Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a633030303a3a2f33362d3336203d3e20323633363038.roa
File:                     323830343a6664633a633030303a3a2f33362d3336203d3e20323633363038.roa (raw, json)
Hash identifier:          a9IfzqLK3/Q+IvUzG2GzsEcAaAD7xaDYelSg7wTDOxM=
Subject key identifier:   97:90:54:34:57:9F:B6:82:60:0F:0D:77:A3:32:B4:9E:DC:0D:08:A6
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       10D0477E9938B9A2056BAD491E46C44950BCEA2F
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a633030303a3a2f33362d3336203d3e20323633363038.roa
Signing time:             Tue 06 May 2025 20:14:50 +0000
ROA not before:           Tue 06 May 2025 20:09:50 +0000
ROA not after:            Tue 05 May 2026 20:14:50 +0000
asID:                     263608
IP address blocks:        2804:fdc:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
                          rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 20:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d0:47:7e:99:38:b9:a2:05:6b:ad:49:1e:46:c4:49:50:bc:ea:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: May  6 20:09:50 2025 GMT
            Not After : May  5 20:14:50 2026 GMT
        Subject: CN=97905434579FB682600F0D77A332B49EDC0D08A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:11:20:99:04:80:90:cb:12:56:c4:46:35:44:
                    3c:77:b9:39:bf:eb:b3:9b:3c:90:c3:75:68:17:97:
                    cf:40:a8:07:29:27:0b:11:4c:d1:c2:e9:63:b3:e3:
                    6f:e8:99:f5:33:c5:10:c8:0e:5c:22:a2:57:dc:cc:
                    8f:0c:28:30:62:57:24:6a:91:62:c3:d8:72:a2:00:
                    63:16:95:5f:d9:d7:c7:24:e9:b5:27:d9:cb:d8:a8:
                    ed:77:8c:d0:b7:9f:48:3c:e3:50:25:f5:66:ce:0e:
                    63:c7:1a:62:32:8b:de:55:05:7b:a6:a5:b1:f6:e4:
                    a4:9a:75:28:d3:a2:d6:3e:9d:d2:3e:c4:53:38:ad:
                    1a:82:84:43:47:f3:e0:11:22:4c:c0:77:45:91:0f:
                    2d:f5:cf:b1:54:36:8d:67:f8:27:3e:0b:63:2b:47:
                    8c:12:21:ff:9b:bd:b4:83:83:d2:d6:0c:27:b8:7f:
                    44:ff:6e:0e:c8:cb:7b:f6:27:37:af:53:40:49:93:
                    71:be:06:54:8e:dd:61:d1:da:78:44:59:0c:75:29:
                    cd:04:6c:c1:4e:ed:14:74:bc:de:04:e9:af:78:fb:
                    1b:8e:84:9a:db:f2:cc:fb:bb:01:a3:f7:7d:18:30:
                    9a:0e:8d:31:86:e2:08:6c:c9:d8:8e:b1:f5:8c:f1:
                    39:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:90:54:34:57:9F:B6:82:60:0F:0D:77:A3:32:B4:9E:DC:0D:08:A6
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/323830343a6664633a633030303a3a2f33362d3336203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fdc:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b3:81:58:fd:93:38:bb:2a:2f:73:b9:dc:3a:29:8a:c5:9c:cf:
         32:7b:69:f8:36:ca:8f:ce:2d:b6:66:e7:f0:d0:77:4f:04:95:
         8c:fc:49:f8:af:e3:db:b1:a9:8d:61:c1:92:00:59:b1:64:f2:
         0e:15:fd:c9:5f:e7:e6:b8:e0:27:30:a5:87:b1:26:99:6a:42:
         7b:b6:41:d5:51:4d:31:2b:8a:c3:62:5f:dd:52:9e:8c:f2:ef:
         04:f0:48:14:f3:83:8e:23:b4:1d:94:f6:a3:d9:f4:ab:ae:c7:
         17:45:b1:65:e6:f5:97:05:ec:e8:69:17:23:88:89:40:32:9c:
         cb:3e:8e:68:99:28:6b:84:1b:ab:10:1e:f7:c4:56:ad:36:38:
         4e:ff:e1:6f:7e:af:01:e1:bc:04:09:6a:ac:d5:3f:b8:70:6b:
         f6:f0:fb:9d:2d:af:46:16:6f:dc:64:51:3e:bc:03:c1:2a:2a:
         17:66:31:8d:b5:4a:77:6a:a5:76:44:e8:85:04:0d:d4:f7:3f:
         47:69:f4:d4:b3:f1:9b:1f:5a:82:45:2e:27:58:33:0d:e4:ec:
         e0:d2:4e:58:89:87:df:05:24:1e:6f:fc:7e:c1:a8:ce:fd:22:
         5f:19:c1:9b:5f:44:c5:f4:9d:a9:c0:fa:df:e3:13:c8:f8:6d:
         0c:72:8a:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUENBHfpk4uaIFa61JHkbESVC86i8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE5RDY1NUFCRkNDRkM4Q0I1NjY5MzVCNzFBQTdEOTRE
MjkwNUU0ODAeFw0yNTA1MDYyMDA5NTBaFw0yNjA1MDUyMDE0NTBaMDMxMTAvBgNV
BAMTKDk3OTA1NDM0NTc5RkI2ODI2MDBGMEQ3N0EzMzJCNDlFREMwRDA4QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnESCZBICQyxJWxEY1RDx3uTm/
67ObPJDDdWgXl89AqAcpJwsRTNHC6WOz42/omfUzxRDIDlwiolfczI8MKDBiVyRq
kWLD2HKiAGMWlV/Z18ck6bUn2cvYqO13jNC3n0g841Al9WbODmPHGmIyi95VBXum
pbH25KSadSjTotY+ndI+xFM4rRqChENH8+ARIkzAd0WRDy31z7FUNo1n+Cc+C2Mr
R4wSIf+bvbSDg9LWDCe4f0T/bg7Iy3v2JzevU0BJk3G+BlSO3WHR2nhEWQx1Kc0E
bMFO7RR0vN4E6a94+xuOhJrb8sz7uwGj930YMJoOjTGG4ghsydiOsfWM8TknAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUl5BUNFeftoJgDw13ozK0ntwNCKYwHwYDVR0j
BBgwFoAU8Z1lWr/M/Iy1ZpNbcap9lNKQXkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJMR0FiRnl3TkZKNTZCU0VDREdZMURjczhwTDZTNm55UlJuQXZLbUpW
TGYvMC9GMTlENjU1QUJGQ0NGQzhDQjU2NjkzNUI3MUFBN0Q5NEQyOTA1RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxOUQ2NTVBQkZDQ0ZDOENC
NTY2OTM1QjcxQUE3RDk0RDI5MDVFNDguY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliTEdBYkZ5d05GSjU2QlNFQ0RHWTFEY3M4cEw2UzZueVJSbkF2S21KVkxmLzAv
MzIzODMwMzQzYTY2NjQ2MzNhNjMzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzMzNjMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBA/cwDANBgkqhkiG9w0BAQsFAAOC
AQEAs4FY/ZM4uyovc7ncOimKxZzPMntp+DbKj84ttmbn8NB3TwSVjPxJ+K/j27Gp
jWHBkgBZsWTyDhX9yV/n5rjgJzClh7EmmWpCe7ZB1VFNMSuKw2Jf3VKejPLvBPBI
FPODjiO0HZT2o9n0q67HF0WxZeb1lwXs6GkXI4iJQDKcyz6OaJkoa4QbqxAe98RW
rTY4Tv/hb36vAeG8BAlqrNU/uHBr9vD7nS2vRhZv3GRRPrwDwSoqF2YxjbVKd2ql
dkTohQQN1Pc/R2n01LPxmx9agkUuJ1gzDeTs4NJOWImH3wUkHm/8fsGozv0iXxnB
m19ExfSdqcD63+MTyPhtDHKK4w==
-----END CERTIFICATE-----
Generated at Tue May 13 19:47:33 2025 by rpki-client