Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/323830343a353333633a3a2f33322d3438203d3e20323638353731.roa
File:                     323830343a353333633a3a2f33322d3438203d3e20323638353731.roa (raw, json)
Hash identifier:          Wy6zXeFF9zLfSKlPKUo/CqDXpbAn9M14TTt+2WbHiHI=
Subject key identifier:   AD:E2:24:82:AD:DB:B1:D5:7C:07:14:D2:0E:BB:47:0A:33:50:D4:2A
Certificate issuer:       /CN=EDA94EB3A8D69C144D55B1A1488E9709054DE36E
Certificate serial:       200808716A4B5DC47ADDA2A1054FD46685106B79
Authority key identifier: ED:A9:4E:B3:A8:D6:9C:14:4D:55:B1:A1:48:8E:97:09:05:4D:E3:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/323830343a353333633a3a2f33322d3438203d3e20323638353731.roa
Signing time:             Mon 07 Jul 2025 13:48:16 +0000
ROA not before:           Mon 07 Jul 2025 13:43:16 +0000
ROA not after:            Mon 06 Jul 2026 13:48:16 +0000
asID:                     268571
IP address blocks:        2804:533c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.crl
                          rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 09:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:08:08:71:6a:4b:5d:c4:7a:dd:a2:a1:05:4f:d4:66:85:10:6b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA94EB3A8D69C144D55B1A1488E9709054DE36E
        Validity
            Not Before: Jul  7 13:43:16 2025 GMT
            Not After : Jul  6 13:48:16 2026 GMT
        Subject: CN=ADE22482ADDBB1D57C0714D20EBB470A3350D42A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:54:3d:ab:3b:4a:28:86:42:19:04:12:82:e9:
                    ea:06:97:91:6f:4f:9a:f0:37:42:ab:c5:30:bb:6f:
                    dd:a6:f7:56:62:83:e4:59:eb:84:94:74:cd:04:6d:
                    d6:51:da:03:39:a6:ae:c8:b4:f1:b2:88:ac:aa:8d:
                    c4:fc:3b:ce:34:1f:01:e3:5e:de:0a:24:f4:e0:3f:
                    9b:e3:a7:c6:05:26:2e:44:d3:4b:dc:54:5b:17:4b:
                    a6:64:1b:a0:f5:b6:df:20:12:bf:a8:bc:8e:5c:c0:
                    6f:12:97:d8:f2:af:3e:fe:f3:22:57:4a:17:56:18:
                    d4:05:45:68:63:59:14:dd:aa:a2:30:5c:d5:3a:9d:
                    3a:2f:09:36:03:22:df:62:81:29:3a:7b:0e:89:53:
                    9b:05:0b:e0:82:5d:58:5a:5b:d3:c1:f2:5a:ac:83:
                    af:39:eb:88:5b:d6:f8:06:73:e2:5d:92:d5:05:41:
                    d3:06:7d:6f:3d:10:52:d6:b6:e3:ad:6b:b8:64:81:
                    e4:f1:14:72:d4:40:82:b3:9e:c7:1f:b5:70:75:2b:
                    73:16:21:f5:e6:61:22:f4:d1:94:65:d7:d8:b5:a1:
                    9a:e2:42:1f:a9:94:69:16:4b:c6:db:e4:12:67:de:
                    aa:24:ca:19:66:a2:7f:d3:92:d3:47:3c:e0:b7:f4:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E2:24:82:AD:DB:B1:D5:7C:07:14:D2:0E:BB:47:0A:33:50:D4:2A
            X509v3 Authority Key Identifier:
                keyid:ED:A9:4E:B3:A8:D6:9C:14:4D:55:B1:A1:48:8E:97:09:05:4D:E3:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA94EB3A8D69C144D55B1A1488E9709054DE36E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2qXoYu95sWZ7rhX1ygc2ytJ7d8SxrPdRfAixiR4ovX/0/323830343a353333633a3a2f33322d3438203d3e20323638353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:533c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:9b:16:9b:37:08:8c:ef:0a:04:3d:86:62:db:3d:d2:d5:bf:
         a7:c1:01:8a:23:5f:30:40:e4:3b:0b:bc:58:f7:cb:90:b5:31:
         e7:b3:f2:61:49:55:15:3a:1e:55:9d:84:19:84:9f:13:c1:1e:
         63:73:5e:c7:f3:93:5a:a6:6c:f4:e0:15:71:dd:90:85:24:d6:
         ea:47:d6:46:a8:06:af:cb:ea:a6:2b:17:30:4e:98:b7:bd:97:
         c4:96:bc:54:c8:54:67:30:c0:21:fd:e5:62:4e:5e:e4:dc:9c:
         ca:c6:e1:f2:39:37:3a:18:f6:e0:46:18:28:1e:b2:00:bf:61:
         8c:4f:13:56:f7:56:fd:50:7f:84:8c:b0:78:5f:f2:43:ee:d1:
         57:2c:31:fb:70:a0:e2:57:b4:a5:62:7c:24:59:87:51:fe:ad:
         1d:86:71:68:da:f2:60:ca:39:b0:41:b5:75:84:9d:cd:33:35:
         40:3d:18:c1:1c:83:45:17:0a:8d:08:6d:51:1a:90:cf:25:ab:
         15:ce:02:a6:de:57:0b:1e:a0:a1:ef:6a:17:ad:7b:46:de:5f:
         bf:18:87:c0:87:92:fa:70:0e:2b:1e:1d:9f:fa:1e:37:b2:c3:
         ed:1c:f7:43:08:5f:43:35:c4:43:f6:07:27:f3:dd:b7:d9:41:
         b1:80:69:67
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIAgIcWpLXcR63aKhBU/UZoUQa3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBOTRFQjNBOEQ2OUMxNDRENTVCMUExNDg4RTk3MDkw
NTRERTM2RTAeFw0yNTA3MDcxMzQzMTZaFw0yNjA3MDYxMzQ4MTZaMDMxMTAvBgNV
BAMTKEFERTIyNDgyQUREQkIxRDU3QzA3MTREMjBFQkI0NzBBMzM1MEQ0MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjVD2rO0oohkIZBBKC6eoGl5Fv
T5rwN0KrxTC7b92m91Zig+RZ64SUdM0EbdZR2gM5pq7ItPGyiKyqjcT8O840HwHj
Xt4KJPTgP5vjp8YFJi5E00vcVFsXS6ZkG6D1tt8gEr+ovI5cwG8Sl9jyrz7+8yJX
ShdWGNQFRWhjWRTdqqIwXNU6nTovCTYDIt9igSk6ew6JU5sFC+CCXVhaW9PB8lqs
g68564hb1vgGc+JdktUFQdMGfW89EFLWtuOta7hkgeTxFHLUQIKznscftXB1K3MW
IfXmYSL00ZRl19i1oZriQh+plGkWS8bb5BJn3qokyhlmon/TktNHPOC39KZBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUreIkgq3bsdV8BxTSDrtHCjNQ1CowHwYDVR0j
BBgwFoAU7alOs6jWnBRNVbGhSI6XCQVN424wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1EycVhvWXU5NXNXWjdyaFgxeWdjMnl0SjdkOFN4clBkUmZBaXhpUjRv
dlgvMC9FREE5NEVCM0E4RDY5QzE0NEQ1NUIxQTE0ODhFOTcwOTA1NERFMzZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEQTk0RUIzQThENjlDMTQ0
RDU1QjFBMTQ4OEU5NzA5MDU0REUzNkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dRMnFYb1l1OTVzV1o3cmhYMXlnYzJ5dEo3ZDhTeHJQZFJmQWl4aVI0b3ZYLzAv
MzIzODMwMzQzYTM1MzMzMzYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzUzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARTPDANBgkqhkiG9w0BAQsFAAOCAQEALZsWmzcI
jO8KBD2GYts90tW/p8EBiiNfMEDkOwu8WPfLkLUx57PyYUlVFToeVZ2EGYSfE8Ee
Y3Nex/OTWqZs9OAVcd2QhSTW6kfWRqgGr8vqpisXME6Yt72XxJa8VMhUZzDAIf3l
Yk5e5Nycysbh8jk3Ohj24EYYKB6yAL9hjE8TVvdW/VB/hIyweF/yQ+7RVywx+3Cg
4le0pWJ8JFmHUf6tHYZxaNryYMo5sEG1dYSdzTM1QD0YwRyDRRcKjQhtURqQzyWr
Fc4Cpt5XCx6goe9qF617Rt5fvxiHwIeS+nAOKx4dn/oeN7LD7Rz3QwhfQzXEQ/YH
J/Pdt9lBsYBpZw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:59:18 2025 by rpki-client