Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/323830343a393438383a3a2f33322d3332203d3e20323734343634.roa
File:                     323830343a393438383a3a2f33322d3332203d3e20323734343634.roa (raw, json)
Hash identifier:          HNyCKLtQyKMrB2hOlGlWmMGuBiUrLZLcm+3DrSP454w=
Subject key identifier:   74:B5:52:C7:F4:FD:5A:F0:72:4B:55:02:E4:FB:70:19:EF:C0:85:EC
Certificate issuer:       /CN=7CE8D51B5AEAAAC8FF8520071EBAC576BC689F96
Certificate serial:       26EBF17A1F59BBE9493248C17487BDF212A2E364
Authority key identifier: 7C:E8:D5:1B:5A:EA:AA:C8:FF:85:20:07:1E:BA:C5:76:BC:68:9F:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CE8D51B5AEAAAC8FF8520071EBAC576BC689F96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/323830343a393438383a3a2f33322d3332203d3e20323734343634.roa
Signing time:             Thu 11 Sep 2025 20:13:03 +0000
ROA not before:           Thu 11 Sep 2025 20:08:03 +0000
ROA not after:            Thu 10 Sep 2026 20:13:03 +0000
asID:                     274464
IP address blocks:        2804:9488::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/7CE8D51B5AEAAAC8FF8520071EBAC576BC689F96.crl
                          rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/7CE8D51B5AEAAAC8FF8520071EBAC576BC689F96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CE8D51B5AEAAAC8FF8520071EBAC576BC689F96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:eb:f1:7a:1f:59:bb:e9:49:32:48:c1:74:87:bd:f2:12:a2:e3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE8D51B5AEAAAC8FF8520071EBAC576BC689F96
        Validity
            Not Before: Sep 11 20:08:03 2025 GMT
            Not After : Sep 10 20:13:03 2026 GMT
        Subject: CN=74B552C7F4FD5AF0724B5502E4FB7019EFC085EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:86:bd:b4:da:9a:61:4b:4c:41:7f:16:30:
                    1d:0f:e3:32:bb:d8:28:11:f0:a6:3d:7e:64:71:fe:
                    67:9a:2d:d1:9f:28:cf:06:c5:07:35:db:0b:17:9c:
                    d8:70:6b:c0:b4:01:5e:27:a4:b6:00:11:69:27:04:
                    5e:f8:2f:bd:32:79:b0:30:c4:4c:5c:8a:13:ca:20:
                    60:37:54:85:5d:6b:fb:ed:03:8c:f8:35:6b:bb:3c:
                    24:44:2f:45:7a:a8:bc:9b:8b:8e:b4:60:18:8f:1b:
                    aa:f8:8f:85:bd:45:1f:be:e3:29:9b:82:96:1e:d8:
                    ff:3f:e1:50:b5:a6:ed:56:63:7e:71:db:e9:09:eb:
                    0f:ea:27:4b:c7:37:31:97:62:ea:73:23:c2:6b:cd:
                    cc:cc:27:f9:b5:c5:6e:b2:e7:eb:f0:9a:ea:9e:3a:
                    8e:ee:d6:7c:3b:51:e5:5c:b4:b3:16:1f:9d:b5:f8:
                    66:4f:d6:c5:77:70:7c:aa:ee:fa:10:b2:53:9e:bc:
                    7d:7c:b0:d8:dd:f1:71:8c:f8:33:44:d0:a4:e9:96:
                    d9:7b:7d:56:e0:7b:8e:7e:a0:7c:4e:50:c4:8e:ed:
                    b5:15:42:ed:d0:92:7e:91:a5:29:b2:40:30:31:86:
                    c1:e9:18:af:e3:1c:62:27:d9:65:06:a8:d1:4f:cd:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B5:52:C7:F4:FD:5A:F0:72:4B:55:02:E4:FB:70:19:EF:C0:85:EC
            X509v3 Authority Key Identifier:
                keyid:7C:E8:D5:1B:5A:EA:AA:C8:FF:85:20:07:1E:BA:C5:76:BC:68:9F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/7CE8D51B5AEAAAC8FF8520071EBAC576BC689F96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CE8D51B5AEAAAC8FF8520071EBAC576BC689F96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jWWE4B8LPPCpMWMHLm91DNZ7pChw9ZASH1CYM4NKKkL/0/323830343a393438383a3a2f33322d3332203d3e20323734343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9488::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:5b:2a:e4:f1:96:08:ef:df:3b:08:22:90:58:d8:a4:4a:48:
         44:ab:a3:c1:24:5f:26:68:a9:fc:a4:27:59:30:b2:f4:81:f6:
         8f:be:25:9f:64:e9:7d:c1:43:13:9c:36:05:a0:9e:08:20:cb:
         be:dc:f4:46:12:ab:72:c2:77:9b:65:71:ce:f0:7d:0b:2b:39:
         da:66:35:d2:98:fa:65:07:65:af:0f:0d:b7:13:87:7a:b0:40:
         75:d5:b1:67:93:8c:98:a3:e1:34:5c:fb:ac:1b:f5:4a:2f:4a:
         dd:6c:d6:88:56:38:f0:39:24:d5:c0:eb:1a:54:c4:c0:ad:40:
         f4:9c:1a:94:8b:66:3a:0f:d2:18:f7:b4:5f:04:e0:b7:dd:ba:
         3c:08:3f:4b:2c:4b:a8:a3:e3:13:1d:2f:46:31:b8:50:1e:78:
         e8:8d:e7:71:dc:4c:47:67:67:60:c3:02:ab:42:47:45:ac:0b:
         b3:87:91:a8:81:3a:6a:89:e1:1a:ca:51:3a:53:c2:82:b5:a3:
         3e:fd:26:23:38:c5:df:18:e0:bc:15:1f:4d:94:a0:84:62:fb:
         ff:db:a9:90:01:1c:f5:a1:ec:e4:f7:77:81:22:4d:cf:e5:85:
         cd:79:42:58:71:60:c5:5d:66:97:f3:cc:3b:f9:c6:3c:14:69:
         5e:c8:75:25
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJuvxeh9Zu+lJMkjBdIe98hKi42QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NFOEQ1MUI1QUVBQUFDOEZGODUyMDA3MUVCQUM1NzZC
QzY4OUY5NjAeFw0yNTA5MTEyMDA4MDNaFw0yNjA5MTAyMDEzMDNaMDMxMTAvBgNV
BAMTKDc0QjU1MkM3RjRGRDVBRjA3MjRCNTUwMkU0RkI3MDE5RUZDMDg1RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW44a9tNqaYUtMQX8WMB0P4zK7
2CgR8KY9fmRx/meaLdGfKM8GxQc12wsXnNhwa8C0AV4npLYAEWknBF74L70yebAw
xExcihPKIGA3VIVda/vtA4z4NWu7PCREL0V6qLybi460YBiPG6r4j4W9RR++4ymb
gpYe2P8/4VC1pu1WY35x2+kJ6w/qJ0vHNzGXYupzI8JrzczMJ/m1xW6y5+vwmuqe
Oo7u1nw7UeVctLMWH521+GZP1sV3cHyq7voQslOevH18sNjd8XGM+DNE0KTpltl7
fVbge45+oHxOUMSO7bUVQu3Qkn6RpSmyQDAxhsHpGK/jHGIn2WUGqNFPzfDnAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUdLVSx/T9WvByS1UC5PtwGe/AhewwHwYDVR0j
BBgwFoAUfOjVG1rqqsj/hSAHHrrFdrxon5YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2pXV0U0QjhMUFBDcE1XTUhMbTkxRE5aN3BDaHc5WkFTSDFDWU00TktL
a0wvMC83Q0U4RDUxQjVBRUFBQUM4RkY4NTIwMDcxRUJBQzU3NkJDNjg5Rjk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRThENTFCNUFFQUFBQzhG
Rjg1MjAwNzFFQkFDNTc2QkM2ODlGOTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNqV1dFNEI4TFBQQ3BNV01ITG05MUROWjdwQ2h3OVpBU0gxQ1lNNE5LS2tMLzAv
MzIzODMwMzQzYTM5MzQzODM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzM0
MzQzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASUiDANBgkqhkiG9w0BAQsFAAOCAQEAsVsq5PGW
CO/fOwgikFjYpEpIRKujwSRfJmip/KQnWTCy9IH2j74ln2TpfcFDE5w2BaCeCCDL
vtz0RhKrcsJ3m2VxzvB9Cys52mY10pj6ZQdlrw8NtxOHerBAddWxZ5OMmKPhNFz7
rBv1Si9K3WzWiFY48Dkk1cDrGlTEwK1A9JwalItmOg/SGPe0XwTgt926PAg/SyxL
qKPjEx0vRjG4UB546I3ncdxMR2dnYMMCq0JHRawLs4eRqIE6aonhGspROlPCgrWj
Pv0mIzjF3xjgvBUfTZSghGL7/9upkAEc9aHs5Pd3gSJNz+WFzXlCWHFgxV1ml/PM
O/nGPBRpXsh1JQ==
-----END CERTIFICATE-----
Generated at Fri Sep 19 07:46:36 2025 by rpki-client