Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/323830343a316332633a3a2f33322d3334203d3e20323632383639.roa
File:                     323830343a316332633a3a2f33322d3334203d3e20323632383639.roa (raw, json)
Hash identifier:          FQhFgIN3oyDj/oqYwVfJYSReEJ0lVxFMka7YObMYVRg=
Subject key identifier:   C6:44:A5:50:38:55:78:8F:3D:C7:AA:37:0F:43:E1:AA:71:15:2F:6B
Certificate issuer:       /CN=B15DE8A39643F9E3852DE2E7153C75CAAA401A15
Certificate serial:       790BF61DD99F69E76A586B1CAFE289629B661F74
Authority key identifier: B1:5D:E8:A3:96:43:F9:E3:85:2D:E2:E7:15:3C:75:CA:AA:40:1A:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/323830343a316332633a3a2f33322d3334203d3e20323632383639.roa
Signing time:             Thu 24 Jul 2025 14:08:10 +0000
ROA not before:           Thu 24 Jul 2025 14:03:10 +0000
ROA not after:            Thu 23 Jul 2026 14:08:10 +0000
asID:                     262869
IP address blocks:        2804:1c2c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.crl
                          rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0b:f6:1d:d9:9f:69:e7:6a:58:6b:1c:af:e2:89:62:9b:66:1f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B15DE8A39643F9E3852DE2E7153C75CAAA401A15
        Validity
            Not Before: Jul 24 14:03:10 2025 GMT
            Not After : Jul 23 14:08:10 2026 GMT
        Subject: CN=C644A5503855788F3DC7AA370F43E1AA71152F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:f4:df:46:5d:e9:0e:a1:5a:59:38:c1:45:
                    ef:f7:2a:92:0f:a0:7c:f6:2e:f8:c9:43:7b:1c:d8:
                    ef:77:cc:dc:64:19:9d:a4:69:8c:74:dd:1d:34:c6:
                    53:79:9e:53:a4:96:eb:36:77:1f:3f:fb:f4:e4:0c:
                    dc:9e:55:6b:45:a3:7d:cd:d0:71:f9:33:7e:14:3e:
                    97:93:1c:48:16:2a:96:26:b0:f0:83:85:f9:99:5b:
                    2f:f6:fe:1b:ff:d6:8c:3c:83:e3:74:3b:ad:93:7f:
                    94:07:25:d1:15:01:75:28:eb:77:e9:9e:da:66:ee:
                    3e:b9:c0:4a:db:54:28:02:e9:b9:fd:11:89:2d:29:
                    e5:1d:1e:e6:54:56:e0:9e:1e:4e:a0:d8:77:11:a2:
                    20:17:de:b0:84:4e:fc:fc:4e:ed:b3:f0:cb:9e:ae:
                    b4:e8:d9:e8:b7:27:b4:04:38:4f:f3:aa:d7:19:9a:
                    a8:e0:67:7e:b7:8c:03:c0:ce:12:92:23:56:59:80:
                    15:bb:dd:bf:3f:3e:94:7b:26:47:94:90:b9:09:1b:
                    11:fd:3f:29:83:ec:1d:09:8f:20:04:4e:d1:24:49:
                    a4:18:17:1f:ec:75:30:74:45:80:c2:6f:0c:c2:35:
                    e8:92:f3:ca:d7:70:0b:79:99:08:9d:7c:d4:13:f0:
                    b8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:44:A5:50:38:55:78:8F:3D:C7:AA:37:0F:43:E1:AA:71:15:2F:6B
            X509v3 Authority Key Identifier:
                keyid:B1:5D:E8:A3:96:43:F9:E3:85:2D:E2:E7:15:3C:75:CA:AA:40:1A:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B15DE8A39643F9E3852DE2E7153C75CAAA401A15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74VJZ2ivmQ9KfwVYyxjAn3tdrsAetmgX83hQLh6vcgn6/0/323830343a316332633a3a2f33322d3334203d3e20323632383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:e1:eb:81:7a:54:cb:74:c7:e0:ac:9a:1f:17:26:61:d6:26:
         bf:9b:13:be:cc:e2:a1:e2:26:a5:b3:1e:69:e5:6a:cf:ed:8a:
         91:42:a3:82:0a:7b:75:75:e8:7f:ec:89:87:10:52:cc:e1:ad:
         e9:7e:28:89:31:9b:60:24:c1:4d:9f:1e:2d:02:aa:37:d9:bb:
         b1:2e:c8:d7:88:8c:e6:12:81:30:ee:3c:4a:92:d0:6a:6b:ea:
         a5:09:16:54:c4:0a:33:a0:68:e3:e6:e4:c8:08:3e:11:da:ba:
         ae:ce:46:88:ea:1c:5e:50:fe:9f:c0:a3:71:54:ff:77:96:ec:
         e0:48:ad:69:9d:8a:f0:0a:9c:bc:b7:09:45:e2:f7:8f:c3:1e:
         f8:b7:c6:d4:5a:a3:42:2c:ce:a3:d2:ed:07:52:9a:68:ce:5d:
         93:7d:f6:7c:e6:e3:a7:e0:c5:18:c4:a9:cb:52:fd:0d:f0:3a:
         3b:d7:6b:ea:df:2f:73:fe:33:81:e2:a2:95:08:e1:29:87:d5:
         f7:f1:c0:87:cf:48:9c:af:4b:a9:58:27:86:d3:d4:b5:69:fd:
         64:e4:39:79:77:f9:25:8b:83:ab:9b:9b:4f:7d:a8:05:f4:42:
         56:c0:1a:43:05:62:0f:07:07:c7:7f:48:3d:a3:f0:94:ae:06:
         a8:36:d8:6f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUeQv2HdmfaedqWGscr+KJYptmH3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE1REU4QTM5NjQzRjlFMzg1MkRFMkU3MTUzQzc1Q0FB
QTQwMUExNTAeFw0yNTA3MjQxNDAzMTBaFw0yNjA3MjMxNDA4MTBaMDMxMTAvBgNV
BAMTKEM2NDRBNTUwMzg1NTc4OEYzREM3QUEzNzBGNDNFMUFBNzExNTJGNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8fTfRl3pDqFaWTjBRe/3KpIP
oHz2LvjJQ3sc2O93zNxkGZ2kaYx03R00xlN5nlOklus2dx8/+/TkDNyeVWtFo33N
0HH5M34UPpeTHEgWKpYmsPCDhfmZWy/2/hv/1ow8g+N0O62Tf5QHJdEVAXUo63fp
ntpm7j65wErbVCgC6bn9EYktKeUdHuZUVuCeHk6g2HcRoiAX3rCETvz8Tu2z8Mue
rrTo2ei3J7QEOE/zqtcZmqjgZ363jAPAzhKSI1ZZgBW73b8/PpR7JkeUkLkJGxH9
PymD7B0JjyAETtEkSaQYFx/sdTB0RYDCbwzCNeiS88rXcAt5mQidfNQT8LiFAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUxkSlUDhVeI89x6o3D0PhqnEVL2swHwYDVR0j
BBgwFoAUsV3oo5ZD+eOFLeLnFTx1yqpAGhUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzRWSloyaXZtUTlLZndWWXl4akFuM3RkcnNBZXRtZ1g4M2hRTGg2dmNn
bjYvMC9CMTVERThBMzk2NDNGOUUzODUyREUyRTcxNTNDNzVDQUFBNDAxQTE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxNURFOEEzOTY0M0Y5RTM4
NTJERTJFNzE1M0M3NUNBQUE0MDFBMTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc0VkpaMml2bVE5S2Z3Vll5eGpBbjN0ZHJzQWV0bWdYODNoUUxoNnZjZ242LzAv
MzIzODMwMzQzYTMxNjMzMjYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjMy
MzgzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQcLDANBgkqhkiG9w0BAQsFAAOCAQEALeHrgXpU
y3TH4KyaHxcmYdYmv5sTvszioeImpbMeaeVqz+2KkUKjggp7dXXof+yJhxBSzOGt
6X4oiTGbYCTBTZ8eLQKqN9m7sS7I14iM5hKBMO48SpLQamvqpQkWVMQKM6Bo4+bk
yAg+Edq6rs5GiOocXlD+n8CjcVT/d5bs4EitaZ2K8AqcvLcJReL3j8Me+LfG1Fqj
QizOo9LtB1KaaM5dk332fObjp+DFGMSpy1L9DfA6O9dr6t8vc/4zgeKilQjhKYfV
9/HAh89InK9LqVgnhtPUtWn9ZOQ5eXf5JYuDq5ubT32oBfRCVsAaQwViDwcHx39I
PaPwlK4GqDbYbw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 06:01:34 2025 by rpki-client