Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/323830343a393135343a3a2f33322d313238203d3e20313938393439.roa
File:                     323830343a393135343a3a2f33322d313238203d3e20313938393439.roa (raw, json)
Hash identifier:          XHOQ9w1aCT4H+q4iF72qFuu5XcOE2VGNdAVkrxmUnAE=
Subject key identifier:   B0:35:1C:3D:B3:D7:21:ED:BC:18:AF:B6:95:54:53:41:6A:77:27:47
Certificate issuer:       /CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
Certificate serial:       5F1808D294237B5E9962CFC3F765DF296D04802B
Authority key identifier: 2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/323830343a393135343a3a2f33322d313238203d3e20313938393439.roa
Signing time:             Mon 05 May 2025 19:19:52 +0000
ROA not before:           Mon 05 May 2025 19:14:52 +0000
ROA not after:            Mon 04 May 2026 19:19:52 +0000
asID:                     198949
IP address blocks:        2804:9154::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl
                          rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 19:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:18:08:d2:94:23:7b:5e:99:62:cf:c3:f7:65:df:29:6d:04:80:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
        Validity
            Not Before: May  5 19:14:52 2025 GMT
            Not After : May  4 19:19:52 2026 GMT
        Subject: CN=B0351C3DB3D721EDBC18AFB6955453416A772747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:d0:e3:c0:62:8d:37:e6:e6:7c:a2:d1:e9:
                    39:d3:0d:60:5a:c9:4d:aa:57:16:4a:d5:cc:ba:81:
                    55:eb:fa:d2:45:5e:9b:b1:19:65:24:4e:5b:18:3c:
                    a6:cf:e8:e4:c6:72:07:64:b6:78:f5:07:74:f0:25:
                    21:9d:03:92:40:80:4a:6b:75:98:3a:01:93:52:6d:
                    d7:dc:10:99:09:02:c2:ef:79:9e:56:b9:42:fb:37:
                    46:5c:87:73:97:43:20:32:c4:c0:fb:ed:f9:c9:b1:
                    d4:9a:d9:b2:2e:af:07:c8:86:c4:13:9e:05:f0:6c:
                    fa:a1:11:ba:e3:f5:33:a0:8c:97:ee:c9:9f:4c:3f:
                    c2:51:27:74:31:57:20:68:ad:ed:94:17:57:40:f9:
                    a5:fd:2b:9c:f0:a7:3e:c1:76:83:00:59:d8:79:e2:
                    1d:01:59:04:bf:37:c0:59:8f:e0:c1:51:a0:ab:42:
                    13:16:80:06:e6:3c:b0:3c:ea:b9:6d:fd:bd:72:5b:
                    20:89:cc:0c:98:6a:f8:80:1b:42:87:af:c5:93:9f:
                    46:e2:01:74:1c:15:ba:00:69:5a:5f:4c:79:0b:54:
                    07:5a:65:f9:69:51:dc:82:79:f8:a8:f9:61:cb:47:
                    44:69:3a:8c:44:5a:11:8f:db:1f:62:7e:7a:79:ee:
                    63:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:35:1C:3D:B3:D7:21:ED:BC:18:AF:B6:95:54:53:41:6A:77:27:47
            X509v3 Authority Key Identifier:
                keyid:2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/323830343a393135343a3a2f33322d313238203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9154::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:49:b1:16:86:ed:93:a3:84:7f:7e:0f:e8:b0:8d:03:12:02:
         89:e0:9a:5d:45:c9:e5:e3:cf:9a:76:fe:08:07:31:b0:68:a5:
         f0:5a:e7:9d:28:59:1b:a5:65:91:b2:65:da:86:a9:af:f5:32:
         0b:28:96:51:b8:38:7f:03:e1:cc:27:32:32:21:b7:3d:58:0f:
         fb:52:00:01:fe:ed:81:ad:95:e2:15:5c:3c:61:bc:ce:25:03:
         e3:64:f5:f9:75:b7:0a:b3:2b:a4:73:a4:d8:28:ab:bd:2a:72:
         03:5f:19:ed:c0:51:e4:b3:73:ab:6a:d2:8e:bc:69:f0:2a:7d:
         03:98:ab:f2:a0:5f:78:3b:18:e3:42:ce:4d:52:ba:2e:3e:b1:
         90:b9:22:fa:65:5d:2e:d4:47:e7:4a:3d:07:28:15:c4:f4:52:
         b6:ef:27:5c:37:2d:20:00:83:44:ee:0c:0e:d8:fb:ac:eb:b8:
         43:e0:3a:57:be:5a:27:d2:1e:a7:ce:e1:94:ac:df:4c:3d:8e:
         3b:f9:8e:44:6e:25:5b:59:a1:6d:c7:ba:39:32:49:41:eb:18:
         87:bf:88:69:35:a5:52:a7:fc:b2:1c:d7:78:6a:d5:df:5d:3d:
         7e:f8:3e:0a:3c:a7:24:0c:5c:59:9e:58:32:f4:43:25:a6:6d:
         60:d5:9a:67
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXxgI0pQje16ZYs/D92XfKW0EgCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMyMjdCRTZERUZCNEI5RUIwMDVDMEFDOUZDMjg0NzI3
QTQyNEQ4OTAeFw0yNTA1MDUxOTE0NTJaFw0yNjA1MDQxOTE5NTJaMDMxMTAvBgNV
BAMTKEIwMzUxQzNEQjNENzIxRURCQzE4QUZCNjk1NTQ1MzQxNkE3NzI3NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7MtDjwGKNN+bmfKLR6TnTDWBa
yU2qVxZK1cy6gVXr+tJFXpuxGWUkTlsYPKbP6OTGcgdktnj1B3TwJSGdA5JAgEpr
dZg6AZNSbdfcEJkJAsLveZ5WuUL7N0Zch3OXQyAyxMD77fnJsdSa2bIurwfIhsQT
ngXwbPqhEbrj9TOgjJfuyZ9MP8JRJ3QxVyBore2UF1dA+aX9K5zwpz7BdoMAWdh5
4h0BWQS/N8BZj+DBUaCrQhMWgAbmPLA86rlt/b1yWyCJzAyYaviAG0KHr8WTn0bi
AXQcFboAaVpfTHkLVAdaZflpUdyCefio+WHLR0RpOoxEWhGP2x9ifnp57mN1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsDUcPbPXIe28GK+2lVRTQWp3J0cwHwYDVR0j
BBgwFoAULCJ75t77S56wBcCsn8KEcnpCTYkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9idWs2UnBaSk55YUQ3ek1RN1cyTVlvc3ZRckZCQVpMcENwdnV6Wk4xZUhu
LzAvMkMyMjdCRTZERUZCNEI5RUIwMDVDMEFDOUZDMjg0NzI3QTQyNEQ4OS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzIyN0JFNkRFRkI0QjlFQjAw
NUMwQUM5RkMyODQ3MjdBNDI0RDg5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9i
dWs2UnBaSk55YUQ3ek1RN1cyTVlvc3ZRckZCQVpMcENwdnV6Wk4xZUhuLzAvMzIz
ODMwMzQzYTM5MzEzNTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMTM5Mzgz
OTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBJFUMA0GCSqGSIb3DQEBCwUAA4IBAQASSbEWhu2T
o4R/fg/osI0DEgKJ4JpdRcnl48+adv4IBzGwaKXwWuedKFkbpWWRsmXahqmv9TIL
KJZRuDh/A+HMJzIyIbc9WA/7UgAB/u2BrZXiFVw8YbzOJQPjZPX5dbcKsyukc6TY
KKu9KnIDXxntwFHks3OratKOvGnwKn0DmKvyoF94OxjjQs5NUrouPrGQuSL6ZV0u
1EfnSj0HKBXE9FK27ydcNy0gAINE7gwO2Pus67hD4DpXvlon0h6nzuGUrN9MPY47
+Y5EbiVbWaFtx7o5MklB6xiHv4hpNaVSp/yyHNd4atXfXT1++D4KPKckDFxZnlgy
9EMlpm1g1Zpn
-----END CERTIFICATE-----
Generated at Mon May 12 04:17:48 2025 by rpki-client