Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/323830343a353164633a313063303a3a2f34332d3433203d3e20323638343831.roa
File:                     323830343a353164633a313063303a3a2f34332d3433203d3e20323638343831.roa (raw, json)
Hash identifier:          1X+krofjyV5hfc/Ccq9MbxVtT7vW32uVIfD6CvIsYvg=
Subject key identifier:   7B:B5:60:30:4D:A4:CA:D5:8D:A4:F5:2B:5E:44:33:B1:10:16:30:22
Certificate issuer:       /CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
Certificate serial:       411DC05A661D94C65DF67CA457FA6056E9B56C6A
Authority key identifier: 85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/323830343a353164633a313063303a3a2f34332d3433203d3e20323638343831.roa
Signing time:             Fri 11 Jul 2025 14:14:47 +0000
ROA not before:           Fri 11 Jul 2025 14:09:47 +0000
ROA not after:            Fri 10 Jul 2026 14:14:47 +0000
asID:                     268481
IP address blocks:        2804:51dc:10c0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl
                          rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 23:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1d:c0:5a:66:1d:94:c6:5d:f6:7c:a4:57:fa:60:56:e9:b5:6c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
        Validity
            Not Before: Jul 11 14:09:47 2025 GMT
            Not After : Jul 10 14:14:47 2026 GMT
        Subject: CN=7BB560304DA4CAD58DA4F52B5E4433B110163022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b1:f4:39:8f:4d:69:d5:fd:ac:e5:1f:42:6f:
                    5c:2a:82:13:30:0b:a8:ea:98:84:12:65:ca:8c:14:
                    0c:dc:5b:e2:a4:08:21:c1:3b:cb:ad:69:c4:48:13:
                    f2:05:47:93:2f:58:da:9b:b9:9f:43:5f:5c:f5:52:
                    9d:33:4d:9d:48:4a:6d:b5:c3:85:cc:89:c7:7a:e1:
                    cb:6e:3d:52:13:06:0e:c0:58:25:95:53:9e:e5:03:
                    a0:1d:2a:d3:44:d2:bb:9c:0b:f5:38:4f:a4:0e:66:
                    31:e4:33:72:4d:01:8d:15:9f:ee:7d:63:8a:3b:3f:
                    90:1f:41:be:5d:ec:7e:c2:46:93:d4:de:8e:d0:8c:
                    df:da:b1:9f:e5:22:21:56:85:87:59:d9:1c:94:30:
                    07:92:17:f7:d2:b5:ad:86:34:17:08:05:8c:75:05:
                    13:88:96:86:a7:c5:61:e3:cb:fd:d9:19:6d:1b:67:
                    6a:8b:08:a6:70:22:c9:74:4e:49:a2:04:e7:1b:70:
                    98:5b:20:89:e4:c3:6d:ad:e6:e9:62:b0:09:3d:69:
                    46:af:61:62:f5:eb:67:ee:08:3a:ea:e6:ec:53:3b:
                    cc:28:a4:b0:54:8a:31:94:b8:3c:4f:ee:d7:2e:f8:
                    83:d0:ad:1f:e6:7f:18:d4:90:51:34:2d:56:e0:62:
                    d3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B5:60:30:4D:A4:CA:D5:8D:A4:F5:2B:5E:44:33:B1:10:16:30:22
            X509v3 Authority Key Identifier:
                keyid:85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/323830343a353164633a313063303a3a2f34332d3433203d3e20323638343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51dc:10c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         7e:1a:43:bb:65:81:fb:e1:1c:0f:a5:2e:b3:d7:d7:18:31:3c:
         b1:79:45:12:a9:e5:7b:40:cc:f6:71:fd:70:4f:0e:03:4a:9b:
         f5:56:20:1e:18:a8:d2:07:3a:52:e3:a7:e7:2c:89:e0:2f:08:
         ba:3b:e4:1e:e5:02:6f:78:53:7d:5d:3b:df:02:57:08:e4:b4:
         40:74:a0:14:da:f1:d4:fb:99:e9:9f:10:33:14:2c:e5:87:e7:
         dc:7c:a1:28:ae:44:f1:d3:cc:a7:ff:87:36:4e:b7:23:07:d4:
         3f:e1:a4:5e:d1:25:43:f2:f2:e4:ed:45:ff:21:2f:fc:4e:01:
         5c:81:ff:4f:0c:4d:06:63:e8:27:73:cc:1b:50:af:24:f4:cc:
         a7:cd:21:91:56:15:0e:8e:9d:d1:09:77:b4:14:3b:a9:5c:22:
         7a:e9:22:be:2d:ec:0f:0e:51:72:88:60:b4:b6:12:71:ca:bb:
         94:20:e9:20:c9:1e:f6:c1:78:7f:64:5b:a8:1d:8a:53:49:47:
         9b:a5:68:a0:ab:31:fd:b0:eb:01:1c:c4:da:bb:69:d2:52:32:
         5d:f0:45:49:d5:3b:97:67:48:b9:12:1e:7e:62:72:0a:51:cf:
         1a:da:bd:84:3f:e5:e7:77:0e:0e:18:86:6f:04:14:cd:37:58:
         a2:84:68:2c
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUQR3AWmYdlMZd9nykV/pgVum1bGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUxNTREMTdFQjU2NDIwMjc3QTBENkQzMTY4RUNFQjdC
ODhDRDY1NDAeFw0yNTA3MTExNDA5NDdaFw0yNjA3MTAxNDE0NDdaMDMxMTAvBgNV
BAMTKDdCQjU2MDMwNERBNENBRDU4REE0RjUyQjVFNDQzM0IxMTAxNjMwMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcsfQ5j01p1f2s5R9Cb1wqghMw
C6jqmIQSZcqMFAzcW+KkCCHBO8utacRIE/IFR5MvWNqbuZ9DX1z1Up0zTZ1ISm21
w4XMicd64ctuPVITBg7AWCWVU57lA6AdKtNE0rucC/U4T6QOZjHkM3JNAY0Vn+59
Y4o7P5AfQb5d7H7CRpPU3o7QjN/asZ/lIiFWhYdZ2RyUMAeSF/fSta2GNBcIBYx1
BROIloanxWHjy/3ZGW0bZ2qLCKZwIsl0TkmiBOcbcJhbIInkw22t5ulisAk9aUav
YWL162fuCDrq5uxTO8wopLBUijGUuDxP7tcu+IPQrR/mfxjUkFE0LVbgYtO1AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUe7VgME2kytWNpPUrXkQzsRAWMCIwHwYDVR0j
BBgwFoAUhRVNF+tWQgJ3oNbTFo7Ot7iM1lQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXU1cFZMVDNTd2FxdjNWdWpkNXIyaEpxc0FlRm52WWZpZXNVOEZTQ2U0
SFAvMC84NTE1NEQxN0VCNTY0MjAyNzdBMEQ2RDMxNjhFQ0VCN0I4OENENjU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1MTU0RDE3RUI1NjQyMDI3
N0EwRDZEMzE2OEVDRUI3Qjg4Q0Q2NTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V1NXBWTFQzU3dhcXYzVnVqZDVyMmhKcXNBZUZudllmaWVzVThGU0NlNEhQLzAv
MzIzODMwMzQzYTM1MzE2NDYzM2EzMTMwNjMzMDNhM2EyZjM0MzMyZDM0MzMyMDNk
M2UyMDMyMzYzODM0MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBSgEUdwQwDANBgkqhkiG9w0BAQsF
AAOCAQEAfhpDu2WB++EcD6Uus9fXGDE8sXlFEqnle0DM9nH9cE8OA0qb9VYgHhio
0gc6UuOn5yyJ4C8IujvkHuUCb3hTfV073wJXCOS0QHSgFNrx1PuZ6Z8QMxQs5Yfn
3HyhKK5E8dPMp/+HNk63IwfUP+GkXtElQ/Ly5O1F/yEv/E4BXIH/TwxNBmPoJ3PM
G1CvJPTMp80hkVYVDo6d0Ql3tBQ7qVwieukivi3sDw5RcohgtLYSccq7lCDpIMke
9sF4f2RbqB2KU0lHm6VooKsx/bDrARzE2rtp0lIyXfBFSdU7l2dIuRIefmJyClHP
Gtq9hD/l53cODhiGbwQUzTdYooRoLA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:48:49 2025 by rpki-client