Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/323830343a373666343a3a2f33322d313238203d3e20323731313435.roa
File:                     323830343a373666343a3a2f33322d313238203d3e20323731313435.roa (raw, json)
Hash identifier:          k737IpHVIx38KeMXnjn68d7GK+eiRxOIYRAwf5wtvh8=
Subject key identifier:   0B:8E:B2:C0:C3:08:34:9F:CF:B1:8C:F8:A6:09:C1:6E:A6:F3:94:AC
Certificate issuer:       /CN=7B05BE01AFF0F9A0197EB3B997EBAFC4EE02CFC6
Certificate serial:       74277681885F8BAAC7DF6D00B6F4CA3DBABD2240
Authority key identifier: 7B:05:BE:01:AF:F0:F9:A0:19:7E:B3:B9:97:EB:AF:C4:EE:02:CF:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B05BE01AFF0F9A0197EB3B997EBAFC4EE02CFC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/323830343a373666343a3a2f33322d313238203d3e20323731313435.roa
Signing time:             Wed 15 Oct 2025 13:53:46 +0000
ROA not before:           Wed 15 Oct 2025 13:48:46 +0000
ROA not after:            Wed 14 Oct 2026 13:53:46 +0000
asID:                     271145
IP address blocks:        2804:76f4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/7B05BE01AFF0F9A0197EB3B997EBAFC4EE02CFC6.crl
                          rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/7B05BE01AFF0F9A0197EB3B997EBAFC4EE02CFC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B05BE01AFF0F9A0197EB3B997EBAFC4EE02CFC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:27:76:81:88:5f:8b:aa:c7:df:6d:00:b6:f4:ca:3d:ba:bd:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B05BE01AFF0F9A0197EB3B997EBAFC4EE02CFC6
        Validity
            Not Before: Oct 15 13:48:46 2025 GMT
            Not After : Oct 14 13:53:46 2026 GMT
        Subject: CN=0B8EB2C0C308349FCFB18CF8A609C16EA6F394AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:da:b4:5f:1a:99:d0:e8:bc:a9:f2:0b:99:
                    6f:c0:56:a9:79:35:b5:76:2f:2f:15:a6:2a:be:64:
                    59:e7:2f:3f:1a:fa:66:4b:ca:32:cb:15:95:11:cb:
                    6d:82:36:2a:08:3d:f7:ed:47:f2:00:88:ff:d8:7c:
                    0b:4c:45:92:fc:45:da:a0:b8:62:9c:5d:e5:da:98:
                    f7:d6:b6:b4:d8:8a:0c:47:1e:f8:a9:ad:6f:ad:a5:
                    54:a1:ce:0c:5e:68:3a:d1:f2:ec:9d:97:79:47:52:
                    54:c7:b0:2a:de:03:d5:b9:54:71:a5:ab:37:4c:3f:
                    55:86:a8:50:f6:33:42:6d:e3:c7:0c:ec:d9:52:ed:
                    23:63:43:3b:62:33:26:53:e5:ba:8f:81:f1:1d:ec:
                    02:82:a1:b4:00:1d:5d:36:1d:bd:d3:0c:5c:29:85:
                    5b:47:43:0a:e9:a2:c6:49:db:ea:e7:7b:90:e0:6d:
                    dc:2f:b7:33:a9:5d:f5:fb:e1:f1:01:90:eb:b3:92:
                    ca:ca:7e:00:fe:4e:86:ae:71:c0:16:db:bb:59:34:
                    61:29:ac:62:04:01:61:2e:37:ba:7b:06:49:30:25:
                    02:f0:34:ac:82:fa:60:91:56:d5:22:5b:85:95:6a:
                    e5:e4:3a:3f:a0:a8:b8:26:e6:bc:b1:c9:1c:c0:5b:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8E:B2:C0:C3:08:34:9F:CF:B1:8C:F8:A6:09:C1:6E:A6:F3:94:AC
            X509v3 Authority Key Identifier:
                keyid:7B:05:BE:01:AF:F0:F9:A0:19:7E:B3:B9:97:EB:AF:C4:EE:02:CF:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/7B05BE01AFF0F9A0197EB3B997EBAFC4EE02CFC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B05BE01AFF0F9A0197EB3B997EBAFC4EE02CFC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33CtBvsse9zowJrQoVpUUDJgwvz4X11PrUvfo613fP8V/0/323830343a373666343a3a2f33322d313238203d3e20323731313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:56:4f:98:36:2a:eb:ed:4a:a4:5c:14:38:d7:d4:73:e6:07:
         5a:e2:5d:29:d4:0d:1d:e5:c8:cd:99:0b:99:8b:ec:56:01:24:
         62:9f:6e:a3:e4:31:03:39:0c:89:b4:33:48:dc:2f:07:0d:f5:
         7d:7f:de:0a:b4:76:2a:da:d9:6f:8b:59:ed:57:74:c7:98:34:
         8e:b3:1b:1f:ed:83:1a:43:c4:ed:ab:08:e1:21:f7:0f:a5:df:
         c9:f6:85:58:24:83:51:a6:e9:d5:55:1d:94:95:2b:c5:6a:e1:
         54:c7:cb:2c:77:d4:46:b4:fe:bb:b6:85:36:de:6b:de:4b:4c:
         22:39:d2:64:04:c3:b8:2e:e0:9d:89:71:7f:87:7d:86:43:0d:
         b6:2e:34:aa:af:c9:9a:b8:02:bc:f9:6f:f4:37:b5:b2:f5:68:
         eb:8c:93:91:1b:84:ea:b5:a9:9f:1f:c5:76:5a:29:25:74:fa:
         00:35:68:b1:b0:a9:ac:bb:e5:e9:86:d7:cb:48:49:0c:a2:c6:
         1f:60:1d:80:09:f6:d0:a0:7e:53:e1:9a:3c:8b:0f:e1:6f:12:
         e1:de:54:df:82:46:76:c4:8f:61:97:31:2e:bc:e3:12:e5:95:
         fa:d9:3f:99:d5:b1:36:54:6e:38:98:bb:c1:d8:76:a0:3f:5b:
         b8:9d:34:0b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUdCd2gYhfi6rH320AtvTKPbq9IkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IwNUJFMDFBRkYwRjlBMDE5N0VCM0I5OTdFQkFGQzRF
RTAyQ0ZDNjAeFw0yNTEwMTUxMzQ4NDZaFw0yNjEwMTQxMzUzNDZaMDMxMTAvBgNV
BAMTKDBCOEVCMkMwQzMwODM0OUZDRkIxOENGOEE2MDlDMTZFQTZGMzk0QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0qNq0XxqZ0Oi8qfILmW/AVql5
NbV2Ly8Vpiq+ZFnnLz8a+mZLyjLLFZURy22CNioIPfftR/IAiP/YfAtMRZL8Rdqg
uGKcXeXamPfWtrTYigxHHviprW+tpVShzgxeaDrR8uydl3lHUlTHsCreA9W5VHGl
qzdMP1WGqFD2M0Jt48cM7NlS7SNjQztiMyZT5bqPgfEd7AKCobQAHV02Hb3TDFwp
hVtHQwrposZJ2+rne5DgbdwvtzOpXfX74fEBkOuzksrKfgD+ToauccAW27tZNGEp
rGIEAWEuN7p7BkkwJQLwNKyC+mCRVtUiW4WVauXkOj+gqLgm5ryxyRzAW/gdAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUC46ywMMINJ/PsYz4pgnBbqbzlKwwHwYDVR0j
BBgwFoAUewW+Aa/w+aAZfrO5l+uvxO4Cz8YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzNDdEJ2c3NlOXpvd0pyUW9WcFVVREpnd3Z6NFgxMVByVXZmbzYxM2ZQ
OFYvMC83QjA1QkUwMUFGRjBGOUEwMTk3RUIzQjk5N0VCQUZDNEVFMDJDRkM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCMDVCRTAxQUZGMEY5QTAx
OTdFQjNCOTk3RUJBRkM0RUUwMkNGQzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMzQ3RCdnNzZTl6b3dKclFvVnBVVURKZ3d2ejRYMTFQclV2Zm82MTNmUDhWLzAv
MzIzODMwMzQzYTM3MzY2NjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzMTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBHb0MA0GCSqGSIb3DQEBCwUAA4IBAQDAVk+Y
Nirr7UqkXBQ419Rz5gda4l0p1A0d5cjNmQuZi+xWASRin26j5DEDOQyJtDNI3C8H
DfV9f94KtHYq2tlvi1ntV3THmDSOsxsf7YMaQ8TtqwjhIfcPpd/J9oVYJINRpunV
VR2UlSvFauFUx8ssd9RGtP67toU23mveS0wiOdJkBMO4LuCdiXF/h32GQw22LjSq
r8mauAK8+W/0N7Wy9WjrjJORG4TqtamfH8V2WikldPoANWixsKmsu+XphtfLSEkM
osYfYB2ACfbQoH5T4Zo8iw/hbxLh3lTfgkZ2xI9hlzEuvOMS5ZX62T+Z1bE2VG44
mLvB2HagP1u4nTQL
-----END CERTIFICATE-----
Generated at Tue Oct 21 05:57:10 2025 by rpki-client