Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xmYnq5bRqqSW6WMrazGCBAuobevLNCPNf4Ajc7svqpr/0/323830343a323865633a3a2f33322d313238203d3e20323633393837.roa
File:                     323830343a323865633a3a2f33322d313238203d3e20323633393837.roa (raw, json)
Hash identifier:          nB+8T4okUuf64j0ZTnyxbKGhI3hX1dlX3VN3y4ujkr4=
Subject key identifier:   C3:6F:80:20:48:60:82:20:03:EC:95:EA:32:6A:E7:55:54:D2:C8:75
Certificate issuer:       /CN=7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75
Certificate serial:       19A478D8F5F665B96BEFF951815B1117267BB866
Authority key identifier: 7E:35:4B:C2:75:8A:5E:71:36:C8:BE:9E:C6:A5:11:9D:DB:3A:9E:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xmYnq5bRqqSW6WMrazGCBAuobevLNCPNf4Ajc7svqpr/0/323830343a323865633a3a2f33322d313238203d3e20323633393837.roa
Signing time:             Mon 30 Jun 2025 14:39:27 +0000
ROA not before:           Mon 30 Jun 2025 14:34:27 +0000
ROA not after:            Mon 29 Jun 2026 14:39:27 +0000
asID:                     263987
IP address blocks:        2804:28ec::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xmYnq5bRqqSW6WMrazGCBAuobevLNCPNf4Ajc7svqpr/0/7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75.crl
                          rsync://rpki-repo.registro.br/repo/7xmYnq5bRqqSW6WMrazGCBAuobevLNCPNf4Ajc7svqpr/0/7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 08:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a4:78:d8:f5:f6:65:b9:6b:ef:f9:51:81:5b:11:17:26:7b:b8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75
        Validity
            Not Before: Jun 30 14:34:27 2025 GMT
            Not After : Jun 29 14:39:27 2026 GMT
        Subject: CN=C36F80204860822003EC95EA326AE75554D2C875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:6d:f9:74:47:e5:a8:8a:09:5f:ca:e8:8c:
                    26:b1:26:48:ca:5b:9d:a1:16:2e:58:aa:c6:86:3b:
                    32:af:54:e5:b7:cc:e2:0a:d7:eb:80:13:52:bd:95:
                    80:4e:f1:37:03:0f:64:8a:02:a8:ee:76:15:a8:00:
                    30:ec:50:43:d8:a4:02:49:ed:be:9e:a7:61:79:ef:
                    82:37:87:31:88:d7:76:f3:5e:a5:24:28:99:ae:aa:
                    5c:a8:f2:fd:04:c0:08:d1:dc:98:c6:5d:79:4c:2d:
                    68:b6:d4:43:06:8e:19:45:c0:8b:a0:8c:0b:2d:1a:
                    0e:e8:d2:cd:bf:0d:9b:76:47:f7:d8:e7:28:1b:57:
                    e4:79:e0:fb:52:a8:24:e8:0e:fa:0e:64:ca:eb:aa:
                    6c:25:82:a0:dc:c0:1d:05:cf:52:01:80:06:c1:95:
                    c9:41:28:55:a9:f6:88:93:da:46:12:ae:fd:9c:13:
                    b4:9b:1d:bf:ac:ff:e4:d8:31:21:72:20:51:53:a7:
                    29:36:b7:b8:6f:90:b2:f4:a2:b0:b4:83:cd:c9:ca:
                    12:9c:e2:25:a0:a0:67:a0:83:8d:18:f5:02:a8:c5:
                    5e:95:8e:ce:5e:92:55:6e:9a:4b:b0:34:46:8f:88:
                    68:96:da:21:f8:bb:4a:26:b0:19:47:85:5b:df:a2:
                    04:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6F:80:20:48:60:82:20:03:EC:95:EA:32:6A:E7:55:54:D2:C8:75
            X509v3 Authority Key Identifier:
                keyid:7E:35:4B:C2:75:8A:5E:71:36:C8:BE:9E:C6:A5:11:9D:DB:3A:9E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xmYnq5bRqqSW6WMrazGCBAuobevLNCPNf4Ajc7svqpr/0/7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E354BC2758A5E7136C8BE9EC6A5119DDB3A9E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xmYnq5bRqqSW6WMrazGCBAuobevLNCPNf4Ajc7svqpr/0/323830343a323865633a3a2f33322d313238203d3e20323633393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:75:a7:7f:9c:a5:3d:18:99:1e:74:bb:e1:41:b5:35:07:7b:
         6a:f7:8c:fe:03:71:8b:c1:f5:54:1e:17:6a:bf:b6:b1:ae:f8:
         27:c8:8b:3c:4e:9e:f1:76:f1:56:96:58:90:c7:77:89:7b:e5:
         fd:d6:19:df:f3:76:60:28:7d:24:74:1d:0d:55:8f:1e:2a:4a:
         68:07:11:06:c9:b4:e8:dd:eb:4f:c6:73:71:cb:99:0a:f9:fa:
         ea:48:bd:11:2f:b6:c6:e2:c6:18:7e:4f:05:5c:25:a4:b7:43:
         10:84:31:77:db:89:70:03:2e:6e:0c:33:66:7d:5a:fe:fd:62:
         a5:b0:65:b9:52:f0:6a:0a:d6:fe:2d:c2:41:8c:d2:e3:28:00:
         62:ea:bb:27:34:d2:5d:00:2c:96:0e:5a:4c:17:60:ae:d8:a6:
         75:68:ce:1e:2f:49:ea:9b:1e:0c:cc:a9:f2:b0:2b:bc:38:e0:
         a6:ab:59:8a:ee:69:d3:5b:69:0e:75:53:f0:cb:b8:19:e4:b4:
         b0:7a:0b:b6:3e:d0:22:21:af:f7:cb:12:a3:47:71:00:0e:64:
         f2:70:e5:cd:e3:9f:8d:76:ac:fe:33:b7:11:01:f5:ac:3d:a6:
         9e:eb:02:4c:64:62:82:0b:32:46:ce:04:25:01:b6:c2:ff:da:
         49:59:0c:f4
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUGaR42PX2Zblr7/lRgVsRFyZ7uGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UzNTRCQzI3NThBNUU3MTM2QzhCRTlFQzZBNTExOURE
QjNBOUU3NTAeFw0yNTA2MzAxNDM0MjdaFw0yNjA2MjkxNDM5MjdaMDMxMTAvBgNV
BAMTKEMzNkY4MDIwNDg2MDgyMjAwM0VDOTVFQTMyNkFFNzU1NTREMkM4NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcr235dEflqIoJX8rojCaxJkjK
W52hFi5YqsaGOzKvVOW3zOIK1+uAE1K9lYBO8TcDD2SKAqjudhWoADDsUEPYpAJJ
7b6ep2F574I3hzGI13bzXqUkKJmuqlyo8v0EwAjR3JjGXXlMLWi21EMGjhlFwIug
jAstGg7o0s2/DZt2R/fY5ygbV+R54PtSqCToDvoOZMrrqmwlgqDcwB0Fz1IBgAbB
lclBKFWp9oiT2kYSrv2cE7SbHb+s/+TYMSFyIFFTpyk2t7hvkLL0orC0g83JyhKc
4iWgoGegg40Y9QKoxV6Vjs5eklVumkuwNEaPiGiW2iH4u0omsBlHhVvfogQBAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUw2+AIEhggiAD7JXqMmrnVVTSyHUwHwYDVR0j
BBgwFoAUfjVLwnWKXnE2yL6exqURnds6nnUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3htWW5xNWJScXFTVzZXTXJhekdDQkF1b2JldkxOQ1BOZjRBamM3c3Zx
cHIvMC83RTM1NEJDMjc1OEE1RTcxMzZDOEJFOUVDNkE1MTE5RERCM0E5RTc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFMzU0QkMyNzU4QTVFNzEz
NkM4QkU5RUM2QTUxMTlEREIzQTlFNzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4bVlucTViUnFxU1c2V01yYXpHQ0JBdW9iZXZMTkNQTmY0QWpjN3N2cXByLzAv
MzIzODMwMzQzYTMyMzg2NTYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzOTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCjsMA0GCSqGSIb3DQEBCwUAA4IBAQBwdad/
nKU9GJkedLvhQbU1B3tq94z+A3GLwfVUHhdqv7axrvgnyIs8Tp7xdvFWlliQx3eJ
e+X91hnf83ZgKH0kdB0NVY8eKkpoBxEGybTo3etPxnNxy5kK+frqSL0RL7bG4sYY
fk8FXCWkt0MQhDF324lwAy5uDDNmfVr+/WKlsGW5UvBqCtb+LcJBjNLjKABi6rsn
NNJdACyWDlpMF2Cu2KZ1aM4eL0nqmx4MzKnysCu8OOCmq1mK7mnTW2kOdVPwy7gZ
5LSwegu2PtAiIa/3yxKjR3EADmTycOXN45+Ndqz+M7cRAfWsPaae6wJMZGKCCzJG
zgQlAbbC/9pJWQz0
-----END CERTIFICATE-----
Generated at Fri Jul 4 20:06:58 2025 by rpki-client