Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa
File:                     323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa (raw, json)
Hash identifier:          xgp/sj/vfgACCSC0W37Q6hpg8yTXHwfefQbzpoi/7/s=
Subject key identifier:   D1:62:AB:D4:01:73:12:BB:22:0B:A0:CF:A5:47:CC:B3:3B:1A:CC:43
Certificate issuer:       /CN=83846E182B5864F5550CA4AE8052E6D6E1F3AC6C
Certificate serial:       08B4858129C4E9407EA1438A91D3281452A931BB
Authority key identifier: 83:84:6E:18:2B:58:64:F5:55:0C:A4:AE:80:52:E6:D6:E1:F3:AC:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa
Signing time:             Tue 03 Jun 2025 17:27:19 +0000
ROA not before:           Tue 03 Jun 2025 17:22:19 +0000
ROA not after:            Tue 02 Jun 2026 17:27:19 +0000
asID:                     267035
IP address blocks:        2804:4728:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.crl
                          rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 12:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b4:85:81:29:c4:e9:40:7e:a1:43:8a:91:d3:28:14:52:a9:31:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83846E182B5864F5550CA4AE8052E6D6E1F3AC6C
        Validity
            Not Before: Jun  3 17:22:19 2025 GMT
            Not After : Jun  2 17:27:19 2026 GMT
        Subject: CN=D162ABD4017312BB220BA0CFA547CCB33B1ACC43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:b4:b1:91:b9:1f:4f:ad:31:b7:97:0b:aa:
                    0e:bb:81:a0:f9:20:6b:2c:95:86:28:64:a0:ed:74:
                    49:7b:10:74:40:2c:b9:10:bd:4e:95:f7:d2:b2:f1:
                    21:2d:10:c9:7a:8f:61:25:05:28:da:2b:81:26:50:
                    a1:1d:5f:45:23:49:e5:57:8f:00:c0:3c:52:f9:ad:
                    f4:89:6a:81:f2:eb:40:fc:9e:e2:b5:36:35:52:b1:
                    97:14:bc:0f:e6:ed:00:b4:ff:2f:1b:ab:e6:b5:17:
                    60:e4:4c:b4:a5:63:26:2d:b5:e4:13:c0:b8:0a:7d:
                    42:4b:b3:76:a5:c0:e9:c8:bd:29:b5:b8:c0:56:2e:
                    d5:0f:be:e1:25:1b:b6:7e:9d:d1:92:42:a5:6b:30:
                    2d:ec:60:e5:c4:64:c4:12:88:87:bc:f4:cc:42:fa:
                    c4:cb:85:c4:41:b1:ba:9b:26:81:08:87:c8:a9:a7:
                    eb:5e:ca:d3:b9:be:ae:40:b0:87:8f:b2:12:7a:04:
                    8b:0f:46:bf:b4:3e:fd:40:6c:8a:22:fd:15:e5:73:
                    92:00:d3:44:72:d2:d4:fd:3e:6a:79:49:fd:3d:0b:
                    5d:6a:e0:ff:84:a0:9c:d8:ca:cb:86:34:47:c0:d4:
                    a3:03:38:99:4d:20:c6:86:65:6e:29:dc:a2:58:45:
                    84:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:62:AB:D4:01:73:12:BB:22:0B:A0:CF:A5:47:CC:B3:3B:1A:CC:43
            X509v3 Authority Key Identifier:
                keyid:83:84:6E:18:2B:58:64:F5:55:0C:A4:AE:80:52:E6:D6:E1:F3:AC:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83846E182B5864F5550CA4AE8052E6D6E1F3AC6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4728:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         30:ee:f9:12:b5:55:5e:d3:ae:af:6f:e7:91:d3:c9:e2:e1:36:
         2b:b2:af:03:42:90:cd:ee:c3:45:57:50:16:46:54:e7:63:c5:
         4d:73:93:8e:3b:ba:55:85:5a:8c:81:e6:be:e7:e9:22:6a:62:
         6c:62:2f:8f:da:08:b5:f4:2d:6d:d0:62:aa:f8:c1:e4:4c:e7:
         4a:2f:08:f0:1e:71:40:4d:37:27:f8:6c:ce:23:a4:ad:64:2c:
         a4:5c:ed:6d:2c:e7:d0:5e:32:df:d9:4b:bd:3d:87:b4:05:84:
         60:8f:df:d6:b6:d8:d5:cd:22:c2:e7:ef:c7:78:a6:71:4c:19:
         43:57:eb:7a:3c:ca:59:60:68:f7:34:54:e4:a7:9d:9b:ef:b5:
         a2:46:56:ef:39:5c:88:ee:8a:4e:47:eb:2e:0d:4f:c0:1b:1f:
         cf:92:ca:38:2d:6a:25:e7:b0:03:6e:dc:fc:12:b4:14:94:b4:
         e9:7e:d8:8e:bf:6d:62:35:6d:b2:8e:74:4d:ee:6c:20:dd:ab:
         be:80:2d:3a:d9:70:44:ed:91:92:e1:b2:73:82:37:a9:de:d8:
         c9:59:ff:33:1d:20:b9:80:0c:9b:28:31:7a:11:03:4e:42:83:
         79:2d:18:b7:26:d0:29:9b:d9:be:a5:c4:5e:75:7d:cc:de:f1:
         8c:2b:12:6c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUCLSFgSnE6UB+oUOKkdMoFFKpMbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM4NDZFMTgyQjU4NjRGNTU1MENBNEFFODA1MkU2RDZF
MUYzQUM2QzAeFw0yNTA2MDMxNzIyMTlaFw0yNjA2MDIxNzI3MTlaMDMxMTAvBgNV
BAMTKEQxNjJBQkQ0MDE3MzEyQkIyMjBCQTBDRkE1NDdDQ0IzM0IxQUNDNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yrSxkbkfT60xt5cLqg67gaD5
IGsslYYoZKDtdEl7EHRALLkQvU6V99Ky8SEtEMl6j2ElBSjaK4EmUKEdX0UjSeVX
jwDAPFL5rfSJaoHy60D8nuK1NjVSsZcUvA/m7QC0/y8bq+a1F2DkTLSlYyYtteQT
wLgKfUJLs3alwOnIvSm1uMBWLtUPvuElG7Z+ndGSQqVrMC3sYOXEZMQSiIe89MxC
+sTLhcRBsbqbJoEIh8ipp+teytO5vq5AsIePshJ6BIsPRr+0Pv1AbIoi/RXlc5IA
00Ry0tT9Pmp5Sf09C11q4P+EoJzYysuGNEfA1KMDOJlNIMaGZW4p3KJYRYRXAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQU0WKr1AFzErsiC6DPpUfMszsazEMwHwYDVR0j
BBgwFoAUg4RuGCtYZPVVDKSugFLm1uHzrGwwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZSm5SQlVvTFZyZ1Y2dktvTDdtaVVwZ3E1b0xLa25MZFlGeTRoaWRVM0U2
LzAvODM4NDZFMTgyQjU4NjRGNTU1MENBNEFFODA1MkU2RDZFMUYzQUM2Qy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84Mzg0NkUxODJCNTg2NEY1NTUw
Q0E0QUU4MDUyRTZENkUxRjNBQzZDLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
Sm5SQlVvTFZyZ1Y2dktvTDdtaVVwZ3E1b0xLa25MZFlGeTRoaWRVM0U2LzAvMzIz
ODMwMzQzYTM0MzczMjM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNkM2Uy
MDMyMzYzNzMwMzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygERyiAMA0GCSqGSIb3DQEBCwUAA4IB
AQAw7vkStVVe066vb+eR08ni4TYrsq8DQpDN7sNFV1AWRlTnY8VNc5OOO7pVhVqM
gea+5+kiamJsYi+P2gi19C1t0GKq+MHkTOdKLwjwHnFATTcn+GzOI6StZCykXO1t
LOfQXjLf2Uu9PYe0BYRgj9/WttjVzSLC5+/HeKZxTBlDV+t6PMpZYGj3NFTkp52b
77WiRlbvOVyI7opOR+suDU/AGx/Pkso4LWol57ADbtz8ErQUlLTpftiOv21iNW2y
jnRN7mwg3au+gC062XBE7ZGS4bJzgjep3tjJWf8zHSC5gAybKDF6EQNOQoN5LRi3
JtApm9m+pcRedX3M3vGMKxJs
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:44:11 2025 by rpki-client