Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a333030303a3a2f33362d3336203d3e20323638303430.roa
File:                     323830343a353730633a333030303a3a2f33362d3336203d3e20323638303430.roa (raw, json)
Hash identifier:          tGy459mLNyebpYZY+MbMekDYPXcRxv1h1TrwkkoKkFk=
Subject key identifier:   A7:00:BA:10:E7:63:E5:4F:AF:97:5D:D4:B2:2F:AE:64:57:69:88:C3
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       420789677EC8BCB258C26E84E6B3603359471A07
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a333030303a3a2f33362d3336203d3e20323638303430.roa
Signing time:             Mon 08 Sep 2025 21:31:24 +0000
ROA not before:           Mon 08 Sep 2025 21:26:24 +0000
ROA not after:            Mon 07 Sep 2026 21:31:24 +0000
asID:                     268040
IP address blocks:        2804:570c:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:07:89:67:7e:c8:bc:b2:58:c2:6e:84:e6:b3:60:33:59:47:1a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Sep  8 21:26:24 2025 GMT
            Not After : Sep  7 21:31:24 2026 GMT
        Subject: CN=A700BA10E763E54FAF975DD4B22FAE64576988C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fe:f2:87:d0:86:fe:69:af:cd:7b:52:be:ed:
                    d5:9e:48:27:e9:f8:92:e5:60:b4:cd:a4:61:17:b1:
                    84:58:04:65:18:bd:0d:3f:73:72:92:be:ed:3c:ff:
                    b1:da:78:c0:c4:31:a6:e9:8b:3e:12:b9:62:2e:f4:
                    2a:3e:87:3f:7c:d3:5a:3b:21:24:44:5e:71:7c:dd:
                    b1:be:bf:ad:5a:2d:23:39:90:22:80:f8:69:fe:8d:
                    88:29:d2:93:47:7a:6b:98:79:d2:f3:16:25:fb:1a:
                    54:ed:69:ac:2b:1e:e7:35:74:42:bf:18:2f:b2:47:
                    15:72:5e:30:9e:6a:23:9a:e5:8c:bd:2d:8b:e3:ae:
                    4d:fa:c3:3d:7f:d0:50:22:d0:83:4b:fe:aa:ec:19:
                    bd:7b:78:43:ca:5b:23:a8:d2:5c:28:0a:31:00:88:
                    bc:ff:47:e2:51:72:67:72:f8:c7:51:fa:f2:d5:2b:
                    22:47:c4:9a:f6:3a:39:33:ad:d6:f6:16:72:ff:6a:
                    5d:a2:af:e8:d9:78:23:67:8f:6d:26:e7:6c:63:8e:
                    04:01:5a:f5:f9:cd:95:60:31:d4:e3:40:cc:a1:28:
                    c3:98:85:cc:6e:bb:99:92:7c:2c:15:b4:9c:20:7a:
                    8c:ac:33:f8:f6:c1:67:b6:b3:b2:db:1f:d4:ac:68:
                    9f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:00:BA:10:E7:63:E5:4F:AF:97:5D:D4:B2:2F:AE:64:57:69:88:C3
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a333030303a3a2f33362d3336203d3e20323638303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:570c:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9a:6d:af:a5:af:78:01:9c:b7:d7:e0:63:d6:d6:cc:2b:a7:90:
         43:5f:ff:2b:07:9e:4a:ff:da:07:f4:10:27:18:1e:e3:be:6f:
         9c:1d:10:fa:c8:9a:e5:9e:7e:6d:f4:2f:26:ae:e4:15:93:3c:
         ce:9e:87:18:c0:5a:20:da:1d:e0:0d:0f:5e:5f:b9:45:fd:99:
         a6:7d:de:60:97:00:cc:c4:1a:52:2b:ed:33:16:1d:e0:16:38:
         1c:67:8c:41:17:55:c2:3f:c4:60:7d:77:c3:b0:39:5c:0d:54:
         07:a1:b1:6b:c9:81:b3:6e:8b:9a:00:23:95:60:f4:be:d0:61:
         2d:0e:48:c1:29:e9:b1:28:cc:c6:4b:1e:83:f6:fe:60:34:16:
         98:29:c1:23:b6:f0:78:94:5d:98:97:34:f2:8e:eb:a2:f8:5f:
         fd:ea:59:7d:e7:c7:c0:74:c3:2c:87:7f:c8:ec:dd:a3:1a:15:
         df:4b:b1:c9:d9:52:dd:85:3b:05:b4:30:24:1d:bd:75:87:4f:
         5c:ce:fd:93:37:42:4c:ed:4a:54:b8:14:9c:49:c3:4f:0b:2e:
         71:2f:d3:a9:1c:5e:ce:65:76:06:db:ab:7c:2e:ec:f0:cd:a8:
         37:43:b3:5b:21:73:3f:17:07:a6:fb:cc:41:ac:38:64:ca:53:
         45:cf:8c:fd
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQgeJZ37IvLJYwm6E5rNgM1lHGgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VBNzRGRjM5NDVFNzUwODU5OUQ1NEE3MjFFNDdCM0JB
NzU3MDZFMzAeFw0yNTA5MDgyMTI2MjRaFw0yNjA5MDcyMTMxMjRaMDMxMTAvBgNV
BAMTKEE3MDBCQTEwRTc2M0U1NEZBRjk3NURENEIyMkZBRTY0NTc2OTg4QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd/vKH0Ib+aa/Ne1K+7dWeSCfp
+JLlYLTNpGEXsYRYBGUYvQ0/c3KSvu08/7HaeMDEMabpiz4SuWIu9Co+hz9801o7
ISREXnF83bG+v61aLSM5kCKA+Gn+jYgp0pNHemuYedLzFiX7GlTtaawrHuc1dEK/
GC+yRxVyXjCeaiOa5Yy9LYvjrk36wz1/0FAi0INL/qrsGb17eEPKWyOo0lwoCjEA
iLz/R+JRcmdy+MdR+vLVKyJHxJr2Ojkzrdb2FnL/al2ir+jZeCNnj20m52xjjgQB
WvX5zZVgMdTjQMyhKMOYhcxuu5mSfCwVtJwgeoysM/j2wWe2s7LbH9SsaJ/dAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUpwC6EOdj5U+vl13Usi+uZFdpiMMwHwYDVR0j
BBgwFoAUzqdP85RedQhZnVSnIeR7O6dXBuMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzJqSDQ4OUhzWHBtelh2ZjhYV2c1RGcyRFo4NVU2RmJjVm1NUHFMRm9G
NmcvMC9DRUE3NEZGMzk0NUU3NTA4NTk5RDU0QTcyMUU0N0IzQkE3NTcwNkUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFQTc0RkYzOTQ1RTc1MDg1
OTlENTRBNzIxRTQ3QjNCQTc1NzA2RTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0cyakg0ODlIc1hwbXpYdmY4WFdnNURnMkRaODVVNkZiY1ZtTVBxTEZvRjZnLzAv
MzIzODMwMzQzYTM1MzczMDYzM2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMwMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVwwwMA0GCSqGSIb3DQEBCwUA
A4IBAQCaba+lr3gBnLfX4GPW1swrp5BDX/8rB55K/9oH9BAnGB7jvm+cHRD6yJrl
nn5t9C8mruQVkzzOnocYwFog2h3gDQ9eX7lF/Zmmfd5glwDMxBpSK+0zFh3gFjgc
Z4xBF1XCP8RgfXfDsDlcDVQHobFryYGzbouaACOVYPS+0GEtDkjBKemxKMzGSx6D
9v5gNBaYKcEjtvB4lF2YlzTyjuui+F/96ll958fAdMMsh3/I7N2jGhXfS7HJ2VLd
hTsFtDAkHb11h09czv2TN0JM7UpUuBScScNPCy5xL9OpHF7OZXYG26t8Luzwzag3
Q7NbIXM/Fwem+8xBrDhkylNFz4z9
-----END CERTIFICATE-----
Generated at Fri Sep 19 06:28:04 2025 by rpki-client