Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/323830343a326163383a3a2f33332d3333203d3e20323635313138.roa
File:                     323830343a326163383a3a2f33332d3333203d3e20323635313138.roa (raw, json)
Hash identifier:          yLXcYqo3j0mrYKYNMjAjE5mufTIbTid6vHyr+QJylps=
Subject key identifier:   38:1B:84:46:15:2F:24:92:46:AD:B5:AE:2C:03:B0:88:D8:02:A7:D0
Certificate issuer:       /CN=46DAFD11EB3A6A21A97F2817CA809B6F844CA226
Certificate serial:       6C91E01DA79D52F1ABDAA38040D22C6176998A90
Authority key identifier: 46:DA:FD:11:EB:3A:6A:21:A9:7F:28:17:CA:80:9B:6F:84:4C:A2:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DAFD11EB3A6A21A97F2817CA809B6F844CA226.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/323830343a326163383a3a2f33332d3333203d3e20323635313138.roa
Signing time:             Mon 05 May 2025 13:24:42 +0000
ROA not before:           Mon 05 May 2025 13:19:42 +0000
ROA not after:            Mon 04 May 2026 13:24:42 +0000
asID:                     265118
IP address blocks:        2804:2ac8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/46DAFD11EB3A6A21A97F2817CA809B6F844CA226.crl
                          rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/46DAFD11EB3A6A21A97F2817CA809B6F844CA226.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DAFD11EB3A6A21A97F2817CA809B6F844CA226.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 07:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:91:e0:1d:a7:9d:52:f1:ab:da:a3:80:40:d2:2c:61:76:99:8a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46DAFD11EB3A6A21A97F2817CA809B6F844CA226
        Validity
            Not Before: May  5 13:19:42 2025 GMT
            Not After : May  4 13:24:42 2026 GMT
        Subject: CN=381B8446152F249246ADB5AE2C03B088D802A7D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c6:22:40:ca:0c:93:93:b5:4a:92:fe:a6:48:
                    c6:27:4d:82:07:e7:2b:33:58:db:b6:67:60:46:26:
                    3d:bc:df:5b:1e:fb:c3:9f:46:23:f1:b4:b0:fa:33:
                    98:57:12:e8:ed:1d:5a:68:d2:82:07:ef:b3:03:7d:
                    d4:a6:e6:11:3e:c7:9b:e9:3e:b1:81:c2:c1:2b:ae:
                    ff:be:ab:09:a1:2d:37:d0:03:67:cd:f1:99:e5:2f:
                    8c:7f:dc:8e:d5:9f:0d:66:cd:ff:ae:23:6d:5c:0c:
                    76:21:95:68:7c:f4:31:cf:f1:a1:e4:ea:0a:9f:9d:
                    39:cc:aa:7d:ea:87:8f:b1:5f:d4:98:8a:f0:8b:8c:
                    a8:c3:62:39:d1:f3:8c:10:cc:af:09:56:c3:76:98:
                    54:5d:4a:21:0b:5e:b0:b3:2f:1f:d5:f1:ec:b7:d6:
                    a4:bc:60:30:ab:1e:8c:a8:08:4b:b2:f5:13:f6:8a:
                    3b:80:ab:f2:b5:af:bc:c3:b6:89:3f:ea:92:14:42:
                    bc:2f:11:e1:f3:7c:c0:15:e4:f2:5a:63:cd:94:cd:
                    b5:c7:f7:ae:21:41:66:ee:08:d8:a9:0f:9c:d0:35:
                    7f:97:84:a8:5e:f9:c0:a4:79:99:f1:66:18:6c:65:
                    8e:a0:cb:7a:86:31:ab:61:5c:16:35:e7:fc:e4:9e:
                    54:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1B:84:46:15:2F:24:92:46:AD:B5:AE:2C:03:B0:88:D8:02:A7:D0
            X509v3 Authority Key Identifier:
                keyid:46:DA:FD:11:EB:3A:6A:21:A9:7F:28:17:CA:80:9B:6F:84:4C:A2:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/46DAFD11EB3A6A21A97F2817CA809B6F844CA226.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DAFD11EB3A6A21A97F2817CA809B6F844CA226.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/323830343a326163383a3a2f33332d3333203d3e20323635313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac8::/33

    Signature Algorithm: sha256WithRSAEncryption
         05:08:a4:e2:61:9a:8d:29:19:e6:64:17:21:67:ba:6b:38:4d:
         c1:a4:18:a6:87:a9:c7:3a:51:90:d4:60:b9:d6:73:2b:1c:92:
         4e:53:70:8d:b1:6c:9a:e0:81:53:64:d4:75:37:4d:d0:4c:c6:
         6a:51:eb:a7:86:97:3b:80:25:00:ed:68:b3:a1:08:3b:f2:8a:
         bf:9d:73:9d:69:e4:6a:2f:03:e1:34:36:46:cf:79:04:9a:69:
         bc:8c:b9:81:e1:2a:6f:ed:57:0e:fb:5f:6f:b2:08:dc:c0:a4:
         e4:42:8a:d1:11:3b:ca:9d:5f:d8:e0:e3:dc:69:62:04:ea:05:
         04:3d:58:a3:40:73:74:17:74:ef:de:d9:bf:1b:0e:ea:29:83:
         17:d8:99:e4:81:8e:59:e8:30:59:9b:9c:8c:90:ca:29:b8:21:
         64:76:f6:c1:c1:d6:65:b1:a0:cd:2a:7d:60:61:23:22:a0:f4:
         d5:a5:dc:92:87:74:31:50:e0:c0:46:98:0f:fa:aa:65:a0:35:
         01:ca:35:e6:cb:e7:8f:51:4b:47:df:a4:b0:a6:89:07:c8:fe:
         17:b1:19:f4:5d:56:09:b7:46:9d:62:6e:de:00:db:b5:e9:06:
         60:a0:42:c0:37:da:4f:32:7c:ce:6e:03:8a:b5:22:01:92:46:
         f0:53:b5:3d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbJHgHaedUvGr2qOAQNIsYXaZipAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZEQUZEMTFFQjNBNkEyMUE5N0YyODE3Q0E4MDlCNkY4
NDRDQTIyNjAeFw0yNTA1MDUxMzE5NDJaFw0yNjA1MDQxMzI0NDJaMDMxMTAvBgNV
BAMTKDM4MUI4NDQ2MTUyRjI0OTI0NkFEQjVBRTJDMDNCMDg4RDgwMkE3RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xiJAygyTk7VKkv6mSMYnTYIH
5yszWNu2Z2BGJj2831se+8OfRiPxtLD6M5hXEujtHVpo0oIH77MDfdSm5hE+x5vp
PrGBwsErrv++qwmhLTfQA2fN8ZnlL4x/3I7Vnw1mzf+uI21cDHYhlWh89DHP8aHk
6gqfnTnMqn3qh4+xX9SYivCLjKjDYjnR84wQzK8JVsN2mFRdSiELXrCzLx/V8ey3
1qS8YDCrHoyoCEuy9RP2ijuAq/K1r7zDtok/6pIUQrwvEeHzfMAV5PJaY82UzbXH
964hQWbuCNipD5zQNX+XhKhe+cCkeZnxZhhsZY6gy3qGMathXBY15/zknlQVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOBuERhUvJJJGrbWuLAOwiNgCp9AwHwYDVR0j
BBgwFoAURtr9Ees6aiGpfygXyoCbb4RMoiYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjZqdXphb0xFb284aG1vY3o1dEozSkN3dFQ2Qmc5MnIzZ2FoRWFxbjg5
SmMvMC80NkRBRkQxMUVCM0E2QTIxQTk3RjI4MTdDQTgwOUI2Rjg0NENBMjI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2REFGRDExRUIzQTZBMjFB
OTdGMjgxN0NBODA5QjZGODQ0Q0EyMjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I2anV6YW9MRW9vOGhtb2N6NXRKM0pDd3RUNkJnOTJyM2dhaEVhcW44OUpjLzAv
MzIzODMwMzQzYTMyNjE2MzM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM1
MzEzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQqyAAwDQYJKoZIhvcNAQELBQADggEBAAUIpOJh
mo0pGeZkFyFnums4TcGkGKaHqcc6UZDUYLnWcysckk5TcI2xbJrggVNk1HU3TdBM
xmpR66eGlzuAJQDtaLOhCDvyir+dc51p5GovA+E0NkbPeQSaabyMuYHhKm/tVw77
X2+yCNzApORCitERO8qdX9jg49xpYgTqBQQ9WKNAc3QXdO/e2b8bDuopgxfYmeSB
jlnoMFmbnIyQyim4IWR29sHB1mWxoM0qfWBhIyKg9NWl3JKHdDFQ4MBGmA/6qmWg
NQHKNebL549RS0ffpLCmiQfI/hexGfRdVgm3Rp1ibt4A27XpBmCgQsA32k8yfM5u
A4q1IgGSRvBTtT0=
-----END CERTIFICATE-----
Generated at Mon May 12 18:12:57 2025 by rpki-client