Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a3a2f33322d3438203d3e20323633363134.roa
File:                     323830343a313030343a3a2f33322d3438203d3e20323633363134.roa (raw, json)
Hash identifier:          TE8GcW0GVH6lmfMEnBmpCyszhLtUPaDXuWsOzVcMsOg=
Subject key identifier:   B0:B5:3B:A7:03:78:EC:67:32:89:CA:B4:C6:FD:7B:6E:7A:31:BA:58
Certificate issuer:       /CN=12284CDA6822A8D5AD2892F46CF3BBE009E300C8
Certificate serial:       73523CFFD5A627BC334ECE7FE5895745073E8359
Authority key identifier: 12:28:4C:DA:68:22:A8:D5:AD:28:92:F4:6C:F3:BB:E0:09:E3:00:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a3a2f33322d3438203d3e20323633363134.roa
Signing time:             Fri 02 May 2025 16:21:19 +0000
ROA not before:           Fri 02 May 2025 16:16:19 +0000
ROA not after:            Fri 01 May 2026 16:21:19 +0000
asID:                     263614
IP address blocks:        2804:1004::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.crl
                          rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 08:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:52:3c:ff:d5:a6:27:bc:33:4e:ce:7f:e5:89:57:45:07:3e:83:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12284CDA6822A8D5AD2892F46CF3BBE009E300C8
        Validity
            Not Before: May  2 16:16:19 2025 GMT
            Not After : May  1 16:21:19 2026 GMT
        Subject: CN=B0B53BA70378EC673289CAB4C6FD7B6E7A31BA58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bc:b4:39:5f:8c:06:0a:b0:93:52:ef:83:76:
                    69:1e:4b:aa:35:71:3c:1a:c7:a2:55:e5:29:0c:24:
                    cc:bf:29:54:d0:66:f6:6d:77:6c:fa:6b:d2:1f:0a:
                    07:cf:34:17:c8:af:13:e1:e9:cf:1d:5a:bb:0f:16:
                    c6:39:4c:09:52:53:37:e2:a4:46:81:31:5b:a4:af:
                    2d:01:9e:db:fc:07:ce:1a:c8:09:2a:c3:e3:d2:36:
                    83:3a:d7:db:f3:6a:2e:4c:77:b6:89:0c:2d:d6:ac:
                    fe:aa:2a:f7:3c:2c:80:9c:da:d2:85:bd:55:54:68:
                    b1:8a:b1:0b:2a:ea:cc:ed:3a:b1:ff:8c:bf:19:ae:
                    e2:95:3c:d6:bd:64:6c:ea:7f:8a:38:b3:08:23:73:
                    dc:cc:51:a8:3e:88:29:d9:59:39:47:19:09:38:28:
                    61:76:a8:35:0c:94:67:d9:cd:90:a8:ff:2d:40:fa:
                    a3:3c:40:43:8f:1e:fc:54:d6:3c:a9:e8:fe:ea:94:
                    d1:30:6a:18:36:0c:c5:53:52:85:1f:0b:6b:29:37:
                    51:8d:ea:79:86:0d:40:a8:3e:8a:13:eb:50:e8:12:
                    73:f2:aa:a3:59:1f:a3:f1:e1:0a:2a:61:79:49:43:
                    49:81:90:d3:05:a0:70:cd:f1:86:fd:dc:5a:06:f7:
                    b5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B5:3B:A7:03:78:EC:67:32:89:CA:B4:C6:FD:7B:6E:7A:31:BA:58
            X509v3 Authority Key Identifier:
                keyid:12:28:4C:DA:68:22:A8:D5:AD:28:92:F4:6C:F3:BB:E0:09:E3:00:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12284CDA6822A8D5AD2892F46CF3BBE009E300C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a3a2f33322d3438203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1004::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:f0:3e:20:e6:93:e4:55:aa:a6:d8:30:01:57:76:a9:9b:31:
         f1:b9:e3:cb:88:75:a1:3a:2b:a0:42:f8:bd:68:3c:85:5d:6f:
         4d:55:a6:8d:18:25:8a:de:4c:ab:d6:94:4d:28:8f:63:62:88:
         e9:f9:0b:ed:0c:2a:47:98:17:e3:33:65:77:f5:dc:3b:c5:d7:
         e8:f0:06:ab:cc:79:d8:2e:97:9f:e5:02:55:9e:79:b0:cc:e9:
         8f:90:b2:f6:33:47:cc:b0:dc:17:3e:9e:25:f0:fd:6d:9e:f0:
         be:c8:9b:56:9c:1c:18:26:c5:15:d7:4e:9f:8e:66:77:46:18:
         22:ee:21:13:9a:f7:0c:c9:30:8d:dc:5d:5c:0d:50:6b:f3:29:
         1f:d7:1e:eb:a8:e3:c9:b0:71:bc:39:bc:98:51:e5:48:1a:68:
         da:eb:33:3f:7b:ea:1c:95:ea:f9:36:de:6e:77:ca:5b:c7:c9:
         87:3e:c7:ea:49:20:c1:c0:72:49:85:af:d6:e4:15:98:b7:b7:
         a3:dd:39:62:14:cf:c2:6a:14:41:2c:58:cf:18:06:a7:ec:8e:
         3d:f7:2b:b5:0e:ae:02:69:07:c8:a7:5e:32:f3:5d:6d:47:c8:
         b2:15:3a:f3:82:94:33:c4:d6:e4:31:66:34:e7:4e:ac:c0:12:
         a9:37:c2:fa
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUc1I8/9WmJ7wzTs5/5YlXRQc+g1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIyODRDREE2ODIyQThENUFEMjg5MkY0NkNGM0JCRTAw
OUUzMDBDODAeFw0yNTA1MDIxNjE2MTlaFw0yNjA1MDExNjIxMTlaMDMxMTAvBgNV
BAMTKEIwQjUzQkE3MDM3OEVDNjczMjg5Q0FCNEM2RkQ3QjZFN0EzMUJBNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSvLQ5X4wGCrCTUu+DdmkeS6o1
cTwax6JV5SkMJMy/KVTQZvZtd2z6a9IfCgfPNBfIrxPh6c8dWrsPFsY5TAlSUzfi
pEaBMVukry0Bntv8B84ayAkqw+PSNoM619vzai5Md7aJDC3WrP6qKvc8LICc2tKF
vVVUaLGKsQsq6sztOrH/jL8ZruKVPNa9ZGzqf4o4swgjc9zMUag+iCnZWTlHGQk4
KGF2qDUMlGfZzZCo/y1A+qM8QEOPHvxU1jyp6P7qlNEwahg2DMVTUoUfC2spN1GN
6nmGDUCoPooT61DoEnPyqqNZH6Px4QoqYXlJQ0mBkNMFoHDN8Yb93FoG97XhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUsLU7pwN47Gcyicq0xv17bnoxulgwHwYDVR0j
BBgwFoAUEihM2mgiqNWtKJL0bPO74AnjAMgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlo0UGpqUHVnMmRick5hbWI1Zm0xTGdONUxpUFE5QllhUDVVdTNuWUpq
OHUvMC8xMjI4NENEQTY4MjJBOEQ1QUQyODkyRjQ2Q0YzQkJFMDA5RTMwMEM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyMjg0Q0RBNjgyMkE4RDVB
RDI4OTJGNDZDRjNCQkUwMDlFMzAwQzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZaNFBqalB1ZzJkYnJOYW1iNWZtMUxnTjVMaVBROUJZYVA1VXUzbllKajh1LzAv
MzIzODMwMzQzYTMxMzAzMDM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMz
MzYzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQQBDANBgkqhkiG9w0BAQsFAAOCAQEAZPA+IOaT
5FWqptgwAVd2qZsx8bnjy4h1oToroEL4vWg8hV1vTVWmjRglit5Mq9aUTSiPY2KI
6fkL7QwqR5gX4zNld/XcO8XX6PAGq8x52C6Xn+UCVZ55sMzpj5Cy9jNHzLDcFz6e
JfD9bZ7wvsibVpwcGCbFFddOn45md0YYIu4hE5r3DMkwjdxdXA1Qa/MpH9ce66jj
ybBxvDm8mFHlSBpo2uszP3vqHJXq+TbebnfKW8fJhz7H6kkgwcBySYWv1uQVmLe3
o905YhTPwmoUQSxYzxgGp+yOPfcrtQ6uAmkHyKdeMvNdbUfIshU684KUM8TW5DFm
NOdOrMASqTfC+g==
-----END CERTIFICATE-----
Generated at Tue May 13 17:11:40 2025 by rpki-client