Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/323830343a336361303a3a2f33322d313238203d3e203631353939.roa
File:                     323830343a336361303a3a2f33322d313238203d3e203631353939.roa (raw, json)
Hash identifier:          Az1HRYxCLtmiNCgqQqg333qg8goKl+ij8ML1bdBt9PQ=
Subject key identifier:   65:F4:63:86:A2:D3:79:AA:52:DE:21:20:4F:1A:52:04:3B:44:84:BF
Certificate issuer:       /CN=FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5
Certificate serial:       5D8851E60C4FAEDDDC7528ADCF6D16D4B881C56D
Authority key identifier: FF:7F:52:96:B0:F2:ED:E1:0E:D5:7E:3B:FB:8D:49:70:31:8D:7D:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/323830343a336361303a3a2f33322d313238203d3e203631353939.roa
Signing time:             Wed 04 Jun 2025 19:04:11 +0000
ROA not before:           Wed 04 Jun 2025 18:59:11 +0000
ROA not after:            Wed 03 Jun 2026 19:04:11 +0000
asID:                     61599
IP address blocks:        2804:3ca0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.crl
                          rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 01:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:88:51:e6:0c:4f:ae:dd:dc:75:28:ad:cf:6d:16:d4:b8:81:c5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5
        Validity
            Not Before: Jun  4 18:59:11 2025 GMT
            Not After : Jun  3 19:04:11 2026 GMT
        Subject: CN=65F46386A2D379AA52DE21204F1A52043B4484BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:09:84:9c:c5:c4:20:7a:67:c4:c1:68:b7:
                    91:b2:eb:c2:5f:94:4d:0a:6b:cd:8b:50:6b:08:90:
                    8f:f0:83:b5:96:2e:f6:c0:22:4b:8d:68:d5:1a:9a:
                    f1:42:60:06:56:5c:0c:07:c0:b0:5b:44:6f:a8:17:
                    5f:01:aa:d5:a8:27:e5:fb:d6:e6:77:c1:79:6d:f9:
                    92:cc:4a:0b:79:63:48:ab:cb:fd:3d:ae:e0:9f:55:
                    54:4a:c6:35:03:10:f7:7b:57:39:5c:21:57:2c:26:
                    79:10:ef:8d:98:33:b7:3e:6b:a1:cb:b6:49:a7:9a:
                    6a:8a:75:36:21:59:4f:ee:5b:ca:7e:88:72:12:a1:
                    6b:f5:ac:d4:33:e2:f5:27:df:45:ff:c6:ba:92:04:
                    62:e5:c3:6b:5f:74:cb:87:bb:28:ae:0e:39:e5:c1:
                    25:39:dd:54:8a:a8:8f:77:32:7c:7b:03:29:5d:09:
                    bc:94:3b:6e:c9:c3:c0:7d:b2:54:91:06:37:a4:ea:
                    9c:d7:17:29:9d:ed:06:00:f0:f0:de:f9:c3:03:0e:
                    57:e0:1f:d4:38:e9:10:bb:62:13:66:5a:f1:2e:f5:
                    88:b8:27:14:63:93:ad:98:97:4a:44:88:c3:e3:f9:
                    00:0e:cf:d5:fe:86:5c:89:fc:b8:5a:5f:5c:44:a7:
                    c0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F4:63:86:A2:D3:79:AA:52:DE:21:20:4F:1A:52:04:3B:44:84:BF
            X509v3 Authority Key Identifier:
                keyid:FF:7F:52:96:B0:F2:ED:E1:0E:D5:7E:3B:FB:8D:49:70:31:8D:7D:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/323830343a336361303a3a2f33322d313238203d3e203631353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:7b:c9:7d:3c:aa:78:bb:54:6e:ae:2d:27:0c:ec:92:76:e4:
         79:d1:ae:a1:ca:c2:9d:78:ba:e0:06:04:19:36:9e:d1:42:dc:
         b4:eb:92:dc:fd:11:c8:3e:4f:ac:2f:27:2a:c9:74:46:89:9a:
         16:5c:73:1d:f1:e7:74:be:39:56:0b:3c:48:91:ae:6f:d8:cb:
         2a:59:c1:72:5c:04:a3:9d:4e:5d:fa:01:21:ec:21:ec:ab:2f:
         ad:87:b9:95:69:a0:5f:47:bf:b1:77:96:eb:6d:f1:68:4f:91:
         8b:3f:72:f6:6a:e6:f5:6c:99:f3:06:b8:f6:74:60:d9:5f:7a:
         b2:d4:41:ed:c6:16:c2:58:1d:69:a8:e9:9b:05:83:06:50:b6:
         69:04:df:25:be:c6:c5:d5:de:32:ea:f1:2c:ca:a4:4f:8d:d1:
         f8:36:7d:d4:a6:2d:9d:e0:ea:34:0e:4c:96:a9:ea:94:de:a6:
         8e:70:93:c9:34:74:b0:5e:e4:7e:a6:0c:0e:d8:fd:b9:9c:4a:
         56:c0:58:74:77:a8:19:e4:be:6e:a2:53:f5:33:e7:d4:eb:df:
         c1:c0:0f:6a:29:60:34:45:0a:75:c4:39:12:7d:34:37:35:69:
         bc:45:79:17:ca:64:c2:cf:3b:94:94:6b:3c:e4:d2:a8:f2:a7:
         dc:2e:56:be
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUXYhR5gxPrt3cdSitz20W1LiBxW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY3RjUyOTZCMEYyRURFMTBFRDU3RTNCRkI4RDQ5NzAz
MThEN0RDNTAeFw0yNTA2MDQxODU5MTFaFw0yNjA2MDMxOTA0MTFaMDMxMTAvBgNV
BAMTKDY1RjQ2Mzg2QTJEMzc5QUE1MkRFMjEyMDRGMUE1MjA0M0I0NDg0QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIrgmEnMXEIHpnxMFot5Gy68Jf
lE0Ka82LUGsIkI/wg7WWLvbAIkuNaNUamvFCYAZWXAwHwLBbRG+oF18BqtWoJ+X7
1uZ3wXlt+ZLMSgt5Y0iry/09ruCfVVRKxjUDEPd7VzlcIVcsJnkQ742YM7c+a6HL
tkmnmmqKdTYhWU/uW8p+iHISoWv1rNQz4vUn30X/xrqSBGLlw2tfdMuHuyiuDjnl
wSU53VSKqI93Mnx7AyldCbyUO27Jw8B9slSRBjek6pzXFymd7QYA8PDe+cMDDlfg
H9Q46RC7YhNmWvEu9Yi4JxRjk62Yl0pEiMPj+QAOz9X+hlyJ/LhaX1xEp8BBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUZfRjhqLTeapS3iEgTxpSBDtEhL8wHwYDVR0j
BBgwFoAU/39SlrDy7eEO1X47+41JcDGNfcUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE5pVkZ2c3FZS3RDMVNpMVNEYkEyM3d4V1dBZW1rcko4Q1N4elV2c0ht
Tm8vMC9GRjdGNTI5NkIwRjJFREUxMEVENTdFM0JGQjhENDk3MDMxOEQ3REM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGN0Y1Mjk2QjBGMkVERTEw
RUQ1N0UzQkZCOEQ0OTcwMzE4RDdEQzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzROaVZGdnNxWUt0QzFTaTFTRGJBMjN3eFdXQWVta3JKOENTeHpVdnNIbU5vLzAv
MzIzODMwMzQzYTMzNjM2MTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNjMx
MzUzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ8oDANBgkqhkiG9w0BAQsFAAOCAQEAH3vJfTyq
eLtUbq4tJwzsknbkedGuocrCnXi64AYEGTae0ULctOuS3P0RyD5PrC8nKsl0Roma
FlxzHfHndL45Vgs8SJGub9jLKlnBclwEo51OXfoBIewh7KsvrYe5lWmgX0e/sXeW
623xaE+Riz9y9mrm9WyZ8wa49nRg2V96stRB7cYWwlgdaajpmwWDBlC2aQTfJb7G
xdXeMurxLMqkT43R+DZ91KYtneDqNA5MlqnqlN6mjnCTyTR0sF7kfqYMDtj9uZxK
VsBYdHeoGeS+bqJT9TPn1OvfwcAPailgNEUKdcQ5En00NzVpvEV5F8pkws87lJRr
POTSqPKn3C5Wvg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 08:21:24 2025 by rpki-client