Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33322d313238203d3e20323636333433.roa
File:                     323830343a333635633a3a2f33322d313238203d3e20323636333433.roa (raw, json)
Hash identifier:          /qOxqhnMTLL1pnlG0JWTdYW6wgXprbZLUH7rD7mCw6o=
Subject key identifier:   51:08:DE:96:25:70:C3:3F:94:A9:37:72:0F:02:CE:B7:07:21:E2:CF
Certificate issuer:       /CN=54CD9C29D2965A102103F5E8772427BF348CBC34
Certificate serial:       789E63879AF54CC2186F60E6376FA405B4661695
Authority key identifier: 54:CD:9C:29:D2:96:5A:10:21:03:F5:E8:77:24:27:BF:34:8C:BC:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CD9C29D2965A102103F5E8772427BF348CBC34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33322d313238203d3e20323636333433.roa
Signing time:             Wed 04 Jun 2025 15:46:59 +0000
ROA not before:           Wed 04 Jun 2025 15:41:59 +0000
ROA not after:            Wed 03 Jun 2026 15:46:59 +0000
asID:                     266343
IP address blocks:        2804:365c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/54CD9C29D2965A102103F5E8772427BF348CBC34.crl
                          rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/54CD9C29D2965A102103F5E8772427BF348CBC34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CD9C29D2965A102103F5E8772427BF348CBC34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 15:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9e:63:87:9a:f5:4c:c2:18:6f:60:e6:37:6f:a4:05:b4:66:16:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CD9C29D2965A102103F5E8772427BF348CBC34
        Validity
            Not Before: Jun  4 15:41:59 2025 GMT
            Not After : Jun  3 15:46:59 2026 GMT
        Subject: CN=5108DE962570C33F94A937720F02CEB70721E2CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a7:69:45:bf:fc:d6:70:38:e2:78:dc:b1:9b:
                    d6:59:28:85:9b:e8:d9:13:08:4f:9d:4d:b4:3c:d0:
                    e1:d2:6c:af:1f:cc:68:dd:32:18:a6:94:d5:e2:96:
                    63:41:77:1a:70:57:d3:74:cd:8b:dc:08:44:ce:34:
                    4e:5c:80:87:84:d3:b5:72:39:d7:c2:e3:66:7d:fd:
                    19:70:d6:5b:ce:02:19:4b:fa:51:be:a4:73:5b:32:
                    16:69:60:c4:30:a0:50:9a:45:1c:93:68:46:33:50:
                    ba:68:d6:03:87:52:51:bc:a2:de:7a:bb:20:5f:f0:
                    d2:af:ce:77:31:40:bf:98:a1:c0:c0:b1:5d:d5:4e:
                    90:81:8d:4c:21:ff:2c:30:c1:7f:73:ea:3b:e4:ec:
                    fd:dd:78:f2:c8:62:f9:4b:76:b8:c7:3b:b7:c4:cc:
                    da:ea:e3:b0:e3:01:98:79:ce:10:4a:11:2b:74:84:
                    44:fb:c4:bc:a2:5e:57:c9:4a:03:c9:8f:7e:fa:47:
                    97:8f:b7:f2:68:1a:fe:66:b5:d9:52:cb:95:4a:95:
                    8b:38:71:f4:9b:78:d6:90:6c:cd:b1:7b:a6:33:c5:
                    08:21:7c:38:f1:3d:1d:32:a4:13:75:af:7d:90:08:
                    fd:31:3a:6b:11:0b:7d:d7:b2:15:c7:d9:99:79:b5:
                    09:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:08:DE:96:25:70:C3:3F:94:A9:37:72:0F:02:CE:B7:07:21:E2:CF
            X509v3 Authority Key Identifier:
                keyid:54:CD:9C:29:D2:96:5A:10:21:03:F5:E8:77:24:27:BF:34:8C:BC:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/54CD9C29D2965A102103F5E8772427BF348CBC34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CD9C29D2965A102103F5E8772427BF348CBC34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33322d313238203d3e20323636333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:365c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:55:72:9f:32:d0:55:fe:5b:2e:a8:42:bd:ad:de:73:93:f1:
         7d:da:e4:1c:df:17:33:fd:8b:0e:e4:db:aa:37:75:ad:8e:46:
         cc:74:04:9c:73:ec:75:b9:17:cd:91:4a:90:42:6b:30:68:68:
         e6:8c:1d:5f:21:07:06:70:f3:08:28:74:55:bc:4c:f3:87:73:
         8b:13:78:92:ce:2e:05:e7:a7:43:46:b4:14:d9:69:58:ab:99:
         d1:50:0f:64:90:bf:eb:de:66:fa:5a:d0:e1:9e:95:e7:14:5c:
         6b:6a:b0:9d:66:e0:56:26:c8:58:67:db:63:02:c5:64:22:fd:
         51:3f:11:5f:95:9c:9c:50:a3:98:17:ae:4d:a2:29:33:f9:08:
         74:81:e1:3e:40:51:da:40:51:28:e5:6e:9f:f7:2c:af:f3:74:
         24:e8:6c:24:df:4b:94:45:21:0c:bc:81:74:0c:6a:71:a5:8f:
         26:06:26:a2:d0:ea:0d:6c:d5:07:41:05:90:18:6f:d3:66:b4:
         c0:ec:fd:1a:37:2e:a1:a5:5d:bd:7f:98:9d:67:f3:da:03:a7:
         c4:1e:1f:d9:a0:ed:b9:8e:1b:76:5f:10:8c:18:e7:03:75:51:
         14:fa:d4:a2:b1:58:6f:ae:f5:c8:41:a3:43:5f:ec:0b:a9:28:
         19:c4:25:97
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUeJ5jh5r1TMIYb2DmN2+kBbRmFpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRDRDlDMjlEMjk2NUExMDIxMDNGNUU4NzcyNDI3QkYz
NDhDQkMzNDAeFw0yNTA2MDQxNTQxNTlaFw0yNjA2MDMxNTQ2NTlaMDMxMTAvBgNV
BAMTKDUxMDhERTk2MjU3MEMzM0Y5NEE5Mzc3MjBGMDJDRUI3MDcyMUUyQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7p2lFv/zWcDjieNyxm9ZZKIWb
6NkTCE+dTbQ80OHSbK8fzGjdMhimlNXilmNBdxpwV9N0zYvcCETONE5cgIeE07Vy
OdfC42Z9/Rlw1lvOAhlL+lG+pHNbMhZpYMQwoFCaRRyTaEYzULpo1gOHUlG8ot56
uyBf8NKvzncxQL+YocDAsV3VTpCBjUwh/ywwwX9z6jvk7P3dePLIYvlLdrjHO7fE
zNrq47DjAZh5zhBKESt0hET7xLyiXlfJSgPJj376R5ePt/JoGv5mtdlSy5VKlYs4
cfSbeNaQbM2xe6YzxQghfDjxPR0ypBN1r32QCP0xOmsRC33XshXH2Zl5tQkrAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUUQjeliVwwz+UqTdyDwLOtwch4s8wHwYDVR0j
BBgwFoAUVM2cKdKWWhAhA/XodyQnvzSMvDQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUtNTjZWbUNuSjNhbWQ4cndSVzlmR1paZ0JLOWRCbXFiemRCd21tZ3Bl
U2UvMC81NENEOUMyOUQyOTY1QTEwMjEwM0Y1RTg3NzI0MjdCRjM0OENCQzM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0Q0Q5QzI5RDI5NjVBMTAy
MTAzRjVFODc3MjQyN0JGMzQ4Q0JDMzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VLTU42Vm1DbkozYW1kOHJ3Ulc5ZkdaWmdCSzlkQm1xYnpkQndtbWdwZVNlLzAv
MzIzODMwMzQzYTMzMzYzNTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzMzM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDZcMA0GCSqGSIb3DQEBCwUAA4IBAQBsVXKf
MtBV/lsuqEK9rd5zk/F92uQc3xcz/YsO5NuqN3WtjkbMdAScc+x1uRfNkUqQQmsw
aGjmjB1fIQcGcPMIKHRVvEzzh3OLE3iSzi4F56dDRrQU2WlYq5nRUA9kkL/r3mb6
WtDhnpXnFFxrarCdZuBWJshYZ9tjAsVkIv1RPxFflZycUKOYF65Noikz+Qh0geE+
QFHaQFEo5W6f9yyv83Qk6Gwk30uURSEMvIF0DGpxpY8mBiai0OoNbNUHQQWQGG/T
ZrTA7P0aNy6hpV29f5idZ/PaA6fEHh/ZoO25jht2XxCMGOcDdVEU+tSisVhvrvXI
QaNDX+wLqSgZxCWX
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:34:44 2025 by rpki-client