Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/323830343a356538343a376663303a3a2f34322d3432203d3e20323639303338.roa
File:                     323830343a356538343a376663303a3a2f34322d3432203d3e20323639303338.roa (raw, json)
Hash identifier:          KeKm8JHn5MjMohphAxaOK8TmGbvHYAm8JoKXA8urXZg=
Subject key identifier:   4A:48:17:2A:7B:00:34:9D:72:4C:0F:C0:BA:C3:27:D1:50:61:CC:F8
Certificate issuer:       /CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Certificate serial:       1ECDBB724B62EBC2424C9EE95C9D64BA90287CFF
Authority key identifier: 7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/323830343a356538343a376663303a3a2f34322d3432203d3e20323639303338.roa
Signing time:             Fri 22 Aug 2025 13:49:16 +0000
ROA not before:           Fri 22 Aug 2025 13:44:16 +0000
ROA not after:            Fri 21 Aug 2026 13:49:16 +0000
asID:                     269038
IP address blocks:        2804:5e84:7fc0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
                          rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cd:bb:72:4b:62:eb:c2:42:4c:9e:e9:5c:9d:64:ba:90:28:7c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
        Validity
            Not Before: Aug 22 13:44:16 2025 GMT
            Not After : Aug 21 13:49:16 2026 GMT
        Subject: CN=4A48172A7B00349D724C0FC0BAC327D15061CCF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:1c:9e:40:d4:4b:59:98:46:79:64:58:92:
                    d7:65:1a:6e:4e:0a:d6:7f:b5:18:59:e9:a2:d9:8b:
                    a7:20:df:b0:40:0b:b0:52:02:ce:96:4e:d9:19:74:
                    bd:fb:b1:cd:6a:b3:46:dd:59:d1:d2:ff:45:fb:02:
                    3a:23:e6:b9:45:33:da:df:23:94:cb:2c:98:4b:d7:
                    4c:55:b1:a3:74:13:a5:31:f2:6d:8f:55:13:0c:5b:
                    77:51:c5:eb:61:7b:f7:f1:78:61:93:be:4a:4c:09:
                    84:fe:f8:0d:18:e2:58:87:92:3d:70:aa:85:1c:5d:
                    8c:d1:2a:fe:2f:61:c0:9d:54:c5:a5:53:3f:b1:3f:
                    36:2e:40:bb:df:c4:39:67:73:b0:54:a7:da:43:cd:
                    af:ea:6d:2d:b6:bc:7a:ba:ed:2c:c4:36:8c:a4:15:
                    3a:de:e5:3e:fd:79:36:5b:3b:a1:e1:9a:5d:a9:75:
                    4a:ff:45:56:03:a2:16:69:92:82:50:a7:c0:ce:cf:
                    67:79:76:b1:40:ec:33:c8:f8:5e:96:08:c1:a3:de:
                    80:11:e8:b0:be:9f:1e:b4:63:d6:b0:33:44:ec:37:
                    01:2f:de:74:15:42:79:28:1a:88:bf:42:43:dd:5d:
                    31:05:c0:03:17:98:90:68:77:c7:7e:f4:5f:2b:a8:
                    72:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:48:17:2A:7B:00:34:9D:72:4C:0F:C0:BA:C3:27:D1:50:61:CC:F8
            X509v3 Authority Key Identifier:
                keyid:7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/323830343a356538343a376663303a3a2f34322d3432203d3e20323639303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e84:7fc0::/42

    Signature Algorithm: sha256WithRSAEncryption
         5a:50:3d:c6:1b:68:05:e2:53:45:a3:83:8b:1d:32:9c:1a:de:
         33:bd:eb:5f:ff:d7:d6:9a:2a:d5:f9:bd:fd:a0:76:6b:63:b5:
         2d:e2:a7:84:87:2b:69:22:7c:b9:86:64:fe:d7:40:09:95:7d:
         b0:8d:40:23:34:bb:ef:45:0a:98:8e:24:e0:7f:7b:ee:8f:86:
         85:bc:0c:6d:7b:98:1b:fd:92:8a:b5:eb:b3:8c:bf:68:ce:c2:
         5a:30:b3:a2:51:f7:d2:3a:6d:7c:df:6e:81:29:0f:39:4e:53:
         eb:62:44:6c:7d:f9:eb:15:ce:a6:43:89:8d:80:15:3f:1f:dd:
         36:3c:43:d6:df:77:0f:87:8a:34:59:d9:d4:9c:51:10:00:c8:
         29:ca:cb:7a:72:f6:88:96:fe:c9:dd:d0:ad:d3:de:29:6f:51:
         bf:cf:af:b2:50:f1:b8:2a:4a:da:e1:c7:07:f6:d9:18:63:00:
         a4:d2:1b:53:07:b0:d0:7b:64:44:e7:96:c5:3f:84:41:12:c9:
         cf:b2:cc:32:30:7b:32:26:b4:d6:6e:c9:ca:a4:70:c0:b7:4a:
         1c:5f:43:2e:58:e1:c8:83:da:c6:7a:d7:22:d5:82:39:52:e9:
         89:7d:a6:92:86:0f:db:12:d4:34:67:3d:df:9a:61:dc:c9:d9:
         d1:15:06:0f
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUHs27ckti68JCTJ7pXJ1kupAofP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGNjQwRDQwQTk4QkVERUIzRkFDOTU1MTEzODc2QzBC
MDRGRUU2MjAeFw0yNTA4MjIxMzQ0MTZaFw0yNjA4MjExMzQ5MTZaMDMxMTAvBgNV
BAMTKDRBNDgxNzJBN0IwMDM0OUQ3MjRDMEZDMEJBQzMyN0QxNTA2MUNDRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69xyeQNRLWZhGeWRYktdlGm5O
CtZ/tRhZ6aLZi6cg37BAC7BSAs6WTtkZdL37sc1qs0bdWdHS/0X7Ajoj5rlFM9rf
I5TLLJhL10xVsaN0E6Ux8m2PVRMMW3dRxethe/fxeGGTvkpMCYT++A0Y4liHkj1w
qoUcXYzRKv4vYcCdVMWlUz+xPzYuQLvfxDlnc7BUp9pDza/qbS22vHq67SzENoyk
FTre5T79eTZbO6Hhml2pdUr/RVYDohZpkoJQp8DOz2d5drFA7DPI+F6WCMGj3oAR
6LC+nx60Y9awM0TsNwEv3nQVQnkoGoi/QkPdXTEFwAMXmJBod8d+9F8rqHKLAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUSkgXKnsANJ1yTA/AusMn0VBhzPgwHwYDVR0j
BBgwFoAUfPZA1AqYvt6z+slVETh2wLBP7mIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVVKVDdqdW9VNldGN2s1TW9wTGFqNkczTHZSeUNWZDlGQ3R4RkE0TGFl
Q1YvMC83Q0Y2NDBENDBBOThCRURFQjNGQUM5NTUxMTM4NzZDMEIwNEZFRTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRjY0MEQ0MEE5OEJFREVC
M0ZBQzk1NTExMzg3NkMwQjA0RkVFNjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlVSlQ3anVvVTZXRjdrNU1vcExhajZHM0x2UnlDVmQ5RkN0eEZBNExhZUNWLzAv
MzIzODMwMzQzYTM1NjUzODM0M2EzNzY2NjMzMDNhM2EyZjM0MzIyZDM0MzIyMDNk
M2UyMDMyMzYzOTMwMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBigEXoR/wDANBgkqhkiG9w0BAQsF
AAOCAQEAWlA9xhtoBeJTRaODix0ynBreM73rX//X1poq1fm9/aB2a2O1LeKnhIcr
aSJ8uYZk/tdACZV9sI1AIzS770UKmI4k4H977o+GhbwMbXuYG/2SirXrs4y/aM7C
WjCzolH30jptfN9ugSkPOU5T62JEbH356xXOpkOJjYAVPx/dNjxD1t93D4eKNFnZ
1JxREADIKcrLenL2iJb+yd3QrdPeKW9Rv8+vslDxuCpK2uHHB/bZGGMApNIbUwew
0HtkROeWxT+EQRLJz7LMMjB7Mia01m7JyqRwwLdKHF9DLljhyIPaxnrXItWCOVLp
iX2mkoYP2xLUNGc935ph3MnZ0RUGDw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:05:15 2025 by rpki-client