Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/323830343a316236303a3a2f33322d313238203d3e203631373234.roa
File:                     323830343a316236303a3a2f33322d313238203d3e203631373234.roa (raw, json)
Hash identifier:          ony0xbBFzRiDSEq2E2qJORm3J3QbhC8W7AhhIBt72tw=
Subject key identifier:   2B:DB:32:6D:FF:59:D3:66:4F:BE:2B:A1:9A:24:A3:5D:B3:5E:A4:D7
Certificate issuer:       /CN=22556D0290AA08E04E52E5890C17182439269D40
Certificate serial:       689F92B9EE301926A779285B50AEEBCE8E42BC6C
Authority key identifier: 22:55:6D:02:90:AA:08:E0:4E:52:E5:89:0C:17:18:24:39:26:9D:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22556D0290AA08E04E52E5890C17182439269D40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/323830343a316236303a3a2f33322d313238203d3e203631373234.roa
Signing time:             Tue 19 Aug 2025 13:13:22 +0000
ROA not before:           Tue 19 Aug 2025 13:08:22 +0000
ROA not after:            Tue 18 Aug 2026 13:13:22 +0000
asID:                     61724
IP address blocks:        2804:1b60::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.crl
                          rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22556D0290AA08E04E52E5890C17182439269D40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9f:92:b9:ee:30:19:26:a7:79:28:5b:50:ae:eb:ce:8e:42:bc:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22556D0290AA08E04E52E5890C17182439269D40
        Validity
            Not Before: Aug 19 13:08:22 2025 GMT
            Not After : Aug 18 13:13:22 2026 GMT
        Subject: CN=2BDB326DFF59D3664FBE2BA19A24A35DB35EA4D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:c2:37:4c:cb:78:37:ab:6f:29:8b:1d:6d:
                    b6:78:50:09:52:87:8c:71:49:da:d4:30:44:69:88:
                    23:85:3e:91:24:1b:f3:cd:1c:61:37:d3:0c:ca:fd:
                    1c:05:38:b3:0a:9e:6f:d0:f4:6e:c4:9b:6b:73:3f:
                    cc:bc:61:03:eb:d4:db:c7:16:59:8d:03:4a:30:96:
                    0f:8d:23:16:54:b5:d8:e8:b4:26:c1:9f:24:9c:ff:
                    69:94:2c:9a:d6:98:0c:da:b0:04:3d:26:ce:59:b5:
                    d9:3d:39:f0:46:5d:37:94:1b:e2:5b:8d:29:f3:88:
                    6d:5e:98:e7:35:ab:1e:e5:b6:49:44:4d:16:52:99:
                    e1:03:f9:3b:22:ea:ad:c8:cd:a9:03:a2:b3:51:82:
                    4a:56:ac:85:d0:b4:3b:72:a3:59:00:f5:5c:3c:43:
                    05:d6:7e:4e:e6:b4:2d:4c:5d:0a:0e:6a:dc:c0:2a:
                    ce:de:b3:8b:d1:f4:d8:ef:1a:84:d7:36:ec:8b:5a:
                    bf:86:46:50:39:d4:12:f1:3d:c8:9c:82:99:a1:c3:
                    76:fb:ff:e7:9c:6f:f2:90:36:45:e9:cd:b9:07:cc:
                    82:5f:c2:66:6b:e3:64:0c:c8:e6:3a:e4:8d:68:aa:
                    5b:aa:ef:09:47:22:76:e4:9a:64:b6:b3:65:b4:82:
                    3f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DB:32:6D:FF:59:D3:66:4F:BE:2B:A1:9A:24:A3:5D:B3:5E:A4:D7
            X509v3 Authority Key Identifier:
                keyid:22:55:6D:02:90:AA:08:E0:4E:52:E5:89:0C:17:18:24:39:26:9D:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22556D0290AA08E04E52E5890C17182439269D40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/323830343a316236303a3a2f33322d313238203d3e203631373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:b9:94:32:39:44:d9:e0:f5:41:24:5a:33:09:86:6d:39:19:
         d2:2a:e8:37:47:50:16:1b:1f:a1:d2:c5:c6:eb:3e:db:58:59:
         60:37:a5:f1:5a:b7:c3:f8:9f:48:32:6c:7d:e2:92:e0:d4:01:
         5d:55:d2:06:25:57:8e:85:7a:ff:f2:e1:f3:8f:7f:05:2b:8e:
         39:65:cd:45:1b:4c:90:8d:38:95:7e:7f:57:74:cf:11:92:06:
         46:a8:28:7a:91:27:85:e4:f3:7a:de:05:46:aa:df:25:f6:3f:
         3a:29:95:25:78:34:a0:aa:2e:90:ce:12:1c:d1:6f:bc:21:1d:
         94:8a:ab:56:74:73:7f:2b:4d:5c:37:a7:c9:4c:54:06:52:40:
         c8:dd:0a:df:4d:f6:16:8f:43:a8:ad:9b:7f:77:3d:f2:24:9c:
         c5:b7:9f:6e:1d:2d:66:b1:2b:01:8a:ff:00:cc:c4:10:7e:c7:
         d4:6b:18:99:71:1c:ec:ec:b1:5b:24:50:5d:24:38:e3:05:ff:
         b2:00:dc:43:a0:b7:f4:63:e5:98:98:4a:52:97:44:83:91:26:
         71:3d:09:94:f1:90:28:68:15:81:a5:79:83:c8:c5:d6:76:bf:
         bc:c7:cb:a1:61:2e:17:ef:ef:1a:4f:af:f5:55:09:d2:31:08:
         4f:71:5e:ab
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUaJ+Sue4wGSaneShbUK7rzo5CvGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI1NTZEMDI5MEFBMDhFMDRFNTJFNTg5MEMxNzE4MjQz
OTI2OUQ0MDAeFw0yNTA4MTkxMzA4MjJaFw0yNjA4MTgxMzEzMjJaMDMxMTAvBgNV
BAMTKDJCREIzMjZERkY1OUQzNjY0RkJFMkJBMTlBMjRBMzVEQjM1RUE0RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwAMI3TMt4N6tvKYsdbbZ4UAlS
h4xxSdrUMERpiCOFPpEkG/PNHGE30wzK/RwFOLMKnm/Q9G7Em2tzP8y8YQPr1NvH
FlmNA0owlg+NIxZUtdjotCbBnySc/2mULJrWmAzasAQ9Js5Ztdk9OfBGXTeUG+Jb
jSnziG1emOc1qx7ltklETRZSmeED+Tsi6q3IzakDorNRgkpWrIXQtDtyo1kA9Vw8
QwXWfk7mtC1MXQoOatzAKs7es4vR9NjvGoTXNuyLWr+GRlA51BLxPcicgpmhw3b7
/+ecb/KQNkXpzbkHzIJfwmZr42QMyOY65I1oqluq7wlHInbkmmS2s2W0gj8XAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUK9sybf9Z02ZPviuhmiSjXbNepNcwHwYDVR0j
BBgwFoAUIlVtApCqCOBOUuWJDBcYJDkmnUAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjdrRWJISFgxMng3V05tclZoYWE5a2ZycjdqblpjWnFFS2E0djNWWmht
M1MvMC8yMjU1NkQwMjkwQUEwOEUwNEU1MkU1ODkwQzE3MTgyNDM5MjY5RDQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyNTU2RDAyOTBBQTA4RTA0
RTUyRTU4OTBDMTcxODI0MzkyNjlENDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY3a0ViSEhYMTJ4N1dObXJWaGFhOWtmcnI3am5aY1pxRUthNHYzVlpobTNTLzAv
MzIzODMwMzQzYTMxNjIzNjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNjMx
MzczMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQbYDANBgkqhkiG9w0BAQsFAAOCAQEADLmUMjlE
2eD1QSRaMwmGbTkZ0iroN0dQFhsfodLFxus+21hZYDel8Vq3w/ifSDJsfeKS4NQB
XVXSBiVXjoV6//Lh849/BSuOOWXNRRtMkI04lX5/V3TPEZIGRqgoepEnheTzet4F
RqrfJfY/OimVJXg0oKoukM4SHNFvvCEdlIqrVnRzfytNXDenyUxUBlJAyN0K3032
Fo9DqK2bf3c98iScxbefbh0tZrErAYr/AMzEEH7H1GsYmXEc7OyxWyRQXSQ44wX/
sgDcQ6C39GPlmJhKUpdEg5EmcT0JlPGQKGgVgaV5g8jF1na/vMfLoWEuF+/vGk+v
9VUJ0jEIT3Feqw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:20:43 2025 by rpki-client