Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a313131633a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a313131633a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          sWcvVfo1aM2WUW5pfx6iyRtnRGTZcUAhKm8DYsxe2x8=
Subject key identifier:   12:A7:CE:31:73:FB:4E:B7:27:46:E7:6B:04:46:DE:15:AC:7F:34:D3
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       3943B5167B06CAD0EBA98BE481E5A75D0639F7CF
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a313131633a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:14:45 +0000
ROA not before:           Tue 27 May 2025 19:09:45 +0000
ROA not after:            Tue 26 May 2026 19:14:45 +0000
asID:                     264485
IP address blocks:        2804:2050:111c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 14:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:43:b5:16:7b:06:ca:d0:eb:a9:8b:e4:81:e5:a7:5d:06:39:f7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:09:45 2025 GMT
            Not After : May 26 19:14:45 2026 GMT
        Subject: CN=12A7CE3173FB4EB72746E76B0446DE15AC7F34D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:90:cf:bb:3d:e1:f7:a1:1d:e7:c7:2d:69:
                    e3:3c:d9:a9:2a:73:12:3d:fe:c0:a6:af:25:b3:8a:
                    9b:3d:69:8c:85:80:3a:ab:ff:3b:f8:17:36:90:b2:
                    a8:d1:f1:1d:6f:7a:5b:90:12:0e:82:e5:ff:b3:89:
                    4b:57:20:4b:b4:01:83:80:8f:22:88:44:23:17:59:
                    3f:85:dd:c3:25:08:0b:87:af:ab:5a:07:01:1c:31:
                    77:f4:34:b5:c6:41:c1:94:31:a8:cc:ba:c0:6e:0b:
                    86:78:47:16:7a:a4:c6:36:9c:63:02:0c:35:91:4b:
                    f5:be:97:e7:b2:18:d1:65:d3:10:99:fa:8b:6b:a4:
                    94:a1:5b:2b:6a:7d:61:fe:97:ee:36:89:01:70:73:
                    c5:d5:61:8c:2f:0a:65:c6:6d:f2:5c:e6:5a:ea:50:
                    4a:a0:2f:89:83:a0:a1:d6:7a:30:72:3d:d3:13:6c:
                    96:d3:f7:23:ec:f8:cb:6c:ed:51:4d:7b:64:d7:9d:
                    f0:78:4d:75:84:f9:07:72:74:cc:4f:93:5c:59:8f:
                    59:d9:50:b8:aa:dd:3a:ad:93:24:73:c5:e4:d7:98:
                    4a:48:84:85:0b:bd:f7:5b:30:aa:0b:17:37:3d:2a:
                    74:07:5b:49:4b:7e:a3:0a:38:7f:a5:12:21:fb:57:
                    72:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A7:CE:31:73:FB:4E:B7:27:46:E7:6B:04:46:DE:15:AC:7F:34:D3
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a313131633a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:111c::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:0b:b5:6a:82:11:0c:f6:b3:d4:38:8f:d6:21:a4:35:db:30:
         e5:bb:5d:c7:e8:ab:c8:30:20:1f:a3:5a:08:c2:78:ad:e7:bc:
         8a:8d:2d:1e:2d:6c:78:a9:28:11:4e:31:75:42:4a:9c:ea:3c:
         d5:d0:fa:ee:bd:e8:b0:56:4b:6d:d1:80:c7:e7:6c:5b:b6:40:
         7c:e9:f4:bb:0a:e3:6d:16:14:1a:7e:a3:dd:7e:12:b8:2a:30:
         bd:23:3a:64:cd:e9:2e:8a:ca:4f:57:7d:1d:a3:ef:4f:da:ed:
         2f:0f:55:c4:4d:a1:95:9c:39:c6:da:d6:e1:0e:4c:fa:35:f3:
         e2:25:c9:48:f9:c1:45:ad:5c:ee:25:0e:20:e0:94:81:54:e3:
         73:74:f5:97:df:5a:59:3d:43:d5:f6:26:29:1a:29:83:8c:c7:
         15:72:bc:4c:11:f9:47:b7:5e:6f:11:64:7f:24:4e:12:c4:1c:
         64:97:7e:50:45:ec:20:f0:fd:f8:d5:bc:1e:8d:1e:9a:78:d2:
         23:91:e8:04:67:32:83:e9:8d:d8:0b:9e:da:49:93:54:84:2c:
         ef:06:54:0f:9c:68:8d:04:80:c7:46:d7:eb:46:f3:65:26:a0:
         9d:ae:c5:5d:96:6c:e0:7b:40:45:c0:ec:01:db:72:91:a3:9b:
         c3:3a:a8:40
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUOUO1FnsGytDrqYvkgeWnXQY5988wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwNDlBMjU4OTIxQkJCM0FGM0JCQjEwNDQzNEFDREIw
RUQ4REYzQTAeFw0yNTA1MjcxOTA5NDVaFw0yNjA1MjYxOTE0NDVaMDMxMTAvBgNV
BAMTKDEyQTdDRTMxNzNGQjRFQjcyNzQ2RTc2QjA0NDZERTE1QUM3RjM0RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZpDPuz3h96Ed58ctaeM82akq
cxI9/sCmryWzips9aYyFgDqr/zv4FzaQsqjR8R1veluQEg6C5f+ziUtXIEu0AYOA
jyKIRCMXWT+F3cMlCAuHr6taBwEcMXf0NLXGQcGUMajMusBuC4Z4RxZ6pMY2nGMC
DDWRS/W+l+eyGNFl0xCZ+otrpJShWytqfWH+l+42iQFwc8XVYYwvCmXGbfJc5lrq
UEqgL4mDoKHWejByPdMTbJbT9yPs+Mts7VFNe2TXnfB4TXWE+QdydMxPk1xZj1nZ
ULiq3TqtkyRzxeTXmEpIhIULvfdbMKoLFzc9KnQHW0lLfqMKOH+lEiH7V3K9AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUEqfOMXP7TrcnRudrBEbeFax/NNMwHwYDVR0j
BBgwFoAUEwSaJYkhu7OvO7sQRDSs2w7Y3zowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG5qQmdOZHN1WGVlYkhNbmUzZWJmbVhhdG9tRnQ0aGhyNjE3cG8xeFZF
SjYvMC8xMzA0OUEyNTg5MjFCQkIzQUYzQkJCMTA0NDM0QUNEQjBFRDhERjNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzMDQ5QTI1ODkyMUJCQjNB
RjNCQkIxMDQ0MzRBQ0RCMEVEOERGM0EuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RuakJnTmRzdVhlZWJITW5lM2ViZm1YYXRvbUZ0NGhocjYxN3BvMXhWRUo2LzAv
MzIzODMwMzQzYTMyMzAzNTMwM2EzMTMxMzE2MzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEIFARHDANBgkqhkiG9w0BAQsF
AAOCAQEAUQu1aoIRDPaz1DiP1iGkNdsw5btdx+iryDAgH6NaCMJ4ree8io0tHi1s
eKkoEU4xdUJKnOo81dD67r3osFZLbdGAx+dsW7ZAfOn0uwrjbRYUGn6j3X4SuCow
vSM6ZM3pLorKT1d9HaPvT9rtLw9VxE2hlZw5xtrW4Q5M+jXz4iXJSPnBRa1c7iUO
IOCUgVTjc3T1l99aWT1D1fYmKRopg4zHFXK8TBH5R7debxFkfyROEsQcZJd+UEXs
IPD9+NW8Ho0emnjSI5HoBGcyg+mN2Aue2kmTVIQs7wZUD5xojQSAx0bX60bzZSag
na7FXZZs4HtARcDsAdtykaObwzqoQA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 05:38:41 2025 by rpki-client