Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/323830343a333966303a663030303a3a2f33362d3634203d3e20323636303630.roa
File:                     323830343a333966303a663030303a3a2f33362d3634203d3e20323636303630.roa (raw, json)
Hash identifier:          Ho3oehfUuf7qNz61F35C1bMiS0o19Y/NqOTwWzA+FhQ=
Subject key identifier:   7A:D3:1D:B8:A3:38:59:58:F4:EC:90:D4:19:E8:90:34:8C:6A:20:F0
Certificate issuer:       /CN=40EA943B9928A2416D417FB39A392494904FD334
Certificate serial:       53779076C128ABBB935C2BF4CA7F8C919F78EFEA
Authority key identifier: 40:EA:94:3B:99:28:A2:41:6D:41:7F:B3:9A:39:24:94:90:4F:D3:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40EA943B9928A2416D417FB39A392494904FD334.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/323830343a333966303a663030303a3a2f33362d3634203d3e20323636303630.roa
Signing time:             Thu 14 Aug 2025 18:15:42 +0000
ROA not before:           Thu 14 Aug 2025 18:10:42 +0000
ROA not after:            Thu 13 Aug 2026 18:15:42 +0000
asID:                     266060
IP address blocks:        2804:39f0:f000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.crl
                          rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40EA943B9928A2416D417FB39A392494904FD334.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 10:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:77:90:76:c1:28:ab:bb:93:5c:2b:f4:ca:7f:8c:91:9f:78:ef:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40EA943B9928A2416D417FB39A392494904FD334
        Validity
            Not Before: Aug 14 18:10:42 2025 GMT
            Not After : Aug 13 18:15:42 2026 GMT
        Subject: CN=7AD31DB8A3385958F4EC90D419E890348C6A20F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:71:08:dc:24:f5:99:7e:fc:a2:b1:46:c3:d5:
                    2d:59:44:70:58:e2:9e:1f:d5:a5:a6:32:75:81:e9:
                    b5:b6:e4:55:bb:f2:d6:6f:c2:9a:41:39:4b:99:68:
                    2e:b0:12:ed:98:b9:98:3e:fa:51:76:a9:17:4a:e8:
                    36:f5:8a:33:0d:ad:83:b1:20:57:41:12:1c:df:3e:
                    3f:2a:48:1c:b7:59:6a:27:96:41:f0:5f:b8:f1:7e:
                    7e:df:5e:5d:72:f2:4e:35:24:6a:f3:aa:80:fb:ac:
                    88:05:83:83:bd:01:ed:08:38:64:de:38:6a:50:a6:
                    b5:ea:1d:ed:6b:16:76:7b:b1:15:a5:1e:74:20:d7:
                    10:c5:8b:4f:c3:c4:34:86:fe:67:f1:d5:e6:f9:25:
                    5e:7a:e0:0e:cf:9b:20:86:26:69:7f:bb:4e:33:c3:
                    cb:f4:d1:ec:f5:e6:5a:0a:73:12:b9:a5:9d:c8:ac:
                    3e:e2:74:cc:55:ee:92:30:dc:75:5f:c1:3f:1d:53:
                    d9:bb:9a:c6:8d:75:18:7a:fe:bb:40:ad:58:8e:72:
                    3a:63:2b:f3:2f:1b:f0:bd:f5:cd:2a:a2:85:56:ad:
                    56:c8:90:02:7d:65:01:9b:5e:e7:ad:fa:bb:2d:e0:
                    67:9b:41:6b:60:5c:a5:a6:4a:78:b0:05:23:e2:42:
                    e4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D3:1D:B8:A3:38:59:58:F4:EC:90:D4:19:E8:90:34:8C:6A:20:F0
            X509v3 Authority Key Identifier:
                keyid:40:EA:94:3B:99:28:A2:41:6D:41:7F:B3:9A:39:24:94:90:4F:D3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/40EA943B9928A2416D417FB39A392494904FD334.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40EA943B9928A2416D417FB39A392494904FD334.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsKsUNeAbwnhc3JQgUrgXZC9pF7W5dQMkS2ALZaXSSEa/0/323830343a333966303a663030303a3a2f33362d3634203d3e20323636303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39f0:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4f:30:e2:a7:4b:68:c7:40:99:3b:18:7f:d7:85:f6:5e:29:9f:
         3f:00:c0:e1:a8:66:cd:84:44:37:4b:28:31:b8:33:3f:84:25:
         cc:de:c8:be:ff:e8:d2:26:1d:fe:4f:58:04:f5:53:e2:2b:e3:
         f9:3d:c6:48:64:bd:30:d4:cf:cd:8d:0c:27:24:fd:2f:ff:ba:
         fe:4e:a1:48:83:fd:d7:83:5f:3b:49:fe:be:90:80:1f:45:ad:
         68:7a:35:41:31:c3:15:9d:84:ca:c3:a2:b5:ad:ca:ac:0f:00:
         91:41:3e:f8:a2:82:54:42:7c:21:67:ab:40:f9:c8:54:2e:4d:
         26:91:15:14:59:21:7b:ee:16:3a:b4:fa:8f:a5:24:bb:82:80:
         28:a5:c8:51:d4:b5:48:44:47:88:dd:c0:98:27:86:bb:3a:f9:
         1a:ea:d5:83:0c:2b:6a:79:8e:f1:24:a0:35:2c:0b:2d:53:39:
         e1:f9:af:4a:91:18:ce:c4:62:24:16:65:46:e8:51:cd:b3:37:
         b7:66:16:03:ed:99:39:18:2a:62:66:2e:3f:a2:ae:2b:7a:85:
         eb:51:06:bd:8c:9f:de:88:49:dc:88:a2:38:2c:ce:76:77:84:
         96:1e:22:af:19:dd:d5:db:d4:f6:e7:c2:ca:c6:e5:ce:91:ef:
         94:50:03:7a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUU3eQdsEoq7uTXCv0yn+MkZ947+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBFQTk0M0I5OTI4QTI0MTZENDE3RkIzOUEzOTI0OTQ5
MDRGRDMzNDAeFw0yNTA4MTQxODEwNDJaFw0yNjA4MTMxODE1NDJaMDMxMTAvBgNV
BAMTKDdBRDMxREI4QTMzODU5NThGNEVDOTBENDE5RTg5MDM0OEM2QTIwRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRcQjcJPWZfvyisUbD1S1ZRHBY
4p4f1aWmMnWB6bW25FW78tZvwppBOUuZaC6wEu2YuZg++lF2qRdK6Db1ijMNrYOx
IFdBEhzfPj8qSBy3WWonlkHwX7jxfn7fXl1y8k41JGrzqoD7rIgFg4O9Ae0IOGTe
OGpQprXqHe1rFnZ7sRWlHnQg1xDFi0/DxDSG/mfx1eb5JV564A7PmyCGJml/u04z
w8v00ez15loKcxK5pZ3IrD7idMxV7pIw3HVfwT8dU9m7msaNdRh6/rtArViOcjpj
K/MvG/C99c0qooVWrVbIkAJ9ZQGbXuet+rst4GebQWtgXKWmSniwBSPiQuRFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUetMduKM4WVj07JDUGeiQNIxqIPAwHwYDVR0j
BBgwFoAUQOqUO5kookFtQX+zmjkklJBP0zQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXNLc1VOZUFid25oYzNKUWdVcmdYWkM5cEY3VzVkUU1rUzJBTFphWFNT
RWEvMC80MEVBOTQzQjk5MjhBMjQxNkQ0MTdGQjM5QTM5MjQ5NDkwNEZEMzM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwRUE5NDNCOTkyOEEyNDE2
RDQxN0ZCMzlBMzkyNDk0OTA0RkQzMzQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzS3NVTmVBYnduaGMzSlFnVXJnWFpDOXBGN1c1ZFFNa1MyQUxaYVhTU0VhLzAv
MzIzODMwMzQzYTMzMzk2NjMwM2E2NjMwMzAzMDNhM2EyZjMzMzYyZDM2MzQyMDNk
M2UyMDMyMzYzNjMwMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEOfDwMA0GCSqGSIb3DQEBCwUA
A4IBAQBPMOKnS2jHQJk7GH/XhfZeKZ8/AMDhqGbNhEQ3SygxuDM/hCXM3si+/+jS
Jh3+T1gE9VPiK+P5PcZIZL0w1M/NjQwnJP0v/7r+TqFIg/3Xg187Sf6+kIAfRa1o
ejVBMcMVnYTKw6K1rcqsDwCRQT74ooJUQnwhZ6tA+chULk0mkRUUWSF77hY6tPqP
pSS7goAopchR1LVIREeI3cCYJ4a7Ovka6tWDDCtqeY7xJKA1LAstUznh+a9KkRjO
xGIkFmVG6FHNsze3ZhYD7Zk5GCpiZi4/oq4reoXrUQa9jJ/eiEnciKI4LM52d4SW
HiKvGd3V29T258LKxuXOke+UUAN6
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:51 2025 by rpki-client