Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a643030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a643030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          uX+gyYzXpCbajdUabCwwboj2ZTKHWW6v4LWLmC9c+EQ=
Subject key identifier:   12:33:B4:F4:C6:5F:76:55:49:D2:92:0E:4C:F4:A5:57:9B:D7:50:80
Certificate issuer:       /CN=F1D22B1DB0F2685582354EBAFE62BF000561EC51
Certificate serial:       0422C0FE66BD9D212BFB25D73D99DCDA3FCEB515
Authority key identifier: F1:D2:2B:1D:B0:F2:68:55:82:35:4E:BA:FE:62:BF:00:05:61:EC:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a643030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 18 Jul 2025 20:53:46 +0000
ROA not before:           Fri 18 Jul 2025 20:48:46 +0000
ROA not after:            Fri 17 Jul 2026 20:53:46 +0000
asID:                     268296
IP address blocks:        2804:4efc:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 11:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:22:c0:fe:66:bd:9d:21:2b:fb:25:d7:3d:99:dc:da:3f:ce:b5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D22B1DB0F2685582354EBAFE62BF000561EC51
        Validity
            Not Before: Jul 18 20:48:46 2025 GMT
            Not After : Jul 17 20:53:46 2026 GMT
        Subject: CN=1233B4F4C65F765549D2920E4CF4A5579BD75080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:82:21:a1:43:f8:55:d5:88:b4:4c:72:2d:
                    44:6c:8b:1f:5d:85:be:b2:51:fe:75:c8:59:3a:cb:
                    64:d7:f0:ba:56:d8:e8:64:54:05:ab:97:66:e9:09:
                    56:27:83:2f:58:53:96:1f:89:ff:d8:96:52:f5:74:
                    9a:c1:ba:ca:b5:46:a7:82:47:58:3a:09:68:7b:18:
                    12:f2:e7:6c:32:5d:16:3f:21:36:d4:ab:36:89:de:
                    ba:20:0e:5e:61:46:a0:06:fa:0d:35:0f:c0:23:4f:
                    c2:1e:ac:fd:c7:15:5e:0a:22:a5:d0:1f:28:f5:6e:
                    b7:d0:49:ae:c6:fd:2f:6c:33:23:51:59:a5:a3:91:
                    c4:fe:bc:74:86:c6:c0:64:c5:67:e5:57:33:3c:87:
                    f0:b5:0c:29:3e:92:88:c5:1d:25:15:69:c1:43:4a:
                    7f:4c:b8:e0:b1:16:31:3e:f7:80:01:f0:33:28:1b:
                    c3:49:3c:d7:ab:aa:78:bd:27:4f:29:36:50:48:74:
                    54:8e:e2:ce:53:aa:e0:99:b3:a3:ad:ec:09:c2:86:
                    e6:2b:2c:eb:5f:ad:5e:65:8c:b1:c0:19:84:0f:54:
                    d0:8e:5a:ff:01:4c:d9:1a:bc:b5:cb:23:50:b9:04:
                    26:d5:60:0a:2f:bc:79:cc:6d:b5:9a:89:2f:03:c3:
                    da:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:33:B4:F4:C6:5F:76:55:49:D2:92:0E:4C:F4:A5:57:9B:D7:50:80
            X509v3 Authority Key Identifier:
                keyid:F1:D2:2B:1D:B0:F2:68:55:82:35:4E:BA:FE:62:BF:00:05:61:EC:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/F1D22B1DB0F2685582354EBAFE62BF000561EC51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1D22B1DB0F2685582354EBAFE62BF000561EC51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a643030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         61:a2:c0:c9:76:64:60:85:44:b9:c4:99:a7:54:00:f9:e6:3c:
         50:d9:97:71:1f:96:82:14:5a:0b:96:92:a8:65:18:e3:3c:f5:
         7c:42:be:00:08:0f:74:8b:f1:b0:59:9c:31:bd:3d:03:5d:fd:
         aa:93:5c:af:1b:ee:12:4c:dd:2d:0a:87:a9:25:09:85:ff:c6:
         6c:5b:aa:cf:ef:7a:d9:af:1a:38:91:5a:e4:61:65:e0:fa:66:
         ad:c2:9d:5a:e1:b3:9f:6b:18:1e:f6:2a:4a:3c:24:2a:99:a3:
         6c:d1:94:44:9a:4e:51:b4:fd:df:c4:56:cb:04:24:6a:29:20:
         d1:c2:fd:6e:3d:46:04:7b:50:9e:e3:f4:03:ed:6c:59:02:8b:
         18:8a:3d:a7:73:01:7a:30:f4:d1:ff:47:3a:c0:5f:cd:14:7a:
         fc:47:ea:9b:a6:ba:61:c6:d6:92:91:84:93:79:8d:f7:9a:3a:
         1c:91:b7:ff:42:5d:3a:79:2d:96:b7:a0:ff:f3:78:f9:46:03:
         da:87:30:77:c2:8f:4d:24:8b:2e:37:32:47:c8:9a:58:fd:1e:
         a6:81:17:1a:23:08:73:59:62:fe:99:8e:ef:32:11:b8:73:5c:
         f4:20:94:cd:71:4d:93:3a:4f:b3:29:92:a1:2c:7a:e8:30:21:
         cd:cc:61:7c
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBCLA/ma9nSEr+yXXPZnc2j/OtRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFEMjJCMURCMEYyNjg1NTgyMzU0RUJBRkU2MkJGMDAw
NTYxRUM1MTAeFw0yNTA3MTgyMDQ4NDZaFw0yNjA3MTcyMDUzNDZaMDMxMTAvBgNV
BAMTKDEyMzNCNEY0QzY1Rjc2NTU0OUQyOTIwRTRDRjRBNTU3OUJENzUwODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZ4IhoUP4VdWItExyLURsix9d
hb6yUf51yFk6y2TX8LpW2OhkVAWrl2bpCVYngy9YU5Yfif/YllL1dJrBusq1RqeC
R1g6CWh7GBLy52wyXRY/ITbUqzaJ3rogDl5hRqAG+g01D8AjT8IerP3HFV4KIqXQ
Hyj1brfQSa7G/S9sMyNRWaWjkcT+vHSGxsBkxWflVzM8h/C1DCk+kojFHSUVacFD
Sn9MuOCxFjE+94AB8DMoG8NJPNerqni9J08pNlBIdFSO4s5TquCZs6Ot7AnChuYr
LOtfrV5ljLHAGYQPVNCOWv8BTNkavLXLI1C5BCbVYAovvHnMbbWaiS8Dw9p1AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUEjO09MZfdlVJ0pIOTPSlV5vXUIAwHwYDVR0j
BBgwFoAU8dIrHbDyaFWCNU66/mK/AAVh7FEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMC9GMUQyMkIxREIwRjI2ODU1ODIzNTRFQkFGRTYyQkYwMDA1NjFFQzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxRDIyQjFEQjBGMjY4NTU4
MjM1NEVCQUZFNjJCRjAwMDU2MUVDNTEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv
MzIzODMwMzQzYTM0NjU2NjYzM2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgETvzQMA0GCSqGSIb3DQEBCwUA
A4IBAQBhosDJdmRghUS5xJmnVAD55jxQ2ZdxH5aCFFoLlpKoZRjjPPV8Qr4ACA90
i/GwWZwxvT0DXf2qk1yvG+4STN0tCoepJQmF/8ZsW6rP73rZrxo4kVrkYWXg+mat
wp1a4bOfaxge9ipKPCQqmaNs0ZREmk5RtP3fxFbLBCRqKSDRwv1uPUYEe1Ce4/QD
7WxZAosYij2ncwF6MPTR/0c6wF/NFHr8R+qbprphxtaSkYSTeY33mjockbf/Ql06
eS2Wt6D/83j5RgPahzB3wo9NJIsuNzJHyJpY/R6mgRcaIwhzWWL+mY7vMhG4c1z0
IJTNcU2TOk+zKZKhLHroMCHNzGF8
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:15:14 2025 by rpki-client