3:C0:D7:2C:6E:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a3130303a3a2f34322d3432203d3e20323636313636.roa
Signing time:             Thu 29 May 2025 17:14:42 +0000
ROA not before:           Thu 29 May 2025 17:09:42 +0000
ROA not after:            Thu 28 May 2026 17:14:42 +0000
asID:                     266166
IP address blocks:        2804:3bb4:100::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.crl
                          rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 00:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6b:12:e4:53:d7:5e:de:d6:26:08:72:8f:70:aa:e1:9c:a1:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63
        Validity
            Not Before: May 29 17:09:42 2025 GMT
            Not After : May 28 17:14:42 2026 GMT
        Subject: CN=451B46520C62F42556D4506B4F00B19FE3733808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a1:2a:99:2b:53:8d:c0:e2:60:2d:21:e7:ec:
                    56:7d:d5:1e:43:79:aa:4b:3c:54:19:74:3c:c8:94:
                    5c:6c:03:71:73:4d:dd:9d:ad:48:24:e0:09:0c:6c:
                    42:35:de:4d:76:df:07:47:6a:69:a8:c5:ee:dc:15:
                    4b:c7:ca:93:34:ba:a7:ae:1d:41:67:1d:93:90:90:
                    28:39:06:4d:cf:ee:e9:96:8d:df:cb:34:b5:9d:3f:
                    f1:d0:a1:cc:49:33:f0:32:90:e5:d9:fb:98:ab:2a:
                    23:f2:69:90:1d:23:2a:2b:29:94:96:d5:ab:50:25:
                    c9:db:71:5f:80:9f:71:eb:b5:30:9e:0b:04:5c:7e:
                    fd:af:4b:8e:20:c3:a8:b6:8c:91:3a:29:db:21:be:
                    c0:c9:fc:26:15:f6:67:0d:c7:0a:f8:fe:f3:2a:b8:
                    77:77:fd:08:bf:80:1b:f0:ce:01:0c:30:72:e4:3e:
                    41:a9:54:de:1b:5a:4a:a0:ea:e3:13:b8:3f:58:5e:
                    26:a0:65:74:14:08:d8:a9:85:41:8b:01:27:6e:0a:
                    fc:74:63:b8:a0:b3:d9:1d:c8:93:2d:4e:37:3e:60:
                    d7:d3:78:c3:26:dd:d1:65:3b:00:b3:8d:fe:70:ef:
                    0c:a3:4b:c5:a9:75:44:be:34:9a:6d:a2:ae:e8:16:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1B:46:52:0C:62:F4:25:56:D4:50:6B:4F:00:B1:9F:E3:73:38:08
            X509v3 Authority Key Identifier:
                keyid:A0:E7:81:7C:46:BA:B0:14:CC:0A:8E:B2:B6:DC:C3:C0:D7:2C:6E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a3130303a3a2f34322d3432203d3e20323636313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb4:100::/42

    Signature Algorithm: sha256WithRSAEncryption
         56:94:89:fc:15:b7:1f:f6:0b:03:51:4e:84:5a:d3:53:ea:56:
         df:f0:f0:05:71:89:85:7a:b7:9c:a8:cf:4c:a8:bf:15:b9:65:
         6c:14:1a:b8:95:9c:20:f2:b3:c3:17:4b:e5:40:01:d5:d2:f6:
         23:24:ef:6b:95:b4:90:98:a5:39:5e:36:6e:7a:eb:c2:56:11:
         14:ea:dd:bc:c5:36:ea:e2:e7:ac:51:c1:72:84:d5:8d:25:d9:
         bb:27:0f:ea:59:60:68:56:0f:26:a0:9f:fa:40:3b:d8:e6:b7:
         64:24:35:57:88:54:a0:14:e4:0f:0a:ec:a1:e3:6f:76:37:8b:
         ea:3c:0f:97:16:a4:49:f4:f2:c7:3f:e9:e4:86:f0:48:ca:1f:
         62:36:3c:6e:4a:e5:0b:16:c4:d3:b0:c0:86:c7:0c:dc:01:ab:
         87:81:29:eb:e3:9b:6d:59:c3:63:4f:14:d7:f1:db:4f:57:22:
         c6:30:c5:a7:6c:ae:3a:3f:5b:ef:39:e4:8a:17:15:0f:50:59:
         ee:d2:09:b9:5e:19:43:57:07:f3:85:5e:26:35:9c:3b:79:88:
         35:a1:a6:ca:cb:6d:1a:fa:e0:1b:95:bb:82:65:4b:78:bd:4c:
         34:1f:87:94:a1:d9:69:33:49:56:f2:f4:bc:05:02:16:04:98:
         29:c8:4f:23
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUd2sS5FPXXt7WJghyj3Cq4ZyhhcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBFNzgxN0M0NkJBQjAxNENDMEE4RUIyQjZEQ0MzQzBE
NzJDNkU2MzAeFw0yNTA1MjkxNzA5NDJaFw0yNjA1MjgxNzE0NDJaMDMxMTAvBgNV
BAMTKDQ1MUI0NjUyMEM2MkY0MjU1NkQ0NTA2QjRGMDBCMTlGRTM3MzM4MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjoSqZK1ONwOJgLSHn7FZ91R5D
eapLPFQZdDzIlFxsA3FzTd2drUgk4AkMbEI13k123wdHammoxe7cFUvHypM0uqeu
HUFnHZOQkCg5Bk3P7umWjd/LNLWdP/HQocxJM/AykOXZ+5irKiPyaZAdIyorKZSW
1atQJcnbcV+An3HrtTCeCwRcfv2vS44gw6i2jJE6KdshvsDJ/CYV9mcNxwr4/vMq
uHd3/Qi/gBvwzgEMMHLkPkGpVN4bWkqg6uMTuD9YXiagZXQUCNiphUGLASduCvx0
Y7igs9kdyJMtTjc+YNfTeMMm3dFlOwCzjf5w7wyjS8WpdUS+NJptoq7oFqW1AgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQURRtGUgxi9CVW1FBrTwCxn+NzOAgwHwYDVR0j
BBgwFoAUoOeBfEa6sBTMCo6yttzDwNcsbmMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnJhN3luWnhCZ3d2R2c5RVpMUFpTNmRwOFJhUmhKS1VFTWcyRTFwWHFr
WmMvMC9BMEU3ODE3QzQ2QkFCMDE0Q0MwQThFQjJCNkRDQzNDMEQ3MkM2RTYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwRTc4MTdDNDZCQUIwMTRD
QzBBOEVCMkI2RENDM0MwRDcyQzZFNjMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JyYTd5blp4Qmd3dkdnOUVaTFBaUzZkcDhSYVJoSktVRU1nMkUxcFhxa1pjLzAv
MzIzODMwMzQzYTMzNjI2MjM0M2EzMTMwMzAzYTNhMmYzNDMyMmQzNDMyMjAzZDNl
MjAzMjM2MzYzMTM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwYoBDu0AQAwDQYJKoZIhvcNAQELBQAD
ggEBAFaUifwVtx/2CwNRToRa01PqVt/w8AVxiYV6t5yoz0yovxW5ZWwUGriVnCDy
s8MXS+VAAdXS9iMk72uVtJCYpTleNm5668JWERTq3bzFNuri56xRwXKE1Y0l2bsn
D+pZYGhWDyagn/pAO9jmt2QkNVeIVKAU5A8K7KHjb3Y3i+o8D5cWpEn08sc/6eSG
8EjKH2I2PG5K5QsWxNOwwIbHDNwBq4eBKevjm21Zw2NPFNfx209XIsYwxadsrjo/
W+855IoXFQ9QWe7SCbleGUNXB/OFXiY1nDt5iDWhpsrLbRr64BuVu4JlS3i9TDQf
h5Sh2WkzSVby9LwFAhYEmCnITyM=
-----END CERTIFICATE-----
Generated at Tue Jun 10 08:05:32 2025 by rpki-client