Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoTfEnggr4rCQLpDZvmBgbupTHmV1LJMV8ktYHDheMgZ/0/323830313a38303a65303a3a2f34382d3634203d3e203533323135.roa
File:                     323830313a38303a65303a3a2f34382d3634203d3e203533323135.roa (raw, json)
Hash identifier:          lrNRcBHLYEWAVDOVSYT7DDK9UOaj0BfAmFHe7K9NJhY=
Subject key identifier:   B5:BC:8C:74:7D:99:CA:E8:86:5E:75:3C:87:89:96:7B:82:82:43:2C
Certificate issuer:       /CN=9035FAE529E5A5E055FE491F5D4582556528596C
Certificate serial:       16B89A157DAE09A911EA463B1A72A5D8850E8A8F
Authority key identifier: 90:35:FA:E5:29:E5:A5:E0:55:FE:49:1F:5D:45:82:55:65:28:59:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9035FAE529E5A5E055FE491F5D4582556528596C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoTfEnggr4rCQLpDZvmBgbupTHmV1LJMV8ktYHDheMgZ/0/323830313a38303a65303a3a2f34382d3634203d3e203533323135.roa
Signing time:             Thu 26 Jun 2025 14:36:42 +0000
ROA not before:           Thu 26 Jun 2025 14:31:42 +0000
ROA not after:            Thu 25 Jun 2026 14:36:42 +0000
asID:                     53215
IP address blocks:        2801:80:e0::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BoTfEnggr4rCQLpDZvmBgbupTHmV1LJMV8ktYHDheMgZ/0/9035FAE529E5A5E055FE491F5D4582556528596C.crl
                          rsync://rpki-repo.registro.br/repo/BoTfEnggr4rCQLpDZvmBgbupTHmV1LJMV8ktYHDheMgZ/0/9035FAE529E5A5E055FE491F5D4582556528596C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9035FAE529E5A5E055FE491F5D4582556528596C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 14:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b8:9a:15:7d:ae:09:a9:11:ea:46:3b:1a:72:a5:d8:85:0e:8a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9035FAE529E5A5E055FE491F5D4582556528596C
        Validity
            Not Before: Jun 26 14:31:42 2025 GMT
            Not After : Jun 25 14:36:42 2026 GMT
        Subject: CN=B5BC8C747D99CAE8865E753C8789967B8282432C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:33:ef:bf:12:a0:6c:4e:f9:eb:95:29:97:9a:
                    81:92:ee:b7:c7:06:81:ba:ac:4e:40:29:0d:91:ba:
                    cd:b8:06:c9:8c:4a:5c:b3:6f:e4:f5:de:a3:25:8b:
                    b5:62:02:b3:f0:a9:69:71:2c:1a:70:58:45:6c:1c:
                    a9:38:bc:7e:30:4f:df:a8:3b:3e:0a:4c:a7:3d:7e:
                    4e:4f:42:4f:5a:3f:a2:29:6e:e1:32:9c:e9:d0:08:
                    93:1c:ec:ae:cc:b5:e2:4b:0a:b6:0a:7d:9b:c6:cb:
                    d1:c2:8e:82:37:d8:fb:de:47:08:65:b6:b3:e2:af:
                    71:0b:57:05:7f:6b:57:20:32:ce:d6:84:a5:9e:7e:
                    da:b5:68:f0:2d:29:bf:ea:ca:3a:13:ec:91:49:b5:
                    5f:89:e6:80:d7:98:23:e6:7e:53:98:45:e0:39:57:
                    2a:00:98:fd:0d:44:2c:42:cd:79:db:24:b9:a6:b9:
                    a8:4d:9f:c8:8d:fd:90:82:95:09:6a:d3:5d:95:6c:
                    c1:cf:a8:6e:81:43:ec:bf:c6:88:a5:1c:b5:e5:c3:
                    01:85:e8:e3:28:95:b3:8c:99:02:f1:fa:55:a0:41:
                    09:57:a9:95:b2:3d:4b:89:1f:a0:ec:74:41:b5:8e:
                    d2:02:49:9b:8d:51:e8:dc:58:27:34:4d:fb:2b:07:
                    5c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BC:8C:74:7D:99:CA:E8:86:5E:75:3C:87:89:96:7B:82:82:43:2C
            X509v3 Authority Key Identifier:
                keyid:90:35:FA:E5:29:E5:A5:E0:55:FE:49:1F:5D:45:82:55:65:28:59:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoTfEnggr4rCQLpDZvmBgbupTHmV1LJMV8ktYHDheMgZ/0/9035FAE529E5A5E055FE491F5D4582556528596C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9035FAE529E5A5E055FE491F5D4582556528596C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoTfEnggr4rCQLpDZvmBgbupTHmV1LJMV8ktYHDheMgZ/0/323830313a38303a65303a3a2f34382d3634203d3e203533323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:10:74:87:5c:9e:03:45:ba:11:f8:c1:74:d8:eb:58:ea:e4:
         ec:6e:60:c2:4c:53:fb:2a:be:d4:ec:31:61:ac:9d:3d:47:d1:
         aa:c0:64:85:04:75:a5:e6:81:0b:f3:a3:dd:c6:bc:6b:f6:a2:
         46:6d:82:85:da:0f:36:c2:a7:ed:28:7c:11:f1:0d:d5:10:e4:
         a6:13:c2:41:25:aa:ce:3c:2b:17:05:ab:fc:53:12:ca:47:b6:
         aa:ca:76:e3:47:c9:1a:9d:de:32:d2:57:19:27:eb:a9:39:26:
         7e:30:12:ca:c6:ec:75:3e:b5:fc:64:19:d3:41:6e:91:9b:31:
         4d:fe:ab:29:a2:7f:89:84:06:6c:40:d5:db:60:a0:03:2a:20:
         61:ae:f5:b4:fb:40:6b:95:2e:f6:5f:42:8d:16:d1:9d:44:f5:
         e0:83:21:92:b0:4f:98:c0:65:22:a7:d4:56:29:02:f6:d4:cb:
         50:41:16:ca:1b:a7:49:ef:db:30:a5:f0:9c:6f:14:3a:4c:bb:
         cb:7a:e1:63:89:96:c2:2b:11:52:31:4d:b3:9c:fb:c6:f3:8e:
         cd:ab:2e:32:5c:f8:8f:4e:10:d5:b7:f5:b8:7f:73:4e:30:91:
         28:f5:d7:0b:f0:df:79:86:65:6d:67:cf:73:38:c2:02:5b:15:
         38:0a:c4:21
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUFriaFX2uCakR6kY7GnKl2IUOio8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAzNUZBRTUyOUU1QTVFMDU1RkU0OTFGNUQ0NTgyNTU2
NTI4NTk2QzAeFw0yNTA2MjYxNDMxNDJaFw0yNjA2MjUxNDM2NDJaMDMxMTAvBgNV
BAMTKEI1QkM4Qzc0N0Q5OUNBRTg4NjVFNzUzQzg3ODk5NjdCODI4MjQzMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsM++/EqBsTvnrlSmXmoGS7rfH
BoG6rE5AKQ2Rus24BsmMSlyzb+T13qMli7ViArPwqWlxLBpwWEVsHKk4vH4wT9+o
Oz4KTKc9fk5PQk9aP6IpbuEynOnQCJMc7K7MteJLCrYKfZvGy9HCjoI32PveRwhl
trPir3ELVwV/a1cgMs7WhKWeftq1aPAtKb/qyjoT7JFJtV+J5oDXmCPmflOYReA5
VyoAmP0NRCxCzXnbJLmmuahNn8iN/ZCClQlq012VbMHPqG6BQ+y/xoilHLXlwwGF
6OMolbOMmQLx+lWgQQlXqZWyPUuJH6DsdEG1jtICSZuNUejcWCc0TfsrB1xLAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUtbyMdH2ZyuiGXnU8h4mWe4KCQywwHwYDVR0j
BBgwFoAUkDX65SnlpeBV/kkfXUWCVWUoWWwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm9UZkVuZ2dyNHJDUUxwRFp2bUJnYnVwVEhtVjFMSk1WOGt0WUhEaGVN
Z1ovMC85MDM1RkFFNTI5RTVBNUUwNTVGRTQ5MUY1RDQ1ODI1NTY1Mjg1OTZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwMzVGQUU1MjlFNUE1RTA1
NUZFNDkxRjVENDU4MjU1NjUyODU5NkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JvVGZFbmdncjRyQ1FMcERadm1CZ2J1cFRIbVYxTEpNVjhrdFlIRGhlTWdaLzAv
MzIzODMwMzEzYTM4MzAzYTY1MzAzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzNTMz
MzIzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKAEAgADgMA0GCSqGSIb3DQEBCwUAA4IBAQA5EHSH
XJ4DRboR+MF02OtY6uTsbmDCTFP7Kr7U7DFhrJ09R9GqwGSFBHWl5oEL86Pdxrxr
9qJGbYKF2g82wqftKHwR8Q3VEOSmE8JBJarOPCsXBav8UxLKR7aqynbjR8kand4y
0lcZJ+upOSZ+MBLKxux1PrX8ZBnTQW6RmzFN/qspon+JhAZsQNXbYKADKiBhrvW0
+0BrlS72X0KNFtGdRPXggyGSsE+YwGUip9RWKQL21MtQQRbKG6dJ79swpfCcbxQ6
TLvLeuFjiZbCKxFSMU2znPvG847Nqy4yXPiPThDVt/W4f3NOMJEo9dcL8N95hmVt
Z89zOMICWxU4CsQh
-----END CERTIFICATE-----
Generated at Tue Jul 1 06:52:17 2025 by rpki-client