Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343564383a3a2f33322d3438203d3e20323636393533.roa
File:                     323830343a343564383a3a2f33322d3438203d3e20323636393533.roa (raw, json)
Hash identifier:          UDaXjotivXR1wZMUx5AKwXlj6jcGCdMh57RMBD9RoFw=
Subject key identifier:   1C:6D:9A:86:71:38:06:35:C3:C0:0E:E1:D9:97:F7:35:6C:15:38:B3
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       702E9F38EA6A2DE55A11F3A5D053C6E9B1389846
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343564383a3a2f33322d3438203d3e20323636393533.roa
Signing time:             Wed 13 Aug 2025 17:13:39 +0000
ROA not before:           Wed 13 Aug 2025 17:08:39 +0000
ROA not after:            Wed 12 Aug 2026 17:13:39 +0000
asID:                     266953
IP address blocks:        2804:45d8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl
                          rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2e:9f:38:ea:6a:2d:e5:5a:11:f3:a5:d0:53:c6:e9:b1:38:98:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Aug 13 17:08:39 2025 GMT
            Not After : Aug 12 17:13:39 2026 GMT
        Subject: CN=1C6D9A8671380635C3C00EE1D997F7356C1538B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:d7:f1:e0:43:fe:cc:b2:0a:d7:e6:89:74:
                    ad:90:7d:8c:3c:1b:7a:34:40:29:92:c9:d4:9e:4e:
                    2c:b0:5f:80:1a:1d:a0:5a:62:2b:98:4a:31:ca:48:
                    8a:0d:fa:e3:c0:56:27:51:8b:c9:1c:90:31:f4:c5:
                    fb:ea:91:10:d6:ef:7d:f8:6a:08:0b:4c:67:da:8d:
                    86:6e:73:cf:51:93:8e:cf:14:30:93:c1:a1:83:82:
                    07:e9:94:c8:82:31:f5:97:eb:a6:7a:7d:68:40:f3:
                    0f:16:d7:85:ea:89:52:aa:31:da:39:89:6e:85:a0:
                    ad:ca:bb:70:7a:76:35:8b:3b:3b:9d:b5:0f:1a:b5:
                    94:48:e4:2f:c4:cd:86:c5:e1:26:c6:9c:dc:a2:48:
                    7e:7b:bb:37:a7:a3:64:4d:06:d4:86:b8:8c:8c:7d:
                    25:20:49:52:87:d0:58:40:9b:ff:a4:3c:7b:10:0c:
                    9b:1e:f1:bb:2b:1e:81:b4:b8:82:af:8e:90:db:2d:
                    bf:41:1f:92:6b:9f:28:c6:1b:0f:96:8d:47:16:b2:
                    f5:64:60:ba:fe:b2:02:a3:f0:37:c8:9c:26:e1:d3:
                    31:dd:14:1b:4b:e7:f4:51:42:14:41:b3:1c:b7:22:
                    f9:d9:47:62:1e:7a:e9:b4:d0:60:26:5c:fd:2d:59:
                    0d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6D:9A:86:71:38:06:35:C3:C0:0E:E1:D9:97:F7:35:6C:15:38:B3
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343564383a3a2f33322d3438203d3e20323636393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:99:0c:bd:70:a8:40:a4:3b:48:15:3a:53:21:b6:83:39:11:
         50:4d:4f:4c:d0:4d:6e:4b:ec:6a:f0:29:39:3c:67:0f:06:e3:
         af:06:73:06:54:d9:7e:40:ab:eb:44:a5:d1:1f:7e:d9:9a:ba:
         42:04:60:c3:45:9f:36:0e:85:6f:b7:7f:97:28:89:30:89:8a:
         f6:98:73:0e:83:d4:fc:17:c3:a3:0b:4c:0f:78:08:f3:08:14:
         e4:c5:90:c3:9a:5b:df:34:b9:4e:72:ed:cf:6b:24:07:75:ea:
         ae:bc:40:d2:a1:3c:0b:d6:0e:be:ca:ee:26:ea:95:1e:ea:20:
         7b:23:13:a8:5d:85:2e:dc:0a:e7:66:ac:9b:b2:60:0d:b0:73:
         fd:06:47:79:0a:01:58:b1:26:b2:1e:a4:2e:c7:0c:32:4a:69:
         b5:bf:31:77:85:75:af:ab:37:fc:db:9a:7f:ba:e0:9f:40:8a:
         f7:44:5f:8b:78:22:f2:a8:d0:b7:52:72:16:83:34:69:51:db:
         85:85:1b:d9:d6:1a:95:b4:45:f1:a2:a4:fa:4b:22:17:a2:88:
         1d:03:b1:39:2b:ca:cc:eb:bd:0d:85:47:7c:ec:e2:f2:10:ec:
         2c:eb:40:89:da:2a:31:87:03:07:e8:d6:c8:d2:01:96:ab:cf:
         e2:21:22:bd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcC6fOOpqLeVaEfOl0FPG6bE4mEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDMzlGMjIzQkVDMjRCODZCNzdFNDlCNDYyMzYyRjYy
REIyNEJFNDAeFw0yNTA4MTMxNzA4MzlaFw0yNjA4MTIxNzEzMzlaMDMxMTAvBgNV
BAMTKDFDNkQ5QTg2NzEzODA2MzVDM0MwMEVFMUQ5OTdGNzM1NkMxNTM4QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZftfx4EP+zLIK1+aJdK2QfYw8
G3o0QCmSydSeTiywX4AaHaBaYiuYSjHKSIoN+uPAVidRi8kckDH0xfvqkRDW7334
aggLTGfajYZuc89Rk47PFDCTwaGDggfplMiCMfWX66Z6fWhA8w8W14XqiVKqMdo5
iW6FoK3Ku3B6djWLOzudtQ8atZRI5C/EzYbF4SbGnNyiSH57uzeno2RNBtSGuIyM
fSUgSVKH0FhAm/+kPHsQDJse8bsrHoG0uIKvjpDbLb9BH5JrnyjGGw+WjUcWsvVk
YLr+sgKj8DfInCbh0zHdFBtL5/RRQhRBsxy3IvnZR2Ieeum00GAmXP0tWQ3hAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUHG2ahnE4BjXDwA7h2Zf3NWwVOLMwHwYDVR0j
BBgwFoAUs8OfIjvsJLhrd+SbRiNi9i2yS+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh
WXYvMS9CM0MzOUYyMjNCRUMyNEI4NkI3N0U0OUI0NjIzNjJGNjJEQjI0QkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzM5RjIyM0JFQzI0Qjg2
Qjc3RTQ5QjQ2MjM2MkY2MkRCMjRCRTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhUWZhM3U4QjhBZGFKZDhrQTVWQVVOeThvY1JhQWNrQnljZnJIVXFBYVl2LzEv
MzIzODMwMzQzYTM0MzU2NDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM2
MzkzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARF2DANBgkqhkiG9w0BAQsFAAOCAQEAGZkMvXCo
QKQ7SBU6UyG2gzkRUE1PTNBNbkvsavApOTxnDwbjrwZzBlTZfkCr60Sl0R9+2Zq6
QgRgw0WfNg6Fb7d/lyiJMImK9phzDoPU/BfDowtMD3gI8wgU5MWQw5pb3zS5TnLt
z2skB3XqrrxA0qE8C9YOvsruJuqVHuogeyMTqF2FLtwK52asm7JgDbBz/QZHeQoB
WLEmsh6kLscMMkpptb8xd4V1r6s3/Nuaf7rgn0CK90Rfi3gi8qjQt1JyFoM0aVHb
hYUb2dYalbRF8aKk+ksiF6KIHQOxOSvKzOu9DYVHfOzi8hDsLOtAidoqMYcDB+jW
yNIBlqvP4iEivQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:11:39 2025 by rpki-client