Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/323830343a353633633a3a2f33322d3332203d3e20323637393835.roa
File:                     323830343a353633633a3a2f33322d3332203d3e20323637393835.roa (raw, json)
Hash identifier:          LROcD+tDs9MR6QkrWhGGZ3GqYK6zcXtsD8X4uBrtoh8=
Subject key identifier:   60:46:43:EB:F9:EE:BA:35:5E:07:0F:1C:4B:57:C2:E9:AC:54:62:02
Certificate issuer:       /CN=AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B
Certificate serial:       0FBFA6DAA77A07EF316EDD73748A91FC3A08B650
Authority key identifier: AC:36:29:F0:60:4D:B8:D2:00:6C:F0:F4:9A:CF:2A:8B:7A:E8:73:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/323830343a353633633a3a2f33322d3332203d3e20323637393835.roa
Signing time:             Wed 20 Aug 2025 13:50:45 +0000
ROA not before:           Wed 20 Aug 2025 13:45:45 +0000
ROA not after:            Wed 19 Aug 2026 13:50:45 +0000
asID:                     267985
IP address blocks:        2804:563c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.crl
                          rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:bf:a6:da:a7:7a:07:ef:31:6e:dd:73:74:8a:91:fc:3a:08:b6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B
        Validity
            Not Before: Aug 20 13:45:45 2025 GMT
            Not After : Aug 19 13:50:45 2026 GMT
        Subject: CN=604643EBF9EEBA355E070F1C4B57C2E9AC546202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f4:e4:a1:c0:b7:45:8b:ef:39:a4:bd:86:94:
                    06:e1:5a:51:c4:63:d4:d4:cd:43:83:f7:da:18:c8:
                    bf:6a:16:f6:17:7d:78:2d:75:73:2a:7a:68:51:1b:
                    22:22:75:bd:c2:05:3e:9f:ad:60:ec:f4:c7:6f:35:
                    51:ad:e4:7f:4b:0f:2d:7a:c4:89:6d:0e:27:d5:4b:
                    5b:11:3f:38:f3:0e:03:3d:69:80:c1:35:93:ed:60:
                    8a:cf:ca:10:33:ac:53:49:56:09:57:16:6a:a7:81:
                    c6:1a:a2:33:0e:4d:41:d7:a8:d9:de:1e:04:76:e3:
                    a2:fb:d3:bd:41:bc:c1:ef:77:11:fc:60:8f:07:68:
                    2f:e0:5e:1b:91:1c:9b:5c:41:5c:71:5d:1b:af:f1:
                    b3:1f:6d:77:7c:aa:16:09:c7:4b:7e:6a:54:c8:72:
                    87:6f:1a:11:ad:22:ea:ec:8e:f7:83:80:15:f4:1e:
                    4b:7e:df:fa:a0:2a:21:e4:41:8b:41:5c:c6:4e:33:
                    5c:51:ac:a1:46:89:30:bb:da:ab:f7:f0:e2:ef:3b:
                    60:41:1e:1b:ed:31:0d:a4:47:28:3b:fd:20:74:e1:
                    38:99:b1:e1:97:d8:4b:38:8b:d7:ae:57:44:76:fe:
                    fc:16:c2:b2:01:45:42:40:63:48:ee:bf:81:72:77:
                    8d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:46:43:EB:F9:EE:BA:35:5E:07:0F:1C:4B:57:C2:E9:AC:54:62:02
            X509v3 Authority Key Identifier:
                keyid:AC:36:29:F0:60:4D:B8:D2:00:6C:F0:F4:9A:CF:2A:8B:7A:E8:73:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC3629F0604DB8D2006CF0F49ACF2A8B7AE8734B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81p2ttP2snroB5xvSdVos3EBZMruy5CBFwizQYz1tQzB/0/323830343a353633633a3a2f33322d3332203d3e20323637393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:563c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:40:71:c7:db:e5:44:aa:81:5e:27:f4:de:96:b4:dc:31:98:
         37:08:5f:88:d6:5f:67:6f:95:84:0f:50:a6:ce:11:19:91:71:
         11:bc:18:a1:39:ca:19:1c:88:5f:c1:3c:6a:38:c6:7d:16:9a:
         bc:18:17:4c:0e:c2:3a:83:92:38:e1:aa:ce:d4:86:51:4f:89:
         48:bc:54:2b:8a:0f:79:a5:ef:dc:1a:79:94:52:ae:00:8a:b0:
         76:a2:d5:32:ae:6e:3f:d1:e7:6b:d9:73:24:1f:63:9a:89:8f:
         78:50:a1:18:62:d7:0a:c8:2d:5c:01:1f:90:8e:4b:5e:c0:83:
         12:6d:49:1d:65:79:0d:71:0a:15:77:d0:d7:b5:fb:a3:a0:d0:
         2d:74:cf:03:8c:d0:bf:b9:06:c4:ff:86:25:90:9c:a3:c9:a2:
         ef:96:e4:04:13:c9:af:5e:bf:ed:7e:62:89:50:d5:41:62:ff:
         50:b8:aa:ff:6e:fb:a5:64:9e:a9:e4:94:1f:b3:92:e3:dc:7a:
         c0:ba:37:ab:31:b9:ca:0a:13:19:43:e3:43:e9:db:bd:88:26:
         46:cf:b5:96:12:54:60:b4:90:75:89:e1:d7:f7:b5:36:d9:31:
         79:e7:fc:68:2c:cf:cb:90:86:a4:6f:76:64:38:b0:17:f2:93:
         55:4e:34:7a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUD7+m2qd6B+8xbt1zdIqR/DoItlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMzNjI5RjA2MDREQjhEMjAwNkNGMEY0OUFDRjJBOEI3
QUU4NzM0QjAeFw0yNTA4MjAxMzQ1NDVaFw0yNjA4MTkxMzUwNDVaMDMxMTAvBgNV
BAMTKDYwNDY0M0VCRjlFRUJBMzU1RTA3MEYxQzRCNTdDMkU5QUM1NDYyMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN9OShwLdFi+85pL2GlAbhWlHE
Y9TUzUOD99oYyL9qFvYXfXgtdXMqemhRGyIidb3CBT6frWDs9MdvNVGt5H9LDy16
xIltDifVS1sRPzjzDgM9aYDBNZPtYIrPyhAzrFNJVglXFmqngcYaojMOTUHXqNne
HgR246L7071BvMHvdxH8YI8HaC/gXhuRHJtcQVxxXRuv8bMfbXd8qhYJx0t+alTI
codvGhGtIursjveDgBX0Hkt+3/qgKiHkQYtBXMZOM1xRrKFGiTC72qv38OLvO2BB
HhvtMQ2kRyg7/SB04TiZseGX2Es4i9euV0R2/vwWwrIBRUJAY0juv4Fyd42PAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUYEZD6/nuujVeBw8cS1fC6axUYgIwHwYDVR0j
BBgwFoAUrDYp8GBNuNIAbPD0ms8qi3roc0swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODFwMnR0UDJzbnJvQjV4dlNkVm9zM0VCWk1ydXk1Q0JGd2l6UVl6MXRR
ekIvMC9BQzM2MjlGMDYwNERCOEQyMDA2Q0YwRjQ5QUNGMkE4QjdBRTg3MzRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMzYyOUYwNjA0REI4RDIw
MDZDRjBGNDlBQ0YyQThCN0FFODczNEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgxcDJ0dFAyc25yb0I1eHZTZFZvczNFQlpNcnV5NUNCRndpelFZejF0UXpCLzAv
MzIzODMwMzQzYTM1MzYzMzYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM3
MzkzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARWPDANBgkqhkiG9w0BAQsFAAOCAQEAikBxx9vl
RKqBXif03pa03DGYNwhfiNZfZ2+VhA9Qps4RGZFxEbwYoTnKGRyIX8E8ajjGfRaa
vBgXTA7COoOSOOGqztSGUU+JSLxUK4oPeaXv3Bp5lFKuAIqwdqLVMq5uP9Hna9lz
JB9jmomPeFChGGLXCsgtXAEfkI5LXsCDEm1JHWV5DXEKFXfQ17X7o6DQLXTPA4zQ
v7kGxP+GJZCco8mi75bkBBPJr16/7X5iiVDVQWL/ULiq/277pWSeqeSUH7OS49x6
wLo3qzG5ygoTGUPjQ+nbvYgmRs+1lhJUYLSQdYnh1/e1Ntkxeef8aCzPy5CGpG92
ZDiwF/KTVU40eg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:20:14 2025 by rpki-client