Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/323830343a333434633a3a2f33322d3332203d3e20323632383138.roa
File:                     323830343a333434633a3a2f33322d3332203d3e20323632383138.roa (raw, json)
Hash identifier:          dHKGgTfwFlcJ0qjhRg3sgfCG3a4xae7Doeyc2YsGrKY=
Subject key identifier:   32:9B:7A:EC:AA:F2:09:94:BC:9B:01:BD:A4:97:2C:7B:39:72:B5:CD
Certificate issuer:       /CN=F8A5885612DC8F082016099D6959B32B90C3706E
Certificate serial:       42A5D66B01354C9FF3162F382DCDA2CBC288C54B
Authority key identifier: F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/323830343a333434633a3a2f33322d3332203d3e20323632383138.roa
Signing time:             Fri 08 Aug 2025 11:47:43 +0000
ROA not before:           Fri 08 Aug 2025 11:42:43 +0000
ROA not after:            Fri 07 Aug 2026 11:47:43 +0000
asID:                     262818
IP address blocks:        2804:344c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl
                          rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 08:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a5:d6:6b:01:35:4c:9f:f3:16:2f:38:2d:cd:a2:cb:c2:88:c5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A5885612DC8F082016099D6959B32B90C3706E
        Validity
            Not Before: Aug  8 11:42:43 2025 GMT
            Not After : Aug  7 11:47:43 2026 GMT
        Subject: CN=329B7AECAAF20994BC9B01BDA4972C7B3972B5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3c:6b:b9:4e:ff:a7:9d:90:ae:bd:d2:aa:c6:
                    45:20:8b:1c:f2:41:db:44:d8:23:95:ae:f3:12:ee:
                    02:a5:59:96:0a:d2:80:44:c7:fc:73:72:bc:15:ac:
                    cc:ca:68:5e:47:bf:e7:a7:38:21:f7:33:7f:dc:c2:
                    41:c5:f8:34:9c:25:f6:6e:5a:18:99:1b:95:e0:ae:
                    e4:d4:0f:d8:2e:44:18:8a:92:8e:83:24:17:cb:39:
                    f3:be:8b:95:4a:1a:7f:86:f3:55:a2:b1:71:ab:24:
                    96:fa:9f:0c:a0:f0:c0:14:2f:42:85:29:5a:a4:b5:
                    4d:cb:d7:69:fc:90:6f:00:82:84:37:65:28:7d:45:
                    86:6f:e0:18:1a:a5:a6:5b:2f:12:12:24:f9:d5:7a:
                    42:d1:80:d2:9e:c6:d4:b3:cb:f4:0e:a6:8b:cc:0b:
                    1c:16:25:85:5c:bf:3e:53:17:22:04:e9:73:e2:7f:
                    21:3f:af:a2:c9:2e:2f:96:4f:4a:32:d6:05:03:3a:
                    ab:ff:6d:ef:ef:23:06:7c:37:89:ea:d8:16:66:03:
                    4d:ce:eb:09:34:da:39:04:c6:0a:ef:8b:7a:cf:f8:
                    09:90:4b:01:92:2e:48:d3:07:8f:b1:79:c5:fc:2c:
                    2d:ee:b6:83:64:91:40:ba:9f:31:49:4d:26:f8:3a:
                    c7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9B:7A:EC:AA:F2:09:94:BC:9B:01:BD:A4:97:2C:7B:39:72:B5:CD
            X509v3 Authority Key Identifier:
                keyid:F8:A5:88:56:12:DC:8F:08:20:16:09:9D:69:59:B3:2B:90:C3:70:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/F8A5885612DC8F082016099D6959B32B90C3706E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A5885612DC8F082016099D6959B32B90C3706E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/323830343a333434633a3a2f33322d3332203d3e20323632383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:344c::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:98:b2:24:50:2f:8a:f2:e1:a4:88:b1:ba:7a:75:92:8e:e2:
         17:06:d4:56:d0:81:56:29:66:af:8b:be:5b:b8:f2:7f:37:cb:
         60:a3:e0:9c:58:4b:e2:e4:a3:9a:5c:5a:20:b2:67:f5:45:47:
         a2:a9:5f:86:67:5e:81:93:76:6b:30:46:51:fb:31:0c:ff:5d:
         19:51:9a:72:24:d4:7b:55:f4:93:72:08:92:c5:f4:2f:74:17:
         09:66:2d:d1:7b:53:4b:b7:9e:e6:20:6e:a1:30:74:ee:a5:14:
         f2:fc:c8:05:15:e7:62:e8:34:ed:79:d6:4d:e3:c2:7c:ec:79:
         8f:ad:c0:cf:90:bd:7b:d9:9d:23:77:05:3f:a9:97:c0:c3:82:
         af:82:ca:17:d6:85:d3:8e:0c:58:63:5a:27:aa:af:d4:9a:fc:
         d0:9e:28:9e:46:cb:80:e7:d3:cd:61:6b:13:13:ea:8c:ff:40:
         0a:55:9a:bc:84:54:0f:dd:53:71:cc:07:60:e2:ea:f6:65:de:
         1b:03:25:9c:b5:37:22:42:02:51:34:d5:43:b1:f1:51:5d:81:
         77:2b:2c:9c:91:db:d7:04:16:cd:c5:bb:6b:82:79:dc:7f:e3:
         df:90:5a:1e:5e:5b:11:2f:db:b9:81:c8:21:2a:d1:16:5c:96:
         d0:9d:61:d7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUQqXWawE1TJ/zFi84Lc2iy8KIxUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhBNTg4NTYxMkRDOEYwODIwMTYwOTlENjk1OUIzMkI5
MEMzNzA2RTAeFw0yNTA4MDgxMTQyNDNaFw0yNjA4MDcxMTQ3NDNaMDMxMTAvBgNV
BAMTKDMyOUI3QUVDQUFGMjA5OTRCQzlCMDFCREE0OTcyQzdCMzk3MkI1Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3PGu5Tv+nnZCuvdKqxkUgixzy
QdtE2COVrvMS7gKlWZYK0oBEx/xzcrwVrMzKaF5Hv+enOCH3M3/cwkHF+DScJfZu
WhiZG5XgruTUD9guRBiKko6DJBfLOfO+i5VKGn+G81WisXGrJJb6nwyg8MAUL0KF
KVqktU3L12n8kG8AgoQ3ZSh9RYZv4BgapaZbLxISJPnVekLRgNKextSzy/QOpovM
CxwWJYVcvz5TFyIE6XPifyE/r6LJLi+WT0oy1gUDOqv/be/vIwZ8N4nq2BZmA03O
6wk02jkExgrvi3rP+AmQSwGSLkjTB4+xecX8LC3utoNkkUC6nzFJTSb4OscPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUMpt67KryCZS8mwG9pJcsezlytc0wHwYDVR0j
BBgwFoAU+KWIVhLcjwggFgmdaVmzK5DDcG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUNyU3A4R3Q1YXhEVmZyeUZwTkV3MURONVRTOGV4WDZjc2o4RXRVZHVH
Zm0vMC9GOEE1ODg1NjEyREM4RjA4MjAxNjA5OUQ2OTU5QjMyQjkwQzM3MDZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4QTU4ODU2MTJEQzhGMDgy
MDE2MDk5RDY5NTlCMzJCOTBDMzcwNkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VDclNwOEd0NWF4RFZmcnlGcE5FdzFETjVUUzhleFg2Y3NqOEV0VWR1R2ZtLzAv
MzIzODMwMzQzYTMzMzQzNDYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMy
MzgzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ0TDANBgkqhkiG9w0BAQsFAAOCAQEAKZiyJFAv
ivLhpIixunp1ko7iFwbUVtCBVilmr4u+W7jyfzfLYKPgnFhL4uSjmlxaILJn9UVH
oqlfhmdegZN2azBGUfsxDP9dGVGaciTUe1X0k3IIksX0L3QXCWYt0XtTS7ee5iBu
oTB07qUU8vzIBRXnYug07XnWTePCfOx5j63Az5C9e9mdI3cFP6mXwMOCr4LKF9aF
044MWGNaJ6qv1Jr80J4onkbLgOfTzWFrExPqjP9AClWavIRUD91TccwHYOLq9mXe
GwMlnLU3IkICUTTVQ7HxUV2BdyssnJHb1wQWzcW7a4J53H/j35BaHl5bES/buYHI
ISrRFlyW0J1h1w==
-----END CERTIFICATE-----
Generated at Wed Aug 20 18:31:54 2025 by rpki-client