Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a363030303a3a2f33362d3336203d3e20323638303430.roa
File:                     323830343a353730633a363030303a3a2f33362d3336203d3e20323638303430.roa (raw, json)
Hash identifier:          K2v77Gt9NOI7lpPDfVMsT7/UdsiCfs7Bid43RGcyb+8=
Subject key identifier:   6B:F6:72:13:1C:AC:69:A7:13:88:99:B7:25:B5:2D:1C:57:FD:83:1B
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       1EC0ACF33AE3CC89FA26ADE70EAD67130F87F26C
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a363030303a3a2f33362d3336203d3e20323638303430.roa
Signing time:             Mon 08 Sep 2025 21:31:25 +0000
ROA not before:           Mon 08 Sep 2025 21:26:25 +0000
ROA not after:            Mon 07 Sep 2026 21:31:25 +0000
asID:                     268040
IP address blocks:        2804:570c:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c0:ac:f3:3a:e3:cc:89:fa:26:ad:e7:0e:ad:67:13:0f:87:f2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Sep  8 21:26:25 2025 GMT
            Not After : Sep  7 21:31:25 2026 GMT
        Subject: CN=6BF672131CAC69A7138899B725B52D1C57FD831B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:3b:84:b8:12:ec:0c:8e:1d:03:8e:12:0b:d3:
                    3b:29:71:bb:89:d2:3b:df:95:3e:ed:47:16:08:a3:
                    30:68:ff:99:25:6f:ea:e5:31:e8:ad:92:95:5c:4a:
                    d2:1f:70:b9:d6:60:97:01:32:f4:4e:9f:17:80:b9:
                    76:7c:09:32:8d:cf:27:9c:dd:1d:6d:14:e8:2b:9a:
                    bd:43:a1:07:0b:c4:05:d2:95:2d:85:78:3c:ea:fb:
                    8f:7c:e5:e8:ba:b6:8f:06:05:44:3d:c0:2d:41:a6:
                    86:94:65:73:29:10:97:59:b3:7a:fe:d1:67:3c:2b:
                    62:5d:b5:c8:be:de:23:d1:32:ad:b2:5b:b8:6c:fc:
                    3c:11:7c:0a:3a:14:36:11:a8:be:12:1d:a5:a0:57:
                    bf:46:96:d3:f2:83:53:01:cc:68:b6:0e:cf:53:aa:
                    5d:54:40:de:83:5f:79:ec:98:89:f6:ff:ac:1d:db:
                    97:ee:9d:4f:5c:c4:cb:8e:b2:b1:62:1e:cc:50:75:
                    58:63:7c:7d:5a:35:87:cb:63:3e:e9:54:d8:36:72:
                    20:d9:5c:16:76:75:37:2a:4c:26:22:17:1f:81:90:
                    b4:02:c4:48:2b:98:29:a7:c3:90:ad:a9:c7:ca:43:
                    5e:b7:ea:0c:65:48:73:5d:5e:62:e8:99:e8:a0:2d:
                    b5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F6:72:13:1C:AC:69:A7:13:88:99:B7:25:B5:2D:1C:57:FD:83:1B
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a363030303a3a2f33362d3336203d3e20323638303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:570c:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3e:b2:12:a8:65:ba:5a:7e:a5:ad:89:89:84:0f:20:6c:24:8b:
         1a:c8:87:c7:5a:a4:4c:b7:41:10:2a:a2:63:d3:32:b2:0c:fc:
         89:f6:1f:38:46:44:77:07:61:3e:6d:d0:9e:ab:cf:b7:a7:0b:
         88:2b:8f:70:51:e8:27:e7:5c:f1:ab:9d:db:a5:58:6f:73:72:
         50:fa:2b:21:dc:74:34:f2:55:01:a1:7e:0c:f6:4d:5e:f4:f0:
         1b:25:d4:ba:f2:36:d7:71:ff:18:9d:10:fa:a8:1f:dd:21:1b:
         7b:4e:cc:e7:23:16:34:56:2d:ae:c0:38:d9:ad:b2:d8:84:50:
         2e:6b:d6:e6:63:43:c4:fd:b2:e2:f0:55:5a:8e:a5:06:d4:54:
         df:1d:92:59:a7:1f:db:d5:5f:86:a3:b6:85:ec:c5:bf:60:1f:
         4e:59:a4:bd:57:04:d8:5c:83:de:47:dc:f5:70:3c:64:30:fa:
         3a:aa:fd:27:c1:53:0f:99:6f:94:7a:f2:53:03:c9:06:b5:b5:
         a1:28:41:f2:05:7d:ff:c2:4c:d5:cb:f2:bf:ed:0e:70:c6:87:
         24:5a:b8:a1:b1:af:6f:dc:dc:9d:5a:10:92:89:05:ad:53:5d:
         c9:d4:fb:a4:23:e1:a8:7a:1c:d2:08:14:98:62:e4:67:cd:9a:
         f7:44:90:c7
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHsCs8zrjzIn6Jq3nDq1nEw+H8mwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VBNzRGRjM5NDVFNzUwODU5OUQ1NEE3MjFFNDdCM0JB
NzU3MDZFMzAeFw0yNTA5MDgyMTI2MjVaFw0yNjA5MDcyMTMxMjVaMDMxMTAvBgNV
BAMTKDZCRjY3MjEzMUNBQzY5QTcxMzg4OTlCNzI1QjUyRDFDNTdGRDgzMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6O4S4EuwMjh0DjhIL0zspcbuJ
0jvflT7tRxYIozBo/5klb+rlMeitkpVcStIfcLnWYJcBMvROnxeAuXZ8CTKNzyec
3R1tFOgrmr1DoQcLxAXSlS2FeDzq+4985ei6to8GBUQ9wC1BpoaUZXMpEJdZs3r+
0Wc8K2Jdtci+3iPRMq2yW7hs/DwRfAo6FDYRqL4SHaWgV79GltPyg1MBzGi2Ds9T
ql1UQN6DX3nsmIn2/6wd25funU9cxMuOsrFiHsxQdVhjfH1aNYfLYz7pVNg2ciDZ
XBZ2dTcqTCYiFx+BkLQCxEgrmCmnw5CtqcfKQ1636gxlSHNdXmLomeigLbXRAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUa/ZyExysaacTiJm3JbUtHFf9gxswHwYDVR0j
BBgwFoAUzqdP85RedQhZnVSnIeR7O6dXBuMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzJqSDQ4OUhzWHBtelh2ZjhYV2c1RGcyRFo4NVU2RmJjVm1NUHFMRm9G
NmcvMC9DRUE3NEZGMzk0NUU3NTA4NTk5RDU0QTcyMUU0N0IzQkE3NTcwNkUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFQTc0RkYzOTQ1RTc1MDg1
OTlENTRBNzIxRTQ3QjNCQTc1NzA2RTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0cyakg0ODlIc1hwbXpYdmY4WFdnNURnMkRaODVVNkZiY1ZtTVBxTEZvRjZnLzAv
MzIzODMwMzQzYTM1MzczMDYzM2EzNjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMwMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVwxgMA0GCSqGSIb3DQEBCwUA
A4IBAQA+shKoZbpafqWtiYmEDyBsJIsayIfHWqRMt0EQKqJj0zKyDPyJ9h84RkR3
B2E+bdCeq8+3pwuIK49wUegn51zxq53bpVhvc3JQ+ish3HQ08lUBoX4M9k1e9PAb
JdS68jbXcf8YnRD6qB/dIRt7TsznIxY0Vi2uwDjZrbLYhFAua9bmY0PE/bLi8FVa
jqUG1FTfHZJZpx/b1V+Go7aF7MW/YB9OWaS9VwTYXIPeR9z1cDxkMPo6qv0nwVMP
mW+UevJTA8kGtbWhKEHyBX3/wkzVy/K/7Q5wxockWrihsa9v3NydWhCSiQWtU13J
1PukI+GoehzSCBSYYuRnzZr3RJDH
-----END CERTIFICATE-----
Generated at Thu Sep 18 22:33:57 2025 by rpki-client