Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a363330303a3a2f34302d3430203d3e20323633303835.roa
File:                     323830343a3936633a363330303a3a2f34302d3430203d3e20323633303835.roa (raw, json)
Hash identifier:          cy03UHaQfqom7bstU3w2b656/ZgUkji+2LkvIZylFA0=
Subject key identifier:   C2:73:0A:96:DA:C7:0E:D2:53:0E:6B:07:5F:74:14:B8:3D:11:FA:29
Certificate issuer:       /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Certificate serial:       1D0550FB6B079CEB4B3C2E2F497BA3C121B503A1
Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a363330303a3a2f34302d3430203d3e20323633303835.roa
Signing time:             Wed 07 May 2025 20:49:28 +0000
ROA not before:           Wed 07 May 2025 20:44:28 +0000
ROA not after:            Wed 06 May 2026 20:49:28 +0000
asID:                     263085
IP address blocks:        2804:96c:6300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl
                          rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 18:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:05:50:fb:6b:07:9c:eb:4b:3c:2e:2f:49:7b:a3:c1:21:b5:03:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
        Validity
            Not Before: May  7 20:44:28 2025 GMT
            Not After : May  6 20:49:28 2026 GMT
        Subject: CN=C2730A96DAC70ED2530E6B075F7414B83D11FA29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4b:29:6d:b1:03:65:00:7f:c5:30:f5:20:8b:
                    88:46:bb:52:79:83:48:35:45:81:48:87:b7:0c:30:
                    ca:20:b1:49:fa:68:6a:71:2f:ea:33:99:c4:fa:be:
                    f7:e4:bf:9a:6e:80:58:15:dd:42:2f:17:2f:77:06:
                    92:4d:93:ac:5b:b1:3b:f0:ae:2b:6c:bf:49:a0:1c:
                    c7:c9:6d:c5:1c:bc:c8:ea:fa:a1:ba:cb:a7:ea:df:
                    3f:c4:29:de:f3:58:f3:50:63:a6:be:ac:ca:c7:1f:
                    79:af:03:75:c2:c8:ee:c4:d9:e2:fe:a4:87:26:4e:
                    ba:73:93:59:50:60:df:35:3e:2a:98:2b:98:8e:de:
                    df:e3:21:cf:14:d3:3b:78:0a:e1:11:59:12:45:07:
                    d8:a5:f9:94:c4:26:a1:e1:74:88:4d:6e:04:61:66:
                    ff:0a:b1:9d:37:11:56:94:5f:3c:c6:1f:5c:a9:fd:
                    80:e7:46:36:1f:89:18:51:6a:49:e8:4f:d5:28:4a:
                    d2:43:ad:a5:46:8a:20:46:9e:63:9d:33:36:97:e0:
                    fe:b1:61:d1:a9:93:d2:3d:e0:72:aa:35:38:10:73:
                    61:0c:e2:a6:c1:95:58:2d:dc:ab:cd:75:8b:4f:ef:
                    3e:21:ea:b1:06:28:98:c7:de:c9:7c:79:4b:db:6b:
                    f8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:73:0A:96:DA:C7:0E:D2:53:0E:6B:07:5F:74:14:B8:3D:11:FA:29
            X509v3 Authority Key Identifier:
                keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a363330303a3a2f34302d3430203d3e20323633303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:96c:6300::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:4f:57:1a:a7:d6:1c:c8:0e:90:f5:89:11:75:68:fe:97:15:
         a7:6b:85:9f:55:e8:c1:70:cc:05:ec:82:d1:af:35:1b:da:e0:
         49:d4:b4:9c:5b:c5:60:0e:4e:e7:22:35:a7:4a:f5:74:0a:2d:
         00:5a:50:8a:cd:b0:55:ec:0c:95:ed:94:11:19:b1:9b:2a:b9:
         34:31:9d:cd:2f:e9:9e:63:61:b2:b5:84:ee:df:01:1f:c7:f8:
         dd:c4:33:34:78:e1:ef:d5:ba:9d:b5:ce:d3:36:b2:0e:ed:80:
         64:f0:a1:fa:d5:3d:25:18:bb:fd:e2:c4:bb:ee:45:b2:f4:14:
         24:ad:c7:46:35:ab:49:cf:6e:37:5c:ae:0d:0f:1f:81:93:82:
         f1:14:85:71:46:a5:fe:ed:81:15:e0:9d:5c:06:9c:32:a8:22:
         e6:06:cf:38:dc:09:87:3a:23:54:5e:b7:e6:7b:a9:df:dc:63:
         95:1a:65:33:29:26:39:55:63:da:25:34:7b:f4:e2:29:e8:e4:
         ba:45:a5:8f:35:5a:67:dd:be:81:58:9b:01:a3:35:cb:23:20:
         cf:86:fd:7b:0d:18:8e:a1:d7:f8:3f:23:b9:22:92:51:c8:06:
         47:e5:9f:67:bf:df:fc:44:71:7c:b0:b1:00:38:8c:56:12:64:
         17:ed:78:b5
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUHQVQ+2sHnOtLPC4vSXujwSG1A6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3
QkQzQTgyMjAeFw0yNTA1MDcyMDQ0MjhaFw0yNjA1MDYyMDQ5MjhaMDMxMTAvBgNV
BAMTKEMyNzMwQTk2REFDNzBFRDI1MzBFNkIwNzVGNzQxNEI4M0QxMUZBMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTSyltsQNlAH/FMPUgi4hGu1J5
g0g1RYFIh7cMMMogsUn6aGpxL+ozmcT6vvfkv5pugFgV3UIvFy93BpJNk6xbsTvw
ritsv0mgHMfJbcUcvMjq+qG6y6fq3z/EKd7zWPNQY6a+rMrHH3mvA3XCyO7E2eL+
pIcmTrpzk1lQYN81PiqYK5iO3t/jIc8U0zt4CuERWRJFB9il+ZTEJqHhdIhNbgRh
Zv8KsZ03EVaUXzzGH1yp/YDnRjYfiRhRaknoT9UoStJDraVGiiBGnmOdMzaX4P6x
YdGpk9I94HKqNTgQc2EM4qbBlVgt3KvNdYtP7z4h6rEGKJjH3sl8eUvba/hjAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUwnMKltrHDtJTDmsHX3QUuD0R+ikwHwYDVR0j
BBgwFoAUGp+jfzmuH/VUIs0epN3CLHvTqCIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9mU3VkTTRFTXdLSEV3OXc1aXVwcHlhbmlFNFVFZVRlM3pBaVByR3N4TENZ
LzAvMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3QkQzQTgyMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQTlGQTM3RjM5QUUxRkY1NTQy
MkNEMUVBNEREQzIyQzdCRDNBODIyLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9m
U3VkTTRFTXdLSEV3OXc1aXVwcHlhbmlFNFVFZVRlM3pBaVByR3N4TENZLzAvMzIz
ODMwMzQzYTM5MzY2MzNhMzYzMzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAz
MjM2MzMzMDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBAlsYzANBgkqhkiG9w0BAQsFAAOCAQEA
h09XGqfWHMgOkPWJEXVo/pcVp2uFn1XowXDMBeyC0a81G9rgSdS0nFvFYA5O5yI1
p0r1dAotAFpQis2wVewMle2UERmxmyq5NDGdzS/pnmNhsrWE7t8BH8f43cQzNHjh
79W6nbXO0zayDu2AZPCh+tU9JRi7/eLEu+5FsvQUJK3HRjWrSc9uN1yuDQ8fgZOC
8RSFcUal/u2BFeCdXAacMqgi5gbPONwJhzojVF635nup39xjlRplMykmOVVj2iU0
e/TiKejkukWljzVaZ92+gVibAaM1yyMgz4b9ew0YjqHX+D8juSKSUcgGR+WfZ7/f
/ERxfLCxADiMVhJkF+14tQ==
-----END CERTIFICATE-----
Generated at Wed May 14 01:06:43 2025 by rpki-client