Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a343030303a3a2f33342d3334203d3e20323636363531.roa
File:                     323830343a336634633a343030303a3a2f33342d3334203d3e20323636363531.roa (raw, json)
Hash identifier:          ipvqzKz4k5VQOe+Bzj6rPE+R7Nc032T922rJ18S7voM=
Subject key identifier:   6D:83:70:81:E0:A6:09:CC:BB:F1:FD:37:37:E8:CC:46:11:D6:22:17
Certificate issuer:       /CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
Certificate serial:       6DF99AFFF84AC03680F486FD58051477256ADE51
Authority key identifier: 65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a343030303a3a2f33342d3334203d3e20323636363531.roa
Signing time:             Thu 26 Jun 2025 18:20:06 +0000
ROA not before:           Thu 26 Jun 2025 18:15:06 +0000
ROA not after:            Thu 25 Jun 2026 18:20:06 +0000
asID:                     266651
IP address blocks:        2804:3f4c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl
                          rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 15:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f9:9a:ff:f8:4a:c0:36:80:f4:86:fd:58:05:14:77:25:6a:de:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
        Validity
            Not Before: Jun 26 18:15:06 2025 GMT
            Not After : Jun 25 18:20:06 2026 GMT
        Subject: CN=6D837081E0A609CCBBF1FD3737E8CC4611D62217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9a:70:13:39:1c:c4:96:c6:b4:24:48:77:c7:
                    f2:70:18:92:95:59:3f:dc:f8:08:f4:c8:78:d8:d6:
                    57:dc:0d:d2:e9:c8:87:a3:d8:f2:af:5a:f3:53:ce:
                    4d:e2:2b:0e:39:ca:e0:c7:bc:d7:75:85:2c:fc:27:
                    6f:50:84:4a:5f:cc:3d:da:44:03:f4:af:ed:e9:41:
                    da:56:d6:37:71:fd:41:6e:43:c4:c2:3c:f7:9d:0c:
                    82:8f:7a:c5:b3:95:62:b9:0f:fb:1d:27:a4:40:4f:
                    18:6d:7b:21:e5:53:ca:ee:95:6c:3c:58:73:a8:d2:
                    36:ff:e2:fb:cb:a4:71:90:bc:77:cf:78:d3:56:59:
                    7b:c3:26:18:ca:ab:dd:12:b8:7e:cf:42:f2:f8:c0:
                    0d:91:1d:82:7e:ea:38:51:d1:a3:0d:c9:18:ef:16:
                    86:c6:af:f6:d4:55:ba:79:87:24:9f:7f:e2:36:b6:
                    95:ca:dd:7a:65:10:e4:91:86:27:0a:46:32:bb:98:
                    87:06:77:e2:7c:9f:f0:6b:67:3d:f3:a4:8e:e2:c9:
                    66:29:86:7d:15:bf:a9:fc:e7:7b:98:40:99:0b:21:
                    8d:1c:84:d3:74:dc:b7:cc:c6:6e:ff:d3:fd:6d:99:
                    59:88:3f:dc:1f:30:92:42:45:19:bd:e7:f6:49:de:
                    2e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:83:70:81:E0:A6:09:CC:BB:F1:FD:37:37:E8:CC:46:11:D6:22:17
            X509v3 Authority Key Identifier:
                keyid:65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a343030303a3a2f33342d3334203d3e20323636363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f4c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         76:39:53:bd:69:54:61:77:5b:13:6b:fb:83:ba:89:12:7b:7f:
         2e:f7:9b:b8:8d:fc:0f:74:e0:a1:08:d8:cc:78:05:74:6d:c9:
         75:9d:af:97:88:ed:7f:fb:b4:e8:14:55:14:3e:72:ac:00:ec:
         e7:09:6c:fc:fc:7e:a8:b9:bb:8c:3d:3c:7d:94:a6:80:a4:0c:
         1b:53:e5:b5:63:ea:7f:57:5e:40:e0:3d:4d:ab:b8:25:d9:07:
         9d:c5:a7:6a:d9:d7:3a:18:31:f2:97:43:ff:a0:52:46:ee:6e:
         89:72:e9:2a:de:db:5a:12:37:4c:a6:d2:a0:05:3e:cc:e9:12:
         af:7b:58:88:5a:83:28:0d:c0:64:74:63:ef:53:6d:51:d4:86:
         95:42:18:b3:3f:74:f2:b2:59:90:74:a8:3d:0e:84:e1:35:a3:
         d8:ab:7e:b0:ac:24:3a:c8:fb:03:b6:ea:12:1a:05:ba:94:22:
         ce:20:b5:64:74:eb:6f:35:38:4f:6b:01:72:56:ad:07:7f:79:
         0f:7b:0b:77:68:dd:55:50:2c:a2:e7:81:22:8d:d9:18:18:10:
         ee:c2:84:ff:73:21:67:40:a8:c2:00:8a:6a:a3:6a:4f:5b:c3:
         a4:fc:61:78:15:d1:1c:2b:14:c5:89:5b:a2:68:fe:7a:04:ca:
         80:e8:da:e3
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUbfma//hKwDaA9Ib9WAUUdyVq3lEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjUyQjMwRTZEQzRFNjE4QjRFNzREM0I2NjFCOEFDMzk2
OTRBRkYyNzAeFw0yNTA2MjYxODE1MDZaFw0yNjA2MjUxODIwMDZaMDMxMTAvBgNV
BAMTKDZEODM3MDgxRTBBNjA5Q0NCQkYxRkQzNzM3RThDQzQ2MTFENjIyMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEmnATORzElsa0JEh3x/JwGJKV
WT/c+Aj0yHjY1lfcDdLpyIej2PKvWvNTzk3iKw45yuDHvNd1hSz8J29QhEpfzD3a
RAP0r+3pQdpW1jdx/UFuQ8TCPPedDIKPesWzlWK5D/sdJ6RATxhteyHlU8rulWw8
WHOo0jb/4vvLpHGQvHfPeNNWWXvDJhjKq90SuH7PQvL4wA2RHYJ+6jhR0aMNyRjv
FobGr/bUVbp5hySff+I2tpXK3XplEOSRhicKRjK7mIcGd+J8n/BrZz3zpI7iyWYp
hn0Vv6n853uYQJkLIY0chNN03LfMxm7/0/1tmVmIP9wfMJJCRRm95/ZJ3i47AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUbYNwgeCmCcy78f03N+jMRhHWIhcwHwYDVR0j
BBgwFoAUZSsw5txOYYtOdNO2YbisOWlK/ycwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBBN0U4VjF5cG1Lakd5NWdiSzhZSk1QaXd4Mm14bVQ0TTdQbUx4VWlI
aVAvMC82NTJCMzBFNkRDNEU2MThCNEU3NEQzQjY2MUI4QUMzOTY5NEFGRjI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MkIzMEU2REM0RTYxOEI0
RTc0RDNCNjYxQjhBQzM5Njk0QUZGMjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VwQTdFOFYxeXBtS2pHeTVnYks4WUpNUGl3eDJteG1UNE03UG1MeFVpSGlQLzAv
MzIzODMwMzQzYTMzNjYzNDYzM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjM2MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEP0xAMA0GCSqGSIb3DQEBCwUA
A4IBAQB2OVO9aVRhd1sTa/uDuokSe38u95u4jfwPdOChCNjMeAV0bcl1na+XiO1/
+7ToFFUUPnKsAOznCWz8/H6oubuMPTx9lKaApAwbU+W1Y+p/V15A4D1Nq7gl2Qed
xadq2dc6GDHyl0P/oFJG7m6Jcukq3ttaEjdMptKgBT7M6RKve1iIWoMoDcBkdGPv
U21R1IaVQhizP3TyslmQdKg9DoThNaPYq36wrCQ6yPsDtuoSGgW6lCLOILVkdOtv
NThPawFyVq0Hf3kPewt3aN1VUCyi54EijdkYGBDuwoT/cyFnQKjCAIpqo2pPW8Ok
/GF4FdEcKxTFiVuiaP56BMqA6Nrj
-----END CERTIFICATE-----
Generated at Tue Jul 1 01:16:56 2025 by rpki-client