Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/323830343a346530343a3a2f33322d3336203d3e20323638323334.roa
File:                     323830343a346530343a3a2f33322d3336203d3e20323638323334.roa (raw, json)
Hash identifier:          hLDjbQzcckaN2JpRGkSnQpsPf4FMqLQBrM4o8h0xQuU=
Subject key identifier:   77:AF:D2:85:1C:E1:C5:A3:0A:7D:F8:34:81:34:C1:AE:E2:D9:AE:C8
Certificate issuer:       /CN=34D2D112FBB2360F44F9772873942AC8955FC4D6
Certificate serial:       7F2A58F7BCFE8334B49D7B360C064B1A18B7FD68
Authority key identifier: 34:D2:D1:12:FB:B2:36:0F:44:F9:77:28:73:94:2A:C8:95:5F:C4:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34D2D112FBB2360F44F9772873942AC8955FC4D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/323830343a346530343a3a2f33322d3336203d3e20323638323334.roa
Signing time:             Fri 13 Jun 2025 00:07:53 +0000
ROA not before:           Fri 13 Jun 2025 00:02:53 +0000
ROA not after:            Fri 12 Jun 2026 00:07:53 +0000
asID:                     268234
IP address blocks:        2804:4e04::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34D2D112FBB2360F44F9772873942AC8955FC4D6.crl
                          rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34D2D112FBB2360F44F9772873942AC8955FC4D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34D2D112FBB2360F44F9772873942AC8955FC4D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 11:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2a:58:f7:bc:fe:83:34:b4:9d:7b:36:0c:06:4b:1a:18:b7:fd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D2D112FBB2360F44F9772873942AC8955FC4D6
        Validity
            Not Before: Jun 13 00:02:53 2025 GMT
            Not After : Jun 12 00:07:53 2026 GMT
        Subject: CN=77AFD2851CE1C5A30A7DF8348134C1AEE2D9AEC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:11:15:e6:96:0f:e7:73:3d:ca:11:a2:1c:
                    13:bd:f6:7e:2b:11:b7:92:df:e0:a5:0d:bf:2b:fe:
                    53:a7:37:db:cf:b0:5d:67:ad:0c:5d:00:2c:00:f0:
                    a4:ba:36:36:33:ef:31:29:58:94:07:4a:31:70:7e:
                    41:d0:47:f9:8d:7c:78:a1:bf:f9:1d:5a:6c:42:ae:
                    e0:1f:5b:90:ba:14:e0:e1:a0:7c:b5:31:37:16:4b:
                    1a:59:a7:c5:30:d6:a9:21:98:52:13:82:d9:eb:bc:
                    51:1a:a1:2f:4a:fc:44:56:d6:b0:67:6e:18:ce:00:
                    67:2a:c4:a4:5d:fa:da:ac:89:c4:56:48:25:3a:25:
                    4d:45:3b:d7:b9:8e:d3:98:9d:b7:4d:bd:4a:fe:7d:
                    f1:19:cd:dc:dc:3e:60:5a:81:22:f7:79:a3:8c:d9:
                    94:df:97:3a:cd:29:b2:89:40:e5:dc:d6:e3:f5:52:
                    35:be:5b:56:57:2a:ef:d3:51:5a:88:36:4f:25:c2:
                    9a:9f:31:38:6f:ea:b0:b8:bd:bf:15:4b:88:1d:5c:
                    63:90:ff:46:5c:40:d9:dd:61:ee:0c:22:2b:6b:a4:
                    96:ed:f5:43:16:1f:66:5b:74:a1:be:7b:5d:3f:0a:
                    92:2b:c2:9e:1d:ce:2e:13:6e:56:44:ba:92:75:ee:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AF:D2:85:1C:E1:C5:A3:0A:7D:F8:34:81:34:C1:AE:E2:D9:AE:C8
            X509v3 Authority Key Identifier:
                keyid:34:D2:D1:12:FB:B2:36:0F:44:F9:77:28:73:94:2A:C8:95:5F:C4:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/34D2D112FBB2360F44F9772873942AC8955FC4D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34D2D112FBB2360F44F9772873942AC8955FC4D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/0/323830343a346530343a3a2f33322d3336203d3e20323638323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e04::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:f4:e7:8d:fe:14:2b:b5:9e:30:59:e6:4a:8f:9d:8c:42:87:
         30:bc:e7:92:c9:75:be:64:1c:64:99:83:ec:49:1e:47:de:ef:
         89:e9:86:a9:d6:4f:03:80:a9:e9:c5:14:15:49:fd:55:d7:24:
         50:2f:7f:55:fe:aa:71:9a:6a:b1:4e:53:5c:0c:de:4b:f3:fc:
         bd:c6:6e:eb:18:3c:9f:fe:57:cd:f4:52:f2:92:2e:fa:7c:bb:
         35:1a:d9:3e:46:39:5d:c6:54:d3:3d:86:1b:35:4d:0d:02:3f:
         10:63:62:18:f5:34:54:d9:d0:9a:ab:a2:e2:fe:c5:92:cb:bb:
         e7:dd:82:66:18:03:ce:9e:2c:fa:83:6b:80:40:18:8b:ab:7c:
         56:09:21:e2:9a:8e:8c:49:6d:a9:de:27:0b:f0:9a:2e:e1:10:
         c1:b9:6c:1b:82:3f:76:cf:19:3f:2e:53:3a:a9:13:c5:ea:3d:
         5c:77:cc:49:9e:9b:01:91:05:12:5b:7a:41:d0:30:46:d3:25:
         4d:68:96:fb:87:a4:88:c2:73:07:84:90:02:7c:46:3e:91:68:
         0d:a7:92:57:54:ba:c3:4d:45:ab:4d:4e:00:2a:87:8a:ae:d6:
         f4:76:41:08:09:e1:d5:5b:24:63:d6:87:e9:8f:61:90:9f:4e:
         27:19:71:e7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfypY97z+gzS0nXs2DAZLGhi3/WgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzREMkQxMTJGQkIyMzYwRjQ0Rjk3NzI4NzM5NDJBQzg5
NTVGQzRENjAeFw0yNTA2MTMwMDAyNTNaFw0yNjA2MTIwMDA3NTNaMDMxMTAvBgNV
BAMTKDc3QUZEMjg1MUNFMUM1QTMwQTdERjgzNDgxMzRDMUFFRTJEOUFFQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe1xEV5pYP53M9yhGiHBO99n4r
EbeS3+ClDb8r/lOnN9vPsF1nrQxdACwA8KS6NjYz7zEpWJQHSjFwfkHQR/mNfHih
v/kdWmxCruAfW5C6FODhoHy1MTcWSxpZp8Uw1qkhmFITgtnrvFEaoS9K/ERW1rBn
bhjOAGcqxKRd+tqsicRWSCU6JU1FO9e5jtOYnbdNvUr+ffEZzdzcPmBagSL3eaOM
2ZTflzrNKbKJQOXc1uP1UjW+W1ZXKu/TUVqINk8lwpqfMThv6rC4vb8VS4gdXGOQ
/0ZcQNndYe4MIitrpJbt9UMWH2ZbdKG+e10/CpIrwp4dzi4TblZEupJ17voxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUd6/ShRzhxaMKffg0gTTBruLZrsgwHwYDVR0j
BBgwFoAUNNLREvuyNg9E+Xcoc5QqyJVfxNYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMldmS0Fya0pmMW9VNjQ1Z2Y0YXhGalZXbjhGajl6bkpBVXJReFo1dlJW
WUgvMC8zNEQyRDExMkZCQjIzNjBGNDRGOTc3Mjg3Mzk0MkFDODk1NUZDNEQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0RDJEMTEyRkJCMjM2MEY0
NEY5NzcyODczOTQyQUM4OTU1RkM0RDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJXZktBcmtKZjFvVTY0NWdmNGF4RmpWV244Rmo5em5KQVVyUXhaNXZSVllILzAv
MzIzODMwMzQzYTM0NjUzMDM0M2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM4
MzIzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAROBDANBgkqhkiG9w0BAQsFAAOCAQEATfTnjf4U
K7WeMFnmSo+djEKHMLznksl1vmQcZJmD7EkeR97viemGqdZPA4Cp6cUUFUn9Vdck
UC9/Vf6qcZpqsU5TXAzeS/P8vcZu6xg8n/5XzfRS8pIu+ny7NRrZPkY5XcZU0z2G
GzVNDQI/EGNiGPU0VNnQmqui4v7Fksu7592CZhgDzp4s+oNrgEAYi6t8Vgkh4pqO
jEltqd4nC/CaLuEQwblsG4I/ds8ZPy5TOqkTxeo9XHfMSZ6bAZEFElt6QdAwRtMl
TWiW+4ekiMJzB4SQAnxGPpFoDaeSV1S6w01Fq01OACqHiq7W9HZBCAnh1VskY9aH
6Y9hkJ9OJxlx5w==
-----END CERTIFICATE-----
Generated at Thu Jul 3 15:05:58 2025 by rpki-client