Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a343030303a3a2f33342d3334203d3e20323730363032.roa
File:                     323830343a366538343a343030303a3a2f33342d3334203d3e20323730363032.roa (raw, json)
Hash identifier:          MYnYFtBClpEXJLnjUyfrPzN2guTfEqUGWTChi4dljvY=
Subject key identifier:   BA:2C:23:C0:F5:7A:F7:B2:29:70:4D:9E:C0:F7:9D:BB:57:59:9C:4B
Certificate issuer:       /CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
Certificate serial:       79EAC78B18FBDB584E56AAA0A2A25EC2EC00F746
Authority key identifier: EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a343030303a3a2f33342d3334203d3e20323730363032.roa
Signing time:             Wed 25 Jun 2025 12:43:08 +0000
ROA not before:           Wed 25 Jun 2025 12:38:08 +0000
ROA not after:            Wed 24 Jun 2026 12:43:08 +0000
asID:                     270602
IP address blocks:        2804:6e84:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl
                          rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 02:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ea:c7:8b:18:fb:db:58:4e:56:aa:a0:a2:a2:5e:c2:ec:00:f7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
        Validity
            Not Before: Jun 25 12:38:08 2025 GMT
            Not After : Jun 24 12:43:08 2026 GMT
        Subject: CN=BA2C23C0F57AF7B229704D9EC0F79DBB57599C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:73:a4:45:c9:e7:d3:5e:79:d8:66:19:51:24:
                    84:99:fa:7e:b4:f8:c7:f8:76:25:b7:90:4d:15:39:
                    cb:05:1a:b8:b5:b9:dd:db:c8:55:10:70:bf:98:59:
                    63:7f:01:55:2d:a4:f1:45:00:4c:8d:7f:07:9e:f7:
                    aa:e6:3c:ba:14:0c:41:88:19:8b:71:69:33:ad:03:
                    d6:d8:3b:ee:04:42:e5:17:2b:5f:48:9b:e2:13:6f:
                    26:48:1d:37:fa:13:c9:b5:5b:4e:45:9c:14:d8:d1:
                    ce:62:c4:fb:ac:25:e7:1b:c8:d2:f8:32:09:d7:33:
                    b2:e2:1f:48:9d:bf:79:85:f6:e2:87:6d:bd:c4:9e:
                    63:fe:06:3d:b7:56:76:90:e5:8f:13:fa:c6:26:22:
                    ed:04:4a:6c:95:65:c5:a0:52:4c:a9:f3:a4:c7:27:
                    3f:3a:04:d2:ef:99:5c:1c:c0:b5:55:5a:8b:bf:0f:
                    98:12:6a:ad:f1:9a:bc:00:26:cb:95:c0:96:13:fe:
                    07:08:e0:fe:00:44:b6:75:36:b0:92:a6:59:43:57:
                    5c:aa:0e:a7:98:31:13:d8:b9:db:fe:de:29:0f:21:
                    40:21:b1:c2:da:f1:85:25:05:3f:e2:d4:e0:38:30:
                    f3:27:1c:e5:4d:e8:06:96:c8:60:61:22:48:e3:53:
                    40:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2C:23:C0:F5:7A:F7:B2:29:70:4D:9E:C0:F7:9D:BB:57:59:9C:4B
            X509v3 Authority Key Identifier:
                keyid:EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a343030303a3a2f33342d3334203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e84:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:a3:f4:a1:b3:91:58:37:f7:4e:ab:fb:09:90:6e:45:45:
         3b:bf:35:f4:97:ee:45:14:ca:19:45:9f:8a:2e:49:e6:36:9f:
         13:ee:c7:4f:43:d1:e5:f8:a1:3b:18:40:89:29:1d:86:a4:bc:
         5c:a7:ff:95:83:a1:1a:07:24:75:54:06:5e:e1:1b:30:ff:f4:
         01:81:1b:3f:3f:78:a5:d9:f6:2e:ab:6e:45:ea:49:45:4e:f2:
         03:ba:83:cb:eb:88:7f:5b:24:8b:9f:33:d8:b6:b7:a5:e7:7f:
         ca:7c:64:ec:8f:f3:c0:9b:4a:e9:60:83:88:00:bd:5e:b3:98:
         7e:b8:5c:2e:b9:21:62:86:12:c1:64:33:12:b8:aa:af:6d:ba:
         b7:0d:d4:b5:cb:53:f6:39:37:6b:57:ce:f9:a9:f0:8b:d3:b3:
         03:45:1a:60:fd:a9:03:e1:f2:f4:08:b0:56:29:78:8f:02:46:
         03:c2:69:e4:98:37:85:3b:89:c5:9d:01:1b:ea:1f:2c:46:ac:
         0c:90:56:92:0f:a9:c2:58:a9:6f:bc:e7:41:4b:28:81:9e:78:
         d5:cf:46:3a:b6:4d:3c:6e:54:29:16:e6:19:b3:95:3d:50:16:
         dd:a6:82:45:51:bc:7e:a1:48:2f:aa:be:14:57:64:c9:e7:51:
         47:e1:78:ed
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUeerHixj721hOVqqgoqJewuwA90YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE4OTc4RUEzMjZFMEMxMzVCMTdEQTZEQ0E0NjNFRkM0
RjMxM0ZENzAeFw0yNTA2MjUxMjM4MDhaFw0yNjA2MjQxMjQzMDhaMDMxMTAvBgNV
BAMTKEJBMkMyM0MwRjU3QUY3QjIyOTcwNEQ5RUMwRjc5REJCNTc1OTlDNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDc6RFyefTXnnYZhlRJISZ+n60
+Mf4diW3kE0VOcsFGri1ud3byFUQcL+YWWN/AVUtpPFFAEyNfwee96rmPLoUDEGI
GYtxaTOtA9bYO+4EQuUXK19Im+ITbyZIHTf6E8m1W05FnBTY0c5ixPusJecbyNL4
MgnXM7LiH0idv3mF9uKHbb3EnmP+Bj23VnaQ5Y8T+sYmIu0ESmyVZcWgUkyp86TH
Jz86BNLvmVwcwLVVWou/D5gSaq3xmrwAJsuVwJYT/gcI4P4ARLZ1NrCSpllDV1yq
DqeYMRPYudv+3ikPIUAhscLa8YUlBT/i1OA4MPMnHOVN6AaWyGBhIkjjU0AxAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUuiwjwPV697IpcE2ewPedu1dZnEswHwYDVR0j
BBgwFoAU6ol46jJuDBNbF9ptykY+/E8xP9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM29hOGNUa3Riek1jc1ZvcFphMXNLamlDZ0hia1g1bjM4eGpabnFvTWoy
eXIvMC9FQTg5NzhFQTMyNkUwQzEzNUIxN0RBNkRDQTQ2M0VGQzRGMzEzRkQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBODk3OEVBMzI2RTBDMTM1
QjE3REE2RENBNDYzRUZDNEYzMTNGRDcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNvYThjVGt0YnpNY3NWb3BaYTFzS2ppQ2dIYmtYNW4zOHhqWm5xb01qMnlyLzAv
MzIzODMwMzQzYTM2NjUzODM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMDM2MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEboRAMA0GCSqGSIb3DQEBCwUA
A4IBAQAWu6P0obORWDf3Tqv7CZBuRUU7vzX0l+5FFMoZRZ+KLknmNp8T7sdPQ9Hl
+KE7GECJKR2GpLxcp/+Vg6EaByR1VAZe4Rsw//QBgRs/P3il2fYuq25F6klFTvID
uoPL64h/WySLnzPYtrel53/KfGTsj/PAm0rpYIOIAL1es5h+uFwuuSFihhLBZDMS
uKqvbbq3DdS1y1P2OTdrV875qfCL07MDRRpg/akD4fL0CLBWKXiPAkYDwmnkmDeF
O4nFnQEb6h8sRqwMkFaSD6nCWKlvvOdBSyiBnnjVz0Y6tk08blQpFuYZs5U9UBbd
poJFUbx+oUgvqr4UV2TJ51FH4Xjt
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:44:48 2025 by rpki-client