Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa
File:                     323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa (raw, json)
Hash identifier:          nS3WHvyAwdkvDNrZKqolPkysifNRraVq63Rpy2PdrXM=
Subject key identifier:   AB:10:EE:B3:74:28:9B:47:20:73:04:45:EE:64:4F:FF:7F:F3:83:69
Certificate issuer:       /CN=612546079777C83995107BFA129E54CE43A50026
Certificate serial:       617258041068CEED40E50DCB3AB51267237C5F43
Authority key identifier: 61:25:46:07:97:77:C8:39:95:10:7B:FA:12:9E:54:CE:43:A5:00:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa
Signing time:             Wed 04 Jun 2025 13:21:56 +0000
ROA not before:           Wed 04 Jun 2025 13:16:56 +0000
ROA not after:            Wed 03 Jun 2026 13:21:56 +0000
asID:                     263887
IP address blocks:        2804:2740:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.crl
                          rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 14:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:72:58:04:10:68:ce:ed:40:e5:0d:cb:3a:b5:12:67:23:7c:5f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612546079777C83995107BFA129E54CE43A50026
        Validity
            Not Before: Jun  4 13:16:56 2025 GMT
            Not After : Jun  3 13:21:56 2026 GMT
        Subject: CN=AB10EEB374289B4720730445EE644FFF7FF38369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:cb:52:7c:5a:61:68:0e:6e:b1:84:8a:d2:
                    2d:76:f1:b3:a3:3f:23:49:34:ae:e5:ee:16:3a:69:
                    f9:e8:f9:5a:cf:14:bb:87:b3:14:04:ce:7a:b3:31:
                    dc:6b:a2:66:9f:de:3c:2e:ac:39:79:7d:76:af:52:
                    dd:8c:38:ca:42:6c:60:b8:06:8d:9b:8e:25:88:1a:
                    ad:6b:25:3c:27:e2:f6:a8:e6:5d:33:1e:0e:53:17:
                    7f:23:38:f3:21:38:6a:4c:21:3a:e3:cc:b4:33:ca:
                    1d:1f:e4:79:b6:3d:c7:9e:f0:33:ca:0e:f6:67:db:
                    c1:2f:d0:d0:a6:92:1f:5f:64:ff:30:fc:59:5c:6b:
                    75:4e:bc:a1:58:fc:7c:c0:2d:35:65:19:93:89:27:
                    0e:cf:52:a4:c2:b5:2e:45:5f:ea:11:76:33:64:20:
                    83:bb:f6:8a:2d:88:ac:fc:04:f9:aa:50:50:e1:50:
                    9e:3b:76:0b:ee:37:96:07:00:5e:66:0b:32:bc:07:
                    13:67:dd:c9:2a:6c:e1:77:01:0d:e5:db:a4:01:1e:
                    e6:42:c9:d5:4d:1c:58:ed:46:2e:fb:3c:5b:f8:fa:
                    2a:df:ee:a1:4f:6e:a6:af:ee:30:50:33:5a:2d:8f:
                    ba:57:01:57:86:0d:65:b3:60:92:d0:1f:d1:58:4b:
                    9f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:10:EE:B3:74:28:9B:47:20:73:04:45:EE:64:4F:FF:7F:F3:83:69
            X509v3 Authority Key Identifier:
                keyid:61:25:46:07:97:77:C8:39:95:10:7B:FA:12:9E:54:CE:43:A5:00:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/612546079777C83995107BFA129E54CE43A50026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/612546079777C83995107BFA129E54CE43A50026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/323830343a323734303a343030303a3a2f34302d3430203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2740:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:4f:48:9b:d1:c4:52:85:40:7d:48:25:ee:6c:5d:4f:f6:
         ca:2f:88:9c:dd:ea:c9:aa:52:e0:ac:53:45:c6:da:20:4e:bf:
         f0:6e:c9:3f:11:c9:68:70:11:84:55:fe:c1:7f:68:84:2d:20:
         73:a9:0e:f2:63:7b:fe:3f:bb:16:e2:f7:32:6d:dc:19:84:0d:
         6e:e6:f0:3b:63:a7:df:b5:25:ae:ff:ad:cd:c1:99:85:7f:1a:
         74:a6:22:6a:6b:ac:fe:a9:aa:1b:c9:39:22:de:ff:fd:f9:73:
         e6:09:ce:6d:c5:a9:c1:3c:55:ab:9e:e8:00:02:0b:b4:67:1c:
         4c:73:b8:47:1a:dc:2e:6a:be:84:79:9d:04:79:9f:e5:21:e1:
         1f:5b:3c:d9:ca:5b:4d:93:03:7b:11:9e:8b:5b:dc:6f:66:7e:
         ad:47:64:cd:3a:48:79:15:a6:5a:a2:6f:34:bf:eb:0d:88:de:
         1b:4d:ef:45:0b:07:b8:b7:ab:a5:96:b7:3a:77:c1:cf:b5:0d:
         a7:e6:ec:0f:e2:8a:c0:44:6c:04:1c:21:fa:8f:fa:0e:32:2f:
         e1:08:1c:0c:70:86:0d:ef:26:dd:d8:aa:16:d3:10:a5:e2:b4:
         d1:ef:d9:c1:a4:b4:3c:f2:4f:f5:2f:d1:c0:97:7f:58:67:67:
         76:72:13:c4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYXJYBBBozu1A5Q3LOrUSZyN8X0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEyNTQ2MDc5Nzc3QzgzOTk1MTA3QkZBMTI5RTU0Q0U0
M0E1MDAyNjAeFw0yNTA2MDQxMzE2NTZaFw0yNjA2MDMxMzIxNTZaMDMxMTAvBgNV
BAMTKEFCMTBFRUIzNzQyODlCNDcyMDczMDQ0NUVFNjQ0RkZGN0ZGMzgzNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6stSfFphaA5usYSK0i128bOj
PyNJNK7l7hY6afno+VrPFLuHsxQEznqzMdxromaf3jwurDl5fXavUt2MOMpCbGC4
Bo2bjiWIGq1rJTwn4vao5l0zHg5TF38jOPMhOGpMITrjzLQzyh0f5Hm2Pcee8DPK
DvZn28Ev0NCmkh9fZP8w/Flca3VOvKFY/HzALTVlGZOJJw7PUqTCtS5FX+oRdjNk
IIO79ootiKz8BPmqUFDhUJ47dgvuN5YHAF5mCzK8BxNn3ckqbOF3AQ3l26QBHuZC
ydVNHFjtRi77PFv4+irf7qFPbqav7jBQM1otj7pXAVeGDWWzYJLQH9FYS5/PAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUqxDus3Qom0cgcwRF7mRP/3/zg2kwHwYDVR0j
BBgwFoAUYSVGB5d3yDmVEHv6Ep5UzkOlACYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlFLU3Rta1NFTUZzZGdiTFlIeHNWSkVhRmtmb1pFVkxSeTQ5eDNHb3dE
SDIvMC82MTI1NDYwNzk3NzdDODM5OTUxMDdCRkExMjlFNTRDRTQzQTUwMDI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMjU0NjA3OTc3N0M4Mzk5
NTEwN0JGQTEyOUU1NENFNDNBNTAwMjYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZRS1N0bWtTRU1Gc2RnYkxZSHhzVkpFYUZrZm9aRVZMUnk0OXgzR293REgyLzAv
MzIzODMwMzQzYTMyMzczNDMwM2EzNDMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzMzM4MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEJ0BAMA0GCSqGSIb3DQEBCwUA
A4IBAQCL9k9Im9HEUoVAfUgl7mxdT/bKL4ic3erJqlLgrFNFxtogTr/wbsk/Eclo
cBGEVf7Bf2iELSBzqQ7yY3v+P7sW4vcybdwZhA1u5vA7Y6fftSWu/63NwZmFfxp0
piJqa6z+qaobyTki3v/9+XPmCc5txanBPFWrnugAAgu0ZxxMc7hHGtwuar6EeZ0E
eZ/lIeEfWzzZyltNkwN7EZ6LW9xvZn6tR2TNOkh5FaZaom80v+sNiN4bTe9FCwe4
t6ullrc6d8HPtQ2n5uwP4orARGwEHCH6j/oOMi/hCBwMcIYN7ybd2KoW0xCl4rTR
79nBpLQ88k/1L9HAl39YZ2d2chPE
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:29:11 2025 by rpki-client