Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/323830343a383734303a3a2f33322d313238203d3e203532393036.roa
File:                     323830343a383734303a3a2f33322d313238203d3e203532393036.roa (raw, json)
Hash identifier:          kfImCG2TW2PZqgdH+xcKUqqX56025AHMhP+JY16ulkg=
Subject key identifier:   CB:CE:51:5F:B5:49:51:D7:33:CA:7F:CA:41:DD:2A:E4:A8:B2:B1:C3
Certificate issuer:       /CN=C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1
Certificate serial:       1654605CB5976EC7AB7E2E96D7D88DA7DD652D22
Authority key identifier: C3:4B:76:AE:7A:49:F1:4A:5E:CE:69:B2:E0:67:E9:4E:0A:2E:BB:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/323830343a383734303a3a2f33322d313238203d3e203532393036.roa
Signing time:             Fri 15 Aug 2025 20:00:31 +0000
ROA not before:           Fri 15 Aug 2025 19:55:31 +0000
ROA not after:            Fri 14 Aug 2026 20:00:31 +0000
asID:                     52906
IP address blocks:        2804:8740::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl
                          rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:54:60:5c:b5:97:6e:c7:ab:7e:2e:96:d7:d8:8d:a7:dd:65:2d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1
        Validity
            Not Before: Aug 15 19:55:31 2025 GMT
            Not After : Aug 14 20:00:31 2026 GMT
        Subject: CN=CBCE515FB54951D733CA7FCA41DD2AE4A8B2B1C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2d:55:95:10:15:be:ec:39:95:38:89:04:73:
                    ca:49:8a:32:9f:bd:6f:40:a6:5a:81:c3:e0:50:48:
                    a3:71:1d:a5:92:8e:79:20:03:e7:84:3b:5c:32:97:
                    60:b6:8e:bd:c9:5e:d8:0c:13:4a:53:f1:01:8b:3c:
                    d1:80:f2:ad:cb:a5:02:08:be:66:cc:2e:b4:23:56:
                    dc:78:7a:e3:20:c7:18:fe:47:f2:53:2e:df:25:e4:
                    56:40:7a:3b:e3:15:ad:56:34:02:e1:22:03:06:43:
                    7d:6e:8a:45:af:4f:8b:20:1c:0b:a8:64:0e:0e:a7:
                    24:b8:b6:72:e4:58:af:b7:a6:72:19:c3:73:b0:f6:
                    f9:6e:d3:c5:20:dc:dd:b9:d1:e0:dc:06:f3:d9:53:
                    a6:18:45:ab:3d:d8:8f:d0:aa:bf:12:f8:57:d6:ba:
                    fa:5f:5b:a8:5e:99:2a:9c:31:c0:74:2b:17:e0:63:
                    c4:cb:bb:05:ee:a6:fb:01:24:bd:bf:c3:28:e4:7b:
                    11:bb:65:b8:4d:4d:2e:b9:70:e6:64:c7:2a:8a:44:
                    b6:4c:70:22:da:af:f0:b3:91:57:3c:6a:45:25:94:
                    20:5e:9f:46:06:24:2a:75:85:5a:f4:54:df:d3:82:
                    69:06:2b:e7:77:eb:2b:f7:4e:2c:05:20:92:ec:83:
                    2f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CE:51:5F:B5:49:51:D7:33:CA:7F:CA:41:DD:2A:E4:A8:B2:B1:C3
            X509v3 Authority Key Identifier:
                keyid:C3:4B:76:AE:7A:49:F1:4A:5E:CE:69:B2:E0:67:E9:4E:0A:2E:BB:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/323830343a383734303a3a2f33322d313238203d3e203532393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8740::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:8e:61:58:77:a6:f1:0d:fa:1d:7f:3c:c4:32:c9:fb:a6:48:
         72:02:6e:c0:0f:05:60:e7:88:91:ba:ee:ce:10:7d:a3:1a:90:
         3e:30:92:af:a0:cb:05:47:f6:ee:86:9a:a6:7d:72:7d:bd:69:
         3f:9b:cf:04:43:6b:61:df:44:a3:8f:0f:e9:db:52:09:0b:2f:
         3a:8b:2f:dd:8d:0a:53:69:95:81:40:bc:da:c3:ae:b9:b7:58:
         d6:09:e3:45:bc:5c:32:9e:82:01:89:51:68:9d:53:af:2e:47:
         0e:99:a2:54:ed:49:26:f1:cb:f9:54:05:e6:64:99:2e:c3:bd:
         0b:9f:ed:26:58:c1:55:60:3a:84:25:e6:af:db:b2:ea:81:fb:
         6b:f9:73:07:49:a2:ee:98:a4:43:32:ed:77:e3:f7:88:dd:07:
         6d:96:7d:cb:09:0b:88:75:f5:c1:de:36:34:f2:28:2d:34:d4:
         11:13:d2:73:3b:3f:9e:f2:72:8e:12:93:ee:db:77:28:32:6c:
         f2:bd:83:ff:24:b7:1b:c2:e9:5d:db:f8:4d:a6:35:cc:e4:90:
         62:ea:76:85:ee:5c:4f:bc:70:44:c2:69:af:2b:fe:22:a0:41:
         f2:37:87:c6:27:b1:44:c4:6b:58:82:97:e0:67:68:bd:30:c6:
         fd:16:8a:b5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFlRgXLWXbserfi6W19iNp91lLSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0Qjc2QUU3QTQ5RjE0QTVFQ0U2OUIyRTA2N0U5NEUw
QTJFQkJCMTAeFw0yNTA4MTUxOTU1MzFaFw0yNjA4MTQyMDAwMzFaMDMxMTAvBgNV
BAMTKENCQ0U1MTVGQjU0OTUxRDczM0NBN0ZDQTQxREQyQUU0QThCMkIxQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQLVWVEBW+7DmVOIkEc8pJijKf
vW9AplqBw+BQSKNxHaWSjnkgA+eEO1wyl2C2jr3JXtgME0pT8QGLPNGA8q3LpQII
vmbMLrQjVtx4euMgxxj+R/JTLt8l5FZAejvjFa1WNALhIgMGQ31uikWvT4sgHAuo
ZA4OpyS4tnLkWK+3pnIZw3Ow9vlu08Ug3N250eDcBvPZU6YYRas92I/Qqr8S+FfW
uvpfW6hemSqcMcB0KxfgY8TLuwXupvsBJL2/wyjkexG7ZbhNTS65cOZkxyqKRLZM
cCLar/CzkVc8akUllCBen0YGJCp1hVr0VN/TgmkGK+d36yv3TiwFIJLsgy8pAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUy85RX7VJUdczyn/KQd0q5KiyscMwHwYDVR0j
BBgwFoAUw0t2rnpJ8Upezmmy4GfpTgouu7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2pYMWsyQWZ1ZlFTVmdhbjVIQlVjYUxad0FRYm1UaUJTUjhUdkR1WVo2
OGsvMC9DMzRCNzZBRTdBNDlGMTRBNUVDRTY5QjJFMDY3RTk0RTBBMkVCQkIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNEI3NkFFN0E0OUYxNEE1
RUNFNjlCMkUwNjdFOTRFMEEyRUJCQjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNqWDFrMkFmdWZRU1ZnYW41SEJVY2FMWndBUWJtVGlCU1I4VHZEdVlaNjhrLzAv
MzIzODMwMzQzYTM4MzczNDMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNTMy
MzkzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASHQDANBgkqhkiG9w0BAQsFAAOCAQEATY5hWHem
8Q36HX88xDLJ+6ZIcgJuwA8FYOeIkbruzhB9oxqQPjCSr6DLBUf27oaapn1yfb1p
P5vPBENrYd9Eo48P6dtSCQsvOosv3Y0KU2mVgUC82sOuubdY1gnjRbxcMp6CAYlR
aJ1Try5HDpmiVO1JJvHL+VQF5mSZLsO9C5/tJljBVWA6hCXmr9uy6oH7a/lzB0mi
7pikQzLtd+P3iN0HbZZ9ywkLiHX1wd42NPIoLTTUERPSczs/nvJyjhKT7tt3KDJs
8r2D/yS3G8LpXdv4TaY1zOSQYup2he5cT7xwRMJpryv+IqBB8jeHxiexRMRrWIKX
4GdovTDG/RaKtQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:41 2025 by rpki-client