Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/323830343a353831303a3a2f33322d3438203d3e20323638313034.roa
File:                     323830343a353831303a3a2f33322d3438203d3e20323638313034.roa (raw, json)
Hash identifier:          h0v9+riMHdqkwtFuQSSEydv/fsiI0Ysz69HDjtIG1MU=
Subject key identifier:   8B:3D:79:1E:A6:AD:CC:F1:20:F2:A4:3C:D9:71:FA:8B:5E:24:2F:3E
Certificate issuer:       /CN=D44D50D076872C7AF0CA51E36D70020A681F7E30
Certificate serial:       3111472E9F4758942B330E61BF5629FF3E5225E3
Authority key identifier: D4:4D:50:D0:76:87:2C:7A:F0:CA:51:E3:6D:70:02:0A:68:1F:7E:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D44D50D076872C7AF0CA51E36D70020A681F7E30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/323830343a353831303a3a2f33322d3438203d3e20323638313034.roa
Signing time:             Tue 17 Jun 2025 12:32:42 +0000
ROA not before:           Tue 17 Jun 2025 12:27:42 +0000
ROA not after:            Tue 16 Jun 2026 12:32:42 +0000
asID:                     268104
IP address blocks:        2804:5810::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.crl
                          rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D44D50D076872C7AF0CA51E36D70020A681F7E30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 13:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:11:47:2e:9f:47:58:94:2b:33:0e:61:bf:56:29:ff:3e:52:25:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D44D50D076872C7AF0CA51E36D70020A681F7E30
        Validity
            Not Before: Jun 17 12:27:42 2025 GMT
            Not After : Jun 16 12:32:42 2026 GMT
        Subject: CN=8B3D791EA6ADCCF120F2A43CD971FA8B5E242F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bf:05:47:d6:a9:ba:2d:4b:10:97:33:1d:7c:
                    45:fc:f8:89:bf:ff:01:57:dd:65:ce:c5:2b:82:e2:
                    9c:49:57:05:bf:74:b9:32:16:1d:64:3f:64:08:94:
                    8b:3f:70:04:fd:4b:89:ad:2b:31:9b:ef:c5:0d:31:
                    61:db:64:9c:50:64:f2:58:e8:12:32:ce:0a:e6:87:
                    2b:97:d9:1f:29:56:fb:9f:8b:4a:99:12:51:ee:f3:
                    97:36:e9:ea:a7:f1:d3:d7:bf:6d:f2:af:5b:a8:94:
                    00:be:73:8a:d3:87:32:b7:fc:ae:8f:83:38:1d:7b:
                    4d:99:14:5d:59:91:3d:4b:27:41:a5:15:1f:52:d4:
                    06:33:76:cb:f0:45:13:47:f7:ba:55:0f:8b:6d:9e:
                    d6:f2:17:b1:3b:a0:6b:78:bc:ac:1d:2a:12:8c:f6:
                    34:7b:a9:2d:24:3d:b5:f4:99:24:db:43:be:ed:aa:
                    ac:e0:2a:aa:fc:3f:f4:1e:9c:0f:07:52:97:06:fa:
                    85:cc:b0:07:e0:ea:d2:f7:67:83:46:dd:b6:73:6c:
                    b6:6c:25:51:51:bc:c5:4e:1d:60:4e:e0:7e:66:73:
                    c5:02:48:04:2b:c8:53:e5:a8:be:3e:a3:64:ad:5a:
                    2b:5e:d0:51:55:47:af:8f:08:74:df:81:23:1f:f1:
                    70:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3D:79:1E:A6:AD:CC:F1:20:F2:A4:3C:D9:71:FA:8B:5E:24:2F:3E
            X509v3 Authority Key Identifier:
                keyid:D4:4D:50:D0:76:87:2C:7A:F0:CA:51:E3:6D:70:02:0A:68:1F:7E:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/D44D50D076872C7AF0CA51E36D70020A681F7E30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D44D50D076872C7AF0CA51E36D70020A681F7E30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2HQRm5ercFqsKsgrKbBhCYpRxGXfXyXHYoHuPVo8Jv1f/0/323830343a353831303a3a2f33322d3438203d3e20323638313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5810::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:70:4e:c4:22:32:58:f4:e8:f8:f7:f7:54:af:17:33:85:69:
         02:50:32:ae:cc:9d:e9:21:30:64:f1:c4:03:dd:6d:90:b9:d8:
         7a:48:77:9e:8a:c0:c7:26:32:87:1a:6c:99:1a:ec:37:42:7b:
         b9:19:9d:5a:98:99:e0:c1:99:09:96:58:e5:cf:17:52:69:fc:
         2f:00:1c:d2:9b:52:84:3c:3d:58:04:dd:6a:59:04:bc:4a:ea:
         2c:5a:88:a3:c4:e0:16:3c:a5:1e:ca:06:e4:a5:ff:75:f3:43:
         6f:2f:8a:81:87:2d:d3:3b:28:1f:5d:e2:d7:e4:77:2f:50:a0:
         03:17:69:33:3b:2b:9f:ee:64:85:89:7d:e9:cc:04:bc:57:2f:
         d3:27:de:ad:f3:53:f7:03:4d:4f:a5:2d:bb:33:46:e4:5b:02:
         06:bd:85:6a:73:79:bd:5d:57:b6:2d:15:b4:be:84:0c:75:be:
         a9:cf:a7:44:f3:e7:bd:12:31:62:fb:6c:95:79:cd:55:44:09:
         61:8e:36:37:e2:cc:e3:aa:06:14:f1:3a:cc:4e:1b:14:aa:2c:
         59:da:17:51:99:59:af:64:e6:4d:0c:2c:75:8c:55:a1:bf:3f:
         6a:ca:f0:73:fa:80:a0:13:cb:6b:f3:91:b4:b1:81:3c:c1:2f:
         17:7a:ff:19
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMRFHLp9HWJQrMw5hv1Yp/z5SJeMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ0RDUwRDA3Njg3MkM3QUYwQ0E1MUUzNkQ3MDAyMEE2
ODFGN0UzMDAeFw0yNTA2MTcxMjI3NDJaFw0yNjA2MTYxMjMyNDJaMDMxMTAvBgNV
BAMTKDhCM0Q3OTFFQTZBRENDRjEyMEYyQTQzQ0Q5NzFGQThCNUUyNDJGM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvwVH1qm6LUsQlzMdfEX8+Im/
/wFX3WXOxSuC4pxJVwW/dLkyFh1kP2QIlIs/cAT9S4mtKzGb78UNMWHbZJxQZPJY
6BIyzgrmhyuX2R8pVvufi0qZElHu85c26eqn8dPXv23yr1uolAC+c4rThzK3/K6P
gzgde02ZFF1ZkT1LJ0GlFR9S1AYzdsvwRRNH97pVD4ttntbyF7E7oGt4vKwdKhKM
9jR7qS0kPbX0mSTbQ77tqqzgKqr8P/QenA8HUpcG+oXMsAfg6tL3Z4NG3bZzbLZs
JVFRvMVOHWBO4H5mc8UCSAQryFPlqL4+o2StWite0FFVR6+PCHTfgSMf8XC/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUiz15HqatzPEg8qQ82XH6i14kLz4wHwYDVR0j
BBgwFoAU1E1Q0HaHLHrwylHjbXACCmgffjAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkhRUm01ZXJjRnFzS3NncktiQmhDWXBSeEdYZlh5WEhZb0h1UFZvOEp2
MWYvMC9ENDRENTBEMDc2ODcyQzdBRjBDQTUxRTM2RDcwMDIwQTY4MUY3RTMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NEQ1MEQwNzY4NzJDN0FG
MENBNTFFMzZENzAwMjBBNjgxRjdFMzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIUVJtNWVyY0Zxc0tzZ3JLYkJoQ1lwUnhHWGZYeVhIWW9IdVBWbzhKdjFmLzAv
MzIzODMwMzQzYTM1MzgzMTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzEzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARYEDANBgkqhkiG9w0BAQsFAAOCAQEAH3BOxCIy
WPTo+Pf3VK8XM4VpAlAyrsyd6SEwZPHEA91tkLnYekh3norAxyYyhxpsmRrsN0J7
uRmdWpiZ4MGZCZZY5c8XUmn8LwAc0ptShDw9WATdalkEvErqLFqIo8TgFjylHsoG
5KX/dfNDby+KgYct0zsoH13i1+R3L1CgAxdpMzsrn+5khYl96cwEvFcv0yferfNT
9wNNT6UtuzNG5FsCBr2FanN5vV1Xti0VtL6EDHW+qc+nRPPnvRIxYvtslXnNVUQJ
YY42N+LM46oGFPE6zE4bFKosWdoXUZlZr2TmTQwsdYxVob8/asrwc/qAoBPLa/OR
tLGBPMEvF3r/GQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:07:15 2025 by rpki-client