Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a353a3a2f34382d3438203d3e20323635333330.roa
File:                     323830343a326533303a353a3a2f34382d3438203d3e20323635333330.roa (raw, json)
Hash identifier:          ughAG+lILfdiGYnL+LVMnJajEX2/kTNQmAJlCbu9gIE=
Subject key identifier:   13:01:84:19:65:E9:3A:A4:E3:55:8D:16:9F:12:70:07:DA:EC:EB:E9
Certificate issuer:       /CN=A4A432E63DF7D41D50FADC5A6469974D42C44738
Certificate serial:       7EF2F3EE2EAF41D78F6A825768FB344164006B51
Authority key identifier: A4:A4:32:E6:3D:F7:D4:1D:50:FA:DC:5A:64:69:97:4D:42:C4:47:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a353a3a2f34382d3438203d3e20323635333330.roa
Signing time:             Thu 05 Jun 2025 01:05:48 +0000
ROA not before:           Thu 05 Jun 2025 01:00:48 +0000
ROA not after:            Thu 04 Jun 2026 01:05:48 +0000
asID:                     265330
IP address blocks:        2804:2e30:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.crl
                          rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 04:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f2:f3:ee:2e:af:41:d7:8f:6a:82:57:68:fb:34:41:64:00:6b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A432E63DF7D41D50FADC5A6469974D42C44738
        Validity
            Not Before: Jun  5 01:00:48 2025 GMT
            Not After : Jun  4 01:05:48 2026 GMT
        Subject: CN=1301841965E93AA4E3558D169F127007DAECEBE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b6:64:26:78:7c:49:6e:91:65:e5:cc:c7:93:
                    39:61:f7:7f:aa:a7:d7:cd:8f:77:e9:30:50:42:93:
                    bd:62:e4:14:ef:e8:07:78:1d:88:91:9d:2c:e2:89:
                    91:d9:85:0c:56:fd:1e:3c:f5:0a:f6:c9:e2:42:ee:
                    06:7c:94:49:e9:df:7f:23:46:a4:b4:26:bd:f8:7f:
                    68:e6:ee:46:95:00:10:71:fa:f4:62:54:36:e1:e3:
                    d6:ae:20:4b:75:bc:3a:3e:17:7e:86:8c:72:85:ad:
                    2f:c2:df:dc:f4:0d:ac:d7:04:92:42:92:5d:dc:09:
                    68:7c:d8:20:c9:4a:be:28:6f:29:33:2c:4e:8e:4f:
                    2a:91:6c:a3:21:4d:bb:07:a4:bd:88:07:e4:e7:9c:
                    23:fa:1d:e4:1f:e4:62:e2:b4:12:ea:a1:9f:67:e1:
                    c5:2d:42:93:db:e2:53:3c:cc:67:c1:0d:11:fe:85:
                    1c:ff:18:c6:db:70:2d:ce:a6:92:ba:b5:5b:3c:3f:
                    fc:a3:fe:3b:cb:ee:88:b5:78:4a:e7:4c:9d:41:fa:
                    86:f8:b4:5d:2f:c7:77:7a:df:92:b9:e7:41:d9:9f:
                    1b:88:26:13:a5:b8:46:67:d0:fb:df:d2:24:0b:e4:
                    81:43:b2:27:0a:ad:0a:4f:32:4a:fd:e7:a9:be:46:
                    f1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:01:84:19:65:E9:3A:A4:E3:55:8D:16:9F:12:70:07:DA:EC:EB:E9
            X509v3 Authority Key Identifier:
                keyid:A4:A4:32:E6:3D:F7:D4:1D:50:FA:DC:5A:64:69:97:4D:42:C4:47:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a353a3a2f34382d3438203d3e20323635333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e30:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:4b:91:78:24:8c:7d:e2:33:92:ff:c2:0c:ab:ed:02:91:ab:
         0f:fc:dc:72:25:9f:fb:56:5d:f7:b3:1b:ed:e7:25:58:98:7c:
         82:82:e5:13:b0:60:59:3d:5f:c6:87:0c:a2:1b:30:d4:8a:d5:
         47:6d:63:ba:71:e9:6d:b3:a8:af:93:1a:d9:40:1e:1b:6a:56:
         47:d9:34:c2:43:97:69:9c:bb:84:73:e0:a5:6f:01:c5:9a:a6:
         a6:dd:09:6b:0a:8d:8b:56:71:01:9b:04:ad:c6:f3:a9:5f:df:
         5b:99:20:58:19:c9:7d:d0:2e:26:c5:2f:86:bb:63:ce:8e:39:
         58:d6:42:17:ff:9c:e5:9c:3b:9b:6c:2b:0d:ef:c6:6f:43:5a:
         7f:c0:e5:5c:05:64:6d:8a:07:a1:18:f7:f4:7b:a6:5f:4e:66:
         8b:72:fa:c0:7a:11:0d:64:bf:f8:ab:76:a2:29:de:65:f5:15:
         54:a7:8b:ec:db:03:dc:5c:ff:01:e2:c0:0f:a6:1f:92:98:8b:
         92:ec:8f:f6:9a:5c:1c:6e:97:f9:c9:83:6b:35:1d:6e:56:73:
         f9:5a:c4:54:47:bc:f6:60:9e:2c:d6:a1:c0:8f:91:5a:83:58:
         d8:42:b5:36:e5:47:e3:e8:20:84:88:b7:cc:f7:64:69:5b:65:
         02:a2:4f:64
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUfvLz7i6vQdePaoJXaPs0QWQAa1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRBNDMyRTYzREY3RDQxRDUwRkFEQzVBNjQ2OTk3NEQ0
MkM0NDczODAeFw0yNTA2MDUwMTAwNDhaFw0yNjA2MDQwMTA1NDhaMDMxMTAvBgNV
BAMTKDEzMDE4NDE5NjVFOTNBQTRFMzU1OEQxNjlGMTI3MDA3REFFQ0VCRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXtmQmeHxJbpFl5czHkzlh93+q
p9fNj3fpMFBCk71i5BTv6Ad4HYiRnSziiZHZhQxW/R489Qr2yeJC7gZ8lEnp338j
RqS0Jr34f2jm7kaVABBx+vRiVDbh49auIEt1vDo+F36GjHKFrS/C39z0DazXBJJC
kl3cCWh82CDJSr4obykzLE6OTyqRbKMhTbsHpL2IB+TnnCP6HeQf5GLitBLqoZ9n
4cUtQpPb4lM8zGfBDRH+hRz/GMbbcC3OppK6tVs8P/yj/jvL7oi1eErnTJ1B+ob4
tF0vx3d635K550HZnxuIJhOluEZn0Pvf0iQL5IFDsicKrQpPMkr956m+RvFXAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUEwGEGWXpOqTjVY0WnxJwB9rs6+kwHwYDVR0j
BBgwFoAUpKQy5j331B1Q+txaZGmXTULERzgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05zSjJxYlppVHplTDVHZExDQmZBWHlIcHNSQmFqYnlOOW9MUWFpRW5I
Q1ovMC9BNEE0MzJFNjNERjdENDFENTBGQURDNUE2NDY5OTc0RDQyQzQ0NzM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0QTQzMkU2M0RGN0Q0MUQ1
MEZBREM1QTY0Njk5NzRENDJDNDQ3MzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NOc0oycWJaaVR6ZUw1R2RMQ0JmQVh5SHBzUkJhamJ5TjlvTFFhaUVuSENaLzAv
MzIzODMwMzQzYTMyNjUzMzMwM2EzNTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzNTMzMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgELjAABTANBgkqhkiG9w0BAQsFAAOCAQEA
R0uReCSMfeIzkv/CDKvtApGrD/zcciWf+1Zd97Mb7eclWJh8goLlE7BgWT1fxocM
ohsw1IrVR21junHpbbOor5Ma2UAeG2pWR9k0wkOXaZy7hHPgpW8BxZqmpt0JawqN
i1ZxAZsErcbzqV/fW5kgWBnJfdAuJsUvhrtjzo45WNZCF/+c5Zw7m2wrDe/Gb0Na
f8DlXAVkbYoHoRj39HumX05mi3L6wHoRDWS/+Kt2oineZfUVVKeL7NsD3Fz/AeLA
D6YfkpiLkuyP9ppcHG6X+cmDazUdblZz+VrEVEe89mCeLNahwI+RWoNY2EK1NuVH
4+gghIi3zPdkaVtlAqJPZA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:13:12 2025 by rpki-client