Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/323830343a383861633a3a2f33322d313238203d3e20323732373836.roa
File:                     323830343a383861633a3a2f33322d313238203d3e20323732373836.roa (raw, json)
Hash identifier:          dQs0LkEomrLIYYwuJG1zf36MdzBMkt6Lifr/nfSKvD0=
Subject key identifier:   3C:E0:62:7C:66:5F:75:B1:D3:C9:5E:C6:80:19:10:C2:35:0F:62:AC
Certificate issuer:       /CN=58E384DDFA548D7DE9FEADE014582B8E6BE1D550
Certificate serial:       6F502775092861E3AE8ED60DA0676752E59B04FA
Authority key identifier: 58:E3:84:DD:FA:54:8D:7D:E9:FE:AD:E0:14:58:2B:8E:6B:E1:D5:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/323830343a383861633a3a2f33322d313238203d3e20323732373836.roa
Signing time:             Thu 14 Aug 2025 12:49:42 +0000
ROA not before:           Thu 14 Aug 2025 12:44:42 +0000
ROA not after:            Thu 13 Aug 2026 12:49:42 +0000
asID:                     272786
IP address blocks:        2804:88ac::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.crl
                          rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 14:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:50:27:75:09:28:61:e3:ae:8e:d6:0d:a0:67:67:52:e5:9b:04:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58E384DDFA548D7DE9FEADE014582B8E6BE1D550
        Validity
            Not Before: Aug 14 12:44:42 2025 GMT
            Not After : Aug 13 12:49:42 2026 GMT
        Subject: CN=3CE0627C665F75B1D3C95EC6801910C2350F62AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:f7:1d:43:0b:16:5d:b5:5d:ce:3c:34:7f:
                    ce:1a:97:5d:e0:79:35:38:a1:dd:c2:45:25:94:79:
                    14:6f:c6:66:60:97:9e:1d:57:1a:f2:c6:77:57:b8:
                    2d:90:12:fa:a7:ac:88:6f:91:42:7b:ce:34:3c:9c:
                    07:2c:8d:fb:81:ef:be:d2:0e:d2:0e:32:39:c6:cc:
                    da:32:86:b5:c3:86:2e:2c:40:5c:51:70:ef:26:98:
                    34:84:df:8b:fd:3c:bd:da:9c:fe:8d:29:b7:3c:97:
                    9a:c1:e2:42:55:53:30:6a:1d:73:9d:9b:77:a5:cb:
                    b0:93:0d:48:6d:3a:83:77:21:53:1b:7d:c3:f4:0b:
                    bb:2c:9f:a4:0b:f8:b0:48:d5:f2:00:aa:61:be:2e:
                    7b:ff:b3:41:3a:50:5b:16:ab:a9:2c:06:a7:9b:b8:
                    ee:b5:64:e8:77:5d:85:08:51:2a:72:8d:9c:7c:77:
                    f7:8f:29:fb:f7:23:23:e7:26:a7:4a:15:55:1e:9c:
                    33:39:0f:80:27:0c:27:2c:dc:4f:6a:a1:b9:f4:a5:
                    fb:ea:64:d8:d4:70:e2:eb:91:3a:76:2c:c8:63:5e:
                    cd:2c:11:d9:68:7a:a7:b0:d8:94:1f:17:a6:e1:71:
                    c8:1b:9b:b4:50:42:19:1b:22:e9:b2:01:11:65:85:
                    58:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E0:62:7C:66:5F:75:B1:D3:C9:5E:C6:80:19:10:C2:35:0F:62:AC
            X509v3 Authority Key Identifier:
                keyid:58:E3:84:DD:FA:54:8D:7D:E9:FE:AD:E0:14:58:2B:8E:6B:E1:D5:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/323830343a383861633a3a2f33322d313238203d3e20323732373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:cc:88:4f:33:31:93:a2:7e:f4:0f:f4:c7:c0:1c:2d:71:c9:
         2c:68:e3:85:b1:c9:f6:53:73:fd:67:33:04:a8:07:b2:55:ae:
         99:d2:80:8f:d4:34:24:dd:45:5a:13:6a:c7:fa:c6:0c:81:bc:
         16:b3:be:2b:43:32:f9:fa:d3:7f:9c:52:30:cf:72:43:14:01:
         4c:5e:9f:94:8f:3f:20:e2:b1:ea:17:90:e6:a2:fc:00:ad:32:
         e9:70:c4:53:cf:5e:3f:b1:70:e1:cb:e7:46:bf:57:c2:07:c7:
         c0:36:4f:e3:a3:05:34:78:9f:84:c6:c2:8a:9a:0b:71:ed:1a:
         eb:ca:39:ef:74:42:d8:53:43:48:49:8e:4b:ad:7c:ea:13:d5:
         c7:f6:56:29:f7:28:6f:c7:11:41:4a:1c:b5:c6:27:31:c9:56:
         44:4c:97:73:2e:3b:5a:ff:78:33:68:af:6b:14:81:0d:ea:87:
         dd:fe:78:e8:5b:b7:bf:e9:b9:d6:26:67:bd:65:f7:39:55:dc:
         e9:c6:1a:02:34:64:50:fe:16:33:db:ff:98:dd:91:a4:ab:22:
         01:04:2a:2e:20:5f:0e:3b:9e:50:8f:92:c1:e6:82:c5:5c:8f:
         bd:37:47:12:93:d8:a5:42:c0:2e:dc:66:5c:f8:25:23:e6:e3:
         ac:a3:a4:1e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUb1AndQkoYeOujtYNoGdnUuWbBPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNThFMzg0RERGQTU0OEQ3REU5RkVBREUwMTQ1ODJCOEU2
QkUxRDU1MDAeFw0yNTA4MTQxMjQ0NDJaFw0yNjA4MTMxMjQ5NDJaMDMxMTAvBgNV
BAMTKDNDRTA2MjdDNjY1Rjc1QjFEM0M5NUVDNjgwMTkxMEMyMzUwRjYyQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDV/cdQwsWXbVdzjw0f84al13g
eTU4od3CRSWUeRRvxmZgl54dVxryxndXuC2QEvqnrIhvkUJ7zjQ8nAcsjfuB777S
DtIOMjnGzNoyhrXDhi4sQFxRcO8mmDSE34v9PL3anP6NKbc8l5rB4kJVUzBqHXOd
m3ely7CTDUhtOoN3IVMbfcP0C7ssn6QL+LBI1fIAqmG+Lnv/s0E6UFsWq6ksBqeb
uO61ZOh3XYUIUSpyjZx8d/ePKfv3IyPnJqdKFVUenDM5D4AnDCcs3E9qobn0pfvq
ZNjUcOLrkTp2LMhjXs0sEdloeqew2JQfF6bhccgbm7RQQhkbIumyARFlhVhxAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUPOBifGZfdbHTyV7GgBkQwjUPYqwwHwYDVR0j
BBgwFoAUWOOE3fpUjX3p/q3gFFgrjmvh1VAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZiQ0RFUW0yaUpIenBwS3p5Q1lZdno4cHVxOVNFc1BKdHNhaWdFYmhj
Z3YvMC81OEUzODREREZBNTQ4RDdERTlGRUFERTAxNDU4MkI4RTZCRTFENTUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4RTM4NERERkE1NDhEN0RF
OUZFQURFMDE0NTgyQjhFNkJFMUQ1NTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWYkNERVFtMmlKSHpwcEt6eUNZWXZ6OHB1cTlTRXNQSnRzYWlnRWJoY2d2LzAv
MzIzODMwMzQzYTM4Mzg2MTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzIzNzM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBIisMA0GCSqGSIb3DQEBCwUAA4IBAQB1zIhP
MzGTon70D/THwBwtccksaOOFscn2U3P9ZzMEqAeyVa6Z0oCP1DQk3UVaE2rH+sYM
gbwWs74rQzL5+tN/nFIwz3JDFAFMXp+Ujz8g4rHqF5DmovwArTLpcMRTz14/sXDh
y+dGv1fCB8fANk/jowU0eJ+ExsKKmgtx7RrryjnvdELYU0NISY5LrXzqE9XH9lYp
9yhvxxFBShy1xicxyVZETJdzLjta/3gzaK9rFIEN6ofd/njoW7e/6bnWJme9Zfc5
VdzpxhoCNGRQ/hYz2/+Y3ZGkqyIBBCouIF8OO55Qj5LB5oLFXI+9N0cSk9ilQsAu
3GZc+CUj5uOso6Qe
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:13:39 2025 by rpki-client