Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d3634203d3e20323639353236.roa
File:                     323830343a363566633a3a2f33322d3634203d3e20323639353236.roa (raw, json)
Hash identifier:          o8Gj424I1tG/7rxIk/EQ+OTBljJwJyM+VnervwfZr88=
Subject key identifier:   64:60:9A:91:65:3B:35:93:60:7F:FE:63:72:0F:EE:68:B5:0E:5C:18
Certificate issuer:       /CN=97871ED0A2473339BF0C6BF605F98065C4015967
Certificate serial:       1BEFE75CC8BB9CE7636AB0BFCCD74D922ED8A80E
Authority key identifier: 97:87:1E:D0:A2:47:33:39:BF:0C:6B:F6:05:F9:80:65:C4:01:59:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97871ED0A2473339BF0C6BF605F98065C4015967.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d3634203d3e20323639353236.roa
Signing time:             Tue 03 Jun 2025 18:01:35 +0000
ROA not before:           Tue 03 Jun 2025 17:56:35 +0000
ROA not after:            Tue 02 Jun 2026 18:01:35 +0000
asID:                     269526
IP address blocks:        2804:65fc::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/97871ED0A2473339BF0C6BF605F98065C4015967.crl
                          rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/97871ED0A2473339BF0C6BF605F98065C4015967.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97871ED0A2473339BF0C6BF605F98065C4015967.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 17:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ef:e7:5c:c8:bb:9c:e7:63:6a:b0:bf:cc:d7:4d:92:2e:d8:a8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97871ED0A2473339BF0C6BF605F98065C4015967
        Validity
            Not Before: Jun  3 17:56:35 2025 GMT
            Not After : Jun  2 18:01:35 2026 GMT
        Subject: CN=64609A91653B3593607FFE63720FEE68B50E5C18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:a2:2f:9a:2e:46:52:2f:bc:e8:d9:00:27:
                    8d:bd:23:b6:63:f9:e8:81:90:49:a0:04:1b:15:ad:
                    06:b0:f5:56:bf:3c:be:72:dd:fc:5f:d0:e2:3c:26:
                    a0:4d:a3:86:83:46:47:03:ad:f5:09:73:39:79:d9:
                    9b:cb:81:f7:44:4b:a8:29:85:05:34:dd:00:7c:a5:
                    28:78:f9:08:e0:c0:2d:6b:bb:76:99:ac:f4:a3:cd:
                    55:53:9b:be:ff:7e:8c:78:89:ad:b6:bf:94:ee:ca:
                    02:5c:df:dc:37:0f:72:cc:bf:a2:73:24:c5:27:63:
                    4d:b3:ec:da:79:27:43:1a:81:a0:60:43:04:ca:f0:
                    22:b9:fe:42:89:43:6d:ee:18:9f:4e:69:02:9b:c3:
                    b4:46:fe:16:bb:ac:dc:1e:47:c2:de:8d:95:9a:5c:
                    76:83:79:b0:de:69:f9:8f:e3:27:7a:07:66:79:4a:
                    83:80:e3:71:db:d5:6b:3c:3d:7f:cc:92:8f:32:ad:
                    d8:77:d8:b6:a4:bf:36:f0:28:44:dd:c8:fb:d7:56:
                    82:80:cc:30:15:1d:35:e7:bc:4e:09:ad:41:a1:78:
                    36:73:ab:c4:dc:be:c1:b2:fd:48:66:a6:29:8a:a7:
                    e3:40:70:f0:0e:87:3f:72:b8:06:e4:e0:d9:11:ce:
                    d4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:60:9A:91:65:3B:35:93:60:7F:FE:63:72:0F:EE:68:B5:0E:5C:18
            X509v3 Authority Key Identifier:
                keyid:97:87:1E:D0:A2:47:33:39:BF:0C:6B:F6:05:F9:80:65:C4:01:59:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/97871ED0A2473339BF0C6BF605F98065C4015967.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97871ED0A2473339BF0C6BF605F98065C4015967.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d3634203d3e20323639353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:0e:71:74:7d:c8:7a:7b:1b:40:96:9c:4e:ba:d7:6e:77:4e:
         19:27:50:9a:07:a9:77:12:5a:d9:b4:de:83:8b:59:a1:64:e4:
         d0:72:d8:9e:2f:3b:85:58:db:1b:30:1e:06:09:c3:ad:c9:cb:
         73:ca:04:4e:e0:b0:e8:bd:f0:5f:ef:3e:f9:e5:41:bb:88:2d:
         fd:e0:e4:ce:17:c4:21:c7:6f:ec:6f:bb:86:06:da:ba:db:d9:
         cc:5d:65:b6:2b:e1:d0:0b:33:30:93:0c:36:4f:d5:06:5d:c5:
         6c:02:5c:42:08:20:68:e4:51:07:ad:b1:d6:c7:79:13:5c:a9:
         27:20:8a:d8:96:97:87:6b:1a:70:3b:be:ef:59:f7:3b:fd:f6:
         57:94:65:60:55:2b:bb:17:cf:9d:ba:f0:89:ab:0a:be:e4:d8:
         95:20:95:ab:bc:95:43:81:a3:87:12:22:13:74:ac:6f:8b:3f:
         af:32:11:50:96:43:d7:5f:cf:d6:4f:f4:97:e1:b3:52:e5:6a:
         7b:60:99:98:9e:40:f1:20:ac:50:89:f7:f8:24:76:00:e5:7c:
         36:53:80:7a:d3:e2:b8:b8:88:d0:cf:fc:4f:fe:a4:15:8b:42:
         c8:6a:49:da:59:c6:39:31:e0:14:73:67:18:f1:76:90:0d:9c:
         38:3c:13:fe
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUG+/nXMi7nOdjarC/zNdNki7YqA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc4NzFFRDBBMjQ3MzMzOUJGMEM2QkY2MDVGOTgwNjVD
NDAxNTk2NzAeFw0yNTA2MDMxNzU2MzVaFw0yNjA2MDIxODAxMzVaMDMxMTAvBgNV
BAMTKDY0NjA5QTkxNjUzQjM1OTM2MDdGRkU2MzcyMEZFRTY4QjUwRTVDMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0qKIvmi5GUi+86NkAJ429I7Zj
+eiBkEmgBBsVrQaw9Va/PL5y3fxf0OI8JqBNo4aDRkcDrfUJczl52ZvLgfdES6gp
hQU03QB8pSh4+QjgwC1ru3aZrPSjzVVTm77/fox4ia22v5TuygJc39w3D3LMv6Jz
JMUnY02z7Np5J0MagaBgQwTK8CK5/kKJQ23uGJ9OaQKbw7RG/ha7rNweR8LejZWa
XHaDebDeafmP4yd6B2Z5SoOA43Hb1Ws8PX/Mko8yrdh32LakvzbwKETdyPvXVoKA
zDAVHTXnvE4JrUGheDZzq8TcvsGy/UhmpimKp+NAcPAOhz9yuAbk4NkRztQ7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUZGCakWU7NZNgf/5jcg/uaLUOXBgwHwYDVR0j
BBgwFoAUl4ce0KJHMzm/DGv2BfmAZcQBWWcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0x4cDh1d25GYU5na1F5VXlYcE1DdzZxV0p0cjFaaVFyZUtHb2ZKZVZ4
cGcvMC85Nzg3MUVEMEEyNDczMzM5QkYwQzZCRjYwNUY5ODA2NUM0MDE1OTY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3ODcxRUQwQTI0NzMzMzlC
RjBDNkJGNjA1Rjk4MDY1QzQwMTU5NjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NMeHA4dXduRmFOZ2tReVV5WHBNQ3c2cVdKdHIxWmlRcmVLR29mSmVWeHBnLzAv
MzIzODMwMzQzYTM2MzU2NjYzM2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzIzNjM5
MzUzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARl/DANBgkqhkiG9w0BAQsFAAOCAQEAqA5xdH3I
ensbQJacTrrXbndOGSdQmgepdxJa2bTeg4tZoWTk0HLYni87hVjbGzAeBgnDrcnL
c8oETuCw6L3wX+8++eVBu4gt/eDkzhfEIcdv7G+7hgbautvZzF1ltivh0AszMJMM
Nk/VBl3FbAJcQgggaORRB62x1sd5E1ypJyCK2JaXh2sacDu+71n3O/32V5RlYFUr
uxfPnbrwiasKvuTYlSCVq7yVQ4GjhxIiE3Ssb4s/rzIRUJZD11/P1k/0l+GzUuVq
e2CZmJ5A8SCsUIn3+CR2AOV8NlOAetPiuLiI0M/8T/6kFYtCyGpJ2lnGOTHgFHNn
GPF2kA2cODwT/g==
-----END CERTIFICATE-----
Generated at Tue Jun 10 10:53:10 2025 by rpki-client