Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a313131643a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a313131643a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          wmWidvpZeghoEGUNizzi6fxbbk3cJgE870jZv8IgVsU=
Subject key identifier:   6D:B3:12:13:37:FF:CF:61:4D:9D:F2:C7:E0:CA:58:9A:D3:7B:78:D5
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       63EFB892E4691837FBD05794C70B95C4AEB964F8
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a313131643a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:14:27 +0000
ROA not before:           Tue 27 May 2025 19:09:27 +0000
ROA not after:            Tue 26 May 2026 19:14:27 +0000
asID:                     264485
IP address blocks:        2804:2050:111d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 06:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ef:b8:92:e4:69:18:37:fb:d0:57:94:c7:0b:95:c4:ae:b9:64:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:09:27 2025 GMT
            Not After : May 26 19:14:27 2026 GMT
        Subject: CN=6DB3121337FFCF614D9DF2C7E0CA589AD37B78D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c0:61:72:6e:49:5c:0d:d0:0f:a4:0b:80:d3:
                    26:f6:29:ac:af:4d:1e:03:d0:88:78:c9:2b:13:e6:
                    6e:60:26:f7:9f:c1:34:aa:0e:1a:b1:cb:9b:31:3b:
                    48:8f:5d:1a:23:d8:d4:9a:db:b7:c9:11:3a:06:bd:
                    8e:c5:1c:81:a9:86:7c:aa:eb:b5:37:1e:e4:39:22:
                    de:5f:82:20:f9:e5:6b:bc:af:1b:76:28:b3:88:a4:
                    c8:ac:31:dd:a0:02:c3:d2:f9:01:3f:cb:ea:d3:9b:
                    8b:03:70:a6:42:f1:a8:24:8a:aa:d2:86:4c:f4:27:
                    63:e1:4d:d6:39:8d:42:a8:a2:f4:1a:0e:95:85:37:
                    f8:42:19:b7:29:51:51:8e:ad:5e:d5:4c:52:18:4b:
                    ba:c3:35:69:48:41:74:60:b9:92:da:8c:01:0d:e1:
                    04:6b:e6:e0:29:cd:8e:3a:f5:9e:31:e4:88:ec:ac:
                    f2:ed:b4:2f:3e:9d:2f:9e:2f:3e:fe:71:a7:4a:cf:
                    c9:1b:18:f6:6a:01:4d:67:6e:75:b0:9a:08:bc:68:
                    da:5b:4b:a3:6b:52:27:84:c2:61:20:3a:aa:69:b3:
                    0e:14:72:b6:ca:9f:ba:f0:5c:d0:ce:1a:9d:0e:c4:
                    e7:b3:fb:91:40:19:95:ad:22:00:74:e6:ee:67:10:
                    42:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B3:12:13:37:FF:CF:61:4D:9D:F2:C7:E0:CA:58:9A:D3:7B:78:D5
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a313131643a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:111d::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:46:c4:45:a8:fc:4e:79:33:b7:85:bd:c9:b8:47:d8:bf:25:
         1d:6b:3c:9b:4d:9f:74:be:db:58:62:49:f1:22:35:bb:f5:5c:
         7f:b6:46:4e:d4:eb:b1:9d:c0:e2:a3:a3:35:35:08:e0:df:c2:
         14:b7:9e:57:8a:19:00:ac:31:17:cf:91:07:a3:24:a4:0f:42:
         a9:70:f2:21:4a:53:97:51:41:ad:d7:76:3a:d2:94:4b:25:98:
         e4:d5:72:4e:a2:ac:ac:09:f4:ea:c1:c5:01:ff:a6:d2:bd:da:
         c9:1d:6a:85:98:b2:21:4c:bc:5a:48:39:ca:9d:57:d9:b9:33:
         5a:27:b8:cd:f9:5a:36:e3:4c:6a:70:a4:84:ab:d5:f0:1b:d2:
         b2:2a:44:3a:73:8f:72:b1:c7:85:ad:9f:41:a9:41:2d:48:a5:
         c8:56:84:e5:dd:0f:52:b7:db:aa:9e:37:b7:ff:4d:e9:e8:3c:
         f0:48:cf:5f:a9:fc:ef:1c:9c:63:4c:35:49:6b:04:a8:89:6b:
         7e:b6:d2:e4:94:ae:ef:7a:c1:4c:ee:d4:3e:7f:1c:8d:4f:e6:
         e8:ef:75:4d:f3:84:18:c8:59:f5:78:98:74:34:5f:7f:18:c7:
         11:01:12:37:cc:48:5c:7a:d2:24:e2:90:3a:a4:13:64:ff:64:
         0a:93:f1:ad
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUY++4kuRpGDf70FeUxwuVxK65ZPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwNDlBMjU4OTIxQkJCM0FGM0JCQjEwNDQzNEFDREIw
RUQ4REYzQTAeFw0yNTA1MjcxOTA5MjdaFw0yNjA1MjYxOTE0MjdaMDMxMTAvBgNV
BAMTKDZEQjMxMjEzMzdGRkNGNjE0RDlERjJDN0UwQ0E1ODlBRDM3Qjc4RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwGFybklcDdAPpAuA0yb2Kayv
TR4D0Ih4ySsT5m5gJvefwTSqDhqxy5sxO0iPXRoj2NSa27fJEToGvY7FHIGphnyq
67U3HuQ5It5fgiD55Wu8rxt2KLOIpMisMd2gAsPS+QE/y+rTm4sDcKZC8agkiqrS
hkz0J2PhTdY5jUKoovQaDpWFN/hCGbcpUVGOrV7VTFIYS7rDNWlIQXRguZLajAEN
4QRr5uApzY469Z4x5IjsrPLttC8+nS+eLz7+cadKz8kbGPZqAU1nbnWwmgi8aNpb
S6NrUieEwmEgOqppsw4UcrbKn7rwXNDOGp0OxOez+5FAGZWtIgB05u5nEEKvAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUbbMSEzf/z2FNnfLH4MpYmtN7eNUwHwYDVR0j
BBgwFoAUEwSaJYkhu7OvO7sQRDSs2w7Y3zowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG5qQmdOZHN1WGVlYkhNbmUzZWJmbVhhdG9tRnQ0aGhyNjE3cG8xeFZF
SjYvMC8xMzA0OUEyNTg5MjFCQkIzQUYzQkJCMTA0NDM0QUNEQjBFRDhERjNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzMDQ5QTI1ODkyMUJCQjNB
RjNCQkIxMDQ0MzRBQ0RCMEVEOERGM0EuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RuakJnTmRzdVhlZWJITW5lM2ViZm1YYXRvbUZ0NGhocjYxN3BvMXhWRUo2LzAv
MzIzODMwMzQzYTMyMzAzNTMwM2EzMTMxMzE2NDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEIFARHTANBgkqhkiG9w0BAQsF
AAOCAQEAbkbERaj8Tnkzt4W9ybhH2L8lHWs8m02fdL7bWGJJ8SI1u/Vcf7ZGTtTr
sZ3A4qOjNTUI4N/CFLeeV4oZAKwxF8+RB6MkpA9CqXDyIUpTl1FBrdd2OtKUSyWY
5NVyTqKsrAn06sHFAf+m0r3ayR1qhZiyIUy8Wkg5yp1X2bkzWie4zflaNuNManCk
hKvV8BvSsipEOnOPcrHHha2fQalBLUilyFaE5d0PUrfbqp43t/9N6eg88EjPX6n8
7xycY0w1SWsEqIlrfrbS5JSu73rBTO7UPn8cjU/m6O91TfOEGMhZ9XiYdDRffxjH
EQESN8xIXHrSJOKQOqQTZP9kCpPxrQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 10:09:05 2025 by rpki-client