Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a3a2f33362d3336203d3e20323633343939.roa
File:                     323830343a313263633a3a2f33362d3336203d3e20323633343939.roa (raw, json)
Hash identifier:          OJC+fjcUf1wEQGHZC3kvl8iXBF13ChODMg1VbHrs+yg=
Subject key identifier:   AB:65:C4:EB:6C:0E:A6:99:75:22:82:E1:17:08:A9:3E:AC:B9:02:E1
Certificate issuer:       /CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
Certificate serial:       784F56D43D81AA3DFE0477B6B3B90AC7F2FC6026
Authority key identifier: 78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a3a2f33362d3336203d3e20323633343939.roa
Signing time:             Wed 16 Jul 2025 15:00:00 +0000
ROA not before:           Wed 16 Jul 2025 14:55:00 +0000
ROA not after:            Wed 15 Jul 2026 15:00:00 +0000
asID:                     263499
IP address blocks:        2804:12cc::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl
                          rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 31 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4f:56:d4:3d:81:aa:3d:fe:04:77:b6:b3:b9:0a:c7:f2:fc:60:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785724BA2C79C31B8A2DA54506CAE7886EA06BE7
        Validity
            Not Before: Jul 16 14:55:00 2025 GMT
            Not After : Jul 15 15:00:00 2026 GMT
        Subject: CN=3082010A0282010100AA9A76208C09F4AE6C96954119EB884B182C50C9F0B4CAAB6E0966A5AC0C369E550577CD4D02FE3A5FA24A42C5CF3026C09E30E84D10792402CAB9C2663DC901A959A5909ACC4661CCEB387A802D3567DC37996B24315F353C3D0D4985DB865CE72DC306A88494E36414DB561D08AF030C542B775BBA7F20068551A71FAFB70EFD31CC57DEF70E8406BA03127982B34B82B95C44455E6AA01695A0C243CAA712DE59D275B6925FAEE3BDEBE96F156C15777DD09A3B458631381037814454E0DFCBF0CA40B3EFA68CA20A5D5D38B790855A799C636177812D65D1FD7542FAFB10899330EAB37D9FF6D2FB1FA75BDBC2D9E09EEC6BB5611CB74DE4DE5A8B1B257F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:76:20:8c:09:f4:ae:6c:96:95:41:19:eb:
                    88:4b:18:2c:50:c9:f0:b4:ca:ab:6e:09:66:a5:ac:
                    0c:36:9e:55:05:77:cd:4d:02:fe:3a:5f:a2:4a:42:
                    c5:cf:30:26:c0:9e:30:e8:4d:10:79:24:02:ca:b9:
                    c2:66:3d:c9:01:a9:59:a5:90:9a:cc:46:61:cc:eb:
                    38:7a:80:2d:35:67:dc:37:99:6b:24:31:5f:35:3c:
                    3d:0d:49:85:db:86:5c:e7:2d:c3:06:a8:84:94:e3:
                    64:14:db:56:1d:08:af:03:0c:54:2b:77:5b:ba:7f:
                    20:06:85:51:a7:1f:af:b7:0e:fd:31:cc:57:de:f7:
                    0e:84:06:ba:03:12:79:82:b3:4b:82:b9:5c:44:45:
                    5e:6a:a0:16:95:a0:c2:43:ca:a7:12:de:59:d2:75:
                    b6:92:5f:ae:e3:bd:eb:e9:6f:15:6c:15:77:7d:d0:
                    9a:3b:45:86:31:38:10:37:81:44:54:e0:df:cb:f0:
                    ca:40:b3:ef:a6:8c:a2:0a:5d:5d:38:b7:90:85:5a:
                    79:9c:63:61:77:81:2d:65:d1:fd:75:42:fa:fb:10:
                    89:93:30:ea:b3:7d:9f:f6:d2:fb:1f:a7:5b:db:c2:
                    d9:e0:9e:ec:6b:b5:61:1c:b7:4d:e4:de:5a:8b:1b:
                    25:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:65:C4:EB:6C:0E:A6:99:75:22:82:E1:17:08:A9:3E:AC:B9:02:E1
            X509v3 Authority Key Identifier:
                keyid:78:57:24:BA:2C:79:C3:1B:8A:2D:A5:45:06:CA:E7:88:6E:A0:6B:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/785724BA2C79C31B8A2DA54506CAE7886EA06BE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct7HBK4b6K3uqrfmoJFBCTjdGUohLwRqZXSZQXzNKr1F/1/323830343a313263633a3a2f33362d3336203d3e20323633343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12cc::/36

    Signature Algorithm: sha256WithRSAEncryption
         2c:b0:88:3a:2d:83:96:a5:7a:a0:8f:d6:2f:91:d7:1f:b3:1b:
         07:e3:28:55:3c:62:82:41:36:62:7c:13:f5:5e:51:98:84:ae:
         ca:b7:65:c0:3f:2d:43:93:b3:a5:f2:20:18:75:1a:54:04:f9:
         fa:15:c1:5c:3c:92:1d:3e:09:48:33:d3:5d:8f:e0:7b:5c:17:
         2b:2c:c3:0a:d6:0a:9b:b2:bf:2d:15:5f:4a:fa:01:ce:53:59:
         09:45:09:53:87:20:46:30:33:c8:57:87:83:8d:09:0a:52:4d:
         73:38:62:e7:85:46:64:b6:c2:2e:e7:0d:63:a1:97:96:0d:3b:
         1c:32:d6:30:0c:f2:09:3f:05:06:86:10:52:92:ea:a4:74:c2:
         89:e0:32:49:cb:d3:cb:5e:d1:f2:16:09:f9:45:f8:5a:ff:a8:
         af:6f:48:33:e1:b7:e6:30:f2:03:e4:44:94:f2:2a:ed:d9:8f:
         5c:42:da:60:33:06:1e:be:e0:e8:1c:d8:cd:07:f3:c5:81:99:
         b1:e3:04:61:6c:1b:ba:b5:a6:d5:3e:96:d7:7b:21:83:a2:8c:
         47:70:3f:ad:b4:92:44:7b:5c:94:5e:fe:34:84:2f:e6:cf:bd:
         cd:67:99:c2:6c:00:c8:5a:9c:26:41:76:8c:73:d5:57:28:92:
         9e:c2:ae:7d
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUeE9W1D2Bqj3+BHe2s7kKx/L8YCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg1NzI0QkEyQzc5QzMxQjhBMkRBNTQ1MDZDQUU3ODg2
RUEwNkJFNzAeFw0yNTA3MTYxNDU1MDBaFw0yNjA3MTUxNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUE5QTc2MjA4QzA5RjRBRTZD
OTY5NTQxMTlFQjg4NEIxODJDNTBDOUYwQjRDQUFCNkUwOTY2QTVBQzBDMzY5RTU1
MDU3N0NENEQwMkZFM0E1RkEyNEE0MkM1Q0YzMDI2QzA5RTMwRTg0RDEwNzkyNDAy
Q0FCOUMyNjYzREM5MDFBOTU5QTU5MDlBQ0M0NjYxQ0NFQjM4N0E4MDJEMzU2N0RD
Mzc5OTZCMjQzMTVGMzUzQzNEMEQ0OTg1REI4NjVDRTcyREMzMDZBODg0OTRFMzY0
MTREQjU2MUQwOEFGMDMwQzU0MkI3NzVCQkE3RjIwMDY4NTUxQTcxRkFGQjcwRUZE
MzFDQzU3REVGNzBFODQwNkJBMDMxMjc5ODJCMzRCODJCOTVDNDQ0NTVFNkFBMDE2
OTVBMEMyNDNDQUE3MTJERTU5RDI3NUI2OTI1RkFFRTNCREVCRTk2RjE1NkMxNTc3
N0REMDlBM0I0NTg2MzEzODEwMzc4MTQ0NTRFMERGQ0JGMENBNDBCM0VGQTY4Q0Ey
MEE1RDVEMzhCNzkwODU1QTc5OUM2MzYxNzc4MTJENjVEMUZENzU0MkZBRkIxMDg5
OTMzMEVBQjM3RDlGRjZEMkZCMUZBNzVCREJDMkQ5RTA5RUVDNkJCNTYxMUNCNzRE
RTRERTVBOEIxQjI1N0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqpp2IIwJ9K5slpVBGeuISxgsUMnwtMqrbglmpawMNp5VBXfNTQL+
Ol+iSkLFzzAmwJ4w6E0QeSQCyrnCZj3JAalZpZCazEZhzOs4eoAtNWfcN5lrJDFf
NTw9DUmF24Zc5y3DBqiElONkFNtWHQivAwxUK3dbun8gBoVRpx+vtw79McxX3vcO
hAa6AxJ5grNLgrlcREVeaqAWlaDCQ8qnEt5Z0nW2kl+u473r6W8VbBV3fdCaO0WG
MTgQN4FEVODfy/DKQLPvpoyiCl1dOLeQhVp5nGNhd4EtZdH9dUL6+xCJkzDqs32f
9tL7H6db28LZ4J7sa7VhHLdN5N5aixslfwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FKtlxOtsDqaZdSKC4RcIqT6suQLhMB8GA1UdIwQYMBaAFHhXJLosecMbii2lRQbK
54huoGvnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N0N0hCSzRiNkszdXFy
Zm1vSkZCQ1RqZEdVb2hMd1JxWlhTWlFYek5LcjFGLzEvNzg1NzI0QkEyQzc5QzMx
QjhBMkRBNTQ1MDZDQUU3ODg2RUEwNkJFNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS83ODU3MjRCQTJDNzlDMzFCOEEyREE1NDUwNkNBRTc4ODZFQTA2
QkU3LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DdDdIQks0YjZLM3VxcmZtb0pG
QkNUamRHVW9oTHdScVpYU1pRWHpOS3IxRi8xLzMyMzgzMDM0M2EzMTMyNjM2MzNh
M2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMyMzYzMzM0MzkzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgE
EswAMA0GCSqGSIb3DQEBCwUAA4IBAQAssIg6LYOWpXqgj9YvkdcfsxsH4yhVPGKC
QTZifBP1XlGYhK7Kt2XAPy1Dk7Ol8iAYdRpUBPn6FcFcPJIdPglIM9Ndj+B7XBcr
LMMK1gqbsr8tFV9K+gHOU1kJRQlThyBGMDPIV4eDjQkKUk1zOGLnhUZktsIu5w1j
oZeWDTscMtYwDPIJPwUGhhBSkuqkdMKJ4DJJy9PLXtHyFgn5Rfha/6ivb0gz4bfm
MPID5ESU8irt2Y9cQtpgMwYevuDoHNjNB/PFgZmx4wRhbBu6tabVPpbXeyGDooxH
cD+ttJJEe1yUXv40hC/mz73NZ5nCbADIWpwmQXaMc9VXKJKewq59
-----END CERTIFICATE-----
Generated at Wed Jul 30 22:11:02 2025 by rpki-client