Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa
File:                     323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa (raw, json)
Hash identifier:          WZr+/Q54cg2mZtFayzv8bTTykV+0uhwUu5vv3XCe91s=
Subject key identifier:   DB:7F:FE:22:47:2F:12:5D:F4:B7:5D:CD:04:5A:50:B2:3F:F3:B9:A2
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       2D60DF02DB4ED9EA44D839CB29A0F014F00A42F6
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa
Signing time:             Mon 14 Jul 2025 18:00:00 +0000
ROA not before:           Mon 14 Jul 2025 17:55:00 +0000
ROA not after:            Mon 13 Jul 2026 18:00:00 +0000
asID:                     267121
IP address blocks:        2804:4870:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 02:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:60:df:02:db:4e:d9:ea:44:d8:39:cb:29:a0:f0:14:f0:0a:42:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Jul 14 17:55:00 2025 GMT
            Not After : Jul 13 18:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d7:6f:6c:6d:5f:ae:75:0c:f2:45:ba:be:0b:
                    db:04:9a:07:27:7e:12:aa:0c:14:bb:3e:82:f2:5d:
                    f6:5a:89:10:f2:16:75:b0:85:9f:a6:ab:7d:f6:0b:
                    ae:bf:44:5d:c3:ca:b8:9b:5e:e0:f2:e9:7f:15:39:
                    61:cc:cb:fe:ef:bc:19:45:4a:7a:56:53:60:49:54:
                    bf:e6:7f:74:e5:b0:dd:b0:ed:80:17:32:ea:71:43:
                    c8:cd:3b:4f:81:2c:0e:16:ff:1d:7c:c3:89:7a:91:
                    60:4a:49:ff:64:cc:b3:3b:d6:f0:57:f8:7e:b9:fe:
                    c6:6f:de:a5:3c:68:5e:91:0e:48:99:be:c9:1d:e6:
                    b7:2c:1d:b1:4b:43:3c:af:2f:a5:6b:0b:1f:97:82:
                    1b:ac:b9:a0:a1:1c:48:d7:75:6b:11:99:31:ff:d7:
                    e4:92:33:7b:22:61:9c:42:14:d0:57:a6:cb:24:c2:
                    22:df:27:17:26:b7:37:04:4a:5b:2a:f0:a6:79:5a:
                    39:3f:4b:76:ce:c4:02:fe:fa:8f:ba:d6:5b:c3:48:
                    4b:84:d3:6a:91:5d:bc:4e:f6:4c:19:10:fe:88:fc:
                    7f:cf:76:69:7e:37:cf:d1:53:88:fa:ba:42:4b:33:
                    29:f6:f0:21:8f:c0:1a:e8:23:3c:ff:61:5d:0d:64:
                    5d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7F:FE:22:47:2F:12:5D:F4:B7:5D:CD:04:5A:50:B2:3F:F3:B9:A2
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:78:d8:85:83:6d:ab:83:3a:e1:41:d0:7d:d3:66:a5:64:24:
         8b:57:08:b7:93:ba:71:71:f4:3a:bb:0f:6d:12:ac:1c:29:9c:
         c2:27:f8:e3:39:6f:6f:ac:04:27:e5:c8:25:4f:18:b7:e9:e7:
         4e:0d:ac:21:5b:46:8e:37:df:b8:bd:3f:5e:71:1a:bc:83:46:
         91:f8:21:55:5d:41:12:5c:fe:b8:d7:35:4b:56:8d:d9:84:ab:
         f8:9c:e4:f3:8f:b3:1e:88:3d:6b:2e:c3:a6:57:75:3b:92:d6:
         2c:48:56:61:b7:74:c6:bd:42:72:d7:32:3d:5f:b0:33:7f:31:
         fe:4c:d8:39:ac:a8:f0:32:60:e5:2a:9d:35:b9:73:c8:80:5e:
         23:2a:2c:7b:df:4c:84:73:e1:94:26:97:61:41:e2:67:e3:61:
         dd:94:c9:2d:fc:44:bc:41:e6:c6:c8:af:04:92:d5:d7:76:0f:
         dd:e0:47:87:0b:bc:0e:e1:c2:f1:00:a6:d3:e2:44:35:ef:b2:
         a9:5e:84:cb:78:7b:38:25:91:77:24:da:8f:d2:f0:69:fb:5d:
         b5:be:6e:a8:8f:ed:d3:e4:a8:e6:b4:97:3d:1e:b1:20:9a:66:
         58:97:11:2b:09:d7:84:88:f0:c0:c1:ed:c3:ad:9c:4c:dc:a5:
         35:d5:bd:70
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIULWDfAttO2epE2DnLKaDwFPAKQvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTkyODZDMDk1RDAxMDQ5NEJCQUJFQTIyQzlBRUM5NDg3
NEU0RjNDMDAeFw0yNTA3MTQxNzU1MDBaFw0yNjA3MTMxODAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDFENzZGNkM2RDVGQUU3NTBD
RjI0NUJBQkUwQkRCMDQ5QTA3Mjc3RTEyQUEwQzE0QkIzRTgyRjI1REY2NUE4OTEw
RjIxNjc1QjA4NTlGQTZBQjdERjYwQkFFQkY0NDVEQzNDQUI4OUI1RUUwRjJFOTdG
MTUzOTYxQ0NDQkZFRUZCQzE5NDU0QTdBNTY1MzYwNDk1NEJGRTY3Rjc0RTVCMERE
QjBFRDgwMTczMkVBNzE0M0M4Q0QzQjRGODEyQzBFMTZGRjFEN0NDMzg5N0E5MTYw
NEE0OUZGNjRDQ0IzM0JENkYwNTdGODdFQjlGRUM2NkZERUE1M0M2ODVFOTEwRTQ4
OTlCRUM5MURFNkI3MkMxREIxNEI0MzNDQUYyRkE1NkIwQjFGOTc4MjFCQUNCOUEw
QTExQzQ4RDc3NTZCMTE5OTMxRkZEN0U0OTIzMzdCMjI2MTlDNDIxNEQwNTdBNkNC
MjRDMjIyREYyNzE3MjZCNzM3MDQ0QTVCMkFGMEE2Nzk1QTM5M0Y0Qjc2Q0VDNDAy
RkVGQThGQkFENjVCQzM0ODRCODREMzZBOTE1REJDNEVGNjRDMTkxMEZFODhGQzdG
Q0Y3NjY5N0UzN0NGRDE1Mzg4RkFCQTQyNEIzMzI5RjZGMDIxOEZDMDFBRTgyMzND
RkY2MTVEMEQ2NDVENTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0ddvbG1frnUM8kW6vgvbBJoHJ34SqgwUuz6C8l32WokQ8hZ1sIWf
pqt99guuv0Rdw8q4m17g8ul/FTlhzMv+77wZRUp6VlNgSVS/5n905bDdsO2AFzLq
cUPIzTtPgSwOFv8dfMOJepFgSkn/ZMyzO9bwV/h+uf7Gb96lPGhekQ5Imb7JHea3
LB2xS0M8ry+lawsfl4IbrLmgoRxI13VrEZkx/9fkkjN7ImGcQhTQV6bLJMIi3ycX
Jrc3BEpbKvCmeVo5P0t2zsQC/vqPutZbw0hLhNNqkV28TvZMGRD+iPx/z3ZpfjfP
0VOI+rpCSzMp9vAhj8Aa6CM8/2FdDWRdWQIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FNt//iJHLxJd9LddzQRaULI/87miMB8GA1UdIwQYMBaAFFkobAldAQSUu6vqIsmu
yUh05PPAMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8velRhbXhtaUhtVmQzR2FX
MkFLMmtrb1dheUNINmVRU1c0dERNUFJKNWE4Ny8xLzU5Mjg2QzA5NUQwMTA0OTRC
QkFCRUEyMkM5QUVDOTQ4NzRFNEYzQzAuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzEvNTkyODZDMDk1RDAxMDQ5NEJCQUJFQTIyQzlBRUM5NDg3NEU0RjND
MC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8velRhbXhtaUhtVmQzR2FXMkFLMmtr
b1dheUNINmVRU1c0dERNUFJKNWE4Ny8xLzMyMzgzMDM0M2EzNDM4MzczMDNhMzIz
MDMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjM2MzczMTMyMzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAoBEhwIDANBgkqhkiG9w0BAQsFAAOCAQEAk3jYhYNtq4M64UHQfdNmpWQk
i1cIt5O6cXH0OrsPbRKsHCmcwif44zlvb6wEJ+XIJU8Yt+nnTg2sIVtGjjffuL0/
XnEavINGkfghVV1BElz+uNc1S1aN2YSr+Jzk84+zHog9ay7Dpld1O5LWLEhWYbd0
xr1CctcyPV+wM38x/kzYOayo8DJg5SqdNblzyIBeIyose99MhHPhlCaXYUHiZ+Nh
3ZTJLfxEvEHmxsivBJLV13YP3eBHhwu8DuHC8QCm0+JENe+yqV6Ey3h7OCWRdyTa
j9Lwaftdtb5uqI/t0+So5rSXPR6xIJpmWJcRKwnXhIjwwMHtw62cTNylNdW9cA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:41:22 2025 by rpki-client