Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          Ba5Mp/XZ5zPTy6/pbkuiaN6Ha8VN3ZGtl3f4blYVHwo=
Subject key identifier:   46:50:1A:A2:7D:A2:1B:A1:14:02:D2:51:7A:C2:2B:18:DC:73:B5:97
Certificate issuer:       /CN=F1D22B1DB0F2685582354EBAFE62BF000561EC51
Certificate serial:       420D26484B81BD19ABF2E987B9636868DE7717D1
Authority key identifier: F1:D2:2B:1D:B0:F2:68:55:82:35:4E:BA:FE:62:BF:00:05:61:EC:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 18 Jul 2025 20:53:45 +0000
ROA not before:           Fri 18 Jul 2025 20:48:45 +0000
ROA not after:            Fri 17 Jul 2026 20:53:45 +0000
asID:                     268296
IP address blocks:        2804:4efc:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 11:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0d:26:48:4b:81:bd:19:ab:f2:e9:87:b9:63:68:68:de:77:17:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D22B1DB0F2685582354EBAFE62BF000561EC51
        Validity
            Not Before: Jul 18 20:48:45 2025 GMT
            Not After : Jul 17 20:53:45 2026 GMT
        Subject: CN=46501AA27DA21BA11402D2517AC22B18DC73B597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:6a:80:b5:0b:10:41:b5:bc:e5:c4:dc:db:
                    e9:05:ee:e4:1a:26:38:b3:e2:f3:8c:ff:13:dd:8f:
                    95:45:2a:7b:6d:c4:68:72:f7:d0:d2:53:b1:90:58:
                    cb:dc:c1:2b:a0:46:a1:b7:e6:2b:b4:3c:09:ca:3f:
                    94:78:37:ad:b7:34:ef:15:21:71:cf:09:03:d1:7a:
                    6c:a5:7e:bf:6b:16:31:d8:ef:14:de:b5:dc:5e:c3:
                    51:17:09:61:85:ad:45:a3:eb:a2:d7:9f:bb:92:37:
                    2f:d5:a5:76:b1:ce:b9:4d:6c:e6:fd:5e:b8:98:d9:
                    61:f4:c0:3b:95:f2:38:68:5e:44:5a:ed:65:69:f1:
                    41:08:87:b0:ac:f2:92:5b:f4:eb:6a:2a:58:b2:0d:
                    c4:50:60:14:ec:de:b2:0b:84:f4:97:ab:05:8a:77:
                    90:71:08:73:48:2d:44:50:b7:b5:cc:cd:7e:2f:f4:
                    66:6b:08:cf:5f:29:b0:b5:c3:72:bb:88:b5:44:fd:
                    c5:c5:8d:7c:35:98:21:f5:87:dc:5c:94:5e:d1:59:
                    3f:53:30:0f:ce:ca:8e:d1:02:bc:04:44:f7:f7:96:
                    5c:2e:2d:35:cf:41:5f:03:e6:7d:c1:21:62:c3:77:
                    16:21:d0:54:00:90:cc:ab:51:29:dc:e9:3f:2f:af:
                    87:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:50:1A:A2:7D:A2:1B:A1:14:02:D2:51:7A:C2:2B:18:DC:73:B5:97
            X509v3 Authority Key Identifier:
                keyid:F1:D2:2B:1D:B0:F2:68:55:82:35:4E:BA:FE:62:BF:00:05:61:EC:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a7:28:6b:23:3e:f5:b1:75:b9:2f:6e:13:ff:d5:72:d2:b0:40:
         96:f1:83:ad:b1:52:4a:bb:65:8c:b7:de:6e:bf:2b:14:d9:9b:
         b3:59:e0:2c:f2:38:14:3a:eb:20:4c:58:5b:ec:65:7d:c4:84:
         34:de:0c:79:b7:6e:4f:cf:a6:50:b2:b2:96:9c:d0:79:0f:28:
         73:f9:8f:c0:cb:c2:1d:8e:9f:b8:38:0f:79:af:e5:f9:1b:f3:
         7d:be:30:c5:93:9e:08:71:b6:8d:11:65:0c:79:81:9a:13:85:
         c3:4f:cc:8e:98:a3:27:5a:15:17:3c:23:b5:f8:4f:75:d8:d0:
         2f:e8:ba:d7:2a:3a:fa:79:d0:df:01:07:64:fd:3e:66:bd:67:
         50:67:07:6e:b8:ff:5e:f8:e4:78:29:d5:87:3c:43:fd:1c:53:
         68:40:54:f3:65:73:92:aa:4e:c7:32:5c:8d:74:0d:f9:79:33:
         21:ba:aa:60:c7:c7:97:9b:c3:76:26:07:ff:08:f6:42:fd:2d:
         97:df:3d:94:55:3e:7c:59:31:17:e6:55:8a:8e:e0:d9:56:a2:
         c2:25:2b:bf:79:d0:6b:c9:87:20:72:5b:28:c0:d7:7e:3c:1b:
         c1:cc:f3:4f:d0:dc:89:27:d8:7e:78:b7:49:6a:0a:33:1c:64:
         a6:94:79:5b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQg0mSEuBvRmr8umHuWNoaN53F9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFEMjJCMURCMEYyNjg1NTgyMzU0RUJBRkU2MkJGMDAw
NTYxRUM1MTAeFw0yNTA3MTgyMDQ4NDVaFw0yNjA3MTcyMDUzNDVaMDMxMTAvBgNV
BAMTKDQ2NTAxQUEyN0RBMjFCQTExNDAyRDI1MTdBQzIyQjE4REM3M0I1OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAmqAtQsQQbW85cTc2+kF7uQa
Jjiz4vOM/xPdj5VFKnttxGhy99DSU7GQWMvcwSugRqG35iu0PAnKP5R4N623NO8V
IXHPCQPRemylfr9rFjHY7xTetdxew1EXCWGFrUWj66LXn7uSNy/VpXaxzrlNbOb9
XriY2WH0wDuV8jhoXkRa7WVp8UEIh7Cs8pJb9OtqKliyDcRQYBTs3rILhPSXqwWK
d5BxCHNILURQt7XMzX4v9GZrCM9fKbC1w3K7iLVE/cXFjXw1mCH1h9xclF7RWT9T
MA/Oyo7RArwERPf3llwuLTXPQV8D5n3BIWLDdxYh0FQAkMyrUSnc6T8vr4fXAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQURlAaon2iG6EUAtJResIrGNxztZcwHwYDVR0j
BBgwFoAU8dIrHbDyaFWCNU66/mK/AAVh7FEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMC9GMUQyMkIxREIwRjI2ODU1ODIzNTRFQkFGRTYyQkYwMDA1NjFFQzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxRDIyQjFEQjBGMjY4NTU4
MjM1NEVCQUZFNjJCRjAwMDU2MUVDNTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv
MzIzODMwMzQzYTM0NjU2NjYzM2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgETvxQMA0GCSqGSIb3DQEBCwUA
A4IBAQCnKGsjPvWxdbkvbhP/1XLSsECW8YOtsVJKu2WMt95uvysU2ZuzWeAs8jgU
OusgTFhb7GV9xIQ03gx5t25Pz6ZQsrKWnNB5Dyhz+Y/Ay8Idjp+4OA95r+X5G/N9
vjDFk54IcbaNEWUMeYGaE4XDT8yOmKMnWhUXPCO1+E912NAv6LrXKjr6edDfAQdk
/T5mvWdQZwduuP9e+OR4KdWHPEP9HFNoQFTzZXOSqk7HMlyNdA35eTMhuqpgx8eX
m8N2Jgf/CPZC/S2X3z2UVT58WTEX5lWKjuDZVqLCJSu/edBryYcgclsowNd+PBvB
zPNP0NyJJ9h+eLdJagozHGSmlHlb
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:33:28 2025 by rpki-client