Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a343030303a3a2f33342d3334203d3e20323636343731.roa
File:                     323830343a333835383a343030303a3a2f33342d3334203d3e20323636343731.roa (raw, json)
Hash identifier:          nyv+YXGNvLz3Id1luratJlfwUCmrbZvizTqnpr8F6wc=
Subject key identifier:   BD:55:EE:E2:3B:78:A3:FC:F2:25:B7:CA:E0:AB:3A:84:80:3F:D0:46
Certificate issuer:       /CN=7450D09D3099C74B5BA0650438B50168D9296DA8
Certificate serial:       08432EFBD4E95BF1231C8F3FFBDC96A251A4B5D2
Authority key identifier: 74:50:D0:9D:30:99:C7:4B:5B:A0:65:04:38:B5:01:68:D9:29:6D:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7450D09D3099C74B5BA0650438B50168D9296DA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a343030303a3a2f33342d3334203d3e20323636343731.roa
Signing time:             Thu 07 Aug 2025 12:37:59 +0000
ROA not before:           Thu 07 Aug 2025 12:32:59 +0000
ROA not after:            Thu 06 Aug 2026 12:37:59 +0000
asID:                     266471
IP address blocks:        2804:3858:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/7450D09D3099C74B5BA0650438B50168D9296DA8.crl
                          rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/7450D09D3099C74B5BA0650438B50168D9296DA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7450D09D3099C74B5BA0650438B50168D9296DA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:43:2e:fb:d4:e9:5b:f1:23:1c:8f:3f:fb:dc:96:a2:51:a4:b5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7450D09D3099C74B5BA0650438B50168D9296DA8
        Validity
            Not Before: Aug  7 12:32:59 2025 GMT
            Not After : Aug  6 12:37:59 2026 GMT
        Subject: CN=BD55EEE23B78A3FCF225B7CAE0AB3A84803FD046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:4d:78:3a:b4:94:96:11:00:84:d5:22:e5:
                    3b:1d:a1:43:8d:5d:26:bc:b1:ef:03:7b:dc:f3:aa:
                    b9:1c:a5:e9:c0:23:1a:5d:62:72:eb:93:c1:5b:99:
                    61:86:be:38:b5:d8:2a:ec:51:3f:36:dd:96:cf:73:
                    1e:14:21:dc:b7:5a:19:ec:a3:28:ad:65:a2:0b:6d:
                    4f:12:a4:67:da:7d:30:ee:78:49:7a:25:9c:10:f5:
                    1e:0d:b8:a7:72:91:60:1c:fd:32:f0:70:df:ef:bf:
                    2d:40:22:a5:f3:8a:0f:e7:38:9f:a4:69:11:46:0e:
                    4f:0e:25:02:ff:37:b1:b5:86:34:37:aa:1a:3c:a0:
                    d9:08:1b:57:3e:df:2c:8d:61:7d:05:27:ae:55:b8:
                    54:2d:bb:c3:6f:08:b9:51:3a:02:d8:6d:3b:68:72:
                    01:29:7a:97:c5:3c:86:4b:49:5c:23:6e:90:93:25:
                    56:97:7a:9c:1a:db:a9:6a:b0:0c:90:26:b8:ea:57:
                    05:a4:64:8d:cd:f0:46:3f:06:2e:37:4f:35:41:a8:
                    8b:b1:b5:aa:53:70:e2:8b:ce:21:f0:8d:f4:d0:f0:
                    ae:da:4b:46:a8:4b:13:41:55:84:04:c6:a0:52:8d:
                    ec:49:a8:4a:65:71:52:71:09:e8:89:86:87:56:ac:
                    11:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:55:EE:E2:3B:78:A3:FC:F2:25:B7:CA:E0:AB:3A:84:80:3F:D0:46
            X509v3 Authority Key Identifier:
                keyid:74:50:D0:9D:30:99:C7:4B:5B:A0:65:04:38:B5:01:68:D9:29:6D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/7450D09D3099C74B5BA0650438B50168D9296DA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7450D09D3099C74B5BA0650438B50168D9296DA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDAr4AV6ocbLp7YmVbqyiaoTYkRxfSoAg46dzuhkWvT/0/323830343a333835383a343030303a3a2f33342d3334203d3e20323636343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3858:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4b:ae:0a:7d:3c:a8:94:bf:24:60:fb:a4:e9:96:02:c2:de:47:
         ea:62:b9:65:43:90:9d:63:60:5b:1d:9d:68:57:1c:13:87:f5:
         34:04:08:05:18:82:19:e9:d6:2b:fd:97:55:39:b2:97:8d:dc:
         7a:c7:3d:a7:4e:e7:9e:5f:aa:f7:e5:7d:5f:a1:c6:24:2b:cf:
         25:0c:3d:2d:83:09:f5:a4:87:97:04:e1:40:6c:4b:7f:2e:b8:
         f3:73:cf:e1:67:3c:e5:dc:de:22:d1:32:12:55:06:69:c5:3f:
         03:8b:88:f6:52:4e:5e:0a:71:80:b3:f3:b7:78:e6:7a:96:c3:
         e6:df:14:98:7f:d9:7f:d1:96:67:85:88:dc:2c:62:94:95:a6:
         01:00:23:e5:6d:6e:5c:dc:a7:44:f2:05:06:6b:88:f8:d5:6c:
         76:52:23:d6:ee:d8:aa:dd:8f:27:07:19:7e:73:22:a3:6f:36:
         9c:15:76:05:46:4d:bb:1c:a7:2d:07:a9:41:ab:7c:0a:d0:e1:
         63:21:55:bb:22:2f:a4:f3:52:cd:99:80:4d:54:aa:50:32:aa:
         4f:2d:25:03:1b:00:01:5a:c3:29:56:50:ff:db:42:c9:96:d4:
         52:22:07:72:10:85:32:0d:d3:86:db:73:4f:f6:27:2e:74:c6:
         f4:ed:07:28
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUCEMu+9TpW/EjHI8/+9yWolGktdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ1MEQwOUQzMDk5Qzc0QjVCQTA2NTA0MzhCNTAxNjhE
OTI5NkRBODAeFw0yNTA4MDcxMjMyNTlaFw0yNjA4MDYxMjM3NTlaMDMxMTAvBgNV
BAMTKEJENTVFRUUyM0I3OEEzRkNGMjI1QjdDQUUwQUIzQTg0ODAzRkQwNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cE14OrSUlhEAhNUi5TsdoUON
XSa8se8De9zzqrkcpenAIxpdYnLrk8FbmWGGvji12CrsUT823ZbPcx4UIdy3Whns
oyitZaILbU8SpGfafTDueEl6JZwQ9R4NuKdykWAc/TLwcN/vvy1AIqXzig/nOJ+k
aRFGDk8OJQL/N7G1hjQ3qho8oNkIG1c+3yyNYX0FJ65VuFQtu8NvCLlROgLYbTto
cgEpepfFPIZLSVwjbpCTJVaXepwa26lqsAyQJrjqVwWkZI3N8EY/Bi43TzVBqIux
tapTcOKLziHwjfTQ8K7aS0aoSxNBVYQExqBSjexJqEplcVJxCeiJhodWrBExAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUvVXu4jt4o/zyJbfK4Ks6hIA/0EYwHwYDVR0j
BBgwFoAUdFDQnTCZx0tboGUEOLUBaNkpbagwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9GREFyNEFWNm9jYkxwN1ltVmJxeWlhb1RZa1J4ZlNvQWc0NmR6dWhrV3ZU
LzAvNzQ1MEQwOUQzMDk5Qzc0QjVCQTA2NTA0MzhCNTAxNjhEOTI5NkRBOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83NDUwRDA5RDMwOTlDNzRCNUJB
MDY1MDQzOEI1MDE2OEQ5Mjk2REE4LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIG
CCsGAQUFBzALhoGVcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9G
REFyNEFWNm9jYkxwN1ltVmJxeWlhb1RZa1J4ZlNvQWc0NmR6dWhrV3ZULzAvMzIz
ODMwMzQzYTMzMzgzNTM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2Uy
MDMyMzYzNjM0MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEOFhAMA0GCSqGSIb3DQEBCwUAA4IB
AQBLrgp9PKiUvyRg+6TplgLC3kfqYrllQ5CdY2BbHZ1oVxwTh/U0BAgFGIIZ6dYr
/ZdVObKXjdx6xz2nTueeX6r35X1focYkK88lDD0tgwn1pIeXBOFAbEt/Lrjzc8/h
Zzzl3N4i0TISVQZpxT8Di4j2Uk5eCnGAs/O3eOZ6lsPm3xSYf9l/0ZZnhYjcLGKU
laYBACPlbW5c3KdE8gUGa4j41Wx2UiPW7tiq3Y8nBxl+cyKjbzacFXYFRk27HKct
B6lBq3wK0OFjIVW7Ii+k81LNmYBNVKpQMqpPLSUDGwABWsMpVlD/20LJltRSIgdy
EIUyDdOG23NP9icudMb07Qco
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:26:31 2025 by rpki-client