Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33322d313238203d3e203631363738.roa
File:                     323830343a316364343a3a2f33322d313238203d3e203631363738.roa (raw, json)
Hash identifier:          6JWd5mE5VskzKa06dOehuRC38l54iLZvDm8ktJiyfoo=
Subject key identifier:   67:B0:B9:44:14:A6:F2:68:61:C5:DD:7E:68:97:FB:0F:0C:10:8A:40
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       34FE300070E985FA1FF2ABC2D71E636EE47CF785
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33322d313238203d3e203631363738.roa
Signing time:             Sun 13 Jul 2025 00:16:44 +0000
ROA not before:           Sun 13 Jul 2025 00:11:44 +0000
ROA not after:            Sun 12 Jul 2026 00:16:44 +0000
asID:                     61678
IP address blocks:        2804:1cd4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 23:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fe:30:00:70:e9:85:fa:1f:f2:ab:c2:d7:1e:63:6e:e4:7c:f7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Jul 13 00:11:44 2025 GMT
            Not After : Jul 12 00:16:44 2026 GMT
        Subject: CN=67B0B94414A6F26861C5DD7E6897FB0F0C108A40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c5:92:5c:a3:f7:67:b5:1e:46:e4:25:ad:0b:
                    32:2d:ed:6f:b1:7a:b9:5b:cf:f6:e3:e0:a4:3d:0f:
                    3b:6a:8b:93:7b:ad:1c:30:e7:d0:bf:f9:0e:c6:c7:
                    b6:f7:6d:c8:fe:2f:fc:27:eb:f4:55:14:bf:19:fc:
                    88:e2:53:fd:78:d9:ea:88:98:27:2c:67:38:b9:24:
                    60:6e:2d:d0:b4:39:7d:f3:10:25:3e:66:09:37:de:
                    4f:19:ce:fb:a7:a2:16:dc:57:82:9e:0a:35:c0:c2:
                    76:7b:4a:49:11:ea:27:af:ee:7f:33:d6:b8:fe:9b:
                    74:2f:a5:84:ba:98:1f:5a:7e:af:97:22:bf:f5:5b:
                    a2:16:80:aa:83:5d:c6:a8:eb:7e:46:45:be:6a:48:
                    49:2b:32:42:39:e4:9d:39:f8:db:7d:6e:50:92:b0:
                    70:45:40:2b:40:d3:cb:7c:c7:13:3d:56:5e:87:ef:
                    be:2d:79:fa:a1:bf:c2:b0:be:57:38:dc:d1:a8:5a:
                    a7:2d:34:f3:59:27:3d:dc:46:c1:46:08:87:e2:36:
                    99:d9:24:8b:1b:f2:ec:ce:90:ba:5b:21:b8:02:59:
                    ea:e2:e7:97:fe:56:30:d7:70:24:39:07:7a:76:8c:
                    b4:05:e9:cc:2f:b0:80:fe:7d:40:31:de:32:57:46:
                    1a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B0:B9:44:14:A6:F2:68:61:C5:DD:7E:68:97:FB:0F:0C:10:8A:40
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a3a2f33322d313238203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:2e:a8:49:c6:c1:71:93:06:e9:5f:c4:83:d7:89:68:02:ab:
         a6:0c:71:3c:44:97:17:98:3c:02:86:77:24:c6:40:95:1a:98:
         e6:1b:f7:f9:c4:11:ef:66:66:72:ec:39:71:01:60:fc:4f:57:
         e5:38:b5:d1:1f:e0:28:27:70:37:24:73:8b:bc:40:38:12:a6:
         c7:f2:3f:99:27:10:e6:f2:0e:b7:f5:bf:77:d7:a9:c9:e8:63:
         8e:31:fb:be:2c:a0:fe:7e:12:3c:ce:95:a1:62:61:77:34:7a:
         2a:7f:68:a2:17:c6:1b:4b:63:f2:9e:0f:c3:67:f9:ff:94:d6:
         4f:e1:0b:55:fe:23:1e:59:0d:4b:6c:f8:4d:a8:af:c0:c2:64:
         5d:2d:d6:af:d2:01:d7:0c:cb:e2:63:c0:c5:cf:58:f9:1a:54:
         78:1f:41:7b:5c:fa:50:2d:0c:57:1e:0d:10:6e:b0:c1:32:26:
         07:dd:b4:97:6c:39:3e:a6:9a:cd:c1:f6:49:ee:49:46:45:58:
         37:2f:af:21:75:a9:53:71:fc:ae:91:0e:09:75:02:fe:9f:fa:
         25:7a:94:c6:7c:0b:fe:93:00:71:87:85:65:1d:f7:60:5a:2a:
         55:35:19:36:51:bf:08:3b:3d:92:ba:66:82:03:fd:d2:a5:52:
         22:da:64:9c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUNP4wAHDphfof8qvC1x5jbuR894UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU1MkM2QTlCRUFENzlEQzk1MEY5REE1NjBDNTMwRjI4
QkM2RkNEQzAeFw0yNTA3MTMwMDExNDRaFw0yNjA3MTIwMDE2NDRaMDMxMTAvBgNV
BAMTKDY3QjBCOTQ0MTRBNkYyNjg2MUM1REQ3RTY4OTdGQjBGMEMxMDhBNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuxZJco/dntR5G5CWtCzIt7W+x
erlbz/bj4KQ9Dztqi5N7rRww59C/+Q7Gx7b3bcj+L/wn6/RVFL8Z/IjiU/142eqI
mCcsZzi5JGBuLdC0OX3zECU+Zgk33k8ZzvunohbcV4KeCjXAwnZ7SkkR6iev7n8z
1rj+m3QvpYS6mB9afq+XIr/1W6IWgKqDXcao635GRb5qSEkrMkI55J05+Nt9blCS
sHBFQCtA08t8xxM9Vl6H774tefqhv8Kwvlc43NGoWqctNPNZJz3cRsFGCIfiNpnZ
JIsb8uzOkLpbIbgCWeri55f+VjDXcCQ5B3p2jLQF6cwvsID+fUAx3jJXRhqlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUZ7C5RBSm8mhhxd1+aJf7DwwQikAwHwYDVR0j
BBgwFoAUjlLGqb6tedyVD52lYMUw8ovG/NwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy
azkvMC84RTUyQzZBOUJFQUQ3OURDOTUwRjlEQTU2MEM1MzBGMjhCQzZGQ0RDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNTJDNkE5QkVBRDc5REM5
NTBGOURBNTYwQzUzMEYyOEJDNkZDREMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUaHhjTVZCbnpGUUppd3BXQjFtS2dNRFN6eFZSNmg2MUw5M3ltYkt2Mms5LzAv
MzIzODMwMzQzYTMxNjM2NDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNjMx
MzYzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQc1DANBgkqhkiG9w0BAQsFAAOCAQEAJy6oScbB
cZMG6V/Eg9eJaAKrpgxxPESXF5g8AoZ3JMZAlRqY5hv3+cQR72Zmcuw5cQFg/E9X
5Ti10R/gKCdwNyRzi7xAOBKmx/I/mScQ5vIOt/W/d9epyehjjjH7viyg/n4SPM6V
oWJhdzR6Kn9oohfGG0tj8p4Pw2f5/5TWT+ELVf4jHlkNS2z4TaivwMJkXS3Wr9IB
1wzL4mPAxc9Y+RpUeB9Be1z6UC0MVx4NEG6wwTImB920l2w5PqaazcH2Se5JRkVY
Ny+vIXWpU3H8rpEOCXUC/p/6JXqUxnwL/pMAcYeFZR33YFoqVTUZNlG/CDs9krpm
ggP90qVSItpknA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 12:47:39 2025 by rpki-client