Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/323830343a326635633a3a2f33322d3332203d3e20323634383836.roa
File:                     323830343a326635633a3a2f33322d3332203d3e20323634383836.roa (raw, json)
Hash identifier:          U7Fi83OtEplHzns2oD2Hh+s6/kT6Yq/unz43USIFpcY=
Subject key identifier:   E2:58:47:02:6C:71:F1:4A:E6:E8:37:C3:79:C2:EC:19:16:68:8D:0D
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       320C3823D0A21CFAE47613D96A55B0BC094122BE
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/323830343a326635633a3a2f33322d3332203d3e20323634383836.roa
Signing time:             Thu 17 Jul 2025 18:32:19 +0000
ROA not before:           Thu 17 Jul 2025 18:27:19 +0000
ROA not after:            Thu 16 Jul 2026 18:32:19 +0000
asID:                     264886
IP address blocks:        2804:2f5c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 21:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0c:38:23:d0:a2:1c:fa:e4:76:13:d9:6a:55:b0:bc:09:41:22:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Jul 17 18:27:19 2025 GMT
            Not After : Jul 16 18:32:19 2026 GMT
        Subject: CN=E25847026C71F14AE6E837C379C2EC1916688D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:87:2c:a0:43:37:84:a6:6a:79:9d:20:9b:
                    10:60:fc:ca:c0:67:65:c6:41:67:7b:fd:12:44:9b:
                    31:33:70:f0:00:35:72:fa:e2:04:69:5c:2e:5a:24:
                    82:e1:8f:bf:44:c0:6a:09:2a:2a:2a:6e:8a:0c:36:
                    60:90:e2:65:85:73:bd:df:55:4d:9e:3d:fc:8f:98:
                    d4:da:33:17:af:fe:d3:c8:6b:33:94:7d:f6:3b:57:
                    57:e4:c3:b8:20:32:9c:8d:87:e6:15:5f:84:27:46:
                    07:2a:df:e2:32:a1:70:5b:58:3e:fb:2c:fe:c1:4f:
                    63:9b:8a:2e:d7:76:a5:23:61:48:3e:77:f8:3f:4a:
                    04:19:9b:17:aa:01:08:c8:66:0f:56:e3:79:1f:99:
                    d1:7d:f1:6f:d9:ba:f5:58:70:94:15:fe:b8:d4:a8:
                    90:dd:5a:56:8e:55:3f:f8:41:46:04:49:72:4a:6a:
                    b5:18:1d:50:51:de:90:c7:a9:21:98:ee:59:74:7b:
                    6e:96:dc:da:8f:a3:2c:6a:dd:68:f3:0f:ea:de:53:
                    50:17:d7:56:7a:2a:35:4e:c5:9f:44:91:cf:c0:44:
                    1b:a1:96:94:40:af:5f:31:5a:cd:78:0b:58:60:5a:
                    69:0c:36:0c:37:af:2b:08:8a:8b:cf:d9:47:93:04:
                    64:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:58:47:02:6C:71:F1:4A:E6:E8:37:C3:79:C2:EC:19:16:68:8D:0D
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/323830343a326635633a3a2f33322d3332203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:ea:fe:28:58:5e:22:86:7d:94:4b:d4:5c:c5:36:9f:96:8b:
         90:7e:ac:8a:97:d5:e9:f8:d9:d4:24:ba:02:e5:24:59:ae:68:
         ae:8e:b7:1f:8b:8f:00:5e:67:6a:c6:2f:d1:b3:71:4e:45:16:
         77:fe:86:f7:25:0b:48:e4:f1:28:6e:06:35:90:b4:36:44:0f:
         de:0d:1f:2e:b6:ae:54:0a:cb:5e:7c:c7:1a:dd:95:47:5f:dd:
         4e:7e:a2:4b:98:26:b8:2e:06:0f:e3:df:67:24:1a:20:10:f7:
         b6:64:63:cd:a7:7b:5a:e9:fc:e0:1b:48:4d:6e:70:fe:45:08:
         52:3b:31:5e:a6:dd:a0:93:d6:a7:01:21:14:54:28:8a:02:a9:
         2d:45:63:72:62:00:c8:dd:ee:8e:16:35:10:2d:69:78:85:6c:
         46:50:2a:bb:18:a2:98:1d:46:31:cb:ba:ad:61:dc:80:82:e3:
         99:70:3f:74:f3:ee:aa:b6:66:13:f3:c6:7d:b1:f0:eb:2d:ab:
         e5:03:8a:7e:0e:08:3b:3b:3c:5f:f8:08:b3:d5:63:3f:d6:38:
         ad:74:20:61:1e:b1:3c:92:0f:ac:e0:30:33:a1:1c:e8:e0:45:
         d4:da:12:28:d3:26:8b:de:c6:e1:a9:f1:14:03:b6:7c:26:c4:
         f3:ce:50:ec
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMgw4I9CiHPrkdhPZalWwvAlBIr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJB
ODlDMkQxQTAeFw0yNTA3MTcxODI3MTlaFw0yNjA3MTYxODMyMTlaMDMxMTAvBgNV
BAMTKEUyNTg0NzAyNkM3MUYxNEFFNkU4MzdDMzc5QzJFQzE5MTY2ODhEMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36IcsoEM3hKZqeZ0gmxBg/MrA
Z2XGQWd7/RJEmzEzcPAANXL64gRpXC5aJILhj79EwGoJKioqbooMNmCQ4mWFc73f
VU2ePfyPmNTaMxev/tPIazOUffY7V1fkw7ggMpyNh+YVX4QnRgcq3+IyoXBbWD77
LP7BT2Obii7XdqUjYUg+d/g/SgQZmxeqAQjIZg9W43kfmdF98W/ZuvVYcJQV/rjU
qJDdWlaOVT/4QUYESXJKarUYHVBR3pDHqSGY7ll0e26W3NqPoyxq3WjzD+reU1AX
11Z6KjVOxZ9Ekc/ARBuhlpRAr18xWs14C1hgWmkMNgw3rysIiovP2UeTBGSdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU4lhHAmxx8Urm6DfDecLsGRZojQ0wHwYDVR0j
BBgwFoAULBzJQ1N+cqpZm8m5QPsYC6icLRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzEvMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJBODlDMkQxQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzFDQzk0MzUzN0U3MkFBNTk5
QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h
ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzEvMzIz
ODMwMzQzYTMyNjYzNTYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0Mzgz
ODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQvXDANBgkqhkiG9w0BAQsFAAOCAQEAKur+KFheIoZ9
lEvUXMU2n5aLkH6sipfV6fjZ1CS6AuUkWa5oro63H4uPAF5nasYv0bNxTkUWd/6G
9yULSOTxKG4GNZC0NkQP3g0fLrauVArLXnzHGt2VR1/dTn6iS5gmuC4GD+PfZyQa
IBD3tmRjzad7Wun84BtITW5w/kUIUjsxXqbdoJPWpwEhFFQoigKpLUVjcmIAyN3u
jhY1EC1peIVsRlAquxiimB1GMcu6rWHcgILjmXA/dPPuqrZmE/PGfbHw6y2r5QOK
fg4IOzs8X/gIs9VjP9Y4rXQgYR6xPJIPrOAwM6Ec6OBF1NoSKNMmi97G4anxFAO2
fCbE885Q7A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:59:04 2025 by rpki-client