Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/323830343a313537343a313030303a3a2f33362d3336203d3e20323633333839.roa
File:                     323830343a313537343a313030303a3a2f33362d3336203d3e20323633333839.roa (raw, json)
Hash identifier:          Jv7vGMk/DkrMLbjePaPp8kiwIzi/RM5km8aISLhiOM0=
Subject key identifier:   81:E8:B9:3D:D9:48:D2:7B:42:9B:F0:D7:0E:9F:56:D7:6D:73:FB:C6
Certificate issuer:       /CN=11A3253369B722D4E05779F8F48046A43B02EAD1
Certificate serial:       490F1295E63AA5BA370422E3E0FF9D0235502B1F
Authority key identifier: 11:A3:25:33:69:B7:22:D4:E0:57:79:F8:F4:80:46:A4:3B:02:EA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/323830343a313537343a313030303a3a2f33362d3336203d3e20323633333839.roa
Signing time:             Tue 10 Jun 2025 15:00:58 +0000
ROA not before:           Tue 10 Jun 2025 14:55:58 +0000
ROA not after:            Tue 09 Jun 2026 15:00:58 +0000
asID:                     263389
IP address blocks:        2804:1574:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.crl
                          rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 03:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0f:12:95:e6:3a:a5:ba:37:04:22:e3:e0:ff:9d:02:35:50:2b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A3253369B722D4E05779F8F48046A43B02EAD1
        Validity
            Not Before: Jun 10 14:55:58 2025 GMT
            Not After : Jun  9 15:00:58 2026 GMT
        Subject: CN=81E8B93DD948D27B429BF0D70E9F56D76D73FBC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:cd:4b:76:51:68:50:67:5c:8b:3b:4f:47:
                    b0:b5:92:eb:c8:a8:29:06:f3:36:06:ec:06:5a:9d:
                    9a:4e:53:97:f3:82:5e:21:e6:1b:4f:be:bc:b5:7f:
                    33:e2:52:4d:01:43:f4:52:8c:f8:f0:24:bd:d8:15:
                    d7:56:e9:47:f1:4f:9f:75:29:a8:49:13:3d:c9:e2:
                    9d:4f:68:c6:3b:8f:82:18:d2:68:86:f2:98:7b:3a:
                    e2:0f:20:38:a2:b2:4d:99:36:06:e3:8a:c7:7a:af:
                    81:58:32:3a:c5:0d:68:82:7e:86:d3:5c:77:c0:74:
                    c7:f9:04:df:06:3f:a1:d8:7c:c4:67:a0:d2:69:bd:
                    4e:4f:3e:53:55:05:87:ae:a1:a4:b3:a2:ff:e6:be:
                    6d:cb:37:43:eb:16:91:18:11:9a:3b:f7:50:7c:71:
                    3a:2a:ad:2e:0c:93:d1:81:2c:97:c8:ba:29:83:b1:
                    e3:89:37:e8:c6:b9:59:84:59:87:e8:48:a6:0e:9a:
                    13:2d:cf:9a:6f:64:5c:18:bd:dd:2d:67:a9:50:79:
                    c5:82:3f:7b:52:fe:9f:48:05:53:4c:02:54:14:c9:
                    3f:8a:3f:b3:3f:9d:a1:29:5f:8e:45:7d:87:df:cd:
                    d8:49:f8:42:c9:e8:e7:8a:8d:50:18:ce:92:65:8e:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E8:B9:3D:D9:48:D2:7B:42:9B:F0:D7:0E:9F:56:D7:6D:73:FB:C6
            X509v3 Authority Key Identifier:
                keyid:11:A3:25:33:69:B7:22:D4:E0:57:79:F8:F4:80:46:A4:3B:02:EA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/323830343a313537343a313030303a3a2f33362d3336203d3e20323633333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1574:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         65:52:e4:68:b0:6d:f7:59:0a:e3:6f:8d:d2:e6:82:25:a2:86:
         60:67:a1:57:95:76:bb:82:8e:a8:24:96:7c:c7:37:f5:60:98:
         73:5a:b6:39:09:44:05:b6:9d:2c:43:76:4d:93:fd:23:5b:43:
         38:be:27:e1:2c:fd:17:f3:f8:ca:2e:34:bd:63:9a:ab:3f:6d:
         b7:51:f1:ee:c5:40:75:73:4d:5e:4f:e2:9a:53:48:07:a6:6d:
         10:be:20:57:16:76:2e:85:80:fc:20:91:d1:24:50:3e:f3:a4:
         ad:82:de:51:1a:8b:48:8d:12:f5:7c:dd:dc:e1:89:4b:3d:7b:
         a0:53:9d:e0:61:5a:eb:29:ea:43:da:2c:48:4b:c4:99:53:5d:
         ff:ee:e7:c1:bc:61:63:04:09:03:9c:35:54:3a:7c:d9:c1:34:
         43:7e:fa:99:94:44:f6:e1:ea:5c:d7:8f:18:6d:ff:ee:24:3f:
         c4:5c:87:70:d6:29:ba:7d:2f:a3:e0:30:02:53:0e:ea:80:a9:
         bc:8c:1c:6c:0d:ca:c8:0e:dd:94:72:4e:0f:7e:77:25:ee:a4:
         c7:c8:23:be:c6:8a:ef:05:44:73:f0:85:2d:fb:85:35:d4:66:
         b8:43:bd:37:72:40:bf:04:d1:9f:c0:1a:dc:a1:e5:1c:1d:90:
         19:79:a0:56
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUSQ8SleY6pbo3BCLj4P+dAjVQKx8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFBMzI1MzM2OUI3MjJENEUwNTc3OUY4RjQ4MDQ2QTQz
QjAyRUFEMTAeFw0yNTA2MTAxNDU1NThaFw0yNjA2MDkxNTAwNThaMDMxMTAvBgNV
BAMTKDgxRThCOTNERDk0OEQyN0I0MjlCRjBENzBFOUY1NkQ3NkQ3M0ZCQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEtc1LdlFoUGdciztPR7C1kuvI
qCkG8zYG7AZanZpOU5fzgl4h5htPvry1fzPiUk0BQ/RSjPjwJL3YFddW6UfxT591
KahJEz3J4p1PaMY7j4IY0miG8ph7OuIPIDiisk2ZNgbjisd6r4FYMjrFDWiCfobT
XHfAdMf5BN8GP6HYfMRnoNJpvU5PPlNVBYeuoaSzov/mvm3LN0PrFpEYEZo791B8
cToqrS4Mk9GBLJfIuimDseOJN+jGuVmEWYfoSKYOmhMtz5pvZFwYvd0tZ6lQecWC
P3tS/p9IBVNMAlQUyT+KP7M/naEpX45FfYffzdhJ+ELJ6OeKjVAYzpJljhbTAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUgei5PdlI0ntCm/DXDp9W121z+8YwHwYDVR0j
BBgwFoAUEaMlM2m3ItTgV3n49IBGpDsC6tEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHlmR2d4YTV0cVMzZ2c4TGU2dG9Zd0VMam5IUnM5aWJacWYyUnZlRFNH
d28vMC8xMUEzMjUzMzY5QjcyMkQ0RTA1Nzc5RjhGNDgwNDZBNDNCMDJFQUQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQTMyNTMzNjlCNzIyRDRF
MDU3NzlGOEY0ODA0NkE0M0IwMkVBRDEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h5ZkdneGE1dHFTM2dnOExlNnRvWXdFTGpuSFJzOWliWnFmMlJ2ZURTR3dvLzAv
MzIzODMwMzQzYTMxMzUzNzM0M2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzMzMzMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEFXQQMA0GCSqGSIb3DQEBCwUA
A4IBAQBlUuRosG33WQrjb43S5oIlooZgZ6FXlXa7go6oJJZ8xzf1YJhzWrY5CUQF
tp0sQ3ZNk/0jW0M4vifhLP0X8/jKLjS9Y5qrP223UfHuxUB1c01eT+KaU0gHpm0Q
viBXFnYuhYD8IJHRJFA+86Stgt5RGotIjRL1fN3c4YlLPXugU53gYVrrKepD2ixI
S8SZU13/7ufBvGFjBAkDnDVUOnzZwTRDfvqZlET24epc148Ybf/uJD/EXIdw1im6
fS+j4DACUw7qgKm8jBxsDcrIDt2Uck4Pfncl7qTHyCO+xorvBURz8IUt+4U11Ga4
Q703ckC/BNGfwBrcoeUcHZAZeaBW
-----END CERTIFICATE-----
Generated at Thu Jun 12 11:16:29 2025 by rpki-client