Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/323830343a323133633a623a3a2f34382d3438203d3e20323634353434.roa
File:                     323830343a323133633a623a3a2f34382d3438203d3e20323634353434.roa (raw, json)
Hash identifier:          DTldzUaRZwnuRXLpjAPSQhdqWg2/jz1UJk7nRD7VXH8=
Subject key identifier:   25:C2:1F:A0:29:59:EB:C4:B4:56:03:11:AF:64:6A:8E:42:4B:B5:3C
Certificate issuer:       /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Certificate serial:       179C828378999557B6C99A06F5508297F3158CF6
Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/323830343a323133633a623a3a2f34382d3438203d3e20323634353434.roa
Signing time:             Wed 16 Jul 2025 14:35:48 +0000
ROA not before:           Wed 16 Jul 2025 14:30:48 +0000
ROA not after:            Wed 15 Jul 2026 14:35:48 +0000
asID:                     264544
IP address blocks:        2804:213c:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl
                          rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 06:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9c:82:83:78:99:95:57:b6:c9:9a:06:f5:50:82:97:f3:15:8c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
        Validity
            Not Before: Jul 16 14:30:48 2025 GMT
            Not After : Jul 15 14:35:48 2026 GMT
        Subject: CN=25C21FA02959EBC4B4560311AF646A8E424BB53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:1d:ca:dd:9e:f4:6d:9c:3c:f8:c0:f8:fe:
                    50:10:06:72:cd:e8:26:ed:47:a8:1c:7e:a4:7f:bc:
                    15:65:ac:fd:c4:d0:fa:53:af:99:85:9a:08:90:4c:
                    26:80:41:fc:9f:d6:1a:71:3c:0d:25:94:1c:1a:8d:
                    c5:28:39:f1:63:33:e2:1e:02:a3:5b:35:b6:ad:ce:
                    71:8e:66:33:64:50:4d:d8:e6:3a:fc:44:56:4d:0b:
                    de:64:27:09:33:3d:58:24:9f:df:6a:3e:dd:64:4e:
                    bc:96:ee:d7:fd:6b:e7:8d:85:53:79:50:8f:bc:df:
                    a6:97:c1:9c:7c:6b:7c:9e:05:97:e2:7c:d0:55:f4:
                    4b:8a:c2:3a:7c:34:8c:ab:ed:cc:53:83:1b:15:28:
                    66:3b:11:eb:ae:6f:3c:8a:f9:ce:0d:53:57:1f:a5:
                    ab:b8:00:62:a5:ca:f1:1d:db:51:f1:aa:91:51:ff:
                    03:d2:76:da:c0:8d:f7:89:56:e4:8b:5d:64:34:a8:
                    18:ff:6b:57:c4:b4:a4:fe:7d:ee:d7:63:90:7a:33:
                    2e:b4:c4:c4:b3:dc:b0:9d:e8:cd:53:c5:a4:64:20:
                    8a:dc:c1:30:3f:a7:8f:05:c0:91:ee:ac:65:ba:af:
                    4e:45:c6:4e:69:41:56:7f:5c:88:61:19:60:62:09:
                    d4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C2:1F:A0:29:59:EB:C4:B4:56:03:11:AF:64:6A:8E:42:4B:B5:3C
            X509v3 Authority Key Identifier:
                keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/323830343a323133633a623a3a2f34382d3438203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:213c:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:4e:af:78:d0:86:df:9b:87:38:64:60:9e:df:9b:92:31:14:
         78:7d:0c:38:63:6b:e5:76:48:a8:df:66:1b:80:35:77:68:d8:
         b6:fc:82:88:6d:a8:50:29:e8:9a:a1:03:27:e4:48:2f:7f:ea:
         6f:32:5f:db:ec:e0:9b:dd:09:b1:8f:9c:22:d8:7b:6c:c1:fe:
         a4:ae:d0:ac:fd:91:ed:85:68:f9:1d:80:43:a8:4b:72:58:06:
         70:90:3d:ce:2b:47:d3:90:c3:1b:e5:79:1c:f6:20:e3:fc:fa:
         67:a8:a3:a7:da:a8:10:7d:7b:bb:02:60:b1:8f:b8:98:cf:90:
         e5:00:aa:57:f4:f5:04:60:7a:b0:a5:fd:bb:78:ba:9f:20:c5:
         bd:e9:eb:d9:0e:d5:03:9b:f2:6f:a6:99:a8:eb:10:9d:6b:9d:
         a2:d5:42:77:59:1d:75:36:23:ab:4a:58:19:38:33:b0:d4:db:
         d8:63:05:f7:7b:45:64:19:83:94:bb:0a:dc:87:bb:b0:54:ed:
         17:37:53:ca:df:c0:41:14:d6:e5:6d:da:ba:28:c0:51:fc:b6:
         a4:ba:b6:6d:0d:00:14:02:bd:79:a9:9c:29:83:b9:92:cf:59:
         78:2b:a1:83:a3:37:f8:95:d8:5a:3e:f9:4f:b7:4d:88:71:ed:
         3c:53:1d:78
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUF5yCg3iZlVe2yZoG9VCCl/MVjPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE3QzMyNTdGQTE5NjNDRUI3Q0UxNEU5NTk5RENFOTJF
NzM2NjJGOTAeFw0yNTA3MTYxNDMwNDhaFw0yNjA3MTUxNDM1NDhaMDMxMTAvBgNV
BAMTKDI1QzIxRkEwMjk1OUVCQzRCNDU2MDMxMUFGNjQ2QThFNDI0QkI1M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwvB3K3Z70bZw8+MD4/lAQBnLN
6CbtR6gcfqR/vBVlrP3E0PpTr5mFmgiQTCaAQfyf1hpxPA0llBwajcUoOfFjM+Ie
AqNbNbatznGOZjNkUE3Y5jr8RFZNC95kJwkzPVgkn99qPt1kTryW7tf9a+eNhVN5
UI+836aXwZx8a3yeBZfifNBV9EuKwjp8NIyr7cxTgxsVKGY7EeuubzyK+c4NU1cf
pau4AGKlyvEd21HxqpFR/wPSdtrAjfeJVuSLXWQ0qBj/a1fEtKT+fe7XY5B6My60
xMSz3LCd6M1TxaRkIIrcwTA/p48FwJHurGW6r05Fxk5pQVZ/XIhhGWBiCdR5AgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUJcIfoClZ68S0VgMRr2RqjkJLtTwwHwYDVR0j
BBgwFoAUCnwyV/oZY863zhTpWZ3Okuc2YvkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2FxZ1lMQjdLbmcyM1ZWMXJ1OXRKVWZSNzdQdnZuTE1CckM2d1hpVXpY
OWIvMi8wQTdDMzI1N0ZBMTk2M0NFQjdDRTE0RTk1OTlEQ0U5MkU3MzY2MkY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBN0MzMjU3RkExOTYzQ0VC
N0NFMTRFOTU5OURDRTkyRTczNjYyRjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NhcWdZTEI3S25nMjNWVjFydTl0SlVmUjc3UHZ2bkxNQnJDNndYaVV6WDliLzIv
MzIzODMwMzQzYTMyMzEzMzYzM2E2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzYzNDM1MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEITwACzANBgkqhkiG9w0BAQsFAAOCAQEA
fU6veNCG35uHOGRgnt+bkjEUeH0MOGNr5XZIqN9mG4A1d2jYtvyCiG2oUCnomqED
J+RIL3/qbzJf2+zgm90JsY+cIth7bMH+pK7QrP2R7YVo+R2AQ6hLclgGcJA9zitH
05DDG+V5HPYg4/z6Z6ijp9qoEH17uwJgsY+4mM+Q5QCqV/T1BGB6sKX9u3i6nyDF
venr2Q7VA5vyb6aZqOsQnWudotVCd1kddTYjq0pYGTgzsNTb2GMF93tFZBmDlLsK
3Ie7sFTtFzdTyt/AQRTW5W3auijAUfy2pLq2bQ0AFAK9eamcKYO5ks9ZeCuhg6M3
+JXYWj75T7dNiHHtPFMdeA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:02:55 2025 by rpki-client