Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a3a2f33322d3332203d3e20323635343139.roa
File:                     323830343a333364343a3a2f33322d3332203d3e20323635343139.roa (raw, json)
Hash identifier:          8nO2/elrgTuNhZ7oQeovb4drQBE7e4oXy6HbBZc03Tc=
Subject key identifier:   BE:BB:E2:81:5A:F2:AE:D7:29:EF:AA:F4:28:A6:AA:B8:88:1E:71:97
Certificate issuer:       /CN=D6FE73496B303F7473BC7683C3E88B77B8F07D23
Certificate serial:       2F4F849DDF0F3522109981D30F2D0B1C710FFEBF
Authority key identifier: D6:FE:73:49:6B:30:3F:74:73:BC:76:83:C3:E8:8B:77:B8:F0:7D:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a3a2f33322d3332203d3e20323635343139.roa
Signing time:             Thu 21 Aug 2025 17:42:46 +0000
ROA not before:           Thu 21 Aug 2025 17:37:46 +0000
ROA not after:            Thu 20 Aug 2026 17:42:46 +0000
asID:                     265419
IP address blocks:        2804:33d4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.crl
                          rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4f:84:9d:df:0f:35:22:10:99:81:d3:0f:2d:0b:1c:71:0f:fe:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6FE73496B303F7473BC7683C3E88B77B8F07D23
        Validity
            Not Before: Aug 21 17:37:46 2025 GMT
            Not After : Aug 20 17:42:46 2026 GMT
        Subject: CN=BEBBE2815AF2AED729EFAAF428A6AAB8881E7197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8b:3f:c6:63:95:35:4f:8d:26:aa:bd:a6:a8:
                    42:b1:48:3b:a1:0a:2c:75:bd:ed:1b:34:15:ad:0c:
                    f6:ed:ab:9b:a1:66:2e:04:b9:35:8a:0a:ba:84:86:
                    05:1b:bf:e3:e4:33:2e:41:9a:b7:8f:c6:5a:f8:bc:
                    86:07:c9:96:e0:21:5e:2a:93:46:48:e8:0b:9c:27:
                    78:df:77:4d:6f:58:d4:03:04:c2:8d:3d:63:ee:06:
                    60:74:9f:7b:0f:6b:e0:97:90:38:8b:33:49:64:be:
                    92:2a:20:3d:9c:43:e2:bf:55:e5:e7:e2:91:96:6b:
                    5c:dd:0a:fb:1b:c9:08:1f:ec:99:7b:fe:22:17:67:
                    9e:d8:c1:a8:6a:a5:97:d2:64:f7:04:1e:52:76:bc:
                    f6:8b:7e:9c:18:38:c0:14:4b:7a:db:18:b5:b0:94:
                    ed:9a:91:22:75:db:91:7c:53:c2:a0:2c:e2:65:c2:
                    5a:d3:d4:31:63:ef:20:d6:96:39:7a:8b:09:f5:d6:
                    39:11:54:80:04:da:df:8e:b3:43:2f:c7:e0:4b:b2:
                    a4:36:0b:ee:5f:92:a5:6a:0a:7a:11:8c:64:e7:1e:
                    39:bc:8c:39:2a:28:82:d6:1b:4b:35:cc:42:25:cf:
                    d8:c8:52:f2:b1:6c:4d:98:79:e7:ec:77:d5:7f:cc:
                    2a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BB:E2:81:5A:F2:AE:D7:29:EF:AA:F4:28:A6:AA:B8:88:1E:71:97
            X509v3 Authority Key Identifier:
                keyid:D6:FE:73:49:6B:30:3F:74:73:BC:76:83:C3:E8:8B:77:B8:F0:7D:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a3a2f33322d3332203d3e20323635343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:78:95:7b:df:32:29:82:17:c7:19:e1:77:f6:d5:8b:ab:ba:
         13:7c:14:f3:06:d4:68:28:29:36:f3:c6:f7:08:eb:9e:1f:52:
         46:12:3b:5d:a7:9d:b5:82:e5:ca:1a:52:80:ec:fc:44:65:c8:
         6b:ac:7e:04:f8:0a:3c:a2:42:b9:8a:96:3b:4d:1f:21:ac:7e:
         f5:e7:55:bb:19:80:2e:55:57:3e:eb:3e:d1:e5:96:4b:98:ec:
         d3:4c:5d:1b:12:4a:31:3d:35:1e:28:23:e9:65:12:3f:8a:e5:
         8e:d7:79:9a:e4:14:25:e1:b3:73:5d:d5:15:f2:4a:45:6a:10:
         a8:4a:7d:52:3c:ea:58:6b:b3:66:a5:8b:ba:41:c9:c6:ae:71:
         91:ee:ef:65:de:cc:f0:80:88:20:dd:94:d1:ca:22:97:f7:29:
         46:0c:c6:d4:f2:5b:7c:6d:87:36:d2:b8:c5:cc:9b:59:64:7b:
         0b:51:4b:b2:a5:c3:8e:ca:3d:d3:7c:d9:f2:e4:0e:0a:29:a4:
         22:ca:04:10:d5:6a:18:1a:07:c8:fb:26:30:79:a3:05:b5:90:
         6c:f0:53:36:c9:94:d9:fb:ad:71:6a:c3:2a:13:fe:00:ba:0d:
         ba:4a:d0:dd:24:de:6f:b9:8a:c5:8b:fe:64:59:ac:e4:0b:08:
         b7:14:a3:ab
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUL0+End8PNSIQmYHTDy0LHHEP/r8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZGRTczNDk2QjMwM0Y3NDczQkM3NjgzQzNFODhCNzdC
OEYwN0QyMzAeFw0yNTA4MjExNzM3NDZaFw0yNjA4MjAxNzQyNDZaMDMxMTAvBgNV
BAMTKEJFQkJFMjgxNUFGMkFFRDcyOUVGQUFGNDI4QTZBQUI4ODgxRTcxOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdiz/GY5U1T40mqr2mqEKxSDuh
Cix1ve0bNBWtDPbtq5uhZi4EuTWKCrqEhgUbv+PkMy5BmrePxlr4vIYHyZbgIV4q
k0ZI6AucJ3jfd01vWNQDBMKNPWPuBmB0n3sPa+CXkDiLM0lkvpIqID2cQ+K/VeXn
4pGWa1zdCvsbyQgf7Jl7/iIXZ57YwahqpZfSZPcEHlJ2vPaLfpwYOMAUS3rbGLWw
lO2akSJ125F8U8KgLOJlwlrT1DFj7yDWljl6iwn11jkRVIAE2t+Os0Mvx+BLsqQ2
C+5fkqVqCnoRjGTnHjm8jDkqKILWG0s1zEIlz9jIUvKxbE2Yeefsd9V/zCozAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUvrvigVryrtcp76r0KKaquIgecZcwHwYDVR0j
BBgwFoAU1v5zSWswP3RzvHaDw+iLd7jwfSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJZZG5wNnNxOWdUeWMxTXBKVmFTejZhNEI5TWhIU1VlSnJ4eFNBd3Ry
OGMvMC9ENkZFNzM0OTZCMzAzRjc0NzNCQzc2ODNDM0U4OEI3N0I4RjA3RDIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2RkU3MzQ5NkIzMDNGNzQ3
M0JDNzY4M0MzRTg4Qjc3QjhGMDdEMjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyWWRucDZzcTlnVHljMU1wSlZhU3o2YTRCOU1oSFNVZUpyeHhTQXd0cjhjLzAv
MzIzODMwMzQzYTMzMzM2NDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzQzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQz1DANBgkqhkiG9w0BAQsFAAOCAQEAaHiVe98y
KYIXxxnhd/bVi6u6E3wU8wbUaCgpNvPG9wjrnh9SRhI7XaedtYLlyhpSgOz8RGXI
a6x+BPgKPKJCuYqWO00fIax+9edVuxmALlVXPus+0eWWS5js00xdGxJKMT01Higj
6WUSP4rljtd5muQUJeGzc13VFfJKRWoQqEp9UjzqWGuzZqWLukHJxq5xke7vZd7M
8ICIIN2U0coil/cpRgzG1PJbfG2HNtK4xcybWWR7C1FLsqXDjso903zZ8uQOCimk
IsoEENVqGBoHyPsmMHmjBbWQbPBTNsmU2futcWrDKhP+ALoNukrQ3STeb7mKxYv+
ZFms5AsItxSjqw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:21:25 2025 by rpki-client