Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/323830343a316132633a3a2f33322d3332203d3e203631383432.roa
File:                     323830343a316132633a3a2f33322d3332203d3e203631383432.roa (raw, json)
Hash identifier:          sX2YWgS8cbWsn/jjh7DT08phKaavz2U58r+Cw8VLQeo=
Subject key identifier:   AC:69:CE:77:1C:16:23:DB:0A:7D:AB:04:0B:03:07:DF:92:C1:1E:A7
Certificate issuer:       /CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
Certificate serial:       037455C97544D76DB3E0E0C979E3E5CFA2B16C66
Authority key identifier: 18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/323830343a316132633a3a2f33322d3332203d3e203631383432.roa
Signing time:             Fri 08 Aug 2025 13:00:00 +0000
ROA not before:           Fri 08 Aug 2025 12:55:00 +0000
ROA not after:            Fri 07 Aug 2026 13:00:00 +0000
asID:                     61842
IP address blocks:        2804:1a2c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl
                          rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 13:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:74:55:c9:75:44:d7:6d:b3:e0:e0:c9:79:e3:e5:cf:a2:b1:6c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
        Validity
            Not Before: Aug  8 12:55:00 2025 GMT
            Not After : Aug  7 13:00:00 2026 GMT
        Subject: CN=AC69CE771C1623DB0A7DAB040B0307DF92C11EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:46:89:54:17:26:6d:71:88:de:df:96:e7:
                    1c:f3:8f:e4:90:ff:7c:16:6d:e1:d5:ae:f9:7e:8e:
                    9f:a3:20:cd:d2:b8:9b:c7:a0:04:6a:9c:5a:47:24:
                    eb:0d:19:50:04:c0:0c:cd:7b:0f:f9:90:c3:2a:05:
                    fb:bb:50:61:d6:92:78:1d:89:d8:0f:90:4b:72:8e:
                    21:bf:e0:2f:b9:85:3e:71:82:a2:b9:2c:8b:e1:26:
                    99:c9:b3:94:bb:b3:5c:e1:ec:1f:d5:62:4f:9e:9a:
                    27:5c:62:ca:06:9a:09:85:6f:2b:89:55:6d:33:cd:
                    c8:d8:09:1a:29:e2:1a:6f:58:84:05:3d:1e:6b:f7:
                    6e:ca:95:d9:e4:e8:4b:57:bd:02:44:40:56:d2:8f:
                    e1:d5:c0:10:b2:99:eb:9a:5c:d9:6a:79:01:71:b7:
                    10:de:da:62:38:54:7e:7f:52:d9:92:1c:2b:0b:00:
                    36:4c:5f:bd:79:5d:1b:ee:17:b6:7d:75:ef:aa:8e:
                    45:d6:fc:68:79:b6:f6:10:f0:96:50:a0:9a:fc:6f:
                    60:5d:66:94:53:66:01:07:a6:50:5d:17:46:93:b5:
                    54:50:8f:ae:6a:67:7a:f6:87:20:10:cf:8e:5e:ea:
                    79:9a:cb:98:87:e1:e4:96:b2:ae:4a:6b:09:fc:f0:
                    e6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:69:CE:77:1C:16:23:DB:0A:7D:AB:04:0B:03:07:DF:92:C1:1E:A7
            X509v3 Authority Key Identifier:
                keyid:18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/323830343a316132633a3a2f33322d3332203d3e203631383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:57:39:5d:0f:e0:9c:87:7a:8e:ef:d0:0e:ee:50:d4:00:63:
         bf:47:5c:04:13:1e:98:14:3c:04:e6:4a:95:41:d6:c2:12:5a:
         83:bc:de:e8:d1:90:16:54:52:57:f8:65:f7:8f:81:96:8b:52:
         35:e1:38:18:e0:8a:0f:32:54:0c:1a:35:c6:4c:d1:87:04:c2:
         9c:0b:c0:40:18:0d:0f:d5:6a:98:62:42:21:92:22:48:24:3c:
         5e:7a:b5:55:fc:9f:03:53:a9:18:40:33:e1:44:c7:c5:45:39:
         2c:ae:63:f7:41:39:75:c5:57:d6:69:23:42:c4:96:c9:93:8e:
         a8:4a:31:4b:99:89:0f:ab:71:31:86:f0:c6:28:47:86:44:79:
         03:8e:73:b3:58:8d:2b:ab:9c:ff:70:43:ff:1e:d9:08:0b:d9:
         8c:12:13:5f:a4:e5:17:18:5d:68:1d:40:78:74:16:5c:23:c2:
         b2:cc:f3:5c:25:d7:d7:42:6d:9e:7d:eb:2b:28:7c:f5:be:ed:
         88:45:fd:a8:dc:3f:b7:7e:95:5f:79:7b:1a:7e:21:eb:c2:2e:
         45:bd:41:f8:47:82:58:c3:a4:ef:37:ef:54:00:22:40:96:d0:
         c5:56:27:50:b5:f6:fe:f0:3d:d4:a6:e3:8a:a0:39:ab:9c:3f:
         c1:6c:51:fe
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUA3RVyXVE122z4ODJeePlz6KxbGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThGQkRCNzUxNzg5QTNEMUNDRkE3RjQyQkMzOEYwQThD
QUJBRjJDRTAeFw0yNTA4MDgxMjU1MDBaFw0yNjA4MDcxMzAwMDBaMDMxMTAvBgNV
BAMTKEFDNjlDRTc3MUMxNjIzREIwQTdEQUIwNDBCMDMwN0RGOTJDMTFFQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8pEaJVBcmbXGI3t+W5xzzj+SQ
/3wWbeHVrvl+jp+jIM3SuJvHoARqnFpHJOsNGVAEwAzNew/5kMMqBfu7UGHWkngd
idgPkEtyjiG/4C+5hT5xgqK5LIvhJpnJs5S7s1zh7B/VYk+emidcYsoGmgmFbyuJ
VW0zzcjYCRop4hpvWIQFPR5r927Kldnk6EtXvQJEQFbSj+HVwBCymeuaXNlqeQFx
txDe2mI4VH5/UtmSHCsLADZMX715XRvuF7Z9de+qjkXW/Gh5tvYQ8JZQoJr8b2Bd
ZpRTZgEHplBdF0aTtVRQj65qZ3r2hyAQz45e6nmay5iH4eSWsq5Kawn88OZ7AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUrGnOdxwWI9sKfasECwMH35LBHqcwHwYDVR0j
BBgwFoAUGPvbdReJo9HM+n9CvDjwqMq68s4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVFYdUd2cWtleGp1dWJxSjNuMUx4N290dFRrSFlOVTV5cndkQ3dvaGhN
THovMS8xOEZCREI3NTE3ODlBM0QxQ0NGQTdGNDJCQzM4RjBBOENBQkFGMkNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4RkJEQjc1MTc4OUEzRDFD
Q0ZBN0Y0MkJDMzhGMEE4Q0FCQUYyQ0UuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VRWHVHdnFrZXhqdXVicUozbjFMeDdvdHRUa0hZTlU1eXJ3ZEN3b2hoTUx6LzEv
MzIzODMwMzQzYTMxNjEzMjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMTM4
MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEGiwwDQYJKoZIhvcNAQELBQADggEBACRXOV0P4JyH
eo7v0A7uUNQAY79HXAQTHpgUPATmSpVB1sISWoO83ujRkBZUUlf4ZfePgZaLUjXh
OBjgig8yVAwaNcZM0YcEwpwLwEAYDQ/VaphiQiGSIkgkPF56tVX8nwNTqRhAM+FE
x8VFOSyuY/dBOXXFV9ZpI0LElsmTjqhKMUuZiQ+rcTGG8MYoR4ZEeQOOc7NYjSur
nP9wQ/8e2QgL2YwSE1+k5RcYXWgdQHh0FlwjwrLM81wl19dCbZ596ysofPW+7YhF
/ajcP7d+lV95exp+IevCLkW9QfhHgljDpO8371QAIkCW0MVWJ1C19v7wPdSm44qg
OaucP8FsUf4=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:44 2025 by rpki-client