Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a3a2f33342d3334203d3e20323732313637.roa
File:                     323830343a383266343a3a2f33342d3334203d3e20323732313637.roa (raw, json)
Hash identifier:          SjFUwJRCCUfoYMs+Hy5oYhxs5mq3epQdOSACajBi9lw=
Subject key identifier:   15:64:E5:FE:64:1F:AF:02:99:0F:45:6C:A1:F4:D4:0E:76:F6:30:80
Certificate issuer:       /CN=266EB7778B34AD61D225851E8CF4924FC36A8639
Certificate serial:       6B6F1C46AA7D12325005F38AE24AE63F31B4D03E
Authority key identifier: 26:6E:B7:77:8B:34:AD:61:D2:25:85:1E:8C:F4:92:4F:C3:6A:86:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a3a2f33342d3334203d3e20323732313637.roa
Signing time:             Sun 22 Jun 2025 23:35:55 +0000
ROA not before:           Sun 22 Jun 2025 23:30:55 +0000
ROA not after:            Sun 21 Jun 2026 23:35:55 +0000
asID:                     272167
IP address blocks:        2804:82f4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.crl
                          rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 06:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6f:1c:46:aa:7d:12:32:50:05:f3:8a:e2:4a:e6:3f:31:b4:d0:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266EB7778B34AD61D225851E8CF4924FC36A8639
        Validity
            Not Before: Jun 22 23:30:55 2025 GMT
            Not After : Jun 21 23:35:55 2026 GMT
        Subject: CN=1564E5FE641FAF02990F456CA1F4D40E76F63080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:79:a2:d2:d1:17:6a:49:c1:cf:51:3d:27:ad:
                    ea:59:94:e6:03:9a:b5:34:b6:73:99:ce:4c:be:75:
                    2b:0e:81:f8:f2:d0:84:53:6e:e7:1b:03:7f:78:12:
                    2b:34:df:19:40:c0:e6:bb:7f:76:d1:10:d1:78:8e:
                    7e:36:b0:29:c4:ca:99:81:ca:2e:0c:4a:40:fa:6c:
                    c8:8c:b9:72:f0:24:a4:00:d4:ba:ee:02:92:ff:37:
                    8f:b0:88:92:fa:39:0b:61:e0:ff:61:d2:2e:ef:9b:
                    2a:a1:94:73:fa:a0:54:6b:a0:ab:c5:5c:fa:35:fe:
                    76:8a:b0:4f:50:2f:15:87:c2:7c:60:ea:ef:f3:03:
                    c0:5d:c4:8d:0c:6b:d8:45:37:cb:1b:9f:a2:30:50:
                    b6:f2:8d:6c:bd:0f:c3:e8:af:6d:98:90:be:79:20:
                    02:77:5c:0d:ba:d1:13:49:ac:1f:a3:ea:13:7b:9e:
                    3a:79:b8:95:51:8d:0c:23:9e:bd:31:9b:be:0e:fc:
                    a0:88:14:95:9c:49:a8:bc:90:04:36:2f:40:03:87:
                    74:37:86:96:25:40:38:0d:7f:26:5c:9c:e4:8f:3f:
                    d6:11:4b:dc:96:2d:bd:cf:98:34:f7:c6:45:88:3c:
                    41:1b:c8:a1:ca:ad:b4:41:fd:68:c5:62:59:cb:3d:
                    99:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:64:E5:FE:64:1F:AF:02:99:0F:45:6C:A1:F4:D4:0E:76:F6:30:80
            X509v3 Authority Key Identifier:
                keyid:26:6E:B7:77:8B:34:AD:61:D2:25:85:1E:8C:F4:92:4F:C3:6A:86:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a3a2f33342d3334203d3e20323732313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82f4::/34

    Signature Algorithm: sha256WithRSAEncryption
         93:26:94:02:54:de:f8:0a:37:d1:e6:be:d2:3e:b2:1b:24:32:
         f0:89:8e:55:39:53:59:9d:73:25:c4:9c:0a:78:a6:11:5b:01:
         3b:96:48:d4:e0:81:33:2c:12:9d:fc:93:f3:c6:1c:af:3b:f3:
         c2:cb:44:07:18:44:43:be:13:6b:e9:74:e1:d7:62:28:72:d8:
         93:16:d0:bb:ff:eb:8c:12:2a:89:f2:1e:a5:eb:72:30:7f:00:
         f3:5e:1a:a5:b7:d1:23:69:5d:46:c4:72:2b:ff:a1:05:ba:fb:
         58:a8:1a:f8:29:de:1f:c9:ea:08:d5:98:90:ed:34:c8:d3:d8:
         1a:dd:e4:29:93:97:d1:b2:05:cf:c7:19:ef:f7:84:3d:59:94:
         d9:0c:19:62:a2:62:32:ed:54:d5:b1:01:da:0b:2e:f8:a9:aa:
         b3:ad:91:92:a1:23:dd:41:b8:d6:08:19:d6:53:f6:41:84:6c:
         42:48:d4:0c:14:14:70:e3:d1:85:cf:db:11:f3:9b:fb:e4:99:
         65:14:ed:9f:31:32:96:f2:c8:2d:d3:4e:13:25:8e:5c:a8:a3:
         3a:4f:aa:df:36:e5:fb:ff:c3:c4:c3:1a:8a:38:95:60:42:1d:
         58:bf:e4:8a:f1:f4:ae:7d:0a:d6:60:e6:90:16:78:61:e1:e8:
         67:35:ef:50
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUa28cRqp9EjJQBfOK4krmPzG00D4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY2RUI3Nzc4QjM0QUQ2MUQyMjU4NTFFOENGNDkyNEZD
MzZBODYzOTAeFw0yNTA2MjIyMzMwNTVaFw0yNjA2MjEyMzM1NTVaMDMxMTAvBgNV
BAMTKDE1NjRFNUZFNjQxRkFGMDI5OTBGNDU2Q0ExRjRENDBFNzZGNjMwODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaeaLS0RdqScHPUT0nrepZlOYD
mrU0tnOZzky+dSsOgfjy0IRTbucbA394Eis03xlAwOa7f3bRENF4jn42sCnEypmB
yi4MSkD6bMiMuXLwJKQA1LruApL/N4+wiJL6OQth4P9h0i7vmyqhlHP6oFRroKvF
XPo1/naKsE9QLxWHwnxg6u/zA8BdxI0Ma9hFN8sbn6IwULbyjWy9D8Por22YkL55
IAJ3XA260RNJrB+j6hN7njp5uJVRjQwjnr0xm74O/KCIFJWcSai8kAQ2L0ADh3Q3
hpYlQDgNfyZcnOSPP9YRS9yWLb3PmDT3xkWIPEEbyKHKrbRB/WjFYlnLPZl/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFWTl/mQfrwKZD0VsofTUDnb2MIAwHwYDVR0j
BBgwFoAUJm63d4s0rWHSJYUejPSST8NqhjkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFdYY245THoxdUNrcm01WW1USDE5bW91Rnpna2tzbWZuRHdhVldvNmZ2
ZkYvMC8yNjZFQjc3NzhCMzRBRDYxRDIyNTg1MUU4Q0Y0OTI0RkMzNkE4NjM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2NkVCNzc3OEIzNEFENjFE
MjI1ODUxRThDRjQ5MjRGQzM2QTg2MzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hXWGNuOUx6MXVDa3JtNVltVEgxOW1vdUZ6Z2trc21mbkR3YVZXbzZmdmZGLzAv
MzIzODMwMzQzYTM4MzI2NjM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMy
MzEzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKASC9AAwDQYJKoZIhvcNAQELBQADggEBAJMmlAJU
3vgKN9HmvtI+shskMvCJjlU5U1mdcyXEnAp4phFbATuWSNTggTMsEp38k/PGHK87
88LLRAcYREO+E2vpdOHXYihy2JMW0Lv/64wSKonyHqXrcjB/APNeGqW30SNpXUbE
civ/oQW6+1ioGvgp3h/J6gjVmJDtNMjT2Brd5CmTl9GyBc/HGe/3hD1ZlNkMGWKi
YjLtVNWxAdoLLvipqrOtkZKhI91BuNYIGdZT9kGEbEJI1AwUFHDj0YXP2xHzm/vk
mWUU7Z8xMpbyyC3TThMljlyoozpPqt825fv/w8TDGoo4lWBCHVi/5Irx9K59CtZg
5pAWeGHh6Gc171A=
-----END CERTIFICATE-----
Generated at Fri Jul 4 12:02:35 2025 by rpki-client