Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/323830343a383861633a38303a3a2f34312d3431203d3e20323732373836.roa
File:                     323830343a383861633a38303a3a2f34312d3431203d3e20323732373836.roa (raw, json)
Hash identifier:          vEnoGPPTUt2QYbp2j50rcrg/GizL72hT4IbF5xSuEBM=
Subject key identifier:   67:E0:A6:88:8B:7C:58:E0:9C:63:A9:61:8E:BF:41:DB:64:6B:96:2E
Certificate issuer:       /CN=58E384DDFA548D7DE9FEADE014582B8E6BE1D550
Certificate serial:       6D09498C13AD96254BB526D1382986DA6CBB195B
Authority key identifier: 58:E3:84:DD:FA:54:8D:7D:E9:FE:AD:E0:14:58:2B:8E:6B:E1:D5:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/323830343a383861633a38303a3a2f34312d3431203d3e20323732373836.roa
Signing time:             Thu 14 Aug 2025 12:47:52 +0000
ROA not before:           Thu 14 Aug 2025 12:42:52 +0000
ROA not after:            Thu 13 Aug 2026 12:47:52 +0000
asID:                     272786
IP address blocks:        2804:88ac:80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.crl
                          rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 12:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:09:49:8c:13:ad:96:25:4b:b5:26:d1:38:29:86:da:6c:bb:19:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58E384DDFA548D7DE9FEADE014582B8E6BE1D550
        Validity
            Not Before: Aug 14 12:42:52 2025 GMT
            Not After : Aug 13 12:47:52 2026 GMT
        Subject: CN=67E0A6888B7C58E09C63A9618EBF41DB646B962E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d7:d5:1a:57:5f:26:16:0d:af:66:d8:45:ab:
                    37:9e:19:cc:36:d1:c1:38:64:11:ca:c0:5f:a8:8c:
                    bb:ec:4c:24:ad:c7:26:e6:42:b8:cf:ad:07:f3:9b:
                    bc:ec:f1:d8:21:44:22:be:5c:67:89:5d:b9:bd:df:
                    21:9b:a6:28:2c:2a:38:2d:72:b6:da:8b:4e:87:09:
                    e6:64:f3:6e:30:27:9b:b9:1a:c4:f9:18:73:08:96:
                    88:85:5d:0e:b8:15:c3:cb:4f:51:7b:a2:6f:d3:9f:
                    d1:32:53:4f:51:d7:0e:bb:2c:25:37:d7:36:38:06:
                    f5:23:28:be:39:28:29:6c:fc:dd:5c:e8:32:d5:f0:
                    63:3c:be:71:0d:58:ac:77:cb:ab:b9:03:38:9d:fa:
                    89:42:d2:d7:bc:ea:d7:c4:d9:a5:c8:af:33:28:9d:
                    dc:89:72:df:ae:f7:3b:5a:49:06:34:6a:be:b2:c6:
                    70:87:ec:91:51:16:88:89:48:1d:92:ef:74:33:d1:
                    70:cc:67:e5:9e:59:16:d5:29:b9:16:d0:76:0b:15:
                    f2:7e:6b:ea:b3:9a:3a:11:53:67:82:de:bf:fd:73:
                    ea:35:1f:28:4b:e1:a6:92:86:91:cb:df:32:74:4c:
                    c5:7e:6d:1f:af:a3:5d:21:5f:aa:1b:4f:b3:b4:ac:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E0:A6:88:8B:7C:58:E0:9C:63:A9:61:8E:BF:41:DB:64:6B:96:2E
            X509v3 Authority Key Identifier:
                keyid:58:E3:84:DD:FA:54:8D:7D:E9:FE:AD:E0:14:58:2B:8E:6B:E1:D5:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58E384DDFA548D7DE9FEADE014582B8E6BE1D550.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VbCDEQm2iJHzppKzyCYYvz8puq9SEsPJtsaigEbhcgv/0/323830343a383861633a38303a3a2f34312d3431203d3e20323732373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88ac:80::/41

    Signature Algorithm: sha256WithRSAEncryption
         17:cd:9a:cd:11:1a:97:bf:a1:11:de:0b:c5:5b:0e:d6:1e:b8:
         cb:50:4a:4f:66:dc:7b:01:c2:a2:bb:5b:9b:ea:5c:6b:d0:ba:
         15:94:a3:dc:42:c0:e8:3b:7c:7e:d8:9a:c2:43:87:5f:1d:df:
         87:16:c4:70:c7:b4:81:6e:a6:0c:66:ea:eb:bd:7d:02:46:79:
         b0:11:65:a8:0e:4a:66:67:18:e3:27:55:93:56:5b:4e:d2:a9:
         cd:5f:ba:5c:9b:23:01:c2:9e:33:66:94:84:05:92:6a:e9:ae:
         4c:fc:b7:c6:f6:bc:4b:90:96:f4:4d:db:eb:f8:fa:e9:29:3d:
         ba:26:69:b3:96:ea:6c:00:c4:52:18:0a:34:6b:db:d7:cc:aa:
         5b:82:db:87:f9:bd:27:28:5c:03:51:bd:e6:31:11:3a:11:2f:
         21:08:0f:3e:13:85:d9:c8:05:80:38:18:99:39:d7:ce:94:96:
         83:e5:1c:a4:d6:aa:6f:c4:c5:f5:e4:d1:4f:8f:0a:07:cc:b7:
         b9:e8:d4:62:f7:54:65:5f:c2:79:17:57:eb:a1:ce:75:af:7f:
         0c:49:58:67:12:33:be:77:33:06:ab:6a:c1:c4:6a:d0:f6:fd:
         2c:d0:3c:af:f5:f5:7a:ba:af:86:bc:85:62:62:49:9c:5f:05:
         91:f8:41:b7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUbQlJjBOtliVLtSbROCmG2my7GVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNThFMzg0RERGQTU0OEQ3REU5RkVBREUwMTQ1ODJCOEU2
QkUxRDU1MDAeFw0yNTA4MTQxMjQyNTJaFw0yNjA4MTMxMjQ3NTJaMDMxMTAvBgNV
BAMTKDY3RTBBNjg4OEI3QzU4RTA5QzYzQTk2MThFQkY0MURCNjQ2Qjk2MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl19UaV18mFg2vZthFqzeeGcw2
0cE4ZBHKwF+ojLvsTCStxybmQrjPrQfzm7zs8dghRCK+XGeJXbm93yGbpigsKjgt
crbai06HCeZk824wJ5u5GsT5GHMIloiFXQ64FcPLT1F7om/Tn9EyU09R1w67LCU3
1zY4BvUjKL45KCls/N1c6DLV8GM8vnENWKx3y6u5Azid+olC0te86tfE2aXIrzMo
ndyJct+u9ztaSQY0ar6yxnCH7JFRFoiJSB2S73Qz0XDMZ+WeWRbVKbkW0HYLFfJ+
a+qzmjoRU2eC3r/9c+o1HyhL4aaShpHL3zJ0TMV+bR+vo10hX6obT7O0rNwBAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUZ+CmiIt8WOCcY6lhjr9B22Rrli4wHwYDVR0j
BBgwFoAUWOOE3fpUjX3p/q3gFFgrjmvh1VAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZiQ0RFUW0yaUpIenBwS3p5Q1lZdno4cHVxOVNFc1BKdHNhaWdFYmhj
Z3YvMC81OEUzODREREZBNTQ4RDdERTlGRUFERTAxNDU4MkI4RTZCRTFENTUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4RTM4NERERkE1NDhEN0RF
OUZFQURFMDE0NTgyQjhFNkJFMUQ1NTAuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWYkNERVFtMmlKSHpwcEt6eUNZWXZ6OHB1cTlTRXNQSnRzYWlnRWJoY2d2LzAv
MzIzODMwMzQzYTM4Mzg2MTYzM2EzODMwM2EzYTJmMzQzMTJkMzQzMTIwM2QzZTIw
MzIzNzMyMzczODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHKASIrACAMA0GCSqGSIb3DQEBCwUAA4IB
AQAXzZrNERqXv6ER3gvFWw7WHrjLUEpPZtx7AcKiu1ub6lxr0LoVlKPcQsDoO3x+
2JrCQ4dfHd+HFsRwx7SBbqYMZurrvX0CRnmwEWWoDkpmZxjjJ1WTVltO0qnNX7pc
myMBwp4zZpSEBZJq6a5M/LfG9rxLkJb0Tdvr+PrpKT26JmmzlupsAMRSGAo0a9vX
zKpbgtuH+b0nKFwDUb3mMRE6ES8hCA8+E4XZyAWAOBiZOdfOlJaD5Ryk1qpvxMX1
5NFPjwoHzLe56NRi91RlX8J5F1froc51r38MSVhnEjO+dzMGq2rBxGrQ9v0s0Dyv
9fV6uq+GvIViYkmcXwWR+EG3
-----END CERTIFICATE-----
Generated at Wed Aug 20 20:45:35 2025 by rpki-client