Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/323830343a363236303a3a2f33322d3438203d3e20323639323933.roa
File:                     323830343a363236303a3a2f33322d3438203d3e20323639323933.roa (raw, json)
Hash identifier:          /XxPLVlxlhorb57ETNwYhEdJb2sRyamQK9/a2hcnEms=
Subject key identifier:   B5:75:A7:D8:2C:F9:8C:7B:A1:51:AC:8B:A4:9D:49:93:3D:6B:4E:21
Certificate issuer:       /CN=8544A9CC4138899210F47B6BBCDAD75CB97A5C52
Certificate serial:       192FDA18F53048A8C25A3303CE1192DB9512A12F
Authority key identifier: 85:44:A9:CC:41:38:89:92:10:F4:7B:6B:BC:DA:D7:5C:B9:7A:5C:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/323830343a363236303a3a2f33322d3438203d3e20323639323933.roa
Signing time:             Tue 06 May 2025 15:03:18 +0000
ROA not before:           Tue 06 May 2025 14:58:18 +0000
ROA not after:            Tue 05 May 2026 15:03:18 +0000
asID:                     269293
IP address blocks:        2804:6260::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.crl
                          rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 08:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2f:da:18:f5:30:48:a8:c2:5a:33:03:ce:11:92:db:95:12:a1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8544A9CC4138899210F47B6BBCDAD75CB97A5C52
        Validity
            Not Before: May  6 14:58:18 2025 GMT
            Not After : May  5 15:03:18 2026 GMT
        Subject: CN=B575A7D82CF98C7BA151AC8BA49D49933D6B4E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:da:bd:eb:6d:2a:dd:02:86:75:d9:c2:d3:43:
                    5a:32:82:75:77:fa:b0:60:0b:ab:f3:88:b1:ca:40:
                    8a:47:27:13:74:19:37:fe:df:67:f1:2e:f7:94:7e:
                    d4:b1:b9:50:7a:29:60:55:df:0c:f5:bd:be:b8:6e:
                    96:56:12:4f:bf:31:9b:3d:09:4a:67:e3:94:a6:2d:
                    67:b4:a2:12:c6:83:93:a0:7a:57:43:4d:eb:6b:81:
                    12:01:b6:34:11:8b:83:42:12:85:a2:8d:eb:5c:51:
                    15:0b:8a:ea:01:d8:09:18:87:30:53:f7:97:15:a5:
                    41:64:82:a3:9c:ed:b2:5c:7e:7c:37:7b:ca:af:16:
                    28:ab:7b:7a:d1:07:38:09:93:84:90:f2:05:96:2c:
                    78:94:b4:1f:6b:67:eb:45:e5:56:5c:3c:a1:15:b0:
                    f4:8b:a4:91:e8:a7:10:ec:2f:f0:e8:f9:5e:60:ce:
                    71:c8:3e:51:5e:de:07:23:cc:b3:6c:ee:99:3b:8d:
                    c3:bd:12:4b:a9:1e:da:e5:67:3f:e2:7b:27:83:69:
                    e4:c0:4c:2d:41:c5:08:51:d5:cb:00:96:af:11:17:
                    90:ec:f6:a2:aa:a9:af:84:05:53:c4:d9:26:2e:11:
                    df:cd:8a:e8:ed:18:19:46:4b:a6:2a:15:f3:e0:62:
                    2e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:75:A7:D8:2C:F9:8C:7B:A1:51:AC:8B:A4:9D:49:93:3D:6B:4E:21
            X509v3 Authority Key Identifier:
                keyid:85:44:A9:CC:41:38:89:92:10:F4:7B:6B:BC:DA:D7:5C:B9:7A:5C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8544A9CC4138899210F47B6BBCDAD75CB97A5C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9PCcqf1qMjU17um8TvrFhmpFd8HDK9Q378aGAmZe8eTY/0/323830343a363236303a3a2f33322d3438203d3e20323639323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6260::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:e7:24:3b:5f:e0:bf:5c:97:88:66:af:50:0c:50:77:ed:37:
         5b:b2:c6:cc:48:bc:4f:5b:e6:77:42:19:fa:45:2d:96:a9:6e:
         30:fc:0d:4e:f2:37:80:22:fc:0d:19:d5:d4:a2:a7:4d:0a:0a:
         40:c4:ba:ba:89:a9:69:43:9f:8c:df:5f:29:33:24:cf:2f:f7:
         a3:43:8d:9b:8a:ab:92:1d:5b:98:2a:04:b6:dc:f0:7b:95:4f:
         78:12:94:56:eb:5e:ee:64:19:e1:f9:c7:55:50:cd:f1:4d:d0:
         bd:07:05:ea:01:d4:70:d6:1f:f9:e6:c1:38:c5:b3:c7:17:4c:
         2e:3b:0a:4d:76:a0:fe:b0:ed:88:56:eb:5a:c7:bf:d9:3e:31:
         e1:7f:87:0f:3b:40:3d:81:6d:d0:c0:aa:16:4d:25:d1:dc:67:
         db:ee:e0:39:70:7f:b3:f6:82:1d:e5:bb:e5:36:b8:fd:70:1c:
         0f:40:67:87:c6:be:69:1b:46:22:05:63:1d:68:79:02:15:2f:
         fd:b5:50:7f:ed:45:e6:b1:b6:05:d9:81:c2:41:a9:7e:eb:e2:
         01:e5:31:b0:ac:af:ba:b3:15:3d:e2:65:98:23:5f:4a:75:62:
         d7:9c:bc:68:fb:75:10:1f:a3:81:1e:c0:dc:7e:80:d5:21:a0:
         08:e4:0c:6b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUGS/aGPUwSKjCWjMDzhGS25USoS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU0NEE5Q0M0MTM4ODk5MjEwRjQ3QjZCQkNEQUQ3NUNC
OTdBNUM1MjAeFw0yNTA1MDYxNDU4MThaFw0yNjA1MDUxNTAzMThaMDMxMTAvBgNV
BAMTKEI1NzVBN0Q4MkNGOThDN0JBMTUxQUM4QkE0OUQ0OTkzM0Q2QjRFMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv2r3rbSrdAoZ12cLTQ1oygnV3
+rBgC6vziLHKQIpHJxN0GTf+32fxLveUftSxuVB6KWBV3wz1vb64bpZWEk+/MZs9
CUpn45SmLWe0ohLGg5OgeldDTetrgRIBtjQRi4NCEoWijetcURULiuoB2AkYhzBT
95cVpUFkgqOc7bJcfnw3e8qvFiire3rRBzgJk4SQ8gWWLHiUtB9rZ+tF5VZcPKEV
sPSLpJHopxDsL/Do+V5gznHIPlFe3gcjzLNs7pk7jcO9EkupHtrlZz/ieyeDaeTA
TC1BxQhR1csAlq8RF5Ds9qKqqa+EBVPE2SYuEd/NiujtGBlGS6YqFfPgYi5/AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUtXWn2Cz5jHuhUayLpJ1Jkz1rTiEwHwYDVR0j
BBgwFoAUhUSpzEE4iZIQ9HtrvNrXXLl6XFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVBDY3FmMXFNalUxN3VtOFR2ckZobXBGZDhIREs5UTM3OGFHQW1aZThl
VFkvMC84NTQ0QTlDQzQxMzg4OTkyMTBGNDdCNkJCQ0RBRDc1Q0I5N0E1QzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1NDRBOUNDNDEzODg5OTIx
MEY0N0I2QkJDREFENzVDQjk3QTVDNTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlQQ2NxZjFxTWpVMTd1bThUdnJGaG1wRmQ4SERLOVEzNzhhR0FtWmU4ZVRZLzAv
MzIzODMwMzQzYTM2MzIzNjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5
MzIzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARiYDANBgkqhkiG9w0BAQsFAAOCAQEAEeckO1/g
v1yXiGavUAxQd+03W7LGzEi8T1vmd0IZ+kUtlqluMPwNTvI3gCL8DRnV1KKnTQoK
QMS6uompaUOfjN9fKTMkzy/3o0ONm4qrkh1bmCoEttzwe5VPeBKUVute7mQZ4fnH
VVDN8U3QvQcF6gHUcNYf+ebBOMWzxxdMLjsKTXag/rDtiFbrWse/2T4x4X+HDztA
PYFt0MCqFk0l0dxn2+7gOXB/s/aCHeW75Ta4/XAcD0Bnh8a+aRtGIgVjHWh5AhUv
/bVQf+1F5rG2BdmBwkGpfuviAeUxsKyvurMVPeJlmCNfSnVi15y8aPt1EB+jgR7A
3H6A1SGgCOQMaw==
-----END CERTIFICATE-----
Generated at Thu May 15 00:20:10 2025 by rpki-client