Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/323830343a366236343a383030303a3a2f34302d3430203d3e20323730333937.roa
File:                     323830343a366236343a383030303a3a2f34302d3430203d3e20323730333937.roa (raw, json)
Hash identifier:          vwzJkkqIXNHsMNY7xR5+NAk30DSwz7cyDZikDx3Jsh8=
Subject key identifier:   61:F0:00:11:B2:16:14:D0:38:63:FE:05:82:50:56:82:A4:AA:2D:0C
Certificate issuer:       /CN=1673423E2B1CFB67A429872716AC44E11E27EBE3
Certificate serial:       4E032786173596F7844A150FAC643C9E1C76B394
Authority key identifier: 16:73:42:3E:2B:1C:FB:67:A4:29:87:27:16:AC:44:E1:1E:27:EB:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/323830343a366236343a383030303a3a2f34302d3430203d3e20323730333937.roa
Signing time:             Mon 14 Apr 2025 21:17:50 +0000
ROA not before:           Mon 14 Apr 2025 21:12:50 +0000
ROA not after:            Mon 13 Apr 2026 21:17:50 +0000
asID:                     270397
IP address blocks:        2804:6b64:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.crl
                          rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 07:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:03:27:86:17:35:96:f7:84:4a:15:0f:ac:64:3c:9e:1c:76:b3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673423E2B1CFB67A429872716AC44E11E27EBE3
        Validity
            Not Before: Apr 14 21:12:50 2025 GMT
            Not After : Apr 13 21:17:50 2026 GMT
        Subject: CN=61F00011B21614D03863FE0582505682A4AA2D0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:af:f5:5e:03:88:f3:fc:a0:06:e6:6b:5b:
                    ad:a6:b9:e9:63:da:c5:eb:b7:c0:bd:d7:68:e9:73:
                    fe:8d:a2:3a:fc:c2:a9:ad:98:5c:3d:b6:65:29:b3:
                    13:05:05:dc:16:f4:89:4a:37:91:86:7a:15:3a:88:
                    91:fa:c1:92:fb:39:46:ba:68:dd:b7:18:0c:70:2f:
                    c7:60:e3:67:9a:04:4e:9d:b4:59:dc:3d:21:a8:ca:
                    6f:46:51:29:ee:59:1a:e4:3c:b0:0f:95:3a:6b:9f:
                    0c:ce:22:35:28:f8:68:7b:cf:74:d4:5a:b3:38:ab:
                    b7:19:39:43:55:46:d8:da:e4:a5:df:e1:68:cd:f8:
                    f3:1b:85:87:cf:ca:45:b9:14:db:83:a4:81:04:47:
                    c4:40:05:2a:4c:05:9f:5e:b4:19:9f:8a:fb:b1:1c:
                    c8:08:7a:d0:49:6d:32:11:37:8b:d9:69:fa:9a:bd:
                    cb:e2:6a:ef:f6:c3:01:bf:d8:ec:36:7c:1a:3f:7c:
                    cb:40:4d:8d:6c:32:c8:01:37:4b:eb:d1:02:e0:6e:
                    8f:ae:9d:3c:f2:d5:6b:2d:bf:84:4f:60:c0:09:04:
                    9c:7a:8c:39:ad:e2:d7:15:da:a0:f6:f4:4e:20:89:
                    e2:f8:43:0f:90:3d:ee:b2:dd:e3:83:11:b7:8e:67:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F0:00:11:B2:16:14:D0:38:63:FE:05:82:50:56:82:A4:AA:2D:0C
            X509v3 Authority Key Identifier:
                keyid:16:73:42:3E:2B:1C:FB:67:A4:29:87:27:16:AC:44:E1:1E:27:EB:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673423E2B1CFB67A429872716AC44E11E27EBE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dtszounT6BZQxXzrXU9KcqkWVG5rSYeYNRVC2ieH4oo/1/323830343a366236343a383030303a3a2f34302d3430203d3e20323730333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b64:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:21:c6:4a:2e:9d:b7:e2:72:4a:7c:50:55:a6:3f:6d:5f:bc:
         f2:15:8f:2c:e5:8d:65:be:a2:f9:ec:6b:87:f5:6e:3d:2d:0d:
         e9:65:c8:cd:32:14:c8:14:a3:03:bf:af:d0:61:3f:39:80:1e:
         d5:2a:0d:30:4e:8f:1d:7d:38:3a:90:92:a8:2e:10:3b:b9:73:
         e2:fa:c0:4f:33:78:9d:4b:a9:e3:fa:76:e4:74:c7:f0:66:bb:
         10:e4:15:c6:72:a6:4c:69:4b:2e:9b:5a:be:63:aa:fb:e4:a6:
         b8:52:99:1b:9c:77:fc:72:4f:43:58:81:75:64:fb:94:bc:b3:
         b6:6c:2b:f9:ac:42:e8:2c:ed:de:f7:a7:1f:49:6a:7a:3e:f4:
         14:c5:20:7f:61:e1:c5:7b:70:18:fe:fa:a0:bb:a6:7d:18:e3:
         ca:81:52:d4:67:48:33:85:a1:2c:34:9b:2b:87:79:41:8f:a5:
         d0:27:9a:bd:36:d5:3d:ee:c1:eb:8f:5e:a3:dc:01:bf:8e:16:
         91:f5:18:ee:da:1d:ea:61:dc:88:1a:85:7c:cc:c5:a8:1a:57:
         b2:b7:fb:3f:ab:75:fd:b3:d6:b4:ed:31:5d:75:ea:9c:ce:b6:
         7c:4f:85:49:5c:3f:4e:06:5c:da:42:f5:ef:bc:0f:58:aa:fd:
         06:55:22:a1
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTgMnhhc1lveEShUPrGQ8nhx2s5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3MzQyM0UyQjFDRkI2N0E0Mjk4NzI3MTZBQzQ0RTEx
RTI3RUJFMzAeFw0yNTA0MTQyMTEyNTBaFw0yNjA0MTMyMTE3NTBaMDMxMTAvBgNV
BAMTKDYxRjAwMDExQjIxNjE0RDAzODYzRkUwNTgyNTA1NjgyQTRBQTJEMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDK/1XgOI8/ygBuZrW62muelj
2sXrt8C912jpc/6Nojr8wqmtmFw9tmUpsxMFBdwW9IlKN5GGehU6iJH6wZL7OUa6
aN23GAxwL8dg42eaBE6dtFncPSGoym9GUSnuWRrkPLAPlTprnwzOIjUo+Gh7z3TU
WrM4q7cZOUNVRtja5KXf4WjN+PMbhYfPykW5FNuDpIEER8RABSpMBZ9etBmfivux
HMgIetBJbTIRN4vZafqavcviau/2wwG/2Ow2fBo/fMtATY1sMsgBN0vr0QLgbo+u
nTzy1Wstv4RPYMAJBJx6jDmt4tcV2qD29E4gieL4Qw+QPe6y3eODEbeOZ11zAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUYfAAEbIWFNA4Y/4FglBWgqSqLQwwHwYDVR0j
BBgwFoAUFnNCPisc+2ekKYcnFqxE4R4n6+MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmR0c3pvdW5UNkJaUXhYenJYVTlLY3FrV1ZHNXJTWWVZTlJWQzJpZUg0
b28vMS8xNjczNDIzRTJCMUNGQjY3QTQyOTg3MjcxNkFDNDRFMTFFMjdFQkUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2NzM0MjNFMkIxQ0ZCNjdB
NDI5ODcyNzE2QUM0NEUxMUUyN0VCRTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZkdHN6b3VuVDZCWlF4WHpyWFU5S2Nxa1dWRzVyU1llWU5SVkMyaWVING9vLzEv
MzIzODMwMzQzYTM2NjIzNjM0M2EzODMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzczMDMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEa2SAMA0GCSqGSIb3DQEBCwUA
A4IBAQCAIcZKLp234nJKfFBVpj9tX7zyFY8s5Y1lvqL57GuH9W49LQ3pZcjNMhTI
FKMDv6/QYT85gB7VKg0wTo8dfTg6kJKoLhA7uXPi+sBPM3idS6nj+nbkdMfwZrsQ
5BXGcqZMaUsum1q+Y6r75Ka4UpkbnHf8ck9DWIF1ZPuUvLO2bCv5rELoLO3e96cf
SWp6PvQUxSB/YeHFe3AY/vqgu6Z9GOPKgVLUZ0gzhaEsNJsrh3lBj6XQJ5q9NtU9
7sHrj16j3AG/jhaR9Rju2h3qYdyIGoV8zMWoGleyt/s/q3X9s9a07TFddeqczrZ8
T4VJXD9OBlzaQvXvvA9Yqv0GVSKh
-----END CERTIFICATE-----
Generated at Thu May 15 17:54:49 2025 by rpki-client