Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/323830343a363863383a3a2f33322d3438203d3e20323639373135.roa
File:                     323830343a363863383a3a2f33322d3438203d3e20323639373135.roa (raw, json)
Hash identifier:          fM2ywQfNsjE8yUdpvoeZEgqst4cAizI2q2IMrusbTmk=
Subject key identifier:   06:D2:2A:28:6F:C5:1C:93:65:AE:FE:19:AC:46:AF:DB:C3:37:74:D0
Certificate issuer:       /CN=2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F
Certificate serial:       3AF749FE1A27CBD5BCA2ACD5C911746802C34275
Authority key identifier: 25:67:BA:1F:37:C1:9D:60:81:BA:21:7D:8C:AF:5D:F0:6F:DD:9F:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/323830343a363863383a3a2f33322d3438203d3e20323639373135.roa
Signing time:             Mon 23 Jun 2025 19:12:55 +0000
ROA not before:           Mon 23 Jun 2025 19:07:55 +0000
ROA not after:            Mon 22 Jun 2026 19:12:55 +0000
asID:                     269715
IP address blocks:        2804:68c8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.crl
                          rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 18:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f7:49:fe:1a:27:cb:d5:bc:a2:ac:d5:c9:11:74:68:02:c3:42:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F
        Validity
            Not Before: Jun 23 19:07:55 2025 GMT
            Not After : Jun 22 19:12:55 2026 GMT
        Subject: CN=06D22A286FC51C9365AEFE19AC46AFDBC33774D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c2:5f:0a:13:50:6d:28:e6:55:6c:40:ad:12:
                    e5:12:37:ea:d7:50:a6:55:22:75:4a:61:d8:2e:ee:
                    85:79:a8:0d:b9:e9:df:6a:d8:05:3a:4c:ea:68:1c:
                    91:c2:88:8f:8a:ab:e9:9b:22:0e:31:75:30:20:54:
                    ea:6a:b6:21:2d:ed:52:24:74:13:03:19:0d:d1:fc:
                    03:a9:e2:77:21:ee:1e:c6:11:70:2a:0d:e1:33:79:
                    db:3f:86:cf:1d:23:78:98:74:f6:84:c2:26:1d:7b:
                    6b:89:b8:a1:3a:92:34:14:a8:53:d1:a3:5c:bf:a5:
                    70:65:03:9e:be:58:a0:46:f5:2d:ab:74:ac:db:02:
                    cd:21:72:5a:48:74:49:59:c3:0d:63:92:4d:30:51:
                    12:35:56:44:41:91:79:5f:a5:6e:49:7e:df:a0:7f:
                    e9:44:f2:4e:b7:78:ce:aa:73:2f:e7:30:fe:a8:ca:
                    f7:5e:29:5b:5b:39:47:85:16:37:ce:42:31:df:a9:
                    78:b7:36:03:61:31:56:66:de:38:7a:2e:69:f4:f1:
                    ef:83:73:2e:bf:37:42:4b:09:0f:d5:05:9d:02:f1:
                    5c:89:de:27:fa:db:00:2d:c2:f3:24:59:08:2a:75:
                    3d:20:fa:bb:10:73:de:a2:68:f3:0c:b5:1a:8e:52:
                    fa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D2:2A:28:6F:C5:1C:93:65:AE:FE:19:AC:46:AF:DB:C3:37:74:D0
            X509v3 Authority Key Identifier:
                keyid:25:67:BA:1F:37:C1:9D:60:81:BA:21:7D:8C:AF:5D:F0:6F:DD:9F:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2567BA1F37C19D6081BA217D8CAF5DF06FDD9F6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/R3BCuQkCmtm9XPtsYgVjTwkmdj1o3pzVniduHXfMvtw/0/323830343a363863383a3a2f33322d3438203d3e20323639373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:d1:9b:2e:25:bb:ad:3c:6e:3c:39:a8:4a:ed:4a:31:86:df:
         20:91:2e:67:dd:2e:32:94:fc:5c:1e:42:23:a6:c5:11:d0:a4:
         ec:a9:c7:14:82:89:c7:78:72:d1:b6:d3:5a:13:5c:f3:64:77:
         54:db:24:f3:16:9d:ff:53:32:17:e2:d3:ee:ce:7c:8d:61:8a:
         e9:03:03:58:5f:07:cc:73:2e:79:f0:a1:33:3d:8b:20:25:11:
         1b:30:79:69:7c:31:00:e2:0a:ed:7a:87:a2:c6:c6:6d:bd:de:
         76:f1:9f:a1:44:be:7f:aa:ea:73:06:fe:ce:17:1e:ae:5b:36:
         ea:aa:ba:50:7a:b3:d1:a6:8c:7d:53:ff:ae:47:7a:e8:b7:63:
         76:ae:3e:26:a4:54:68:bf:a6:a0:3e:46:e1:2b:83:4a:30:29:
         d8:b5:cc:f8:26:c7:7e:bd:36:1d:6d:c3:f7:9c:53:f0:e9:4a:
         cd:16:aa:c4:b2:89:6e:4f:76:6e:63:fb:c0:57:32:e2:26:ff:
         18:86:88:52:ee:81:4a:47:a8:f5:3a:2e:5e:d5:36:57:df:fc:
         88:1c:fa:04:f5:91:5c:fb:ec:69:df:98:14:17:7a:ce:c5:2b:
         5c:8a:e0:b0:dd:f1:bd:62:a5:08:11:cf:fe:d0:b2:18:f6:99:
         6e:ca:e8:6b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUOvdJ/hony9W8oqzVyRF0aALDQnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU2N0JBMUYzN0MxOUQ2MDgxQkEyMTdEOENBRjVERjA2
RkREOUY2RjAeFw0yNTA2MjMxOTA3NTVaFw0yNjA2MjIxOTEyNTVaMDMxMTAvBgNV
BAMTKDA2RDIyQTI4NkZDNTFDOTM2NUFFRkUxOUFDNDZBRkRCQzMzNzc0RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgwl8KE1BtKOZVbECtEuUSN+rX
UKZVInVKYdgu7oV5qA256d9q2AU6TOpoHJHCiI+Kq+mbIg4xdTAgVOpqtiEt7VIk
dBMDGQ3R/AOp4nch7h7GEXAqDeEzeds/hs8dI3iYdPaEwiYde2uJuKE6kjQUqFPR
o1y/pXBlA56+WKBG9S2rdKzbAs0hclpIdElZww1jkk0wURI1VkRBkXlfpW5Jft+g
f+lE8k63eM6qcy/nMP6oyvdeKVtbOUeFFjfOQjHfqXi3NgNhMVZm3jh6Lmn08e+D
cy6/N0JLCQ/VBZ0C8VyJ3if62wAtwvMkWQgqdT0g+rsQc96iaPMMtRqOUvrVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUBtIqKG/FHJNlrv4ZrEav28M3dNAwHwYDVR0j
BBgwFoAUJWe6HzfBnWCBuiF9jK9d8G/dn28wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SM0JDdVFrQ210bTlYUHRzWWdWalR3a21kajFvM3B6Vm5pZHVIWGZNdnR3
LzAvMjU2N0JBMUYzN0MxOUQ2MDgxQkEyMTdEOENBRjVERjA2RkREOUY2Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNTY3QkExRjM3QzE5RDYwODFC
QTIxN0Q4Q0FGNURGMDZGREQ5RjZGLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
M0JDdVFrQ210bTlYUHRzWWdWalR3a21kajFvM3B6Vm5pZHVIWGZNdnR3LzAvMzIz
ODMwMzQzYTM2Mzg2MzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5Mzcz
MTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARoyDANBgkqhkiG9w0BAQsFAAOCAQEAWdGbLiW7rTxu
PDmoSu1KMYbfIJEuZ90uMpT8XB5CI6bFEdCk7KnHFIKJx3hy0bbTWhNc82R3VNsk
8xad/1MyF+LT7s58jWGK6QMDWF8HzHMuefChMz2LICURGzB5aXwxAOIK7XqHosbG
bb3edvGfoUS+f6rqcwb+zhcerls26qq6UHqz0aaMfVP/rkd66Ldjdq4+JqRUaL+m
oD5G4SuDSjAp2LXM+CbHfr02HW3D95xT8OlKzRaqxLKJbk92bmP7wFcy4ib/GIaI
Uu6BSkeo9TouXtU2V9/8iBz6BPWRXPvsad+YFBd6zsUrXIrgsN3xvWKlCBHP/tCy
GPaZbsroaw==
-----END CERTIFICATE-----
Generated at Thu Jul 3 09:04:02 2025 by rpki-client