Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a343030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a343030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          tf74vJHUgsi+8KIVXBKFrx4OgLdnQbWp2b23GBwTbyk=
Subject key identifier:   A9:B9:84:F1:82:B1:D8:CC:1C:04:85:73:63:10:DE:98:B2:8F:C2:6D
Certificate issuer:       /CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
Certificate serial:       5D11D73C9BD9E06468960676BC13E8EBBEC0B527
Authority key identifier: BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a343030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Fri 23 May 2025 21:55:25 +0000
ROA not before:           Fri 23 May 2025 21:50:25 +0000
ROA not after:            Fri 22 May 2026 21:55:25 +0000
asID:                     274726
IP address blocks:        2804:92a8:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 18:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:11:d7:3c:9b:d9:e0:64:68:96:06:76:bc:13:e8:eb:be:c0:b5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
        Validity
            Not Before: May 23 21:50:25 2025 GMT
            Not After : May 22 21:55:25 2026 GMT
        Subject: CN=A9B984F182B1D8CC1C0485736310DE98B28FC26D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a7:94:26:2d:5d:94:57:a4:a3:fd:33:bb:d8:
                    6a:a8:43:df:f4:1e:ec:1c:bd:02:6a:97:42:0b:d1:
                    b0:66:29:0f:eb:87:ac:8f:1a:3a:f0:50:5f:c6:55:
                    d3:b7:10:38:0b:1f:5c:ef:4f:d1:6c:61:5c:6b:a8:
                    2c:7d:d1:9f:49:62:a6:44:7d:de:96:d4:4e:1d:dd:
                    e3:95:3b:43:b9:7e:50:e2:df:87:63:41:3b:0e:18:
                    38:16:db:98:01:b2:91:e4:09:52:59:0b:35:54:cd:
                    88:45:58:40:9d:d9:0f:a2:de:30:28:d1:fb:db:61:
                    96:cc:9b:e6:ea:e3:1d:bb:42:5f:53:99:b5:02:9a:
                    a7:19:a7:7e:fe:eb:b1:f4:6e:42:ed:7d:05:7f:61:
                    29:28:bd:4f:48:3a:e5:ce:cf:98:f0:54:1f:3d:03:
                    4e:69:34:61:03:fd:9b:ad:74:94:1c:f7:3e:f8:6f:
                    5b:fe:00:a5:b3:78:44:dd:c7:95:58:94:b0:64:54:
                    91:69:17:80:f2:61:24:c7:b1:d7:cf:b7:35:d6:3a:
                    13:8c:45:f1:6f:28:31:28:df:ae:f7:d3:1a:3e:59:
                    8f:27:4d:13:14:41:9f:4f:5c:ee:b3:da:f5:43:ec:
                    9c:29:f3:e9:85:54:56:83:d5:3f:42:f6:9c:41:05:
                    6e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B9:84:F1:82:B1:D8:CC:1C:04:85:73:63:10:DE:98:B2:8F:C2:6D
            X509v3 Authority Key Identifier:
                keyid:BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a343030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6e:bc:0d:2e:50:77:62:8f:57:33:0b:66:75:32:60:01:5a:17:
         36:eb:05:32:b3:c1:0a:f1:a6:a2:ac:c3:c2:46:d9:ef:9c:8e:
         e8:dd:6f:bc:b9:2a:27:33:d9:43:10:a6:20:f0:33:cf:f0:62:
         7d:1f:ed:73:89:77:9a:46:a6:ca:be:94:5a:57:67:5e:94:dc:
         37:8a:be:7c:2d:b7:cb:67:25:8e:fa:91:a3:a7:84:02:51:2c:
         7b:91:10:c2:a3:72:98:b7:9c:d7:63:15:2b:76:c9:fd:ba:99:
         26:6b:24:90:be:5f:90:fb:20:98:64:a7:f9:bf:dc:4d:6c:62:
         2d:59:4d:e9:80:ab:39:b0:9d:1d:04:b9:8c:b4:e9:a5:25:2a:
         0d:96:99:05:91:23:c6:ba:31:13:44:06:33:09:1e:be:b2:14:
         17:79:54:21:31:7e:df:3d:3c:58:18:fc:69:09:d5:ef:af:f8:
         65:bc:52:00:13:c0:ff:4c:35:5f:cc:f7:d9:2e:ba:1b:b8:6d:
         97:9c:7b:19:ec:1f:70:2a:97:5d:a3:11:d8:4f:39:b1:13:8b:
         9b:3b:db:1c:34:18:54:89:b5:4d:83:67:79:74:e9:bf:ce:0c:
         b3:9c:95:d3:a4:40:b1:9b:57:4e:05:29:90:48:4e:e2:f7:c5:
         38:1b:e8:cb
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUXRHXPJvZ4GRolgZ2vBPo677AtScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM1QUJCQzY4NDJCNUUyNEIwNkM4MEU4NUU5NEE0Mzcx
MEVCNEU5MjAeFw0yNTA1MjMyMTUwMjVaFw0yNjA1MjIyMTU1MjVaMDMxMTAvBgNV
BAMTKEE5Qjk4NEYxODJCMUQ4Q0MxQzA0ODU3MzYzMTBERTk4QjI4RkMyNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWp5QmLV2UV6Sj/TO72GqoQ9/0
HuwcvQJql0IL0bBmKQ/rh6yPGjrwUF/GVdO3EDgLH1zvT9FsYVxrqCx90Z9JYqZE
fd6W1E4d3eOVO0O5flDi34djQTsOGDgW25gBspHkCVJZCzVUzYhFWECd2Q+i3jAo
0fvbYZbMm+bq4x27Ql9TmbUCmqcZp37+67H0bkLtfQV/YSkovU9IOuXOz5jwVB89
A05pNGED/ZutdJQc9z74b1v+AKWzeETdx5VYlLBkVJFpF4DyYSTHsdfPtzXWOhOM
RfFvKDEo36730xo+WY8nTRMUQZ9PXO6z2vVD7Jwp8+mFVFaD1T9C9pxBBW6zAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUqbmE8YKx2MwcBIVzYxDemLKPwm0wHwYDVR0j
BBgwFoAUvFq7xoQrXiSwbIDoXpSkNxDrTpIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNMbnR3b2tva3cyb3hHcFh5WW9IeDNpYnRtbURTUkhFeHhWdFRLNlFx
ODEvMC9CQzVBQkJDNjg0MkI1RTI0QjA2QzgwRTg1RTk0QTQzNzEwRUI0RTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDNUFCQkM2ODQyQjVFMjRC
MDZDODBFODVFOTRBNDM3MTBFQjRFOTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzTG50d29rb2t3Mm94R3BYeVlvSHgzaWJ0bW1EU1JIRXh4VnRUSzZRcTgxLzAv
MzIzODMwMzQzYTM5MzI2MTM4M2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczNDM3MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEkqhAMA0GCSqGSIb3DQEBCwUA
A4IBAQBuvA0uUHdij1czC2Z1MmABWhc26wUys8EK8aairMPCRtnvnI7o3W+8uSon
M9lDEKYg8DPP8GJ9H+1ziXeaRqbKvpRaV2delNw3ir58LbfLZyWO+pGjp4QCUSx7
kRDCo3KYt5zXYxUrdsn9upkmaySQvl+Q+yCYZKf5v9xNbGItWU3pgKs5sJ0dBLmM
tOmlJSoNlpkFkSPGujETRAYzCR6+shQXeVQhMX7fPTxYGPxpCdXvr/hlvFIAE8D/
TDVfzPfZLrobuG2XnHsZ7B9wKpddoxHYTzmxE4ubO9scNBhUibVNg2d5dOm/zgyz
nJXTpECxm1dOBSmQSE7i98U4G+jL
-----END CERTIFICATE-----
Generated at Sat Jun 7 05:34:57 2025 by rpki-client