Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3530303a3a2f34382d3438203d3e20323636313936.roa
File:                     323830343a336333343a3530303a3a2f34382d3438203d3e20323636313936.roa (raw, json)
Hash identifier:          HQvrk6NXJX3hB9ETJORKNVmcIdok2mYG/taMxN4486o=
Subject key identifier:   D3:7A:93:C5:79:8B:3D:14:F8:96:BD:1D:0C:55:2B:57:37:15:83:E5
Certificate issuer:       /CN=1619150682CDACD2E5DF559462D63AB555DA4E7A
Certificate serial:       527CEF43463817217DFB79F6B555B87BDCBF5B82
Authority key identifier: 16:19:15:06:82:CD:AC:D2:E5:DF:55:94:62:D6:3A:B5:55:DA:4E:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1619150682CDACD2E5DF559462D63AB555DA4E7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3530303a3a2f34382d3438203d3e20323636313936.roa
Signing time:             Tue 26 Aug 2025 19:22:25 +0000
ROA not before:           Tue 26 Aug 2025 19:17:25 +0000
ROA not after:            Tue 25 Aug 2026 19:22:25 +0000
asID:                     266196
IP address blocks:        2804:3c34:500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/1619150682CDACD2E5DF559462D63AB555DA4E7A.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/1619150682CDACD2E5DF559462D63AB555DA4E7A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1619150682CDACD2E5DF559462D63AB555DA4E7A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7c:ef:43:46:38:17:21:7d:fb:79:f6:b5:55:b8:7b:dc:bf:5b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1619150682CDACD2E5DF559462D63AB555DA4E7A
        Validity
            Not Before: Aug 26 19:17:25 2025 GMT
            Not After : Aug 25 19:22:25 2026 GMT
        Subject: CN=D37A93C5798B3D14F896BD1D0C552B57371583E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:47:de:26:db:04:e9:c8:1f:0d:86:b6:0a:4a:
                    6f:3a:df:76:10:a9:5f:eb:55:df:cb:9f:f6:ce:9b:
                    8a:ad:53:ba:ab:ff:10:9a:2f:ec:1e:d6:89:b1:4e:
                    9f:c6:c3:ce:d8:ff:a9:3e:9f:7d:83:fe:72:bb:cd:
                    70:00:9d:af:e1:da:95:9f:89:2e:ae:09:7f:a6:e7:
                    d1:77:8a:d1:db:46:86:73:1f:5f:47:ce:ca:5d:1d:
                    7e:ff:94:51:98:3f:26:de:69:92:a5:73:c9:bc:15:
                    27:0b:14:67:ee:54:b2:27:6c:30:8d:d3:98:78:cf:
                    50:44:d5:8b:44:e9:09:6b:79:2a:37:94:65:ee:cf:
                    73:4f:ad:76:53:5f:f9:03:6b:ab:d1:10:99:fa:b5:
                    b2:65:75:3f:db:b3:35:e9:e3:b7:fe:72:cc:ac:4a:
                    02:5c:b9:e0:45:74:6b:46:5d:f2:4a:00:0e:96:98:
                    6e:41:5a:54:fc:e9:4d:9a:e7:d6:a8:bd:d9:8c:e3:
                    9d:77:70:97:4d:88:7b:68:e5:15:74:77:80:ec:67:
                    48:9a:59:36:ee:ed:0c:72:2b:f5:70:f0:41:05:54:
                    27:4f:dc:24:5d:70:5d:1f:3e:eb:ef:f1:32:b0:7f:
                    1a:14:14:af:b0:2b:f4:a2:f9:e5:93:4e:91:4a:ce:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7A:93:C5:79:8B:3D:14:F8:96:BD:1D:0C:55:2B:57:37:15:83:E5
            X509v3 Authority Key Identifier:
                keyid:16:19:15:06:82:CD:AC:D2:E5:DF:55:94:62:D6:3A:B5:55:DA:4E:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/1619150682CDACD2E5DF559462D63AB555DA4E7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1619150682CDACD2E5DF559462D63AB555DA4E7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3530303a3a2f34382d3438203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c34:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:96:6c:73:73:bf:8a:8a:a5:65:e0:e8:5d:31:0e:6f:30:1e:
         f0:b6:34:67:20:62:06:4c:aa:68:1d:73:69:25:43:1b:53:ce:
         e9:af:4c:da:1b:ba:39:8f:c3:6c:2c:e2:06:3a:c9:57:0f:5f:
         ff:0f:6e:0b:9c:31:56:47:21:19:02:26:d2:7e:d5:44:04:06:
         eb:03:d3:41:17:77:9b:30:a2:79:8f:e8:35:bb:b6:c0:fd:16:
         71:53:77:8a:ef:58:62:f2:02:a6:c2:84:3d:89:ad:f6:c6:ad:
         9a:08:b6:a5:b0:45:44:02:eb:a9:10:91:91:ca:b3:4a:66:8e:
         be:9e:c8:47:a1:1e:6d:c9:17:20:b2:8b:b1:b3:ed:1d:71:00:
         06:f0:8b:cb:45:b7:18:9f:f0:d5:a0:42:a0:fa:25:10:7f:44:
         45:2e:f5:38:eb:65:2f:2d:7a:10:4f:81:57:c2:c4:07:0e:ae:
         21:8d:14:0d:f2:70:34:d9:55:0d:ad:a0:5e:09:b9:94:d0:24:
         67:85:f1:2f:f8:a2:73:f6:9d:9e:b9:d6:60:1a:2b:b0:c7:62:
         a3:89:cf:f5:f1:dd:4a:70:e7:e2:02:b5:c9:76:f7:8c:ba:1c:
         9e:aa:26:a7:a4:7d:d3:c5:2b:cb:cb:74:c8:c7:9b:33:68:d2:
         bf:42:06:6f
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUUnzvQ0Y4FyF9+3n2tVW4e9y/W4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYxOTE1MDY4MkNEQUNEMkU1REY1NTk0NjJENjNBQjU1
NURBNEU3QTAeFw0yNTA4MjYxOTE3MjVaFw0yNjA4MjUxOTIyMjVaMDMxMTAvBgNV
BAMTKEQzN0E5M0M1Nzk4QjNEMTRGODk2QkQxRDBDNTUyQjU3MzcxNTgzRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbR94m2wTpyB8NhrYKSm8633YQ
qV/rVd/Ln/bOm4qtU7qr/xCaL+we1omxTp/Gw87Y/6k+n32D/nK7zXAAna/h2pWf
iS6uCX+m59F3itHbRoZzH19HzspdHX7/lFGYPybeaZKlc8m8FScLFGfuVLInbDCN
05h4z1BE1YtE6QlreSo3lGXuz3NPrXZTX/kDa6vREJn6tbJldT/bszXp47f+csys
SgJcueBFdGtGXfJKAA6WmG5BWlT86U2a59aovdmM4513cJdNiHto5RV0d4DsZ0ia
WTbu7QxyK/Vw8EEFVCdP3CRdcF0fPuvv8TKwfxoUFK+wK/Si+eWTTpFKziUhAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQU03qTxXmLPRT4lr0dDFUrVzcVg+UwHwYDVR0j
BBgwFoAUFhkVBoLNrNLl31WUYtY6tVXaTnowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hVQ0RXQnU2U3BDM3VZVzhUOTlGdzRwb2RuV2RMMjY5R3NYMlUyNTRB
ZFEvMC8xNjE5MTUwNjgyQ0RBQ0QyRTVERjU1OTQ2MkQ2M0FCNTU1REE0RTdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2MTkxNTA2ODJDREFDRDJF
NURGNTU5NDYyRDYzQUI1NTVEQTRFN0EuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIVUNEV0J1NlNwQzN1WVc4VDk5Rnc0cG9kbldkTDI2OUdzWDJVMjU0QWRRLzAv
MzIzODMwMzQzYTMzNjMzMzM0M2EzNTMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzMjM2MzYzMTM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBDw0BQAwDQYJKoZIhvcNAQELBQAD
ggEBAG2WbHNzv4qKpWXg6F0xDm8wHvC2NGcgYgZMqmgdc2klQxtTzumvTNobujmP
w2ws4gY6yVcPX/8PbgucMVZHIRkCJtJ+1UQEBusD00EXd5swonmP6DW7tsD9FnFT
d4rvWGLyAqbChD2JrfbGrZoItqWwRUQC66kQkZHKs0pmjr6eyEehHm3JFyCyi7Gz
7R1xAAbwi8tFtxif8NWgQqD6JRB/REUu9TjrZS8tehBPgVfCxAcOriGNFA3ycDTZ
VQ2toF4JuZTQJGeF8S/4onP2nZ651mAaK7DHYqOJz/Xx3Upw5+ICtcl294y6HJ6q
JqekfdPFK8vLdMjHmzNo0r9CBm8=
-----END CERTIFICATE-----
Generated at Thu Sep 18 20:32:37 2025 by rpki-client