Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/323830343a393432383a3a2f33322d313238203d3e20323734383235.roa
File:                     323830343a393432383a3a2f33322d313238203d3e20323734383235.roa (raw, json)
Hash identifier:          /XeU1Be35LgdrqHupcxBDTzVWTKAb/QutG05oLd8PCw=
Subject key identifier:   03:00:8A:55:12:0C:C1:39:DA:0E:07:DB:47:6D:FD:EC:7B:56:6F:9D
Certificate issuer:       /CN=0F6E797F2CEEECD5EC1DA506202101CFA7C39FD2
Certificate serial:       5ABE5164ABFEB23998BC75A8E925F34E4F4E20A4
Authority key identifier: 0F:6E:79:7F:2C:EE:EC:D5:EC:1D:A5:06:20:21:01:CF:A7:C3:9F:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F6E797F2CEEECD5EC1DA506202101CFA7C39FD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/323830343a393432383a3a2f33322d313238203d3e20323734383235.roa
Signing time:             Tue 27 May 2025 14:28:24 +0000
ROA not before:           Tue 27 May 2025 14:23:24 +0000
ROA not after:            Tue 26 May 2026 14:28:24 +0000
asID:                     274825
IP address blocks:        2804:9428::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/0F6E797F2CEEECD5EC1DA506202101CFA7C39FD2.crl
                          rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/0F6E797F2CEEECD5EC1DA506202101CFA7C39FD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F6E797F2CEEECD5EC1DA506202101CFA7C39FD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 00:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:be:51:64:ab:fe:b2:39:98:bc:75:a8:e9:25:f3:4e:4f:4e:20:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6E797F2CEEECD5EC1DA506202101CFA7C39FD2
        Validity
            Not Before: May 27 14:23:24 2025 GMT
            Not After : May 26 14:28:24 2026 GMT
        Subject: CN=03008A55120CC139DA0E07DB476DFDEC7B566F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:58:48:7a:a9:a2:f3:24:f8:e6:ef:5e:14:
                    cd:4f:f7:aa:60:de:c7:b3:7b:d6:78:82:94:99:f2:
                    92:88:df:9d:11:38:5f:49:7c:17:e2:d0:cf:d3:a2:
                    d6:52:b3:25:5b:0d:68:b5:e4:44:0b:f9:1a:17:0b:
                    60:57:60:1c:5e:b9:cc:af:44:e2:11:c4:5b:33:84:
                    a8:8b:75:ab:21:66:54:61:ce:99:8b:77:55:8f:27:
                    0c:a7:2a:0a:2a:33:8d:00:68:13:46:b4:5b:5e:77:
                    a6:69:61:3d:45:57:68:16:f8:2e:42:1d:23:71:97:
                    98:9f:c2:69:bd:da:56:40:4a:80:c4:e4:be:da:37:
                    3b:07:75:f0:26:74:57:49:df:ed:48:20:a7:b9:b5:
                    d2:40:f4:51:23:8e:2e:d5:f9:22:0c:33:c4:c1:05:
                    77:59:84:36:89:f3:0b:dc:39:99:0b:31:57:17:e7:
                    2c:39:6c:ee:21:2f:a7:14:2c:ac:51:14:eb:ad:bb:
                    84:02:21:4d:4a:88:c8:e2:17:53:f0:6a:7c:33:5f:
                    e2:3d:67:b0:f7:12:c3:d3:c4:44:94:25:27:14:22:
                    80:a2:2e:7b:cf:e2:6c:64:3d:5f:c2:6a:16:e3:ff:
                    50:52:c9:8c:fa:3e:56:64:c0:b6:46:e2:ff:a5:14:
                    c1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:00:8A:55:12:0C:C1:39:DA:0E:07:DB:47:6D:FD:EC:7B:56:6F:9D
            X509v3 Authority Key Identifier:
                keyid:0F:6E:79:7F:2C:EE:EC:D5:EC:1D:A5:06:20:21:01:CF:A7:C3:9F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/0F6E797F2CEEECD5EC1DA506202101CFA7C39FD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F6E797F2CEEECD5EC1DA506202101CFA7C39FD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DB2deZX76aiVqHZnwGbL1QhB4iJtF7RnLEUFMtpw2WN2/0/323830343a393432383a3a2f33322d313238203d3e20323734383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9428::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:f7:77:e9:1a:51:0a:64:55:af:90:16:de:7d:45:8a:74:5c:
         35:b5:db:6e:69:e1:06:94:da:0c:b0:a4:f4:6c:db:47:7a:0a:
         9b:02:07:78:3e:5f:da:a0:54:ca:57:2c:c2:9f:50:17:cb:a6:
         d0:cd:31:0c:67:35:ff:fc:8a:2c:75:b8:31:f5:53:a0:43:67:
         61:5d:01:93:b5:64:02:ce:7c:a3:55:8a:b9:aa:43:8c:b5:bc:
         c4:49:8f:1c:90:c0:91:ad:70:cb:b4:90:3a:e8:fd:96:c9:dc:
         c1:f8:f5:f7:03:11:2e:16:c4:7a:a3:88:65:2c:1d:2b:09:69:
         fa:ed:33:52:aa:e3:ad:29:c1:b7:50:14:2b:53:c5:8d:85:68:
         6f:c7:65:9c:c1:8b:c7:32:08:55:2a:35:11:f5:7d:c2:6f:c5:
         ff:d3:6b:2a:4d:9e:a0:71:de:b4:df:6b:28:36:59:cd:d3:3a:
         dc:27:ac:03:90:05:4e:f3:1f:68:36:da:d9:26:41:9a:ae:e9:
         99:14:e1:42:c1:ef:d2:5c:4d:1f:8d:81:6f:3d:b1:07:04:d1:
         6a:4a:75:58:ff:85:0e:c4:ef:2f:1a:a1:32:fd:5b:8d:89:f8:
         dc:dc:53:63:a1:d6:c7:6d:ef:89:20:16:77:08:e8:83:28:58:
         89:c5:c4:7b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUWr5RZKv+sjmYvHWo6SXzTk9OIKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY2RTc5N0YyQ0VFRUNENUVDMURBNTA2MjAyMTAxQ0ZB
N0MzOUZEMjAeFw0yNTA1MjcxNDIzMjRaFw0yNjA1MjYxNDI4MjRaMDMxMTAvBgNV
BAMTKDAzMDA4QTU1MTIwQ0MxMzlEQTBFMDdEQjQ3NkRGREVDN0I1NjZGOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC86lhIeqmi8yT45u9eFM1P96pg
3seze9Z4gpSZ8pKI350ROF9JfBfi0M/TotZSsyVbDWi15EQL+RoXC2BXYBxeucyv
ROIRxFszhKiLdashZlRhzpmLd1WPJwynKgoqM40AaBNGtFted6ZpYT1FV2gW+C5C
HSNxl5ifwmm92lZASoDE5L7aNzsHdfAmdFdJ3+1IIKe5tdJA9FEjji7V+SIMM8TB
BXdZhDaJ8wvcOZkLMVcX5yw5bO4hL6cULKxRFOutu4QCIU1KiMjiF1PwanwzX+I9
Z7D3EsPTxESUJScUIoCiLnvP4mxkPV/Cahbj/1BSyYz6PlZkwLZG4v+lFMFpAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUAwCKVRIMwTnaDgfbR2397HtWb50wHwYDVR0j
BBgwFoAUD255fyzu7NXsHaUGICEBz6fDn9IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREIyZGVaWDc2YWlWcUhabndHYkwxUWhCNGlKdEY3Um5MRVVGTXRwdzJX
TjIvMC8wRjZFNzk3RjJDRUVFQ0Q1RUMxREE1MDYyMDIxMDFDRkE3QzM5RkQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGNkU3OTdGMkNFRUVDRDVF
QzFEQTUwNjIwMjEwMUNGQTdDMzlGRDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RCMmRlWlg3NmFpVnFIWm53R2JMMVFoQjRpSnRGN1JuTEVVRk10cHcyV04yLzAv
MzIzODMwMzQzYTM5MzQzMjM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzQzODMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBJQoMA0GCSqGSIb3DQEBCwUAA4IBAQBo93fp
GlEKZFWvkBbefUWKdFw1tdtuaeEGlNoMsKT0bNtHegqbAgd4Pl/aoFTKVyzCn1AX
y6bQzTEMZzX//Iosdbgx9VOgQ2dhXQGTtWQCznyjVYq5qkOMtbzESY8ckMCRrXDL
tJA66P2WydzB+PX3AxEuFsR6o4hlLB0rCWn67TNSquOtKcG3UBQrU8WNhWhvx2Wc
wYvHMghVKjUR9X3Cb8X/02sqTZ6gcd6032soNlnN0zrcJ6wDkAVO8x9oNtrZJkGa
rumZFOFCwe/SXE0fjYFvPbEHBNFqSnVY/4UOxO8vGqEy/VuNifjc3FNjodbHbe+J
IBZ3COiDKFiJxcR7
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:29:15 2025 by rpki-client