Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa
File:                     323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa (raw, json)
Hash identifier:          ioH1stFIWSuKnecw4s/7QnAiVPG6wo7B5emgO5WB4FM=
Subject key identifier:   0F:B8:34:7B:72:20:57:E1:6E:ED:F0:BD:E4:1C:95:29:0C:51:5F:3A
Certificate issuer:       /CN=0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86
Certificate serial:       05F5560EEF7E49BDA3545485FA0C25D0F65E08D8
Authority key identifier: 0F:2A:26:5C:3F:59:E2:EA:13:0A:D2:C2:44:5A:3F:37:EB:9A:EA:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa
Signing time:             Wed 18 Jun 2025 17:54:15 +0000
ROA not before:           Wed 18 Jun 2025 17:49:15 +0000
ROA not after:            Wed 17 Jun 2026 17:54:15 +0000
asID:                     272581
IP address blocks:        2804:8578:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.crl
                          rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 12:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f5:56:0e:ef:7e:49:bd:a3:54:54:85:fa:0c:25:d0:f6:5e:08:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86
        Validity
            Not Before: Jun 18 17:49:15 2025 GMT
            Not After : Jun 17 17:54:15 2026 GMT
        Subject: CN=0FB8347B722057E16EEDF0BDE41C95290C515F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7d:43:8f:99:0a:2b:3b:60:aa:d2:56:7e:18:
                    1d:d4:3f:be:5e:da:3d:98:fc:9d:74:ec:ca:a2:6a:
                    1c:00:63:15:35:08:bc:ef:47:1b:22:b7:e7:6c:f5:
                    37:ac:e9:96:9f:5d:35:46:05:a5:28:2f:46:93:b8:
                    ee:06:82:c9:d7:bd:e1:c5:cb:49:30:34:4f:b2:67:
                    52:c6:10:d5:8c:47:97:d7:68:04:fe:2f:33:35:84:
                    bc:fe:75:fc:35:5c:41:6a:e2:e5:f7:86:27:b0:26:
                    42:c5:b6:5e:10:b2:7d:88:f5:32:da:b1:bc:9e:9f:
                    92:4e:70:93:51:9a:ce:a7:a1:f3:b9:33:03:16:31:
                    58:d3:81:d2:9a:4e:7f:65:4b:60:f6:59:46:b6:35:
                    73:eb:e1:6e:04:ef:d2:2f:7c:f4:41:b6:fc:fa:28:
                    52:4a:41:30:14:21:7e:98:fd:93:e9:ab:37:99:93:
                    ac:66:92:88:55:08:ce:09:14:12:36:83:89:7d:f1:
                    28:23:82:71:b4:29:f0:92:22:f9:0a:65:e5:76:be:
                    c8:c8:06:43:8c:e5:71:24:64:fd:c0:e9:5c:d0:54:
                    4e:f2:47:16:43:2d:7d:f5:08:be:65:35:7a:0d:96:
                    20:77:06:4b:50:5b:16:bc:56:41:56:b8:b8:9e:ff:
                    43:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B8:34:7B:72:20:57:E1:6E:ED:F0:BD:E4:1C:95:29:0C:51:5F:3A
            X509v3 Authority Key Identifier:
                keyid:0F:2A:26:5C:3F:59:E2:EA:13:0A:D2:C2:44:5A:3F:37:EB:9A:EA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         75:4f:6f:5d:61:d0:f4:4a:69:66:13:3d:54:64:17:3a:ca:3c:
         2d:94:c5:fe:ad:c6:c4:04:ee:43:77:07:d8:72:41:f7:38:7a:
         8b:00:2a:a7:20:71:77:0c:4a:36:4a:28:73:19:db:7d:49:c7:
         3d:6a:10:7e:22:b5:64:16:3b:76:1e:01:7f:a9:56:07:96:50:
         a3:3f:f0:e8:66:28:b2:27:b6:c6:db:84:3b:9a:4b:2d:63:0e:
         17:a3:1f:dd:a3:f1:c3:d8:c9:18:ed:c9:d7:1c:7f:14:b6:99:
         eb:da:02:b8:f5:6b:6f:8a:8d:8a:27:d6:6f:64:24:d2:74:f2:
         3e:36:8f:48:04:77:15:ad:0a:40:97:39:40:49:85:ec:0c:24:
         ff:22:56:c2:35:02:60:5c:86:1d:8a:36:f0:70:f0:16:23:30:
         16:38:61:76:38:d4:2c:8c:e3:7e:79:a2:d4:f1:19:70:54:7e:
         50:17:da:24:65:11:76:14:6c:e0:c7:f0:54:62:41:ff:15:7b:
         f0:21:d4:5d:cd:30:ff:32:1d:1b:14:27:47:43:44:03:60:be:
         0e:62:70:fd:61:2d:88:0c:08:50:49:91:2d:c6:fb:96:cc:da:
         d6:21:b3:98:e2:13:31:79:da:46:31:8e:f7:56:c2:12:9f:5e:
         53:ae:38:0f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBfVWDu9+Sb2jVFSF+gwl0PZeCNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYyQTI2NUMzRjU5RTJFQTEzMEFEMkMyNDQ1QTNGMzdF
QjlBRUE4NjAeFw0yNTA2MTgxNzQ5MTVaFw0yNjA2MTcxNzU0MTVaMDMxMTAvBgNV
BAMTKDBGQjgzNDdCNzIyMDU3RTE2RUVERjBCREU0MUM5NTI5MEM1MTVGM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVfUOPmQorO2Cq0lZ+GB3UP75e
2j2Y/J107MqiahwAYxU1CLzvRxsit+ds9Tes6ZafXTVGBaUoL0aTuO4GgsnXveHF
y0kwNE+yZ1LGENWMR5fXaAT+LzM1hLz+dfw1XEFq4uX3hiewJkLFtl4Qsn2I9TLa
sbyen5JOcJNRms6nofO5MwMWMVjTgdKaTn9lS2D2WUa2NXPr4W4E79IvfPRBtvz6
KFJKQTAUIX6Y/ZPpqzeZk6xmkohVCM4JFBI2g4l98SgjgnG0KfCSIvkKZeV2vsjI
BkOM5XEkZP3A6VzQVE7yRxZDLX31CL5lNXoNliB3BktQWxa8VkFWuLie/0MvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUD7g0e3IgV+Fu7fC95ByVKQxRXzowHwYDVR0j
BBgwFoAUDyomXD9Z4uoTCtLCRFo/N+ua6oYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZB
OXovMC8wRjJBMjY1QzNGNTlFMkVBMTMwQUQyQzI0NDVBM0YzN0VCOUFFQTg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGMkEyNjVDM0Y1OUUyRUEx
MzBBRDJDMjQ0NUEzRjM3RUI5QUVBODYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLY1h0VlE0ZnRMelp2Y0JNNjdiN01tU2JTN2k0blZwSkNENVRGOXdmQTl6LzAv
MzIzODMwMzQzYTM4MzUzNzM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjM1MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEhXiAMA0GCSqGSIb3DQEBCwUA
A4IBAQB1T29dYdD0SmlmEz1UZBc6yjwtlMX+rcbEBO5DdwfYckH3OHqLACqnIHF3
DEo2SihzGdt9Scc9ahB+IrVkFjt2HgF/qVYHllCjP/DoZiiyJ7bG24Q7mkstYw4X
ox/do/HD2MkY7cnXHH8Utpnr2gK49Wtvio2KJ9ZvZCTSdPI+No9IBHcVrQpAlzlA
SYXsDCT/IlbCNQJgXIYdijbwcPAWIzAWOGF2ONQsjON+eaLU8RlwVH5QF9okZRF2
FGzgx/BUYkH/FXvwIdRdzTD/Mh0bFCdHQ0QDYL4OYnD9YS2IDAhQSZEtxvuWzNrW
IbOY4hMxedpGMY73VsISn15TrjgP
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:09:10 2025 by rpki-client