Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/323830343a366461633a3a2f33322d3438203d3e20323730353438.roa
File:                     323830343a366461633a3a2f33322d3438203d3e20323730353438.roa (raw, json)
Hash identifier:          oacsEKK0tR8SvaDkdmw6bQUnyqsJ1O2xTY3fQKgwbFk=
Subject key identifier:   6A:F4:E1:65:DF:09:60:72:74:A6:2A:BE:34:0A:B8:A1:CF:81:60:55
Certificate issuer:       /CN=5279C74540A375ED58505424645F77B2DD6FB06D
Certificate serial:       06DF42556B4C9B50ACEB3F8D2089D1C3B427FD06
Authority key identifier: 52:79:C7:45:40:A3:75:ED:58:50:54:24:64:5F:77:B2:DD:6F:B0:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279C74540A375ED58505424645F77B2DD6FB06D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/323830343a366461633a3a2f33322d3438203d3e20323730353438.roa
Signing time:             Tue 17 Jun 2025 19:17:54 +0000
ROA not before:           Tue 17 Jun 2025 19:12:54 +0000
ROA not after:            Tue 16 Jun 2026 19:17:54 +0000
asID:                     270548
IP address blocks:        2804:6dac::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/5279C74540A375ED58505424645F77B2DD6FB06D.crl
                          rsync://rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/5279C74540A375ED58505424645F77B2DD6FB06D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279C74540A375ED58505424645F77B2DD6FB06D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 09:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:df:42:55:6b:4c:9b:50:ac:eb:3f:8d:20:89:d1:c3:b4:27:fd:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5279C74540A375ED58505424645F77B2DD6FB06D
        Validity
            Not Before: Jun 17 19:12:54 2025 GMT
            Not After : Jun 16 19:17:54 2026 GMT
        Subject: CN=6AF4E165DF09607274A62ABE340AB8A1CF816055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8a:77:87:a0:96:c0:44:85:57:2c:39:14:6b:
                    26:4d:92:cd:f2:22:a6:7c:3b:e2:fb:17:25:d3:e8:
                    df:d0:95:b0:89:1c:75:c3:97:cd:33:f0:fe:f4:fc:
                    5a:98:32:9c:77:9b:bc:14:9a:2c:ca:10:58:49:83:
                    f2:35:a5:cd:ea:22:e5:d0:c1:e5:a9:b4:0e:31:3a:
                    7a:16:b3:e6:a9:a7:45:53:f1:4d:49:8c:f8:c1:79:
                    c1:34:30:4c:48:84:97:a1:79:ee:99:46:85:3f:a9:
                    03:85:31:7a:ad:42:be:d4:b9:7c:a4:60:50:92:75:
                    90:18:c9:23:32:e2:65:9a:71:aa:87:f3:10:3a:6b:
                    70:eb:92:d9:68:cd:75:2b:79:b7:af:b6:be:82:f9:
                    be:f4:b1:30:4a:ba:28:1c:79:f6:92:19:cf:ba:66:
                    aa:b4:e1:37:f9:35:94:72:b1:81:38:d0:47:b6:14:
                    1f:db:ac:8e:20:88:50:cb:74:65:d8:c3:84:8b:ac:
                    cf:cb:5f:87:71:34:7d:6f:2c:0e:ae:cd:5b:45:44:
                    9b:67:b0:fd:de:4c:91:11:fd:81:de:70:9c:43:c4:
                    66:72:66:3a:b8:66:3a:ae:fa:72:26:76:45:9d:e2:
                    c6:9b:83:e1:36:a6:86:6e:d5:cf:bf:98:2a:f4:02:
                    c1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F4:E1:65:DF:09:60:72:74:A6:2A:BE:34:0A:B8:A1:CF:81:60:55
            X509v3 Authority Key Identifier:
                keyid:52:79:C7:45:40:A3:75:ED:58:50:54:24:64:5F:77:B2:DD:6F:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/5279C74540A375ED58505424645F77B2DD6FB06D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279C74540A375ED58505424645F77B2DD6FB06D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/323830343a366461633a3a2f33322d3438203d3e20323730353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6dac::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:fe:50:dc:3e:c0:d1:c9:0f:91:de:0c:d6:64:72:dc:6d:2f:
         7b:4b:37:e1:2a:fe:69:cf:c6:f7:c4:08:59:66:e9:22:a5:e1:
         6c:b0:2a:22:23:78:1f:48:38:e8:6b:99:79:9c:eb:ef:37:31:
         25:06:44:f5:e4:04:3f:91:5f:9a:38:bb:64:20:c2:e4:53:ff:
         7f:d1:9a:3e:26:f8:ce:b8:e4:af:7a:ef:88:9b:d8:4c:36:7a:
         83:f0:f5:89:6c:52:e0:a7:04:b1:2e:73:6e:4a:23:22:a4:42:
         15:84:44:c1:74:4d:30:7a:6e:d0:fe:3a:2b:be:d5:64:0e:9b:
         ef:06:be:d5:91:01:c5:52:53:47:80:9d:4a:1e:69:09:8d:0f:
         6e:2d:52:c6:84:9d:4e:62:23:69:8c:a5:14:a6:9f:62:26:e8:
         5e:63:1d:a9:d9:02:6e:f5:c4:07:24:ea:51:c9:92:13:02:2e:
         19:52:35:6b:b2:12:87:f4:e6:3f:d5:8c:23:ef:b8:aa:8e:56:
         96:72:52:27:d7:1b:77:fc:b2:e4:a9:b9:a4:09:c6:8f:66:2c:
         03:8f:dc:96:31:56:de:08:d7:b4:90:67:58:2a:57:c2:e5:63:
         13:5b:1f:81:16:80:93:e0:5f:9a:1b:0a:bb:73:a8:d3:ce:b5:
         01:2c:74:3f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBt9CVWtMm1Cs6z+NIInRw7Qn/QYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI3OUM3NDU0MEEzNzVFRDU4NTA1NDI0NjQ1Rjc3QjJE
RDZGQjA2RDAeFw0yNTA2MTcxOTEyNTRaFw0yNjA2MTYxOTE3NTRaMDMxMTAvBgNV
BAMTKDZBRjRFMTY1REYwOTYwNzI3NEE2MkFCRTM0MEFCOEExQ0Y4MTYwNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQineHoJbARIVXLDkUayZNks3y
IqZ8O+L7FyXT6N/QlbCJHHXDl80z8P70/FqYMpx3m7wUmizKEFhJg/I1pc3qIuXQ
weWptA4xOnoWs+app0VT8U1JjPjBecE0MExIhJehee6ZRoU/qQOFMXqtQr7UuXyk
YFCSdZAYySMy4mWacaqH8xA6a3DrktlozXUrebevtr6C+b70sTBKuigcefaSGc+6
Zqq04Tf5NZRysYE40Ee2FB/brI4giFDLdGXYw4SLrM/LX4dxNH1vLA6uzVtFRJtn
sP3eTJER/YHecJxDxGZyZjq4Zjqu+nImdkWd4sabg+E2poZu1c+/mCr0AsGLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUavThZd8JYHJ0piq+NAq4oc+BYFUwHwYDVR0j
BBgwFoAUUnnHRUCjde1YUFQkZF93st1vsG0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1Y4QmJCQXhSYkJqRHd6MTQzQ2tSNzhtanhMdU1Xdmt0SEZ4aUpvN3dL
OW4vMC81Mjc5Qzc0NTQwQTM3NUVENTg1MDU0MjQ2NDVGNzdCMkRENkZCMDZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyNzlDNzQ1NDBBMzc1RUQ1
ODUwNTQyNDY0NUY3N0IyREQ2RkIwNkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dWOEJiQkF4UmJCakR3ejE0M0NrUjc4bWp4THVNV3ZrdEhGeGlKbzd3SzluLzAv
MzIzODMwMzQzYTM2NjQ2MTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzUzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARtrDANBgkqhkiG9w0BAQsFAAOCAQEAxv5Q3D7A
0ckPkd4M1mRy3G0ve0s34Sr+ac/G98QIWWbpIqXhbLAqIiN4H0g46GuZeZzr7zcx
JQZE9eQEP5Ffmji7ZCDC5FP/f9GaPib4zrjkr3rviJvYTDZ6g/D1iWxS4KcEsS5z
bkojIqRCFYREwXRNMHpu0P46K77VZA6b7wa+1ZEBxVJTR4CdSh5pCY0Pbi1SxoSd
TmIjaYylFKafYiboXmMdqdkCbvXEByTqUcmSEwIuGVI1a7ISh/TmP9WMI++4qo5W
lnJSJ9cbd/yy5Km5pAnGj2YsA4/cljFW3gjXtJBnWCpXwuVjE1sfgRaAk+BfmhsK
u3Oo0861ASx0Pw==
-----END CERTIFICATE-----
Generated at Sat Jul 5 02:38:16 2025 by rpki-client