Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/323830343a346434633a3a2f33322d3438203d3e20323637343232.roa
File:                     323830343a346434633a3a2f33322d3438203d3e20323637343232.roa (raw, json)
Hash identifier:          TSp4pb28CDc3CmgAqNWTUzj2tUUPyBdgJJeYPfOIRjg=
Subject key identifier:   1E:B2:F3:A3:86:CE:AF:D2:0D:9F:7B:C8:FE:DA:F2:73:E3:AD:73:92
Certificate issuer:       /CN=8B89FD117FF52A0199DBC5002C1BC7D44E204AD2
Certificate serial:       6B669F5D92A9452EC3A7091DCC2AD74C976C8DED
Authority key identifier: 8B:89:FD:11:7F:F5:2A:01:99:DB:C5:00:2C:1B:C7:D4:4E:20:4A:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/323830343a346434633a3a2f33322d3438203d3e20323637343232.roa
Signing time:             Thu 07 Aug 2025 16:52:59 +0000
ROA not before:           Thu 07 Aug 2025 16:47:59 +0000
ROA not after:            Thu 06 Aug 2026 16:52:59 +0000
asID:                     267422
IP address blocks:        2804:4d4c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.crl
                          rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 16:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:66:9f:5d:92:a9:45:2e:c3:a7:09:1d:cc:2a:d7:4c:97:6c:8d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B89FD117FF52A0199DBC5002C1BC7D44E204AD2
        Validity
            Not Before: Aug  7 16:47:59 2025 GMT
            Not After : Aug  6 16:52:59 2026 GMT
        Subject: CN=1EB2F3A386CEAFD20D9F7BC8FEDAF273E3AD7392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:aa:63:30:fd:1b:92:ab:9a:09:b5:42:09:
                    89:f9:e3:4c:55:37:47:d9:2a:58:79:ff:63:08:2f:
                    bf:04:08:55:bd:ce:44:7e:6f:92:ec:c4:6f:df:be:
                    c0:2e:86:54:dc:34:6b:b3:39:07:15:59:c2:20:9a:
                    2e:0b:11:a9:f0:e7:b1:da:c2:fe:e6:0f:fd:82:23:
                    c1:af:1d:7f:1b:bc:bc:b5:e7:be:e1:e1:52:9c:b4:
                    5c:2b:f9:e3:1b:1e:5e:98:ad:09:16:ad:d9:89:a1:
                    e7:93:a2:58:41:40:c4:d1:79:b5:26:ba:64:8c:02:
                    db:88:29:d9:38:14:7e:a4:9f:85:92:d1:fb:a4:37:
                    62:92:f0:9a:8e:1f:69:ff:34:e8:c5:5d:c3:af:55:
                    1e:e3:ef:32:7d:34:a9:95:f5:97:54:85:81:e6:de:
                    77:4f:b4:99:17:57:67:b4:39:70:ea:f4:55:14:9b:
                    47:a7:17:bf:f4:b6:7d:df:75:d6:01:83:ba:1c:28:
                    88:07:27:7f:4d:8f:ba:06:93:94:14:cc:1d:d3:f9:
                    dd:84:2d:9a:ef:05:78:ab:4f:32:27:03:4c:18:a2:
                    d6:a6:88:38:f8:0f:db:f5:03:57:e0:23:c1:92:e5:
                    a6:9c:40:3f:c6:73:1b:dc:d7:00:da:5b:d1:98:d1:
                    63:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B2:F3:A3:86:CE:AF:D2:0D:9F:7B:C8:FE:DA:F2:73:E3:AD:73:92
            X509v3 Authority Key Identifier:
                keyid:8B:89:FD:11:7F:F5:2A:01:99:DB:C5:00:2C:1B:C7:D4:4E:20:4A:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B89FD117FF52A0199DBC5002C1BC7D44E204AD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Qps98gU4vnpWEuX6PTaZobUTFxTKPMreBuYHRh2gfL1/0/323830343a346434633a3a2f33322d3438203d3e20323637343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:8d:ff:6b:d7:f0:4e:72:e6:f2:15:9e:2d:1b:15:6a:55:90:
         d3:f3:7c:9c:ee:8e:13:a0:12:6d:35:05:ae:7b:4d:80:8d:12:
         6d:f1:f6:49:05:a5:f5:a5:f7:6e:78:f0:27:0a:d5:0b:84:d5:
         b6:76:c3:54:2d:43:12:8c:44:29:19:47:8a:a4:f5:9e:ad:82:
         d6:14:8d:cd:bd:da:a2:11:0a:1d:8b:96:26:49:ed:a4:65:48:
         43:76:40:16:89:5a:67:b3:7e:40:fb:d4:29:c7:aa:e8:c2:61:
         6e:76:7e:ca:55:b2:6c:c8:e6:05:da:48:58:91:86:e0:b9:c1:
         04:87:b4:41:48:60:d1:f5:15:dc:c0:eb:bb:18:80:c9:4f:d6:
         dd:68:db:38:48:dc:17:e7:2b:11:a6:e6:8b:3b:5a:e5:6f:5c:
         c4:96:49:7a:8f:cc:34:73:12:9a:e2:96:a9:50:4a:38:62:a6:
         58:f4:59:b6:f0:c7:43:9e:16:0c:a0:48:23:2f:54:fd:7e:7d:
         9f:6e:3b:7c:ab:47:98:38:bf:0f:03:8a:cc:cc:d1:0c:20:59:
         b0:74:2d:5a:bd:8f:33:c4:a6:4a:b5:f6:6a:c2:ca:86:b4:40:
         fc:a7:60:df:e2:69:ac:c6:dd:43:63:7a:c5:5b:b0:e7:3e:2a:
         ff:ba:2e:7c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUa2afXZKpRS7DpwkdzCrXTJdsje0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI4OUZEMTE3RkY1MkEwMTk5REJDNTAwMkMxQkM3RDQ0
RTIwNEFEMjAeFw0yNTA4MDcxNjQ3NTlaFw0yNjA4MDYxNjUyNTlaMDMxMTAvBgNV
BAMTKDFFQjJGM0EzODZDRUFGRDIwRDlGN0JDOEZFREFGMjczRTNBRDczOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+F6pjMP0bkquaCbVCCYn540xV
N0fZKlh5/2MIL78ECFW9zkR+b5LsxG/fvsAuhlTcNGuzOQcVWcIgmi4LEanw57Ha
wv7mD/2CI8GvHX8bvLy1577h4VKctFwr+eMbHl6YrQkWrdmJoeeTolhBQMTRebUm
umSMAtuIKdk4FH6kn4WS0fukN2KS8JqOH2n/NOjFXcOvVR7j7zJ9NKmV9ZdUhYHm
3ndPtJkXV2e0OXDq9FUUm0enF7/0tn3fddYBg7ocKIgHJ39Nj7oGk5QUzB3T+d2E
LZrvBXirTzInA0wYotamiDj4D9v1A1fgI8GS5aacQD/Gcxvc1wDaW9GY0WNrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUHrLzo4bOr9INn3vI/tryc+Otc5IwHwYDVR0j
BBgwFoAUi4n9EX/1KgGZ28UALBvH1E4gStIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVFwczk4Z1U0dm5wV0V1WDZQVGFab2JVVEZ4VEtQTXJlQnVZSFJoMmdm
TDEvMC84Qjg5RkQxMTdGRjUyQTAxOTlEQkM1MDAyQzFCQzdENDRFMjA0QUQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCODlGRDExN0ZGNTJBMDE5
OURCQzUwMDJDMUJDN0Q0NEUyMDRBRDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVRcHM5OGdVNHZucFdFdVg2UFRhWm9iVVRGeFRLUE1yZUJ1WUhSaDJnZkwxLzAv
MzIzODMwMzQzYTM0NjQzNDYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzQzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARNTDANBgkqhkiG9w0BAQsFAAOCAQEAEY3/a9fw
TnLm8hWeLRsValWQ0/N8nO6OE6ASbTUFrntNgI0SbfH2SQWl9aX3bnjwJwrVC4TV
tnbDVC1DEoxEKRlHiqT1nq2C1hSNzb3aohEKHYuWJkntpGVIQ3ZAFolaZ7N+QPvU
Kceq6MJhbnZ+ylWybMjmBdpIWJGG4LnBBIe0QUhg0fUV3MDruxiAyU/W3WjbOEjc
F+crEabmizta5W9cxJZJeo/MNHMSmuKWqVBKOGKmWPRZtvDHQ54WDKBIIy9U/X59
n247fKtHmDi/DwOKzMzRDCBZsHQtWr2PM8SmSrX2asLKhrRA/Kdg3+JprMbdQ2N6
xVuw5z4q/7oufA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:04:21 2025 by rpki-client