Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a393030303a3a2f33362d3336203d3e20323638303430.roa
File:                     323830343a353730633a393030303a3a2f33362d3336203d3e20323638303430.roa (raw, json)
Hash identifier:          h+Y8VHW8KQwbGe6hDzwUUcFE6gQRTp4SniquNbqCvlw=
Subject key identifier:   18:A9:7C:E4:08:67:7A:7D:1B:22:88:6E:0B:DD:37:AD:29:D6:F0:B2
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       6EE85D453BEE9750079BF095A6829D7A605B3E50
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a393030303a3a2f33362d3336203d3e20323638303430.roa
Signing time:             Mon 08 Sep 2025 21:31:24 +0000
ROA not before:           Mon 08 Sep 2025 21:26:24 +0000
ROA not after:            Mon 07 Sep 2026 21:31:24 +0000
asID:                     268040
IP address blocks:        2804:570c:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e8:5d:45:3b:ee:97:50:07:9b:f0:95:a6:82:9d:7a:60:5b:3e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Sep  8 21:26:24 2025 GMT
            Not After : Sep  7 21:31:24 2026 GMT
        Subject: CN=18A97CE408677A7D1B22886E0BDD37AD29D6F0B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:51:38:f8:b8:34:f0:03:f6:2e:07:39:3c:07:
                    7c:fe:c2:45:e2:61:f7:9f:d1:be:a4:b4:4e:2b:2c:
                    1a:72:e3:4d:cf:2b:57:82:c3:df:75:92:ee:de:67:
                    df:a3:cd:65:78:b9:67:2a:ef:f3:e6:7a:94:5e:74:
                    05:39:6b:ac:df:4c:8f:c7:ce:14:e5:43:3a:74:a7:
                    e2:71:0a:2b:17:d6:59:76:df:7f:ef:98:aa:1d:4a:
                    e8:ff:71:dd:a6:69:e8:bd:8f:84:27:bf:2e:1f:51:
                    5a:bf:d6:fc:16:7b:29:65:d9:c0:6f:31:d5:c2:71:
                    67:26:1d:90:f3:ab:d9:46:45:68:6d:3c:ba:07:88:
                    12:ff:71:fa:4b:87:85:2e:cf:b3:aa:eb:20:2a:d0:
                    57:59:07:a7:a8:55:6f:14:1c:d4:2c:49:0e:90:c1:
                    a3:01:c9:8d:79:60:50:33:2d:00:65:10:b8:4b:8c:
                    cc:43:b3:8c:84:50:f8:b8:e5:02:91:6a:2e:11:68:
                    57:42:cc:b5:e9:f6:ec:8d:4a:26:42:e4:21:9a:9e:
                    d6:84:d0:95:0d:9b:e2:20:e0:2d:6b:2f:8a:08:a1:
                    eb:dd:4f:27:f0:ef:f4:1b:28:d6:8f:4f:c5:ca:ca:
                    29:48:41:09:f1:bf:54:cb:0f:b9:71:81:c8:62:3c:
                    90:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A9:7C:E4:08:67:7A:7D:1B:22:88:6E:0B:DD:37:AD:29:D6:F0:B2
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a393030303a3a2f33362d3336203d3e20323638303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:570c:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4b:4d:06:49:42:4e:fa:0e:b3:61:b8:73:9c:f9:f9:1f:f2:3d:
         84:6b:fe:4c:81:fa:d7:87:e4:3c:cd:5a:39:24:57:ab:e6:66:
         30:01:30:3d:92:7a:f8:c1:19:c9:43:c4:4d:a9:99:f8:0c:43:
         e5:98:c7:98:6d:95:01:0e:7d:bc:10:22:21:76:4d:89:bd:79:
         cd:a2:7b:58:04:8b:eb:9b:33:d0:8e:fc:1a:64:9c:67:d2:8c:
         e9:fb:0c:7e:dd:9e:39:ab:09:dc:1f:bb:d8:fd:1e:71:05:a5:
         81:5c:c2:9f:5d:41:29:91:c7:22:43:06:22:0c:1c:60:6e:3e:
         7f:18:24:1b:85:1c:82:90:56:22:8b:e8:98:45:f2:32:3d:e3:
         f2:fd:77:30:0a:be:cb:40:85:ae:34:53:1b:bd:7e:2c:c2:bd:
         d5:ad:b4:9d:7a:37:ab:64:2c:ad:ca:5c:bf:11:4a:9f:a2:d9:
         90:26:6d:f2:a6:42:0a:6d:e2:18:6a:56:c9:f4:43:db:fc:ec:
         49:1a:c6:42:51:33:34:d3:c5:2b:80:e6:23:fe:b8:23:27:12:
         a7:18:89:e4:0c:f8:12:95:7e:24:99:4e:8a:41:d4:e7:8c:70:
         42:1b:c2:8a:51:e9:7a:dc:8d:8c:c6:e6:f4:d5:09:30:c7:89:
         e6:28:de:53
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUbuhdRTvul1AHm/CVpoKdemBbPlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VBNzRGRjM5NDVFNzUwODU5OUQ1NEE3MjFFNDdCM0JB
NzU3MDZFMzAeFw0yNTA5MDgyMTI2MjRaFw0yNjA5MDcyMTMxMjRaMDMxMTAvBgNV
BAMTKDE4QTk3Q0U0MDg2NzdBN0QxQjIyODg2RTBCREQzN0FEMjlENkYwQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkUTj4uDTwA/YuBzk8B3z+wkXi
Yfef0b6ktE4rLBpy403PK1eCw991ku7eZ9+jzWV4uWcq7/PmepRedAU5a6zfTI/H
zhTlQzp0p+JxCisX1ll233/vmKodSuj/cd2maei9j4Qnvy4fUVq/1vwWeyll2cBv
MdXCcWcmHZDzq9lGRWhtPLoHiBL/cfpLh4Uuz7Oq6yAq0FdZB6eoVW8UHNQsSQ6Q
waMByY15YFAzLQBlELhLjMxDs4yEUPi45QKRai4RaFdCzLXp9uyNSiZC5CGantaE
0JUNm+Ig4C1rL4oIoevdTyfw7/QbKNaPT8XKyilIQQnxv1TLD7lxgchiPJC7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUGKl85Ahnen0bIohuC903rSnW8LIwHwYDVR0j
BBgwFoAUzqdP85RedQhZnVSnIeR7O6dXBuMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzJqSDQ4OUhzWHBtelh2ZjhYV2c1RGcyRFo4NVU2RmJjVm1NUHFMRm9G
NmcvMC9DRUE3NEZGMzk0NUU3NTA4NTk5RDU0QTcyMUU0N0IzQkE3NTcwNkUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFQTc0RkYzOTQ1RTc1MDg1
OTlENTRBNzIxRTQ3QjNCQTc1NzA2RTMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0cyakg0ODlIc1hwbXpYdmY4WFdnNURnMkRaODVVNkZiY1ZtTVBxTEZvRjZnLzAv
MzIzODMwMzQzYTM1MzczMDYzM2EzOTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzODMwMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVwyQMA0GCSqGSIb3DQEBCwUA
A4IBAQBLTQZJQk76DrNhuHOc+fkf8j2Ea/5MgfrXh+Q8zVo5JFer5mYwATA9knr4
wRnJQ8RNqZn4DEPlmMeYbZUBDn28ECIhdk2JvXnNontYBIvrmzPQjvwaZJxn0ozp
+wx+3Z45qwncH7vY/R5xBaWBXMKfXUEpkcciQwYiDBxgbj5/GCQbhRyCkFYii+iY
RfIyPePy/XcwCr7LQIWuNFMbvX4swr3VrbSdejerZCytyly/EUqfotmQJm3ypkIK
beIYalbJ9EPb/OxJGsZCUTM008UrgOYj/rgjJxKnGInkDPgSlX4kmU6KQdTnjHBC
G8KKUel63I2Mxub01Qkwx4nmKN5T
-----END CERTIFICATE-----
Generated at Fri Sep 19 01:46:53 2025 by rpki-client