Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/323830343a35633a3a2f33322d3438203d3e203238323031.roa
File:                     323830343a35633a3a2f33322d3438203d3e203238323031.roa (raw, json)
Hash identifier:          Vh71bYKQz74JYaTBOOyAmeebcem8Vxh0vnxD3ny0fwE=
Subject key identifier:   F6:50:BF:BC:AF:94:B0:53:8C:1E:6C:B4:40:88:C0:E7:3D:F2:4E:59
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       1912C230A10C907A7D1887FD0DCA9099411CDBD0
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/323830343a35633a3a2f33322d3438203d3e203238323031.roa
Signing time:             Sat 02 Aug 2025 12:58:11 +0000
ROA not before:           Sat 02 Aug 2025 12:53:11 +0000
ROA not after:            Sat 01 Aug 2026 12:58:11 +0000
asID:                     28201
IP address blocks:        2804:5c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:12:c2:30:a1:0c:90:7a:7d:18:87:fd:0d:ca:90:99:41:1c:db:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:11 2025 GMT
            Not After : Aug  1 12:58:11 2026 GMT
        Subject: CN=F650BFBCAF94B0538C1E6CB44088C0E73DF24E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:09:49:39:5f:e5:1e:37:9b:c0:a1:b9:09:
                    22:72:fb:8a:9c:b6:7a:10:4f:dc:49:b3:de:c2:0c:
                    86:07:f4:10:d6:98:2b:77:8d:20:77:a6:a5:64:34:
                    a8:d0:b7:80:76:30:b6:8d:2c:97:f7:24:ac:33:d1:
                    33:dd:63:2a:26:32:6e:20:6f:82:2d:43:52:af:aa:
                    e7:ea:fe:64:cc:61:92:8a:60:d6:b0:69:45:11:b0:
                    d0:ec:22:bd:73:0d:b4:9f:92:6f:a2:6e:5e:dc:a6:
                    fc:88:bc:05:ca:4c:13:16:ad:d2:db:bb:27:2e:d8:
                    f8:68:28:6e:7b:4a:e9:82:da:15:b3:e7:24:4e:cc:
                    9f:ff:15:1e:17:34:35:6f:ca:a9:41:5b:58:8e:9b:
                    12:14:c1:89:70:bf:2d:40:74:81:8c:5f:ce:4b:10:
                    4a:b4:03:7d:e0:62:56:c1:44:b3:2a:68:d8:20:53:
                    92:b5:e4:4a:66:b0:a9:07:89:c7:b3:f1:be:3d:af:
                    09:10:4f:f6:8f:84:cc:31:4a:1c:6c:3a:98:b4:17:
                    2a:9e:c8:65:cf:d9:18:be:41:66:78:a6:83:c4:f8:
                    47:19:42:82:46:a3:be:c2:17:a5:ac:51:3e:7c:48:
                    e7:55:34:9a:fa:d0:26:0a:ca:fa:66:14:04:3c:92:
                    f2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:50:BF:BC:AF:94:B0:53:8C:1E:6C:B4:40:88:C0:E7:3D:F2:4E:59
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/323830343a35633a3a2f33322d3438203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:43:0d:49:de:f1:4e:c4:40:bc:77:9f:49:9e:02:0c:9c:3c:
         8f:63:af:70:04:3e:a2:da:bf:ef:e8:8b:e0:4f:5d:04:1d:7c:
         f1:f3:0f:11:8a:d5:ee:39:f2:07:c1:9a:ae:79:cd:a9:16:ef:
         a5:c7:fc:13:10:14:81:3e:a4:7b:4d:52:dc:97:4d:a5:96:4e:
         cf:27:f5:c5:55:4f:78:1f:40:ed:eb:ae:8b:ad:f7:18:50:7a:
         2a:3a:8e:62:be:de:74:3c:84:af:49:19:17:d5:31:89:67:05:
         a5:55:b0:e9:1f:c4:ac:30:34:55:c3:29:14:d5:67:72:24:b3:
         98:41:78:92:24:c9:a2:6d:42:49:d8:ff:e3:82:3a:c2:17:57:
         2c:14:b7:23:89:c3:dc:1a:e7:7a:6b:39:90:f1:cd:89:a2:fc:
         76:14:84:cc:8f:4d:55:43:dd:27:74:7c:bb:84:c4:10:fc:f1:
         6f:3f:e4:80:f0:31:4a:90:75:aa:50:a8:15:e1:50:62:15:ae:
         9b:be:e4:be:75:2e:d2:c2:68:9c:e2:9c:87:15:bc:cb:a7:e3:
         40:5a:ff:9b:d7:f3:7a:10:c8:cb:ec:be:2a:aa:50:a9:9a:a3:
         75:57:6b:4d:08:e5:16:f9:a2:0c:bf:4a:c5:39:c6:fb:2c:d7:
         1d:10:81:e0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUGRLCMKEMkHp9GIf9DcqQmUEc29AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMxRkU5Mzg3NjQwQTc3N0I3M0Q5NDIxMUQ0QzhGRkE1
QzY2OTMwNDAeFw0yNTA4MDIxMjUzMTFaFw0yNjA4MDExMjU4MTFaMDMxMTAvBgNV
BAMTKEY2NTBCRkJDQUY5NEIwNTM4QzFFNkNCNDQwODhDMEU3M0RGMjRFNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3IAlJOV/lHjebwKG5CSJy+4qc
tnoQT9xJs97CDIYH9BDWmCt3jSB3pqVkNKjQt4B2MLaNLJf3JKwz0TPdYyomMm4g
b4ItQ1Kvqufq/mTMYZKKYNawaUURsNDsIr1zDbSfkm+ibl7cpvyIvAXKTBMWrdLb
uycu2PhoKG57SumC2hWz5yROzJ//FR4XNDVvyqlBW1iOmxIUwYlwvy1AdIGMX85L
EEq0A33gYlbBRLMqaNggU5K15EpmsKkHicez8b49rwkQT/aPhMwxShxsOpi0Fyqe
yGXP2Ri+QWZ4poPE+EcZQoJGo77CF6WsUT58SOdVNJr60CYKyvpmFAQ8kvLfAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQU9lC/vK+UsFOMHmy0QIjA5z3yTlkwHwYDVR0j
BBgwFoAUrB/pOHZAp3e3PZQhHUyP+lxmkwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMC9BQzFGRTkzODc2NDBBNzc3QjczRDk0MjExRDRDOEZGQTVDNjY5MzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMUZFOTM4NzY0MEE3NzdC
NzNEOTQyMTFENEM4RkZBNUM2NjkzMDQuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzAv
MzIzODMwMzQzYTM1NjMzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMjM4MzIzMDMx
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAQAXDANBgkqhkiG9w0BAQsFAAOCAQEAD0MNSd7xTsRAvHef
SZ4CDJw8j2OvcAQ+otq/7+iL4E9dBB188fMPEYrV7jnyB8GarnnNqRbvpcf8ExAU
gT6ke01S3JdNpZZOzyf1xVVPeB9A7euui633GFB6KjqOYr7edDyEr0kZF9UxiWcF
pVWw6R/ErDA0VcMpFNVnciSzmEF4kiTJom1CSdj/44I6whdXLBS3I4nD3Brnems5
kPHNiaL8dhSEzI9NVUPdJ3R8u4TEEPzxbz/kgPAxSpB1qlCoFeFQYhWum77kvnUu
0sJonOKchxW8y6fjQFr/m9fzehDIy+y+KqpQqZqjdVdrTQjlFvmiDL9KxTnG+yzX
HRCB4A==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:03:36 2025 by rpki-client