Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a3a2f33322d313238203d3e20323632343934.roa
File:                     323830343a343637383a3a2f33322d313238203d3e20323632343934.roa (raw, json)
Hash identifier:          GcBtFdtcomt2nkmaR/7bh1O7mvVtTZK+QflWopBC5qY=
Subject key identifier:   55:A2:70:12:A1:12:63:C0:74:02:B8:73:E9:DF:C9:ED:5E:CF:B8:40
Certificate issuer:       /CN=A1993066E677A42B98C3789A27BFCEA7A489E2FB
Certificate serial:       6D240B425E7AB1F2F2330D7850AC52CD80173ACD
Authority key identifier: A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a3a2f33322d313238203d3e20323632343934.roa
Signing time:             Mon 04 Aug 2025 20:22:00 +0000
ROA not before:           Mon 04 Aug 2025 20:17:00 +0000
ROA not after:            Mon 03 Aug 2026 20:22:00 +0000
asID:                     262494
IP address blocks:        2804:4678::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.crl
                          rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 20:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:24:0b:42:5e:7a:b1:f2:f2:33:0d:78:50:ac:52:cd:80:17:3a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1993066E677A42B98C3789A27BFCEA7A489E2FB
        Validity
            Not Before: Aug  4 20:17:00 2025 GMT
            Not After : Aug  3 20:22:00 2026 GMT
        Subject: CN=55A27012A11263C07402B873E9DFC9ED5ECFB840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:85:ad:ab:98:20:21:37:09:2e:cd:56:06:
                    62:65:3d:a6:41:b5:3d:39:7e:31:bf:fd:11:8c:e5:
                    84:72:81:42:f9:83:1d:fa:b8:2b:fb:be:79:47:6a:
                    24:e8:6c:6e:a3:a4:5f:fe:c7:77:62:03:cc:2a:3c:
                    ad:da:17:9a:80:54:b0:db:96:e9:77:69:4f:98:8c:
                    9e:4a:b6:07:63:8e:71:16:4b:a4:b7:60:f0:ac:3b:
                    26:97:0f:b8:76:ff:15:20:9f:39:cf:48:dc:b8:dc:
                    25:45:15:f6:c8:a9:dc:61:94:ea:53:24:75:f9:ba:
                    83:55:61:20:06:b2:ee:20:f5:51:8d:5a:ba:b9:b5:
                    4e:cb:a0:7f:b4:b2:55:14:55:7b:dc:b0:47:da:55:
                    e1:3d:9e:d5:c5:d9:fe:db:f0:0c:94:47:ce:c4:5f:
                    71:82:e1:6d:97:87:3c:ed:de:a5:76:44:8b:22:90:
                    e6:8a:40:b6:24:70:93:80:de:8d:77:87:b1:01:01:
                    8e:2e:cb:0f:e7:8e:36:17:c2:e8:f0:ea:5d:c1:c3:
                    68:83:be:3c:81:96:b8:ea:c3:5c:a4:78:39:99:fb:
                    a8:84:83:47:0d:a0:ae:de:b2:3f:7e:aa:b5:d8:37:
                    ae:86:5c:cf:55:20:4e:9c:b9:f4:56:8b:38:0c:6e:
                    e1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A2:70:12:A1:12:63:C0:74:02:B8:73:E9:DF:C9:ED:5E:CF:B8:40
            X509v3 Authority Key Identifier:
                keyid:A1:99:30:66:E6:77:A4:2B:98:C3:78:9A:27:BF:CE:A7:A4:89:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/A1993066E677A42B98C3789A27BFCEA7A489E2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1993066E677A42B98C3789A27BFCEA7A489E2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a343637383a3a2f33322d313238203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4678::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:41:5e:6b:53:12:ca:f0:a2:37:e7:9c:98:ce:d3:7f:79:04:
         07:84:99:5c:87:1a:89:af:b1:f5:c8:81:dc:f3:5f:53:25:4b:
         4b:9f:52:75:1c:df:6e:cd:34:d1:85:b2:1e:2c:25:43:10:55:
         94:44:9c:69:77:b2:34:5e:83:18:0e:9b:11:86:7f:96:12:ad:
         9f:fa:b6:aa:f1:76:12:ef:11:c0:2a:b1:98:e3:ef:ae:78:f5:
         c9:63:49:44:10:a4:79:ee:84:f1:b7:c1:20:67:49:07:e8:c6:
         16:8b:a2:7a:20:a5:61:65:1a:d4:e0:41:b1:0b:34:45:24:54:
         3d:55:d3:3c:e6:40:ce:e9:bc:42:56:cd:bf:dd:e7:b0:c1:97:
         ea:37:ad:96:1c:4b:cb:6d:fe:ff:a3:93:71:66:ad:df:ff:4d:
         b5:dd:c2:ef:ea:bc:e3:b1:17:d8:eb:e1:12:cc:6b:b1:b0:15:
         d9:30:10:a4:48:d1:d1:5b:8d:0f:83:31:e5:5c:d1:df:89:9d:
         0c:9e:7e:a9:6d:d1:66:c3:e5:c9:bb:6c:94:05:bc:29:77:ab:
         1f:bf:f8:23:d4:c5:c5:b1:66:78:d7:34:3e:f6:47:09:2b:c3:
         6d:3a:be:94:d6:4f:2b:5f:fc:7e:63:6f:2c:5e:90:58:ff:7a:
         2d:01:ab:2f
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUbSQLQl56sfLyMw14UKxSzYAXOs0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5OTMwNjZFNjc3QTQyQjk4QzM3ODlBMjdCRkNFQTdB
NDg5RTJGQjAeFw0yNTA4MDQyMDE3MDBaFw0yNjA4MDMyMDIyMDBaMDMxMTAvBgNV
BAMTKDU1QTI3MDEyQTExMjYzQzA3NDAyQjg3M0U5REZDOUVENUVDRkI4NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQaYWtq5ggITcJLs1WBmJlPaZB
tT05fjG//RGM5YRygUL5gx36uCv7vnlHaiTobG6jpF/+x3diA8wqPK3aF5qAVLDb
lul3aU+YjJ5KtgdjjnEWS6S3YPCsOyaXD7h2/xUgnznPSNy43CVFFfbIqdxhlOpT
JHX5uoNVYSAGsu4g9VGNWrq5tU7LoH+0slUUVXvcsEfaVeE9ntXF2f7b8AyUR87E
X3GC4W2Xhzzt3qV2RIsikOaKQLYkcJOA3o13h7EBAY4uyw/njjYXwujw6l3Bw2iD
vjyBlrjqw1ykeDmZ+6iEg0cNoK7esj9+qrXYN66GXM9VIE6cufRWizgMbuHlAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUVaJwEqESY8B0Arhz6d/J7V7PuEAwHwYDVR0j
BBgwFoAUoZkwZuZ3pCuYw3iaJ7/Op6SJ4vswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDdXZDQ4VXVNdWVVQ3ViVHFRWkx3ajdFTTZVaHl1cE5zNTZrUmNXWHNF
SkMvMC9BMTk5MzA2NkU2NzdBNDJCOThDMzc4OUEyN0JGQ0VBN0E0ODlFMkZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExOTkzMDY2RTY3N0E0MkI5
OEMzNzg5QTI3QkZDRUE3QTQ4OUUyRkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ3V2Q0OFV1TXVlVUN1YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAv
MzIzODMwMzQzYTM0MzYzNzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzIzNDM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEZ4MA0GCSqGSIb3DQEBCwUAA4IBAQBnQV5r
UxLK8KI355yYztN/eQQHhJlchxqJr7H1yIHc819TJUtLn1J1HN9uzTTRhbIeLCVD
EFWURJxpd7I0XoMYDpsRhn+WEq2f+raq8XYS7xHAKrGY4++uePXJY0lEEKR57oTx
t8EgZ0kH6MYWi6J6IKVhZRrU4EGxCzRFJFQ9VdM85kDO6bxCVs2/3eewwZfqN62W
HEvLbf7/o5NxZq3f/0213cLv6rzjsRfY6+ESzGuxsBXZMBCkSNHRW40PgzHlXNHf
iZ0Mnn6pbdFmw+XJu2yUBbwpd6sfv/gj1MXFsWZ41zQ+9kcJK8NtOr6U1k8rX/x+
Y28sXpBY/3otAasv
-----END CERTIFICATE-----
Generated at Thu Aug 21 08:04:29 2025 by rpki-client