Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/323830343a316461383a3a2f33322d313238203d3e20323634333834.roa
File:                     323830343a316461383a3a2f33322d313238203d3e20323634333834.roa (raw, json)
Hash identifier:          SZNfQnJy+8YoF6N8/31nwyII2wLm84N7RXT1MK3wY88=
Subject key identifier:   42:14:01:A5:0B:8B:F3:76:FD:AA:A0:9E:41:35:6E:37:5D:41:31:97
Certificate issuer:       /CN=2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB
Certificate serial:       5C67DF22ACF0C87D482D79709F7C8253EEB5F8F5
Authority key identifier: 2B:9D:F2:4F:92:F5:79:58:C1:0E:33:57:6E:A0:A0:7B:E1:DC:A8:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/323830343a316461383a3a2f33322d313238203d3e20323634333834.roa
Signing time:             Wed 02 Jul 2025 11:59:54 +0000
ROA not before:           Wed 02 Jul 2025 11:54:54 +0000
ROA not after:            Wed 01 Jul 2026 11:59:54 +0000
asID:                     264384
IP address blocks:        2804:1da8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.crl
                          rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 00:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:67:df:22:ac:f0:c8:7d:48:2d:79:70:9f:7c:82:53:ee:b5:f8:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB
        Validity
            Not Before: Jul  2 11:54:54 2025 GMT
            Not After : Jul  1 11:59:54 2026 GMT
        Subject: CN=421401A50B8BF376FDAAA09E41356E375D413197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6e:99:77:28:15:e2:67:e0:49:a7:a4:7d:47:
                    c2:0a:f5:f0:19:3a:d6:3a:16:43:e5:d4:1c:42:80:
                    be:5a:67:45:ad:7b:b2:06:08:4d:f1:a1:84:cd:e3:
                    5a:5e:2b:56:45:89:84:8c:c9:5f:c8:ef:35:d8:18:
                    6e:53:c5:90:35:0f:73:f9:13:a1:71:e8:c2:9e:57:
                    13:c7:fa:7b:50:db:a1:33:2a:ab:67:57:68:dc:b5:
                    08:7b:df:1d:a0:73:1f:31:4e:8d:25:08:bc:2b:e8:
                    d3:d7:4c:cc:41:58:5c:a1:bd:5e:01:6a:70:f2:0b:
                    f1:ac:b6:53:99:73:e1:a1:24:25:e2:37:48:28:74:
                    fc:1d:04:78:bc:e3:f3:46:c9:a6:93:1f:23:25:2f:
                    87:ce:31:df:3f:ee:52:27:15:c8:c7:ac:63:1a:c9:
                    6f:30:7a:04:c5:48:9c:11:90:97:91:cf:8c:db:d2:
                    cb:ca:20:e0:1b:29:e6:b6:39:d9:02:2c:90:ce:ab:
                    b7:59:6f:22:b1:36:95:d8:a0:5a:ed:65:d6:8a:29:
                    38:27:6e:92:9b:4f:8d:62:04:57:f1:73:82:ee:de:
                    72:42:15:01:cc:6d:a8:04:82:47:91:2f:12:c4:95:
                    bf:d4:8e:bd:54:31:38:1f:f2:58:79:48:12:33:e3:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:14:01:A5:0B:8B:F3:76:FD:AA:A0:9E:41:35:6E:37:5D:41:31:97
            X509v3 Authority Key Identifier:
                keyid:2B:9D:F2:4F:92:F5:79:58:C1:0E:33:57:6E:A0:A0:7B:E1:DC:A8:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/323830343a316461383a3a2f33322d313238203d3e20323634333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1da8::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:b5:6a:36:69:7b:8d:f3:ea:31:5c:4b:6f:04:8f:af:6a:60:
         62:a3:dc:99:14:26:89:a1:e3:3e:11:74:67:a0:72:a6:bf:ac:
         7f:34:b2:71:cf:11:3e:48:14:37:76:5d:f6:ad:2e:fd:44:ef:
         9e:a9:54:a7:9a:40:7b:b6:fa:42:d0:9a:59:72:cd:2f:75:fb:
         5c:e5:d5:6f:4b:05:e4:87:a6:21:86:41:0f:07:96:82:4a:c6:
         ee:c7:b8:50:75:8a:bd:33:53:95:32:6d:22:f4:90:bb:26:be:
         97:5d:18:07:d1:e7:51:fe:65:6e:ad:f8:a5:3e:f5:53:a2:15:
         d1:68:14:2a:3b:e3:5b:37:45:90:74:86:92:b1:b5:96:e1:65:
         51:1e:18:14:f5:ee:62:04:a0:46:33:5b:6c:64:be:21:69:63:
         ab:bb:75:bd:8d:38:72:67:ba:ee:ac:99:e5:63:13:9f:bc:bd:
         f1:09:8b:78:3f:bd:8b:f7:91:f8:97:c1:14:d4:3a:34:32:dd:
         ec:37:87:09:dc:ea:05:83:d2:26:a5:c4:58:95:1b:b6:31:f6:
         4f:4d:21:dc:b1:13:2c:e7:08:22:68:f6:f9:b4:6f:83:07:2a:
         4f:38:b9:5a:c7:ee:d6:d8:e6:68:b1:a4:a1:02:fa:cf:05:90:
         17:0b:9f:7f
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUXGffIqzwyH1ILXlwn3yCU+61+PUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI5REYyNEY5MkY1Nzk1OEMxMEUzMzU3NkVBMEEwN0JF
MURDQThGQjAeFw0yNTA3MDIxMTU0NTRaFw0yNjA3MDExMTU5NTRaMDMxMTAvBgNV
BAMTKDQyMTQwMUE1MEI4QkYzNzZGREFBQTA5RTQxMzU2RTM3NUQ0MTMxOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobpl3KBXiZ+BJp6R9R8IK9fAZ
OtY6FkPl1BxCgL5aZ0Wte7IGCE3xoYTN41peK1ZFiYSMyV/I7zXYGG5TxZA1D3P5
E6Fx6MKeVxPH+ntQ26EzKqtnV2jctQh73x2gcx8xTo0lCLwr6NPXTMxBWFyhvV4B
anDyC/GstlOZc+GhJCXiN0godPwdBHi84/NGyaaTHyMlL4fOMd8/7lInFcjHrGMa
yW8wegTFSJwRkJeRz4zb0svKIOAbKea2OdkCLJDOq7dZbyKxNpXYoFrtZdaKKTgn
bpKbT41iBFfxc4Lu3nJCFQHMbagEgkeRLxLElb/Ujr1UMTgf8lh5SBIz4xfFAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUQhQBpQuL83b9qqCeQTVuN11BMZcwHwYDVR0j
BBgwFoAUK53yT5L1eVjBDjNXbqCge+HcqPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRjdllNNld2dzNDa0JqYzlINTE3ZWV2aDYzemtkWFBUWVRXeVNCTkQ3
dnYvMS8yQjlERjI0RjkyRjU3OTU4QzEwRTMzNTc2RUEwQTA3QkUxRENBOEZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCOURGMjRGOTJGNTc5NThD
MTBFMzM1NzZFQTBBMDdCRTFEQ0E4RkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o0Y3ZZTTZXdnczQ2tCamM5SDUxN2Vldmg2M3prZFhQVFlUV3lTQk5EN3Z2LzEv
MzIzODMwMzQzYTMxNjQ2MTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzMzM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBB2oMA0GCSqGSIb3DQEBCwUAA4IBAQARtWo2
aXuN8+oxXEtvBI+vamBio9yZFCaJoeM+EXRnoHKmv6x/NLJxzxE+SBQ3dl32rS79
RO+eqVSnmkB7tvpC0JpZcs0vdftc5dVvSwXkh6YhhkEPB5aCSsbux7hQdYq9M1OV
Mm0i9JC7Jr6XXRgH0edR/mVurfilPvVTohXRaBQqO+NbN0WQdIaSsbWW4WVRHhgU
9e5iBKBGM1tsZL4haWOru3W9jThyZ7rurJnlYxOfvL3xCYt4P72L95H4l8EU1Do0
Mt3sN4cJ3OoFg9ImpcRYlRu2MfZPTSHcsRMs5wgiaPb5tG+DBypPOLlax+7W2OZo
saShAvrPBZAXC59/
-----END CERTIFICATE-----
Generated at Fri Jul 4 16:08:11 2025 by rpki-client