Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/323830343a363661303a3a2f33322d313238203d3e20323639353732.roa
File:                     323830343a363661303a3a2f33322d313238203d3e20323639353732.roa (raw, json)
Hash identifier:          JtRy4cmBKBuI/QiHNBhdDeJlqIh4qsk+0GGS5pqApHw=
Subject key identifier:   E4:21:AD:65:14:7C:28:BA:53:9A:27:30:E0:F0:2D:59:94:56:58:E1
Certificate issuer:       /CN=D54D28DD1135EB4EA68416B42CFD19DF502929D2
Certificate serial:       683A250A3B47B0FA384AEF40C7098328C17B2592
Authority key identifier: D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/323830343a363661303a3a2f33322d313238203d3e20323639353732.roa
Signing time:             Mon 30 Jun 2025 14:28:40 +0000
ROA not before:           Mon 30 Jun 2025 14:23:40 +0000
ROA not after:            Mon 29 Jun 2026 14:28:40 +0000
asID:                     269572
IP address blocks:        2804:66a0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.crl
                          rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 16:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3a:25:0a:3b:47:b0:fa:38:4a:ef:40:c7:09:83:28:c1:7b:25:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54D28DD1135EB4EA68416B42CFD19DF502929D2
        Validity
            Not Before: Jun 30 14:23:40 2025 GMT
            Not After : Jun 29 14:28:40 2026 GMT
        Subject: CN=E421AD65147C28BA539A2730E0F02D59945658E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:1a:b8:1f:e4:d9:0c:be:39:2a:87:18:1b:
                    3d:72:be:40:dc:69:2f:eb:25:d8:2f:5a:25:f3:2b:
                    8e:3a:27:49:dc:89:88:85:4e:5b:da:01:99:1f:32:
                    90:62:f8:35:ba:18:0f:e1:69:e4:1e:17:35:e1:be:
                    6b:28:61:6e:ea:76:fc:a6:92:ad:37:7a:cf:f4:4e:
                    27:a6:cf:a3:e5:8e:6b:f0:18:8b:a4:77:cf:1a:c4:
                    75:36:67:d4:b2:3e:86:e6:e1:66:c5:e7:ab:32:c3:
                    81:a5:50:47:a4:90:35:6f:d8:6b:d8:25:8e:41:a0:
                    c9:51:fc:ed:05:c5:33:66:a7:f1:f4:b6:61:06:3e:
                    ca:d7:c6:fa:cd:a7:68:d3:02:27:1a:a5:ba:ea:0d:
                    41:fa:26:02:12:b3:1e:62:78:9b:dc:86:7e:10:07:
                    e9:3e:07:f5:76:ad:9a:93:f9:5d:04:22:0f:67:47:
                    01:10:94:6f:c4:78:f8:c4:d5:3d:b6:02:cd:75:1d:
                    7c:67:a0:84:80:e4:4e:c2:5e:8d:d1:18:03:97:40:
                    1c:1b:94:b9:37:7f:8c:52:45:bf:b7:b2:76:98:10:
                    54:e2:e3:32:0f:34:8b:41:e2:37:10:b2:7d:12:26:
                    bd:95:47:c3:f1:3a:bd:d3:b4:ea:89:66:d8:47:34:
                    d6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:21:AD:65:14:7C:28:BA:53:9A:27:30:E0:F0:2D:59:94:56:58:E1
            X509v3 Authority Key Identifier:
                keyid:D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/323830343a363661303a3a2f33322d313238203d3e20323639353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:63:a4:e7:27:c1:53:db:44:10:db:37:7e:41:ad:81:09:d9:
         f7:13:88:d4:73:7e:a7:b3:e3:38:28:19:38:35:d9:a5:40:ac:
         1e:9e:9b:9b:6d:1a:10:2f:55:0a:39:6e:5a:3d:dc:c1:07:be:
         78:83:fa:c5:54:30:f2:56:1a:24:a4:eb:1d:f6:47:4a:d1:7a:
         12:59:dc:15:43:54:4d:3d:e7:5c:5b:ec:36:60:98:80:0f:1f:
         0c:4a:1d:09:69:12:f1:c0:66:07:98:0b:fb:29:60:b7:fa:5f:
         c4:b1:c4:fc:d2:4e:e5:f7:4c:4b:bf:4f:9e:5e:ba:2f:67:95:
         ea:71:81:99:72:04:25:c2:f0:6b:f8:3d:66:07:cf:d5:da:21:
         2b:62:2f:ba:00:67:ca:24:6b:49:0e:99:18:6f:61:6d:11:45:
         fe:4a:fb:2e:1a:c1:3f:89:ab:03:07:1a:f9:33:db:16:98:20:
         8a:61:c4:86:cf:20:73:a0:37:b3:b6:3a:46:41:fe:b4:58:51:
         88:ce:7e:bc:f7:ce:8c:9f:54:fb:a8:33:94:d4:8d:b9:54:21:
         1f:76:fb:16:37:5f:6f:18:85:37:09:c1:15:02:44:68:18:93:
         07:50:1a:5c:de:d0:3a:7e:c3:04:14:46:55:90:bd:fa:01:d5:
         a0:50:d6:9f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaDolCjtHsPo4Su9AxwmDKMF7JZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0RDI4REQxMTM1RUI0RUE2ODQxNkI0MkNGRDE5REY1
MDI5MjlEMjAeFw0yNTA2MzAxNDIzNDBaFw0yNjA2MjkxNDI4NDBaMDMxMTAvBgNV
BAMTKEU0MjFBRDY1MTQ3QzI4QkE1MzlBMjczMEUwRjAyRDU5OTQ1NjU4RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyyBq4H+TZDL45KocYGz1yvkDc
aS/rJdgvWiXzK446J0nciYiFTlvaAZkfMpBi+DW6GA/haeQeFzXhvmsoYW7qdvym
kq03es/0Tiemz6PljmvwGIukd88axHU2Z9SyPobm4WbF56syw4GlUEekkDVv2GvY
JY5BoMlR/O0FxTNmp/H0tmEGPsrXxvrNp2jTAicapbrqDUH6JgISsx5ieJvchn4Q
B+k+B/V2rZqT+V0EIg9nRwEQlG/EePjE1T22As11HXxnoISA5E7CXo3RGAOXQBwb
lLk3f4xSRb+3snaYEFTi4zIPNItB4jcQsn0SJr2VR8PxOr3TtOqJZthHNNaBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5CGtZRR8KLpTmicw4PAtWZRWWOEwHwYDVR0j
BBgwFoAU1U0o3RE1606mhBa0LP0Z31ApKdIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9jYjdoR3hjYzdBalpQQWpFTXdiY1RXMlpWMUdoc3JMYnY2aW5XQ3AySlNu
LzAvRDU0RDI4REQxMTM1RUI0RUE2ODQxNkI0MkNGRDE5REY1MDI5MjlEMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENTREMjhERDExMzVFQjRFQTY4
NDE2QjQyQ0ZEMTlERjUwMjkyOUQyLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9j
YjdoR3hjYzdBalpQQWpFTXdiY1RXMlpWMUdoc3JMYnY2aW5XQ3AySlNuLzAvMzIz
ODMwMzQzYTM2MzY2MTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2Mzkz
NTM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBGagMA0GCSqGSIb3DQEBCwUAA4IBAQAxY6TnJ8FT
20QQ2zd+Qa2BCdn3E4jUc36ns+M4KBk4NdmlQKwenpubbRoQL1UKOW5aPdzBB754
g/rFVDDyVhokpOsd9kdK0XoSWdwVQ1RNPedcW+w2YJiADx8MSh0JaRLxwGYHmAv7
KWC3+l/EscT80k7l90xLv0+eXrovZ5XqcYGZcgQlwvBr+D1mB8/V2iErYi+6AGfK
JGtJDpkYb2FtEUX+SvsuGsE/iasDBxr5M9sWmCCKYcSGzyBzoDeztjpGQf60WFGI
zn68986Mn1T7qDOU1I25VCEfdvsWN19vGIU3CcEVAkRoGJMHUBpc3tA6fsMEFEZV
kL36AdWgUNaf
-----END CERTIFICATE-----
Generated at Sun Jul 13 09:19:21 2025 by rpki-client