Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/323830313a38303a3765303a3a2f34382d3438203d3e20323633363338.roa
File:                     323830313a38303a3765303a3a2f34382d3438203d3e20323633363338.roa (raw, json)
Hash identifier:          fV+OWt+YP3WVPfO5oJxX3oriY84QaC3BMSH/9n/3Rkc=
Subject key identifier:   B4:DB:67:CC:84:39:C4:B7:6F:01:16:C6:A3:E7:26:CB:62:EA:54:FB
Certificate issuer:       /CN=783FF5947307C60922650955561D38DF088C82A7
Certificate serial:       7C08B06BBAD642C700A94623797B2E7BB552A04D
Authority key identifier: 78:3F:F5:94:73:07:C6:09:22:65:09:55:56:1D:38:DF:08:8C:82:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783FF5947307C60922650955561D38DF088C82A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/323830313a38303a3765303a3a2f34382d3438203d3e20323633363338.roa
Signing time:             Thu 04 Sep 2025 12:45:48 +0000
ROA not before:           Thu 04 Sep 2025 12:40:48 +0000
ROA not after:            Thu 03 Sep 2026 12:45:48 +0000
asID:                     263638
IP address blocks:        2801:80:7e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/783FF5947307C60922650955561D38DF088C82A7.crl
                          rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/783FF5947307C60922650955561D38DF088C82A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783FF5947307C60922650955561D38DF088C82A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 02:55:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:08:b0:6b:ba:d6:42:c7:00:a9:46:23:79:7b:2e:7b:b5:52:a0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783FF5947307C60922650955561D38DF088C82A7
        Validity
            Not Before: Sep  4 12:40:48 2025 GMT
            Not After : Sep  3 12:45:48 2026 GMT
        Subject: CN=B4DB67CC8439C4B76F0116C6A3E726CB62EA54FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:be:4e:03:9c:f5:04:87:c1:4e:1f:b6:80:
                    3e:8d:e9:bb:9a:b6:35:1e:5e:8b:57:d8:6e:a8:0d:
                    54:6e:c5:1a:20:a4:1f:11:4b:a0:96:8e:1c:6b:58:
                    e2:6e:22:72:44:f8:f8:73:e2:a8:a7:32:28:8a:94:
                    60:1a:55:56:7c:35:43:33:2e:ab:a8:c3:7c:ed:fa:
                    60:78:67:83:5d:4c:72:79:86:76:bb:b8:6b:b8:e1:
                    4d:76:15:d0:9c:bd:34:5a:a9:a6:15:f0:68:45:f1:
                    27:e5:34:13:c9:40:0d:d0:f5:f6:9e:d3:11:7f:f5:
                    a7:73:1a:19:9c:b1:96:84:33:12:80:d3:ae:bb:15:
                    07:43:7d:aa:f2:03:3f:a5:d6:4e:43:a4:e5:23:7d:
                    64:85:21:90:d5:f0:bd:51:b7:52:c1:8d:cb:78:e4:
                    7b:db:ce:72:fe:4c:fc:08:1a:26:8c:10:27:62:4e:
                    63:da:61:6e:0b:ef:67:36:2d:a3:e6:71:bf:32:08:
                    43:1e:56:8c:81:d6:2f:c7:69:09:f7:ed:e5:04:a1:
                    a7:62:b6:eb:96:79:8c:70:4a:a2:76:43:5c:c1:42:
                    3e:75:24:0c:42:bc:f0:73:a8:aa:c1:7e:90:92:4b:
                    2d:1c:06:59:b0:bb:67:7c:e7:c1:42:4c:df:72:d1:
                    5c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DB:67:CC:84:39:C4:B7:6F:01:16:C6:A3:E7:26:CB:62:EA:54:FB
            X509v3 Authority Key Identifier:
                keyid:78:3F:F5:94:73:07:C6:09:22:65:09:55:56:1D:38:DF:08:8C:82:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/783FF5947307C60922650955561D38DF088C82A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/783FF5947307C60922650955561D38DF088C82A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nF7Dr4WyHK6msWNZDacqnJcMNr2UkhBjMBj4dSo9WKu/0/323830313a38303a3765303a3a2f34382d3438203d3e20323633363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:7e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:da:04:d0:1f:2b:28:dd:93:5e:0b:cf:b7:c8:3e:87:7c:94:
         6e:ce:c3:da:4d:b9:77:1e:d5:8d:90:3c:ad:9a:c1:dc:6c:1a:
         c8:19:d6:94:4f:30:5b:fa:78:2d:5d:da:4d:4a:fd:d5:46:e6:
         6f:8b:25:4a:62:30:c6:4d:a5:27:65:b7:c9:8f:a6:53:61:5c:
         3c:8b:22:cf:22:24:ae:9a:df:eb:e1:f4:4a:c9:cf:9b:27:8c:
         88:f3:0c:c9:23:2f:20:ec:7a:03:b7:03:82:92:30:4e:80:96:
         49:06:4d:b8:b8:f1:ff:5f:13:96:32:5a:2e:b3:b6:14:e5:f6:
         72:8f:e6:91:f5:a9:10:9a:17:f3:31:60:fd:3a:25:1e:59:60:
         2a:18:ee:64:9d:dd:bc:83:81:17:f2:9c:60:c2:2d:eb:21:8d:
         fb:a1:a4:17:fa:7e:b1:ef:c1:18:6f:e7:51:2e:04:b7:e1:c0:
         49:ee:57:b2:52:b7:79:c8:4f:04:27:74:66:c4:28:18:84:89:
         60:9b:c5:c9:85:40:bc:6a:0f:1d:80:b7:bb:04:17:69:a8:a3:
         d2:d7:71:06:c8:7f:13:28:37:27:b0:64:f9:25:d6:55:09:1c:
         eb:cf:d4:7f:73:02:7e:ec:7c:2a:20:f0:c3:04:af:18:27:d5:
         6a:4c:11:ff
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfAiwa7rWQscAqUYjeXsue7VSoE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgzRkY1OTQ3MzA3QzYwOTIyNjUwOTU1NTYxRDM4REYw
ODhDODJBNzAeFw0yNTA5MDQxMjQwNDhaFw0yNjA5MDMxMjQ1NDhaMDMxMTAvBgNV
BAMTKEI0REI2N0NDODQzOUM0Qjc2RjAxMTZDNkEzRTcyNkNCNjJFQTU0RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVUL5OA5z1BIfBTh+2gD6N6bua
tjUeXotX2G6oDVRuxRogpB8RS6CWjhxrWOJuInJE+Phz4qinMiiKlGAaVVZ8NUMz
Lquow3zt+mB4Z4NdTHJ5hna7uGu44U12FdCcvTRaqaYV8GhF8SflNBPJQA3Q9fae
0xF/9adzGhmcsZaEMxKA0667FQdDfaryAz+l1k5DpOUjfWSFIZDV8L1Rt1LBjct4
5HvbznL+TPwIGiaMECdiTmPaYW4L72c2LaPmcb8yCEMeVoyB1i/HaQn37eUEoadi
tuuWeYxwSqJ2Q1zBQj51JAxCvPBzqKrBfpCSSy0cBlmwu2d858FCTN9y0VzjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUtNtnzIQ5xLdvARbGo+cmy2LqVPswHwYDVR0j
BBgwFoAUeD/1lHMHxgkiZQlVVh043wiMgqcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9uRjdEcjRXeUhLNm1zV05aRGFjcW5KY01OcjJVa2hCak1CajRkU285V0t1
LzAvNzgzRkY1OTQ3MzA3QzYwOTIyNjUwOTU1NTYxRDM4REYwODhDODJBNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83ODNGRjU5NDczMDdDNjA5MjI2
NTA5NTU1NjFEMzhERjA4OEM4MkE3LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9u
RjdEcjRXeUhLNm1zV05aRGFjcW5KY01OcjJVa2hCak1CajRkU285V0t1LzAvMzIz
ODMwMzEzYTM4MzAzYTM3NjUzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYz
MzM2MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACgBAIAH4DANBgkqhkiG9w0BAQsFAAOCAQEAj9oE
0B8rKN2TXgvPt8g+h3yUbs7D2k25dx7VjZA8rZrB3GwayBnWlE8wW/p4LV3aTUr9
1Ubmb4slSmIwxk2lJ2W3yY+mU2FcPIsizyIkrprf6+H0SsnPmyeMiPMMySMvIOx6
A7cDgpIwToCWSQZNuLjx/18TljJaLrO2FOX2co/mkfWpEJoX8zFg/TolHllgKhju
ZJ3dvIOBF/KcYMIt6yGN+6GkF/p+se/BGG/nUS4Et+HASe5XslK3echPBCd0ZsQo
GISJYJvFyYVAvGoPHYC3uwQXaaij0tdxBsh/Eyg3J7Bk+SXWVQkc68/Uf3MCfux8
KiDwwwSvGCfVakwR/w==
-----END CERTIFICATE-----
Generated at Fri Sep 19 04:19:21 2025 by rpki-client