Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa
File:                     323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa (raw, json)
Hash identifier:          xVkCGnycg1275ka66QKBHxIg7JyVzi7uEhb77GeL5Fk=
Subject key identifier:   64:0F:BB:1E:6E:78:68:B0:50:08:07:9A:6F:0A:65:A1:FF:68:15:9D
Certificate issuer:       /CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB
Certificate serial:       7665638552EE52AEA82D24A184392254D92231B1
Authority key identifier: 99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa
Signing time:             Mon 05 May 2025 12:28:09 +0000
ROA not before:           Mon 05 May 2025 12:23:09 +0000
ROA not after:            Mon 04 May 2026 12:28:09 +0000
asID:                     268746
IP address blocks:        2804:5a10:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 10:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:65:63:85:52:ee:52:ae:a8:2d:24:a1:84:39:22:54:d9:22:31:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB
        Validity
            Not Before: May  5 12:23:09 2025 GMT
            Not After : May  4 12:28:09 2026 GMT
        Subject: CN=640FBB1E6E7868B05008079A6F0A65A1FF68159D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3e:26:05:b1:c9:98:d3:65:40:ad:fe:8e:72:
                    22:1f:43:e3:91:0a:31:87:79:42:01:48:04:65:a2:
                    93:e9:58:c1:4d:ef:d8:ec:d6:ac:49:d9:45:ff:e9:
                    dc:94:5d:6f:07:8a:92:e3:30:b8:e1:16:ca:3c:dd:
                    c7:c8:16:2b:fe:e1:58:1c:ff:29:b1:53:ae:41:0d:
                    0e:3a:16:2e:3d:68:0f:5b:51:a1:c9:dc:3d:c8:1f:
                    1e:62:09:54:47:07:48:9e:54:40:97:1a:e3:b3:17:
                    5a:ef:23:04:5b:1f:87:23:41:55:ed:30:5d:3e:7f:
                    42:14:90:c0:32:8e:df:ae:8e:a6:dc:f2:1e:d9:12:
                    89:2e:37:b0:f4:35:3b:f1:54:2a:61:aa:15:fa:de:
                    95:60:d3:8f:f4:4d:8d:cc:49:6f:60:73:8e:0a:28:
                    6a:de:1b:1c:ea:43:46:c6:c9:80:7d:aa:e2:e3:19:
                    ec:52:0a:bf:ee:0d:a8:82:b4:46:9c:73:b4:8b:56:
                    ad:bc:68:b1:9c:dd:93:db:4f:f7:0a:ed:50:6e:a7:
                    ab:5b:9e:af:18:9a:eb:28:78:46:32:70:33:72:e0:
                    18:60:2f:34:bd:be:d0:46:bb:39:2d:ed:fb:a2:67:
                    69:9b:f5:98:21:82:8c:7b:3c:f7:54:a4:94:07:eb:
                    2f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0F:BB:1E:6E:78:68:B0:50:08:07:9A:6F:0A:65:A1:FF:68:15:9D
            X509v3 Authority Key Identifier:
                keyid:99:C7:D5:12:A3:F6:D8:10:68:EF:1D:E7:FA:99:2C:3E:C4:11:C3:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99C7D512A3F6D81068EF1DE7FA992C3EC411C3DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a623030303a3a2f33362d3336203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         48:e3:21:ce:a5:14:1f:c0:97:68:f7:28:66:df:1e:65:f0:b6:
         a4:dd:6c:49:eb:98:7e:26:a8:88:eb:42:c8:c1:47:68:29:5b:
         4f:a1:bc:5f:10:9e:97:f7:fe:e1:e3:73:9c:bd:d2:81:20:8c:
         58:8f:4a:d4:64:9a:c9:d5:83:19:bd:32:13:e9:da:18:cb:0b:
         62:19:66:14:99:81:42:96:9a:b0:67:14:6b:b3:ee:73:a9:1a:
         2b:c6:c9:80:69:3f:f5:3b:37:db:7e:0f:0f:59:cf:02:45:fd:
         65:9d:f1:92:13:f6:da:69:c6:58:f2:12:93:b3:e3:fe:a2:d3:
         80:2a:6a:e0:d2:26:56:ac:b8:86:15:6e:5e:43:7f:85:de:7a:
         cd:0f:a2:c3:ae:ed:6d:3b:dd:fb:85:1b:0f:eb:92:92:a3:de:
         db:75:19:37:76:ad:30:88:51:93:36:3d:fd:d5:f5:4d:53:5a:
         46:15:80:62:16:e2:5c:91:75:53:d8:e2:8b:de:ad:7f:f8:b7:
         55:4c:82:c4:21:e1:25:4f:71:86:b7:8b:d6:dc:8c:20:8e:7b:
         dc:fc:ef:3d:d8:94:9c:b1:5e:20:cb:1c:a8:9a:96:94:12:be:
         a8:f0:14:72:01:0e:3d:90:f3:2f:12:4b:72:35:9c:5f:aa:60:
         33:34:00:e8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUdmVjhVLuUq6oLSShhDkiVNkiMbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlDN0Q1MTJBM0Y2RDgxMDY4RUYxREU3RkE5OTJDM0VD
NDExQzNEQjAeFw0yNTA1MDUxMjIzMDlaFw0yNjA1MDQxMjI4MDlaMDMxMTAvBgNV
BAMTKDY0MEZCQjFFNkU3ODY4QjA1MDA4MDc5QTZGMEE2NUExRkY2ODE1OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZPiYFscmY02VArf6OciIfQ+OR
CjGHeUIBSARlopPpWMFN79js1qxJ2UX/6dyUXW8HipLjMLjhFso83cfIFiv+4Vgc
/ymxU65BDQ46Fi49aA9bUaHJ3D3IHx5iCVRHB0ieVECXGuOzF1rvIwRbH4cjQVXt
MF0+f0IUkMAyjt+ujqbc8h7ZEokuN7D0NTvxVCphqhX63pVg04/0TY3MSW9gc44K
KGreGxzqQ0bGyYB9quLjGexSCr/uDaiCtEacc7SLVq28aLGc3ZPbT/cK7VBup6tb
nq8YmusoeEYycDNy4BhgLzS9vtBGuzkt7fuiZ2mb9Zghgox7PPdUpJQH6y8fAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUZA+7Hm54aLBQCAeabwplof9oFZ0wHwYDVR0j
BBgwFoAUmcfVEqP22BBo7x3n+pksPsQRw9swDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz
LzAvOTlDN0Q1MTJBM0Y2RDgxMDY4RUYxREU3RkE5OTJDM0VDNDExQzNEQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85OUM3RDUxMkEzRjZEODEwNjhF
RjFERTdGQTk5MkMzRUM0MTFDM0RCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzAvMzIz
ODMwMzQzYTM1NjEzMTMwM2E2MjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2Uy
MDMyMzYzODM3MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEWhCwMA0GCSqGSIb3DQEBCwUAA4IB
AQBI4yHOpRQfwJdo9yhm3x5l8Lak3WxJ65h+JqiI60LIwUdoKVtPobxfEJ6X9/7h
43OcvdKBIIxYj0rUZJrJ1YMZvTIT6doYywtiGWYUmYFClpqwZxRrs+5zqRorxsmA
aT/1Ozfbfg8PWc8CRf1lnfGSE/baacZY8hKTs+P+otOAKmrg0iZWrLiGFW5eQ3+F
3nrND6LDru1tO937hRsP65KSo97bdRk3dq0wiFGTNj391fVNU1pGFYBiFuJckXVT
2OKL3q1/+LdVTILEIeElT3GGt4vW3Iwgjnvc/O892JScsV4gyxyompaUEr6o8BRy
AQ49kPMvEktyNZxfqmAzNADo
-----END CERTIFICATE-----
Generated at Sun May 11 22:54:16 2025 by rpki-client