Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a376162633a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a376162633a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          Dq9mJdrfcpStP1XKtW8eLqYd4aWctZ5W1oRmJj/YvBc=
Subject key identifier:   F4:9A:4F:FF:DC:E1:0D:68:5C:4C:EB:2D:1B:E1:E1:29:23:20:0D:9A
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       04CFF4E25B74D921AAFE1266D70A0BE0E59929E7
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a376162633a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:14:30 +0000
ROA not before:           Tue 27 May 2025 19:09:30 +0000
ROA not after:            Tue 26 May 2026 19:14:30 +0000
asID:                     264485
IP address blocks:        2804:2050:7abc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 00:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:cf:f4:e2:5b:74:d9:21:aa:fe:12:66:d7:0a:0b:e0:e5:99:29:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:09:30 2025 GMT
            Not After : May 26 19:14:30 2026 GMT
        Subject: CN=F49A4FFFDCE10D685C4CEB2D1BE1E12923200D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:04:ab:9d:e0:20:d0:63:c9:75:79:dc:5b:9d:
                    c4:3c:38:d9:5e:e2:77:83:04:27:61:27:ad:ef:d4:
                    5c:21:d9:3d:1e:cb:5a:9d:30:2e:95:5b:a4:49:c8:
                    c4:db:2f:3e:a9:13:d7:51:ca:61:a4:b2:ce:35:5a:
                    38:df:67:73:f0:3a:73:f4:7c:a7:db:89:65:47:5d:
                    0e:3a:ef:3f:c7:95:ce:21:76:7d:05:2b:c5:cd:38:
                    3e:e3:63:ad:5c:ed:e5:77:b3:cd:04:21:87:75:90:
                    4b:02:26:14:cc:05:98:46:a4:b5:a1:1f:9e:55:ef:
                    7b:4a:b3:78:b5:60:20:62:e3:41:b1:8d:e9:db:38:
                    b0:77:16:ec:08:f6:d9:1d:b9:3e:54:61:88:e5:85:
                    46:d5:04:a7:4f:22:9f:10:7c:f1:e8:ff:31:a5:e0:
                    18:4f:a7:37:a4:36:3c:8c:99:1c:ae:15:02:09:1b:
                    bc:f2:46:0b:be:25:d3:90:72:28:e3:ae:59:82:5f:
                    a5:a7:5e:19:22:a0:be:9b:70:76:45:06:e0:3b:85:
                    e1:c1:c4:ce:c5:9e:60:62:c8:02:76:85:a5:bb:4f:
                    7e:bf:53:b9:57:27:f4:87:f8:f3:9a:e3:ce:3f:c3:
                    41:a0:a0:aa:f2:8d:e7:dd:32:83:7d:31:d3:f5:00:
                    d5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9A:4F:FF:DC:E1:0D:68:5C:4C:EB:2D:1B:E1:E1:29:23:20:0D:9A
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a376162633a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:7abc::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:b2:79:90:c7:3c:94:d3:19:dd:97:03:80:06:6d:d8:74:64:
         d5:a4:1b:9f:de:3a:5b:ca:1e:f9:58:1a:e2:d1:ed:9d:ab:d5:
         c2:98:99:fc:74:1e:6a:0a:39:2f:c2:61:25:83:be:08:f6:f0:
         6a:5c:e0:7d:68:c0:0b:90:3d:04:a3:46:32:03:26:84:b1:d9:
         8c:32:fb:1d:5a:16:8f:4b:b9:b0:ac:55:9c:c5:e8:55:74:2b:
         14:7c:58:2b:b2:ac:a7:b3:4f:ae:0d:8c:db:61:e1:20:7e:5a:
         17:59:8a:4e:d3:a9:fa:a7:4f:11:76:0e:50:24:a2:7c:7a:29:
         77:4b:6d:ce:d6:a8:8a:62:6d:d9:92:4a:c4:40:3c:e9:33:19:
         9e:77:6c:d5:c6:19:a3:3d:8b:6a:07:66:26:c1:d2:46:b8:79:
         75:b9:03:bb:56:0a:96:c5:5f:10:25:1b:54:f0:65:a8:12:f2:
         34:a7:af:df:c0:6a:79:3d:33:08:b9:03:f8:b5:67:95:23:22:
         04:e7:73:a7:17:f3:de:3d:9d:8e:55:ce:e8:51:80:28:bc:15:
         79:1e:5d:2a:64:65:09:13:b3:20:a0:ac:fe:4d:9d:20:b0:d8:
         ef:61:aa:89:c2:b4:f5:a1:2b:92:60:e4:cb:ef:f2:b2:49:6b:
         23:2e:fd:f8
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUBM/04lt02SGq/hJm1woL4OWZKecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwNDlBMjU4OTIxQkJCM0FGM0JCQjEwNDQzNEFDREIw
RUQ4REYzQTAeFw0yNTA1MjcxOTA5MzBaFw0yNjA1MjYxOTE0MzBaMDMxMTAvBgNV
BAMTKEY0OUE0RkZGRENFMTBENjg1QzRDRUIyRDFCRTFFMTI5MjMyMDBEOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnBKud4CDQY8l1edxbncQ8ONle
4neDBCdhJ63v1Fwh2T0ey1qdMC6VW6RJyMTbLz6pE9dRymGkss41WjjfZ3PwOnP0
fKfbiWVHXQ467z/Hlc4hdn0FK8XNOD7jY61c7eV3s80EIYd1kEsCJhTMBZhGpLWh
H55V73tKs3i1YCBi40GxjenbOLB3FuwI9tkduT5UYYjlhUbVBKdPIp8QfPHo/zGl
4BhPpzekNjyMmRyuFQIJG7zyRgu+JdOQcijjrlmCX6WnXhkioL6bcHZFBuA7heHB
xM7FnmBiyAJ2haW7T36/U7lXJ/SH+POa484/w0GgoKryjefdMoN9MdP1ANWfAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU9JpP/9zhDWhcTOstG+HhKSMgDZowHwYDVR0j
BBgwFoAUEwSaJYkhu7OvO7sQRDSs2w7Y3zowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG5qQmdOZHN1WGVlYkhNbmUzZWJmbVhhdG9tRnQ0aGhyNjE3cG8xeFZF
SjYvMC8xMzA0OUEyNTg5MjFCQkIzQUYzQkJCMTA0NDM0QUNEQjBFRDhERjNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzMDQ5QTI1ODkyMUJCQjNB
RjNCQkIxMDQ0MzRBQ0RCMEVEOERGM0EuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RuakJnTmRzdVhlZWJITW5lM2ViZm1YYXRvbUZ0NGhocjYxN3BvMXhWRUo2LzAv
MzIzODMwMzQzYTMyMzAzNTMwM2EzNzYxNjI2MzNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNDM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEIFB6vDANBgkqhkiG9w0BAQsF
AAOCAQEADrJ5kMc8lNMZ3ZcDgAZt2HRk1aQbn946W8oe+Vga4tHtnavVwpiZ/HQe
ago5L8JhJYO+CPbwalzgfWjAC5A9BKNGMgMmhLHZjDL7HVoWj0u5sKxVnMXoVXQr
FHxYK7Ksp7NPrg2M22HhIH5aF1mKTtOp+qdPEXYOUCSifHopd0ttztaoimJt2ZJK
xEA86TMZnnds1cYZoz2LagdmJsHSRrh5dbkDu1YKlsVfECUbVPBlqBLyNKev38Bq
eT0zCLkD+LVnlSMiBOdzpxfz3j2djlXO6FGAKLwVeR5dKmRlCROzIKCs/k2dILDY
72GqicK09aErkmDky+/ysklrIy79+A==
-----END CERTIFICATE-----
Generated at Wed Jun 11 07:35:23 2025 by rpki-client