Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33322d3337203d3e20323637303237.roa
File:                     323830343a343730383a3a2f33322d3337203d3e20323637303237.roa (raw, json)
Hash identifier:          U/9M15TeapksX8XUjds2E9NJq2AK4bxt/Wst1EkaNVc=
Subject key identifier:   31:98:41:ED:EF:B1:F6:95:7A:25:29:05:40:D7:2A:26:8B:71:AA:B9
Certificate issuer:       /CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
Certificate serial:       4560E407A4489B2B490934271FEA8A0D482A6765
Authority key identifier: 2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33322d3337203d3e20323637303237.roa
Signing time:             Mon 11 Aug 2025 14:12:55 +0000
ROA not before:           Mon 11 Aug 2025 14:07:55 +0000
ROA not after:            Mon 10 Aug 2026 14:12:55 +0000
asID:                     267027
IP address blocks:        2804:4708::/32 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl
                          rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:60:e4:07:a4:48:9b:2b:49:09:34:27:1f:ea:8a:0d:48:2a:67:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1
        Validity
            Not Before: Aug 11 14:07:55 2025 GMT
            Not After : Aug 10 14:12:55 2026 GMT
        Subject: CN=319841EDEFB1F6957A25290540D72A268B71AAB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:c2:10:08:61:25:40:7f:83:c4:40:31:25:
                    c4:04:7c:a3:13:57:4b:b4:5e:e9:31:b0:ac:46:77:
                    c5:b8:ab:32:bc:19:b6:c0:0a:2e:8c:a2:c0:f3:83:
                    16:51:4f:53:7d:5e:67:50:f9:4b:5c:fa:91:9b:28:
                    2c:6a:d9:4d:5d:90:a4:32:71:3d:47:ab:d0:9d:03:
                    fa:5e:79:bd:d3:f7:21:b8:35:37:0e:07:84:01:bb:
                    d1:71:f2:0c:e2:03:2b:a7:1c:94:f6:1c:0d:78:db:
                    d5:87:18:4b:52:87:aa:de:ad:d3:2c:a6:9d:75:a6:
                    18:2a:c8:bf:51:ee:01:6f:2e:62:a0:2e:43:19:b1:
                    3e:ed:b9:32:f4:b2:a6:fb:40:d3:ae:3a:de:75:f1:
                    eb:5d:0a:52:67:31:1a:ba:a2:87:a3:84:b8:97:1c:
                    bc:82:52:14:a4:c3:d7:63:57:fc:83:bc:e5:e3:a3:
                    91:86:31:52:bb:ee:6a:25:14:3e:02:9f:a1:0d:f2:
                    a6:5b:22:82:4c:5b:0c:31:b9:96:c9:2a:2a:8c:76:
                    34:ad:6c:fd:86:fd:03:46:66:c4:37:4b:96:57:5e:
                    58:b8:4d:89:96:de:7d:74:2d:55:27:8b:cb:8e:9a:
                    4a:5e:e8:49:6b:fb:37:e2:b0:f6:d2:75:7d:c5:b3:
                    de:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:98:41:ED:EF:B1:F6:95:7A:25:29:05:40:D7:2A:26:8B:71:AA:B9
            X509v3 Authority Key Identifier:
                keyid:2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33322d3337203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:43:36:3c:9c:5c:5e:09:95:c3:d3:dc:e1:60:50:2b:38:75:
         de:4b:68:86:de:36:6c:01:2d:42:74:83:e7:2d:44:07:82:e0:
         e1:70:7c:84:30:58:53:37:6c:77:86:28:34:51:c9:ec:48:38:
         7c:ef:11:0d:49:a6:7c:4f:83:b4:9f:42:e5:d8:ed:99:2e:85:
         f3:4d:97:c3:97:f2:c6:87:fe:8a:21:9d:25:77:15:c3:9b:40:
         7f:1f:20:b1:0c:8e:32:d4:ba:f1:96:da:fa:79:98:06:b4:c5:
         6b:49:2b:67:20:2a:a5:02:2a:0b:ca:5f:e0:e9:98:57:79:fe:
         f7:05:3b:49:31:07:07:5a:e0:cb:ab:85:dd:f0:6c:b1:f9:58:
         05:49:1b:4c:97:1f:20:50:6e:8d:09:12:5e:1e:60:77:09:40:
         ed:75:52:67:20:a0:e9:dd:b3:b7:29:fa:8c:03:aa:96:0b:f4:
         91:70:c7:85:ff:4c:66:56:0a:0e:b7:b7:3a:5b:6e:33:d9:43:
         f8:43:94:13:38:c9:f3:ab:cc:6b:c7:2a:3b:af:20:9f:30:8b:
         30:c6:0c:88:95:87:25:be:bb:06:dc:c6:85:72:27:b5:9f:8d:
         fb:3d:bf:07:c0:af:33:8a:91:c6:7e:3b:57:07:4a:67:6f:eb:
         2f:3c:2e:12
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURWDkB6RImytJCTQnH+qKDUgqZ2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRGRDRCRTFGOTI3QzhCRUYzNURGQzBFOTk3Njk0MzE3
MUE1MTdCMTAeFw0yNTA4MTExNDA3NTVaFw0yNjA4MTAxNDEyNTVaMDMxMTAvBgNV
BAMTKDMxOTg0MUVERUZCMUY2OTU3QTI1MjkwNTQwRDcyQTI2OEI3MUFBQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4yMIQCGElQH+DxEAxJcQEfKMT
V0u0XukxsKxGd8W4qzK8GbbACi6MosDzgxZRT1N9XmdQ+Utc+pGbKCxq2U1dkKQy
cT1Hq9CdA/peeb3T9yG4NTcOB4QBu9Fx8gziAyunHJT2HA1429WHGEtSh6rerdMs
pp11phgqyL9R7gFvLmKgLkMZsT7tuTL0sqb7QNOuOt518etdClJnMRq6ooejhLiX
HLyCUhSkw9djV/yDvOXjo5GGMVK77molFD4Cn6EN8qZbIoJMWwwxuZbJKiqMdjSt
bP2G/QNGZsQ3S5ZXXli4TYmW3n10LVUni8uOmkpe6Elr+zfisPbSdX3Fs94dAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUMZhB7e+x9pV6JSkFQNcqJotxqrkwHwYDVR0j
BBgwFoAULf1L4fknyL7zXfwOmXaUMXGlF7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RFpxZ0xxWVBvdEVjZUJzbWNTNlNlTWR3cHlxWFZ1YWhodnJhV3RK
WXovMC8yREZENEJFMUY5MjdDOEJFRjM1REZDMEU5OTc2OTQzMTcxQTUxN0IxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERkQ0QkUxRjkyN0M4QkVG
MzVERkMwRTk5NzY5NDMxNzFBNTE3QjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURacWdMcVlQb3RFY2VCc21jUzZTZU1kd3B5cVhWdWFoaHZyYVd0Sll6LzAv
MzIzODMwMzQzYTM0MzczMDM4M2EzYTJmMzMzMjJkMzMzNzIwM2QzZTIwMzIzNjM3
MzAzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARHCDANBgkqhkiG9w0BAQsFAAOCAQEAC0M2PJxc
XgmVw9Pc4WBQKzh13ktoht42bAEtQnSD5y1EB4Lg4XB8hDBYUzdsd4YoNFHJ7Eg4
fO8RDUmmfE+DtJ9C5djtmS6F802Xw5fyxof+iiGdJXcVw5tAfx8gsQyOMtS68Zba
+nmYBrTFa0krZyAqpQIqC8pf4OmYV3n+9wU7STEHB1rgy6uF3fBssflYBUkbTJcf
IFBujQkSXh5gdwlA7XVSZyCg6d2ztyn6jAOqlgv0kXDHhf9MZlYKDre3OltuM9lD
+EOUEzjJ86vMa8cqO68gnzCLMMYMiJWHJb67BtzGhXIntZ+N+z2/B8CvM4qRxn47
VwdKZ2/rLzwuEg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:33:10 2025 by rpki-client