Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a353030303a3a2f33362d3336203d3e20323638303430.roa
File:                     323830343a353730633a353030303a3a2f33362d3336203d3e20323638303430.roa (raw, json)
Hash identifier:          xKOZCLzFhIukCU7Ho1bE8l21fKx8oMJdRkB6RP4zOU0=
Subject key identifier:   E5:FE:5F:A9:FD:81:80:FA:05:A0:B1:B4:90:0A:3E:8E:20:AC:03:9D
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       2D5AA342FA01CA4A5E6130F601F5A142A670BECC
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a353030303a3a2f33362d3336203d3e20323638303430.roa
Signing time:             Mon 08 Sep 2025 21:31:24 +0000
ROA not before:           Mon 08 Sep 2025 21:26:24 +0000
ROA not after:            Mon 07 Sep 2026 21:31:24 +0000
asID:                     268040
IP address blocks:        2804:570c:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5a:a3:42:fa:01:ca:4a:5e:61:30:f6:01:f5:a1:42:a6:70:be:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Sep  8 21:26:24 2025 GMT
            Not After : Sep  7 21:31:24 2026 GMT
        Subject: CN=E5FE5FA9FD8180FA05A0B1B4900A3E8E20AC039D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:f5:88:16:65:fa:65:40:32:d9:f6:40:e1:
                    aa:55:3e:a0:80:cc:9a:14:7f:f9:53:a3:b3:5c:1a:
                    7d:d2:ef:2d:23:54:f8:05:1f:58:16:b6:28:34:02:
                    d1:71:e1:ac:37:4c:6c:63:0b:35:c8:1a:53:20:0c:
                    2f:ef:98:60:70:67:e1:9d:51:d1:77:83:22:4e:b6:
                    0b:55:63:72:38:ee:82:8e:ae:06:bc:f6:b8:2f:23:
                    ba:28:10:a0:f1:18:a8:37:df:f8:f3:8f:ca:23:2b:
                    ad:e7:ec:96:ba:a0:36:12:d1:06:d4:29:c3:60:5a:
                    e8:c1:c2:3c:0f:08:fa:cc:45:e2:86:e5:e4:4f:2b:
                    eb:4e:fb:06:ae:b9:92:41:a8:e7:bf:55:e1:1b:41:
                    ee:00:3e:74:2e:24:c2:c5:ba:ee:bc:c0:51:05:60:
                    fe:98:ea:17:6b:75:88:58:90:dd:d7:0f:31:88:8a:
                    c3:3b:41:0c:b8:cf:b0:ec:d0:05:4f:9d:47:ce:f5:
                    73:78:dd:f5:97:05:ff:f0:bc:75:88:44:45:96:20:
                    b8:3c:87:e2:6f:1e:70:17:f8:c2:55:cd:98:39:82:
                    67:6b:06:df:32:4e:7e:32:f3:54:2a:e6:e4:6a:6b:
                    62:48:fd:db:2b:32:ce:c5:4a:5a:68:cf:41:23:88:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FE:5F:A9:FD:81:80:FA:05:A0:B1:B4:90:0A:3E:8E:20:AC:03:9D
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a353030303a3a2f33362d3336203d3e20323638303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:570c:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5c:d3:12:5c:56:7a:e8:27:c4:a1:46:86:22:40:ae:29:8f:49:
         f3:ae:bb:a2:ff:18:77:5b:78:db:98:26:77:b1:51:df:b9:a6:
         d4:9f:9c:cc:e9:7b:60:35:07:c2:ef:73:1a:3f:68:a8:f7:e3:
         4a:4d:38:ab:d5:91:6f:53:e3:57:66:26:02:4a:83:bd:e3:3a:
         dd:06:d8:17:a0:1d:0a:84:c7:08:b0:d6:a2:a9:6a:5d:38:6c:
         87:62:6c:4d:c8:c2:bc:49:df:b7:55:34:aa:48:ec:34:31:27:
         20:f5:6f:ee:a7:7f:c8:af:e6:f9:94:a3:41:f5:cd:56:52:f8:
         1c:f0:03:a5:a2:d4:21:d7:61:68:e2:67:55:d0:a5:bc:4e:57:
         15:d5:de:ae:26:9d:71:23:6e:5f:3f:22:57:ca:c6:e3:e6:11:
         a7:b4:3f:8f:ae:6a:28:1e:6d:d5:da:d4:a3:38:50:ce:b5:d4:
         6b:53:5b:15:82:03:28:12:bf:b3:15:e7:27:d0:3e:32:ba:89:
         9e:b3:6f:a7:56:e1:bf:b7:89:9a:34:4a:96:c5:1c:81:58:05:
         9b:11:d8:40:ea:9f:bb:71:58:df:94:9b:d3:c3:c0:e1:66:57:
         1e:59:76:e4:b0:bf:aa:c4:3c:5c:c9:e1:51:1a:3f:31:90:68:
         18:57:c1:1b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIULVqjQvoBykpeYTD2AfWhQqZwvswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VBNzRGRjM5NDVFNzUwODU5OUQ1NEE3MjFFNDdCM0JB
NzU3MDZFMzAeFw0yNTA5MDgyMTI2MjRaFw0yNjA5MDcyMTMxMjRaMDMxMTAvBgNV
BAMTKEU1RkU1RkE5RkQ4MTgwRkEwNUEwQjFCNDkwMEEzRThFMjBBQzAzOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxO/WIFmX6ZUAy2fZA4apVPqCA
zJoUf/lTo7NcGn3S7y0jVPgFH1gWtig0AtFx4aw3TGxjCzXIGlMgDC/vmGBwZ+Gd
UdF3gyJOtgtVY3I47oKOrga89rgvI7ooEKDxGKg33/jzj8ojK63n7Ja6oDYS0QbU
KcNgWujBwjwPCPrMReKG5eRPK+tO+wauuZJBqOe/VeEbQe4APnQuJMLFuu68wFEF
YP6Y6hdrdYhYkN3XDzGIisM7QQy4z7Ds0AVPnUfO9XN43fWXBf/wvHWIREWWILg8
h+JvHnAX+MJVzZg5gmdrBt8yTn4y81Qq5uRqa2JI/dsrMs7FSlpoz0EjiOhtAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU5f5fqf2BgPoFoLG0kAo+jiCsA50wHwYDVR0j
BBgwFoAUzqdP85RedQhZnVSnIeR7O6dXBuMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzJqSDQ4OUhzWHBtelh2ZjhYV2c1RGcyRFo4NVU2RmJjVm1NUHFMRm9G
NmcvMC9DRUE3NEZGMzk0NUU3NTA4NTk5RDU0QTcyMUU0N0IzQkE3NTcwNkUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFQTc0RkYzOTQ1RTc1MDg1
OTlENTRBNzIxRTQ3QjNCQTc1NzA2RTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0cyakg0ODlIc1hwbXpYdmY4WFdnNURnMkRaODVVNkZiY1ZtTVBxTEZvRjZnLzAv
MzIzODMwMzQzYTM1MzczMDYzM2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMwMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVwxQMA0GCSqGSIb3DQEBCwUA
A4IBAQBc0xJcVnroJ8ShRoYiQK4pj0nzrrui/xh3W3jbmCZ3sVHfuabUn5zM6Xtg
NQfC73MaP2io9+NKTTir1ZFvU+NXZiYCSoO94zrdBtgXoB0KhMcIsNaiqWpdOGyH
YmxNyMK8Sd+3VTSqSOw0MScg9W/up3/Ir+b5lKNB9c1WUvgc8AOlotQh12Fo4mdV
0KW8TlcV1d6uJp1xI25fPyJXysbj5hGntD+PrmooHm3V2tSjOFDOtdRrU1sVggMo
Er+zFecn0D4yuomes2+nVuG/t4maNEqWxRyBWAWbEdhA6p+7cVjflJvTw8DhZlce
WXbksL+qxDxcyeFRGj8xkGgYV8Eb
-----END CERTIFICATE-----
Generated at Fri Sep 19 09:59:37 2025 by rpki-client