Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a3a2f33322d3438203d3e20323637343538.roa
File:                     323830343a343164303a3a2f33322d3438203d3e20323637343538.roa (raw, json)
Hash identifier:          lV8YlAT7N7CTNdBWWXAzlGLk6Sb4fZhQnpR6xgC+fBU=
Subject key identifier:   14:D6:53:12:5A:70:D4:CC:59:5A:5B:3E:11:1B:C8:17:E0:56:C8:C1
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       6C7BDCDE06205583F3399E9701F53C9657EBF2D1
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a3a2f33322d3438203d3e20323637343538.roa
Signing time:             Wed 13 Aug 2025 17:14:09 +0000
ROA not before:           Wed 13 Aug 2025 17:09:09 +0000
ROA not after:            Wed 12 Aug 2026 17:14:09 +0000
asID:                     267458
IP address blocks:        2804:41d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl
                          rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7b:dc:de:06:20:55:83:f3:39:9e:97:01:f5:3c:96:57:eb:f2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Aug 13 17:09:09 2025 GMT
            Not After : Aug 12 17:14:09 2026 GMT
        Subject: CN=14D653125A70D4CC595A5B3E111BC817E056C8C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:e2:45:14:73:0c:6e:80:3b:44:65:e4:8d:
                    ca:0f:a9:75:b0:27:d4:c2:b3:bf:8f:fe:aa:8c:4a:
                    58:3b:38:15:58:81:c8:42:b4:40:60:e7:3f:2d:15:
                    77:09:cd:bf:cf:ac:67:8e:a1:9d:02:b2:e4:db:84:
                    b3:97:1c:56:a4:0f:be:da:8a:43:87:f2:ac:88:6e:
                    7b:98:d1:db:4d:1d:69:79:82:94:4e:a5:0b:17:22:
                    c7:8c:3c:8a:ee:73:60:54:2a:8e:26:16:bf:76:6e:
                    f3:d3:de:94:ff:bb:6a:16:c9:7b:4f:e6:92:1a:82:
                    6d:15:40:97:08:29:1d:70:30:3a:c5:e7:f8:24:cb:
                    bd:a5:b8:f7:6c:35:11:85:ab:ac:cd:4b:6d:08:bb:
                    24:96:04:9d:d5:9e:e7:49:aa:fc:f0:57:69:e3:cc:
                    11:93:ee:57:eb:82:8d:67:dc:59:b8:ea:ba:ed:68:
                    30:34:2a:76:40:ac:1a:bf:e5:8a:59:89:21:3c:58:
                    ab:fc:eb:54:e4:ce:ee:19:9c:db:4a:f6:92:92:fd:
                    2d:c7:6c:5a:16:9c:32:83:9e:99:f4:28:64:98:68:
                    33:70:e9:0c:f4:dd:02:2a:62:86:e6:4e:39:16:ae:
                    70:2d:2d:48:6f:b0:5f:fd:9e:4c:63:16:e4:ce:ea:
                    18:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D6:53:12:5A:70:D4:CC:59:5A:5B:3E:11:1B:C8:17:E0:56:C8:C1
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a3a2f33322d3438203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:10:55:0e:ce:28:b1:b0:3b:4a:59:e5:80:68:c5:76:18:2e:
         00:c3:5e:57:82:a2:c2:7e:77:3e:1a:08:0b:24:3b:c6:fa:86:
         38:0d:38:46:57:4a:10:ca:e4:80:6d:62:59:64:54:af:f0:62:
         1b:97:c4:49:c3:36:fb:d5:62:23:e1:e4:d9:f8:36:a6:09:dc:
         a3:b0:e1:bd:6f:65:db:3e:45:eb:c8:41:b7:0d:07:a7:2a:b5:
         c6:2a:68:45:6c:07:04:85:7b:bc:2f:9b:25:f6:e0:b1:01:b5:
         27:fe:33:25:ea:b4:01:2e:8a:33:81:28:64:6e:47:ba:75:96:
         22:1f:33:b7:b4:ee:c5:53:ce:3d:a0:e6:1b:d3:48:db:ce:b5:
         a7:89:3c:d6:da:09:ae:5b:be:06:51:d2:a4:2b:c7:87:b3:bd:
         2c:bb:18:46:2e:fc:3f:14:49:31:a1:88:a0:7d:dd:cd:55:24:
         e7:4a:25:01:44:85:a9:25:35:09:1b:be:b8:fe:a4:64:ed:fa:
         e0:1f:db:32:03:05:6a:d0:e1:5c:fc:e5:32:85:88:38:08:21:
         d6:f0:d1:e0:6e:06:92:97:80:f9:39:75:ce:72:c6:86:53:ee:
         2f:b6:28:1c:20:c0:22:3b:a1:05:cf:6b:25:87:7c:1b:c4:db:
         c3:31:2a:bb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUbHvc3gYgVYPzOZ6XAfU8llfr8tEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDMzlGMjIzQkVDMjRCODZCNzdFNDlCNDYyMzYyRjYy
REIyNEJFNDAeFw0yNTA4MTMxNzA5MDlaFw0yNjA4MTIxNzE0MDlaMDMxMTAvBgNV
BAMTKDE0RDY1MzEyNUE3MEQ0Q0M1OTVBNUIzRTExMUJDODE3RTA1NkM4QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJ+JFFHMMboA7RGXkjcoPqXWw
J9TCs7+P/qqMSlg7OBVYgchCtEBg5z8tFXcJzb/PrGeOoZ0CsuTbhLOXHFakD77a
ikOH8qyIbnuY0dtNHWl5gpROpQsXIseMPIruc2BUKo4mFr92bvPT3pT/u2oWyXtP
5pIagm0VQJcIKR1wMDrF5/gky72luPdsNRGFq6zNS20IuySWBJ3VnudJqvzwV2nj
zBGT7lfrgo1n3Fm46rrtaDA0KnZArBq/5YpZiSE8WKv861Tkzu4ZnNtK9pKS/S3H
bFoWnDKDnpn0KGSYaDNw6Qz03QIqYobmTjkWrnAtLUhvsF/9nkxjFuTO6hgRAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUFNZTElpw1MxZWls+ERvIF+BWyMEwHwYDVR0j
BBgwFoAUs8OfIjvsJLhrd+SbRiNi9i2yS+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh
WXYvMS9CM0MzOUYyMjNCRUMyNEI4NkI3N0U0OUI0NjIzNjJGNjJEQjI0QkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzM5RjIyM0JFQzI0Qjg2
Qjc3RTQ5QjQ2MjM2MkY2MkRCMjRCRTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhUWZhM3U4QjhBZGFKZDhrQTVWQVVOeThvY1JhQWNrQnljZnJIVXFBYVl2LzEv
MzIzODMwMzQzYTM0MzE2NDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3
MzQzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARB0DANBgkqhkiG9w0BAQsFAAOCAQEAKRBVDs4o
sbA7SlnlgGjFdhguAMNeV4Kiwn53PhoICyQ7xvqGOA04RldKEMrkgG1iWWRUr/Bi
G5fEScM2+9ViI+Hk2fg2pgnco7DhvW9l2z5F68hBtw0Hpyq1xipoRWwHBIV7vC+b
JfbgsQG1J/4zJeq0AS6KM4EoZG5HunWWIh8zt7TuxVPOPaDmG9NI2861p4k81toJ
rlu+BlHSpCvHh7O9LLsYRi78PxRJMaGIoH3dzVUk50olAUSFqSU1CRu+uP6kZO36
4B/bMgMFatDhXPzlMoWIOAgh1vDR4G4GkpeA+Tl1znLGhlPuL7YoHCDAIjuhBc9r
JYd8G8TbwzEquw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:21 2025 by rpki-client