Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a3a2f33322d313238203d3e20323634343530.roa
File:                     323830343a316564633a3a2f33322d313238203d3e20323634343530.roa (raw, json)
Hash identifier:          4kZ2wmSTLV8sgzi4noIBaR5mxxts/uJ/cCkrfm+miA8=
Subject key identifier:   E9:D6:05:BB:B8:2B:76:4B:2F:7B:0D:03:75:9B:54:CC:7D:7A:B7:6E
Certificate issuer:       /CN=1895ECB6D9509F32313CB621B29E507AE1048B65
Certificate serial:       6083FC6D01BF11DBB18BF447A67CE3A9FCCEF7F4
Authority key identifier: 18:95:EC:B6:D9:50:9F:32:31:3C:B6:21:B2:9E:50:7A:E1:04:8B:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1895ECB6D9509F32313CB621B29E507AE1048B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a3a2f33322d313238203d3e20323634343530.roa
Signing time:             Mon 02 Jun 2025 13:20:10 +0000
ROA not before:           Mon 02 Jun 2025 13:15:10 +0000
ROA not after:            Mon 01 Jun 2026 13:20:10 +0000
asID:                     264450
IP address blocks:        2804:1edc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/1895ECB6D9509F32313CB621B29E507AE1048B65.crl
                          rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/1895ECB6D9509F32313CB621B29E507AE1048B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1895ECB6D9509F32313CB621B29E507AE1048B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 00:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:83:fc:6d:01:bf:11:db:b1:8b:f4:47:a6:7c:e3:a9:fc:ce:f7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1895ECB6D9509F32313CB621B29E507AE1048B65
        Validity
            Not Before: Jun  2 13:15:10 2025 GMT
            Not After : Jun  1 13:20:10 2026 GMT
        Subject: CN=E9D605BBB82B764B2F7B0D03759B54CC7D7AB76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:a7:24:91:1a:ed:f1:f5:e1:67:dd:d8:57:
                    ec:53:d9:76:ff:e7:10:75:43:92:e5:d5:18:ee:a7:
                    dc:35:7a:89:54:3b:57:ff:07:8e:e1:5b:a7:a7:bc:
                    76:9b:a8:c0:d6:31:6c:99:a0:54:fd:6a:7a:32:6e:
                    c6:a0:f2:11:7a:70:17:af:84:4e:50:88:d8:6b:c6:
                    1e:59:ed:26:fe:a8:11:79:94:df:46:f1:4a:c2:7d:
                    56:ac:48:fd:de:2b:f6:11:d8:53:5a:92:d8:b2:32:
                    af:2d:69:8b:c1:92:78:e7:d1:81:03:39:a5:ec:7c:
                    92:ac:ed:c8:ef:fe:f3:97:93:14:1d:37:0c:ac:b3:
                    95:36:60:21:fa:f4:92:8d:8e:fd:5c:17:22:70:e9:
                    fd:d4:ce:6d:68:79:1e:36:0d:a3:06:f1:f9:88:e2:
                    29:10:26:2f:07:2e:d9:67:d3:8d:9a:83:46:28:8c:
                    b6:64:28:87:ce:50:30:b0:5f:b7:70:69:08:a9:50:
                    7f:bb:13:b8:2f:e1:6c:b9:27:c9:2e:b3:73:73:46:
                    9c:fe:ba:3d:b9:63:26:ab:52:36:e0:91:54:0e:fe:
                    33:b1:11:15:d1:09:ef:db:d9:48:b8:21:55:d5:81:
                    49:19:6c:69:d8:f6:21:cf:71:f9:69:3a:f4:59:69:
                    99:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D6:05:BB:B8:2B:76:4B:2F:7B:0D:03:75:9B:54:CC:7D:7A:B7:6E
            X509v3 Authority Key Identifier:
                keyid:18:95:EC:B6:D9:50:9F:32:31:3C:B6:21:B2:9E:50:7A:E1:04:8B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/1895ECB6D9509F32313CB621B29E507AE1048B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1895ECB6D9509F32313CB621B29E507AE1048B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/323830343a316564633a3a2f33322d313238203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1edc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:fb:41:04:68:f1:2c:7f:74:15:6e:da:f4:7f:75:a4:d4:7e:
         e0:34:80:73:06:3b:d9:f9:27:93:c7:03:8f:61:9a:0b:9a:d2:
         64:c4:4b:26:13:a1:ee:c5:3d:08:23:cd:7c:c2:98:0b:da:9f:
         6c:97:f2:3b:7c:d8:49:8b:e7:46:5e:18:d1:60:d7:63:d4:b4:
         2f:96:2e:cd:28:40:f9:03:b9:c2:3f:f8:33:6e:3b:83:29:5a:
         93:7e:6c:ac:56:21:de:47:52:30:bd:4a:4e:ea:33:c0:33:80:
         c7:45:de:42:43:85:0b:02:69:f0:ac:c3:6f:4a:11:91:72:8b:
         80:33:c0:26:63:55:75:bc:3b:80:e8:ce:11:5c:eb:90:58:61:
         5a:ef:d5:ba:b8:a9:fa:6f:d0:34:d3:03:64:7f:05:71:e5:0f:
         c4:9e:a2:7e:e9:4e:49:93:45:79:72:8f:f2:8e:0c:f5:20:c8:
         16:c5:c5:4a:41:5e:cd:00:19:f1:fb:78:88:31:2c:8e:13:fd:
         41:67:9a:2b:09:e2:75:25:db:ed:54:bb:68:99:a7:07:07:68:
         03:69:f0:a1:0d:be:a1:0a:d8:db:89:8c:41:d9:ba:2f:4d:ee:
         22:80:63:ee:24:8e:47:c2:c0:55:09:8b:a3:c5:8b:17:80:0e:
         48:c8:17:19
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUYIP8bQG/Eduxi/RHpnzjqfzO9/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg5NUVDQjZEOTUwOUYzMjMxM0NCNjIxQjI5RTUwN0FF
MTA0OEI2NTAeFw0yNTA2MDIxMzE1MTBaFw0yNjA2MDExMzIwMTBaMDMxMTAvBgNV
BAMTKEU5RDYwNUJCQjgyQjc2NEIyRjdCMEQwMzc1OUI1NENDN0Q3QUI3NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+6ckkRrt8fXhZ93YV+xT2Xb/
5xB1Q5Ll1Rjup9w1eolUO1f/B47hW6envHabqMDWMWyZoFT9anoybsag8hF6cBev
hE5QiNhrxh5Z7Sb+qBF5lN9G8UrCfVasSP3eK/YR2FNaktiyMq8taYvBknjn0YED
OaXsfJKs7cjv/vOXkxQdNwyss5U2YCH69JKNjv1cFyJw6f3Uzm1oeR42DaMG8fmI
4ikQJi8HLtln042ag0YojLZkKIfOUDCwX7dwaQipUH+7E7gv4Wy5J8kus3NzRpz+
uj25YyarUjbgkVQO/jOxERXRCe/b2Ui4IVXVgUkZbGnY9iHPcflpOvRZaZl1AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU6dYFu7grdksvew0DdZtUzH16t24wHwYDVR0j
BBgwFoAUGJXsttlQnzIxPLYhsp5QeuEEi2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFpVN3NzejJxcVFidlN5VkJXN0dybnM2Y0pFV01KTHl5RXpFZzNQQzVV
b1kvMC8xODk1RUNCNkQ5NTA5RjMyMzEzQ0I2MjFCMjlFNTA3QUUxMDQ4QjY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4OTVFQ0I2RDk1MDlGMzIz
MTNDQjYyMUIyOUU1MDdBRTEwNDhCNjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RaVTdzc3oycXFRYnZTeVZCVzdHcm5zNmNKRVdNSkx5eUV6RWczUEM1VW9ZLzAv
MzIzODMwMzQzYTMxNjU2NDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzNDM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBB7cMA0GCSqGSIb3DQEBCwUAA4IBAQCf+0EE
aPEsf3QVbtr0f3Wk1H7gNIBzBjvZ+SeTxwOPYZoLmtJkxEsmE6HuxT0II818wpgL
2p9sl/I7fNhJi+dGXhjRYNdj1LQvli7NKED5A7nCP/gzbjuDKVqTfmysViHeR1Iw
vUpO6jPAM4DHRd5CQ4ULAmnwrMNvShGRcouAM8AmY1V1vDuA6M4RXOuQWGFa79W6
uKn6b9A00wNkfwVx5Q/EnqJ+6U5Jk0V5co/yjgz1IMgWxcVKQV7NABnx+3iIMSyO
E/1BZ5orCeJ1JdvtVLtomacHB2gDafChDb6hCtjbiYxB2bovTe4igGPuJI5HwsBV
CYujxYsXgA5IyBcZ
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:30:54 2025 by rpki-client