Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a3a2f33322d3334203d3e20323731363837.roa
File:                     323830343a376636633a3a2f33322d3334203d3e20323731363837.roa (raw, json)
Hash identifier:          Uv3DT92+DMJoZcncaYgBVWNob87u50PZhGA2Otf5/wc=
Subject key identifier:   15:BB:D0:3C:EA:98:36:C7:3D:7E:79:5B:30:57:85:A3:33:36:A1:E6
Certificate issuer:       /CN=4C379380DB61C2A0DA301945FE3BE33A330017FE
Certificate serial:       3ED74D3EDD28CA36E70F2C340069F738ECCA2FAF
Authority key identifier: 4C:37:93:80:DB:61:C2:A0:DA:30:19:45:FE:3B:E3:3A:33:00:17:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C379380DB61C2A0DA301945FE3BE33A330017FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a3a2f33322d3334203d3e20323731363837.roa
Signing time:             Mon 11 Aug 2025 14:24:08 +0000
ROA not before:           Mon 11 Aug 2025 14:19:08 +0000
ROA not after:            Mon 10 Aug 2026 14:24:08 +0000
asID:                     271687
IP address blocks:        2804:7f6c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/4C379380DB61C2A0DA301945FE3BE33A330017FE.crl
                          rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/4C379380DB61C2A0DA301945FE3BE33A330017FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C379380DB61C2A0DA301945FE3BE33A330017FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 19:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d7:4d:3e:dd:28:ca:36:e7:0f:2c:34:00:69:f7:38:ec:ca:2f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C379380DB61C2A0DA301945FE3BE33A330017FE
        Validity
            Not Before: Aug 11 14:19:08 2025 GMT
            Not After : Aug 10 14:24:08 2026 GMT
        Subject: CN=15BBD03CEA9836C73D7E795B305785A33336A1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:4f:1f:d8:8a:6a:28:04:67:eb:b0:cf:3e:
                    91:41:92:15:02:b7:4d:30:13:45:13:3e:16:32:6f:
                    75:96:01:1d:84:ff:58:99:99:e0:65:a3:4d:37:12:
                    ce:16:59:2d:da:e8:01:9c:12:b2:69:49:2c:e1:8a:
                    58:cd:f2:cc:5d:35:57:39:eb:d9:df:5c:0d:ed:23:
                    32:20:fd:0f:1b:a0:12:68:79:68:7d:e1:28:cc:a5:
                    5a:14:71:51:ae:75:60:15:0b:cb:1a:9b:bf:ab:ed:
                    13:46:0e:c9:e3:e1:43:e5:9b:9e:89:98:4d:44:a0:
                    2f:f1:fb:c7:85:db:98:b0:6d:60:ec:d8:4a:68:6a:
                    77:33:f0:e1:06:45:b7:59:1e:fb:38:a0:7f:1b:5f:
                    10:60:33:d1:86:e6:b3:54:a1:e3:24:6e:15:82:83:
                    4f:3c:29:82:f2:65:07:9d:e8:56:73:7a:63:57:29:
                    b1:80:e6:39:bb:de:ee:a1:80:81:a4:4c:93:cb:23:
                    4a:b6:a7:18:d8:05:58:fe:49:52:e1:2d:b9:0c:2c:
                    44:87:b5:53:ed:0d:e3:0b:a3:c7:81:5a:59:c1:83:
                    30:db:17:89:37:bd:e1:4c:81:7d:27:66:c3:f3:c4:
                    67:4a:04:fb:e9:b1:a5:05:5c:98:e5:d4:cf:29:e0:
                    e1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BB:D0:3C:EA:98:36:C7:3D:7E:79:5B:30:57:85:A3:33:36:A1:E6
            X509v3 Authority Key Identifier:
                keyid:4C:37:93:80:DB:61:C2:A0:DA:30:19:45:FE:3B:E3:3A:33:00:17:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/4C379380DB61C2A0DA301945FE3BE33A330017FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C379380DB61C2A0DA301945FE3BE33A330017FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a3a2f33322d3334203d3e20323731363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:36:66:20:62:15:64:12:2f:b0:e9:07:5c:43:ed:f5:4a:93:
         d0:e1:f8:0f:63:24:99:96:22:6c:5a:31:34:61:b2:cf:e9:75:
         c4:84:69:57:8e:00:85:4a:21:7b:c8:61:77:a0:ed:0a:f9:28:
         c4:49:20:42:77:e6:5d:ec:6b:33:93:38:1c:63:66:d8:6a:58:
         ef:f8:9f:6d:74:ef:c9:f8:7a:5a:61:07:59:21:92:f8:3d:ec:
         95:e9:de:d8:62:60:9c:76:de:04:9f:4d:62:e5:28:f6:2c:f1:
         e7:74:e8:8f:1f:23:71:f7:94:66:a6:3f:0c:83:cd:f5:b5:67:
         f6:8a:18:bc:0e:19:3a:13:05:d9:80:58:58:24:d5:f9:32:27:
         34:cb:0a:c6:f4:0f:a5:b8:6f:0d:a5:16:d1:5e:3b:86:aa:26:
         f5:09:aa:be:b8:a5:77:75:12:62:22:e5:f4:73:70:0a:28:01:
         70:64:c0:8f:54:08:72:2d:75:0f:25:a6:e0:50:00:1a:c6:d1:
         97:31:71:4e:32:76:bf:54:22:f2:16:25:35:46:ef:2f:28:4c:
         a0:ed:91:b2:82:7d:8f:d8:fe:a2:b8:a0:0d:16:c1:25:2e:1e:
         eb:ca:ae:47:45:cc:0a:0f:f7:9d:be:9f:7d:be:d5:4d:15:63:
         ae:3c:7b:d8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPtdNPt0oyjbnDyw0AGn3OOzKL68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMzNzkzODBEQjYxQzJBMERBMzAxOTQ1RkUzQkUzM0Ez
MzAwMTdGRTAeFw0yNTA4MTExNDE5MDhaFw0yNjA4MTAxNDI0MDhaMDMxMTAvBgNV
BAMTKDE1QkJEMDNDRUE5ODM2QzczRDdFNzk1QjMwNTc4NUEzMzMzNkExRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqz08f2IpqKARn67DPPpFBkhUC
t00wE0UTPhYyb3WWAR2E/1iZmeBlo003Es4WWS3a6AGcErJpSSzhiljN8sxdNVc5
69nfXA3tIzIg/Q8boBJoeWh94SjMpVoUcVGudWAVC8sam7+r7RNGDsnj4UPlm56J
mE1EoC/x+8eF25iwbWDs2Epoancz8OEGRbdZHvs4oH8bXxBgM9GG5rNUoeMkbhWC
g088KYLyZQed6FZzemNXKbGA5jm73u6hgIGkTJPLI0q2pxjYBVj+SVLhLbkMLESH
tVPtDeMLo8eBWlnBgzDbF4k3veFMgX0nZsPzxGdKBPvpsaUFXJjl1M8p4OHhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUFbvQPOqYNsc9fnlbMFeFozM2oeYwHwYDVR0j
BBgwFoAUTDeTgNthwqDaMBlF/jvjOjMAF/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjJQdnRYcFF1dFJLdnhrVVk4WTdla3FpWDNNSHprUGJtOVdDRmpvV1d4
REsvMC80QzM3OTM4MERCNjFDMkEwREEzMDE5NDVGRTNCRTMzQTMzMDAxN0ZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDMzc5MzgwREI2MUMyQTBE
QTMwMTk0NUZFM0JFMzNBMzMwMDE3RkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIyUHZ0WHBRdXRSS3Z4a1VZOFk3ZWtxaVgzTUh6a1BibTlXQ0Zqb1dXeERLLzAv
MzIzODMwMzQzYTM3NjYzNjYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMx
MzYzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR/bDANBgkqhkiG9w0BAQsFAAOCAQEAHTZmIGIV
ZBIvsOkHXEPt9UqT0OH4D2MkmZYibFoxNGGyz+l1xIRpV44AhUohe8hhd6DtCvko
xEkgQnfmXexrM5M4HGNm2GpY7/ifbXTvyfh6WmEHWSGS+D3slene2GJgnHbeBJ9N
YuUo9izx53Tojx8jcfeUZqY/DIPN9bVn9ooYvA4ZOhMF2YBYWCTV+TInNMsKxvQP
pbhvDaUW0V47hqom9Qmqvrild3USYiLl9HNwCigBcGTAj1QIci11DyWm4FAAGsbR
lzFxTjJ2v1Qi8hYlNUbvLyhMoO2RsoJ9j9j+origDRbBJS4e68quR0XMCg/3nb6f
fb7VTRVjrjx72A==
-----END CERTIFICATE-----
Generated at Wed Aug 20 22:21:57 2025 by rpki-client