Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33332d3333203d3e20323633393230.roa
File:                     323830343a323763303a3a2f33332d3333203d3e20323633393230.roa (raw, json)
Hash identifier:          MTiAGVkYJRaNBYaG/TgnnCtEvc9/wf2ZYSnCwu4LpR0=
Subject key identifier:   47:60:2F:88:55:2E:1A:CA:5F:2D:A1:35:59:15:41:D4:60:D8:3B:AE
Certificate issuer:       /CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
Certificate serial:       7A6952ACA66265FFAE806F15430AA22FC1A381EF
Authority key identifier: D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33332d3333203d3e20323633393230.roa
Signing time:             Tue 27 May 2025 20:34:47 +0000
ROA not before:           Tue 27 May 2025 20:29:47 +0000
ROA not after:            Tue 26 May 2026 20:34:47 +0000
asID:                     263920
IP address blocks:        2804:27c0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 01:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:69:52:ac:a6:62:65:ff:ae:80:6f:15:43:0a:a2:2f:c1:a3:81:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
        Validity
            Not Before: May 27 20:29:47 2025 GMT
            Not After : May 26 20:34:47 2026 GMT
        Subject: CN=47602F88552E1ACA5F2DA135591541D460D83BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:85:e8:73:3f:69:7b:2b:6d:78:69:8e:18:66:
                    24:12:71:e8:5e:f7:6d:04:f4:c5:98:0a:53:1d:72:
                    43:2f:02:8b:43:13:4e:91:fd:6f:32:eb:52:e9:37:
                    55:f6:8c:40:c0:cc:eb:00:07:43:57:b1:ba:c4:ea:
                    89:c0:75:70:be:87:80:54:a2:46:49:0c:06:de:90:
                    af:02:52:94:ec:38:3b:2f:a1:ea:e9:8a:73:d8:dc:
                    0c:b1:3a:52:2b:9d:b7:6d:80:69:f7:63:c0:40:b2:
                    41:b2:cb:2e:58:be:bc:d2:36:8e:f8:97:16:08:6f:
                    88:13:cc:1f:cf:f5:5b:94:d5:23:de:21:79:f9:23:
                    9e:73:ba:2a:13:cd:ff:3e:0f:22:5c:8f:23:ea:8a:
                    18:04:73:29:73:3c:88:1c:0a:a1:3b:64:34:34:da:
                    61:e1:65:2d:ff:c1:53:d1:9f:68:9c:94:e4:8d:db:
                    92:fa:0f:8e:0b:e3:9b:70:32:c2:2a:82:fa:0d:2b:
                    3a:67:06:91:e2:6c:ba:4d:2f:a0:79:eb:75:8d:93:
                    b5:38:60:9b:ea:c7:b6:42:d5:b9:16:41:46:51:2a:
                    10:2e:49:96:a5:25:69:df:25:9b:b5:33:eb:20:d0:
                    65:4b:09:9a:43:93:75:f8:e4:5c:6d:81:ed:a5:f7:
                    21:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:60:2F:88:55:2E:1A:CA:5F:2D:A1:35:59:15:41:D4:60:D8:3B:AE
            X509v3 Authority Key Identifier:
                keyid:D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33332d3333203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c0::/33

    Signature Algorithm: sha256WithRSAEncryption
         29:c1:7d:e0:45:15:2e:da:d6:b7:60:e9:1c:91:51:ba:2a:43:
         c5:65:89:c7:0b:dd:bf:64:79:2f:1a:d7:a3:26:4c:19:48:e2:
         d6:6e:56:28:25:96:3f:8e:4e:47:eb:6c:ca:18:d1:ec:c2:50:
         d7:17:0e:63:cf:09:fb:56:33:54:1e:af:d1:4a:aa:c1:ef:81:
         d3:de:5c:16:43:3e:62:b6:9f:6f:f2:cb:ce:6c:00:da:10:f2:
         c5:d8:2e:24:b1:05:23:f1:6c:11:b4:3a:d0:80:18:15:c3:ab:
         7d:1a:d4:43:44:4d:68:8a:28:18:71:76:6d:4e:d5:b9:6b:53:
         ec:37:e7:22:ca:56:22:99:c3:da:fe:97:59:96:eb:52:8c:b9:
         51:44:64:73:d8:24:15:09:5a:5e:f1:c9:d3:73:02:ef:a5:1e:
         6e:0c:c2:c2:d2:b1:47:54:62:77:c3:e6:93:2f:d7:40:31:f7:
         a6:07:72:82:65:96:57:be:03:b4:60:c9:0d:fc:b3:84:91:c3:
         28:88:94:5f:e6:e9:96:88:dd:03:bf:36:a4:33:bf:81:50:88:
         b4:28:f0:6d:9a:e0:58:3c:85:63:0e:78:40:b3:34:50:7c:fd:
         52:dc:5b:14:69:17:71:7b:c5:50:6e:bc:11:2e:29:b2:9f:23:
         0a:68:4f:21
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUemlSrKZiZf+ugG8VQwqiL8Gjge8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg3RkNBOTQzRTk4Qjg4MDZBNjA2RjVCMEY4QkU3Mjk0
QzREOTNBMzAeFw0yNTA1MjcyMDI5NDdaFw0yNjA1MjYyMDM0NDdaMDMxMTAvBgNV
BAMTKDQ3NjAyRjg4NTUyRTFBQ0E1RjJEQTEzNTU5MTU0MUQ0NjBEODNCQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwhehzP2l7K214aY4YZiQScehe
920E9MWYClMdckMvAotDE06R/W8y61LpN1X2jEDAzOsAB0NXsbrE6onAdXC+h4BU
okZJDAbekK8CUpTsODsvoerpinPY3AyxOlIrnbdtgGn3Y8BAskGyyy5YvrzSNo74
lxYIb4gTzB/P9VuU1SPeIXn5I55zuioTzf8+DyJcjyPqihgEcylzPIgcCqE7ZDQ0
2mHhZS3/wVPRn2iclOSN25L6D44L45twMsIqgvoNKzpnBpHibLpNL6B563WNk7U4
YJvqx7ZC1bkWQUZRKhAuSZalJWnfJZu1M+sg0GVLCZpDk3X45Fxtge2l9yHFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUR2AviFUuGspfLaE1WRVB1GDYO64wHwYDVR0j
BBgwFoAU2H/KlD6YuIBqYG9bD4vnKUxNk6MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUY3Mk1KZTE4c3BCQWJMTlZEdWM2QjNCaXBDZk5LbnRRTnd1aFpBd2U4
OG8vMC9EODdGQ0E5NDNFOThCODgwNkE2MDZGNUIwRjhCRTcyOTRDNEQ5M0EzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4N0ZDQTk0M0U5OEI4ODA2
QTYwNkY1QjBGOEJFNzI5NEM0RDkzQTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGNzJNSmUxOHNwQkFiTE5WRHVjNkIzQmlwQ2ZOS250UU53dWhaQXdlODhvLzAv
MzIzODMwMzQzYTMyMzc2MzMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjMz
MzkzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQnwAAwDQYJKoZIhvcNAQELBQADggEBACnBfeBF
FS7a1rdg6RyRUboqQ8VliccL3b9keS8a16MmTBlI4tZuVigllj+OTkfrbMoY0ezC
UNcXDmPPCftWM1Qer9FKqsHvgdPeXBZDPmK2n2/yy85sANoQ8sXYLiSxBSPxbBG0
OtCAGBXDq30a1ENETWiKKBhxdm1O1blrU+w35yLKViKZw9r+l1mW61KMuVFEZHPY
JBUJWl7xydNzAu+lHm4MwsLSsUdUYnfD5pMv10Ax96YHcoJllle+A7RgyQ38s4SR
wyiIlF/m6ZaI3QO/NqQzv4FQiLQo8G2a4Fg8hWMOeECzNFB8/VLcWxRpF3F7xVBu
vBEuKbKfIwpoTyE=
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:59:57 2025 by rpki-client