Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a666630303a3a2f34302d3634203d3e20323636333638.roa
File:                     323830343a333662633a666630303a3a2f34302d3634203d3e20323636333638.roa (raw, json)
Hash identifier:          C0/yqItAFQj1KJnnPppaOjKdMiGqv6B5uZTn/BQhro4=
Subject key identifier:   B6:AC:CD:AB:41:49:C0:D7:72:5A:74:CB:8E:F4:F2:2A:A5:A0:D6:87
Certificate issuer:       /CN=536DE1C52594C50A13E5683BE9F9A3133E1884CE
Certificate serial:       7F32D5D33B90E7290233EB3E016DAC27C838232C
Authority key identifier: 53:6D:E1:C5:25:94:C5:0A:13:E5:68:3B:E9:F9:A3:13:3E:18:84:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/536DE1C52594C50A13E5683BE9F9A3133E1884CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a666630303a3a2f34302d3634203d3e20323636333638.roa
Signing time:             Sat 28 Jun 2025 19:07:43 +0000
ROA not before:           Sat 28 Jun 2025 19:02:43 +0000
ROA not after:            Sat 27 Jun 2026 19:07:43 +0000
asID:                     266368
IP address blocks:        2804:36bc:ff00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/536DE1C52594C50A13E5683BE9F9A3133E1884CE.crl
                          rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/536DE1C52594C50A13E5683BE9F9A3133E1884CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/536DE1C52594C50A13E5683BE9F9A3133E1884CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:32:d5:d3:3b:90:e7:29:02:33:eb:3e:01:6d:ac:27:c8:38:23:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=536DE1C52594C50A13E5683BE9F9A3133E1884CE
        Validity
            Not Before: Jun 28 19:02:43 2025 GMT
            Not After : Jun 27 19:07:43 2026 GMT
        Subject: CN=B6ACCDAB4149C0D7725A74CB8EF4F22AA5A0D687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:7a:73:5b:3d:e9:db:bd:29:b4:0b:b6:a9:
                    0e:f3:fe:3d:e8:ce:99:d2:5a:64:9b:1f:5c:90:05:
                    03:7c:02:7d:62:e9:52:9b:b8:54:a5:f0:fa:84:fb:
                    9e:84:50:72:64:97:f0:3b:ad:4d:7a:09:2a:b6:c4:
                    f3:69:8f:14:3c:93:f2:7b:2d:a6:7a:87:21:b1:a9:
                    98:e2:2e:28:ce:98:e7:28:4f:bc:3d:05:08:c9:65:
                    ef:5a:e8:9f:67:9c:e4:d7:fd:30:65:d0:26:bf:f2:
                    7a:9d:f1:2e:66:41:57:9b:9f:67:2a:c1:a0:38:27:
                    04:bc:be:93:df:80:04:72:52:38:0b:e3:fe:b7:4a:
                    7c:d4:42:eb:37:91:e3:64:9e:95:a3:6f:d4:96:d0:
                    00:1a:99:e1:86:e8:7f:1b:39:6d:38:b4:f2:a9:35:
                    c7:1f:e3:08:48:9a:38:4d:91:7a:5c:fa:27:bf:ee:
                    43:95:dc:71:e8:ea:27:98:65:b4:a6:d1:1e:03:8d:
                    86:b5:5a:51:4e:a1:87:06:a4:19:71:fd:7c:f8:3c:
                    27:9a:f7:94:2f:f2:e7:52:cc:d0:10:37:56:49:d3:
                    f3:ff:9d:a3:a2:53:db:f8:ac:8d:d2:c5:99:a3:30:
                    d2:e6:e0:f8:99:4d:64:b6:b0:49:13:5e:4e:3d:a8:
                    3d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AC:CD:AB:41:49:C0:D7:72:5A:74:CB:8E:F4:F2:2A:A5:A0:D6:87
            X509v3 Authority Key Identifier:
                keyid:53:6D:E1:C5:25:94:C5:0A:13:E5:68:3B:E9:F9:A3:13:3E:18:84:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/536DE1C52594C50A13E5683BE9F9A3133E1884CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/536DE1C52594C50A13E5683BE9F9A3133E1884CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a666630303a3a2f34302d3634203d3e20323636333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36bc:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:bb:9f:9e:d0:9e:db:fd:8e:5e:be:50:e1:3a:b9:ff:88:20:
         ba:8b:81:ac:c8:ad:f1:90:0e:06:da:60:fa:48:b0:6c:6b:86:
         41:a8:e7:5c:0c:69:e6:cb:85:50:45:c0:48:d4:e1:65:7b:a8:
         79:c5:a8:ed:d5:57:79:0a:5c:82:bb:97:ab:0b:c7:4e:f5:05:
         87:b2:bd:d3:64:c1:d4:77:b3:a1:d5:67:75:18:ae:4d:77:1c:
         83:ef:b2:1e:67:33:14:d6:c8:4e:3b:0f:32:ed:d0:65:e5:6e:
         52:d0:4e:12:10:23:4d:2d:e5:f0:87:94:71:db:e8:27:ff:98:
         96:8f:f9:18:6c:4c:d8:45:fa:70:ff:29:03:ff:87:14:e6:b0:
         e6:9c:6e:45:0b:5c:3c:9f:07:56:68:8a:6e:e0:8b:69:c0:36:
         ba:2e:31:c9:8d:bb:b8:6a:04:93:42:b0:4b:27:7d:ba:d2:4a:
         46:c1:1c:fa:c3:56:5b:c9:71:a3:90:86:13:53:5d:3b:94:e1:
         a7:45:31:f3:6f:24:86:b9:24:46:bf:4e:36:9c:85:ab:1c:92:
         ed:67:e5:9d:d5:94:7e:35:a7:73:a7:3d:aa:8a:1c:47:8c:fa:
         08:d5:de:c2:92:cf:c6:40:9e:7f:bc:b6:f9:d7:75:85:c2:3a:
         e4:89:63:9f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUfzLV0zuQ5ykCM+s+AW2sJ8g4IywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM2REUxQzUyNTk0QzUwQTEzRTU2ODNCRTlGOUEzMTMz
RTE4ODRDRTAeFw0yNTA2MjgxOTAyNDNaFw0yNjA2MjcxOTA3NDNaMDMxMTAvBgNV
BAMTKEI2QUNDREFCNDE0OUMwRDc3MjVBNzRDQjhFRjRGMjJBQTVBMEQ2ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGs3pzWz3p270ptAu2qQ7z/j3o
zpnSWmSbH1yQBQN8An1i6VKbuFSl8PqE+56EUHJkl/A7rU16CSq2xPNpjxQ8k/J7
LaZ6hyGxqZjiLijOmOcoT7w9BQjJZe9a6J9nnOTX/TBl0Ca/8nqd8S5mQVebn2cq
waA4JwS8vpPfgARyUjgL4/63SnzUQus3keNknpWjb9SW0AAameGG6H8bOW04tPKp
Nccf4whImjhNkXpc+ie/7kOV3HHo6ieYZbSm0R4DjYa1WlFOoYcGpBlx/Xz4PCea
95Qv8udSzNAQN1ZJ0/P/naOiU9v4rI3SxZmjMNLm4PiZTWS2sEkTXk49qD1NAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUtqzNq0FJwNdyWnTLjvTyKqWg1ocwHwYDVR0j
BBgwFoAUU23hxSWUxQoT5Wg76fmjEz4YhM4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjFmZ2V3TFUzR25HZlJ6OGZZQ0R3UXhjcVFkUVpIU0JxR01pZ2RuWE1p
TU0vMC81MzZERTFDNTI1OTRDNTBBMTNFNTY4M0JFOUY5QTMxMzNFMTg4NENFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzNkRFMUM1MjU5NEM1MEEx
M0U1NjgzQkU5RjlBMzEzM0UxODg0Q0UuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYxZmdld0xVM0duR2ZSejhmWUNEd1F4Y3FRZFFaSFNCcUdNaWdkblhNaU1NLzAv
MzIzODMwMzQzYTMzMzY2MjYzM2E2NjY2MzAzMDNhM2EyZjM0MzAyZDM2MzQyMDNk
M2UyMDMyMzYzNjMzMzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgENrz/MA0GCSqGSIb3DQEBCwUA
A4IBAQA/u5+e0J7b/Y5evlDhOrn/iCC6i4GsyK3xkA4G2mD6SLBsa4ZBqOdcDGnm
y4VQRcBI1OFle6h5xajt1Vd5ClyCu5erC8dO9QWHsr3TZMHUd7Oh1Wd1GK5NdxyD
77IeZzMU1shOOw8y7dBl5W5S0E4SECNNLeXwh5Rx2+gn/5iWj/kYbEzYRfpw/ykD
/4cU5rDmnG5FC1w8nwdWaIpu4ItpwDa6LjHJjbu4agSTQrBLJ3260kpGwRz6w1Zb
yXGjkIYTU107lOGnRTHzbySGuSRGv042nIWrHJLtZ+Wd1ZR+Nadzpz2qihxHjPoI
1d7Cks/GQJ5/vLb513WFwjrkiWOf
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:03:26 2025 by rpki-client