Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33342d3334203d3e20323732313832.roa
File:                     323830343a383333303a3a2f33342d3334203d3e20323732313832.roa (raw, json)
Hash identifier:          3KlNYjOsDG5wxYeaz5WZ44puRGbJT91FgRxVnMuGIUA=
Subject key identifier:   C4:6D:1A:81:B9:70:E2:84:40:C5:25:43:27:D6:EF:AA:62:B1:B2:03
Certificate issuer:       /CN=DE1B261EC657E0492948F07F01B7D7F9081D188F
Certificate serial:       6A8C2E99E287EADCFB5541FC714758BBD2E32312
Authority key identifier: DE:1B:26:1E:C6:57:E0:49:29:48:F0:7F:01:B7:D7:F9:08:1D:18:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1B261EC657E0492948F07F01B7D7F9081D188F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33342d3334203d3e20323732313832.roa
Signing time:             Fri 08 Aug 2025 18:32:51 +0000
ROA not before:           Fri 08 Aug 2025 18:27:51 +0000
ROA not after:            Fri 07 Aug 2026 18:32:51 +0000
asID:                     272182
IP address blocks:        2804:8330::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/DE1B261EC657E0492948F07F01B7D7F9081D188F.crl
                          rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/DE1B261EC657E0492948F07F01B7D7F9081D188F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1B261EC657E0492948F07F01B7D7F9081D188F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 00:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8c:2e:99:e2:87:ea:dc:fb:55:41:fc:71:47:58:bb:d2:e3:23:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE1B261EC657E0492948F07F01B7D7F9081D188F
        Validity
            Not Before: Aug  8 18:27:51 2025 GMT
            Not After : Aug  7 18:32:51 2026 GMT
        Subject: CN=C46D1A81B970E28440C5254327D6EFAA62B1B203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:23:c1:ff:01:80:46:dd:06:04:31:60:74:a4:
                    f4:32:3b:cb:aa:62:b1:dd:1f:db:d1:9d:68:09:8e:
                    05:6c:eb:c9:cc:ff:95:cd:a9:5f:85:42:8c:24:e6:
                    79:cc:ed:3d:89:bb:b2:b2:47:db:b3:36:90:8d:41:
                    f9:26:80:e5:fb:1f:32:6c:38:e4:5c:c6:8a:42:c1:
                    eb:19:17:78:e3:55:df:8b:fa:42:f8:a3:60:41:20:
                    47:63:30:6b:4d:9b:e4:8f:d3:56:50:b2:95:f4:56:
                    4d:9f:42:01:43:7a:19:68:79:6d:c5:85:9d:4c:5e:
                    4f:fc:d7:67:21:c5:51:1b:a5:6b:be:ec:65:7b:80:
                    2a:a1:07:e3:1f:78:66:8a:3c:d6:5b:45:fa:2f:8d:
                    05:d9:66:6f:e2:e7:c7:86:17:34:c1:c3:37:19:3c:
                    6c:40:0c:a9:69:73:9f:a4:8a:da:23:ae:64:03:eb:
                    e9:26:77:c4:2f:b7:a9:fa:5d:0c:48:d9:9e:83:ba:
                    80:81:ef:5e:dd:a5:89:c5:59:67:a3:f6:64:8e:5a:
                    f5:5d:8b:94:c2:df:33:72:61:a5:7f:42:6a:2f:8f:
                    95:e2:16:e9:cf:00:f9:56:30:0d:4c:27:cf:cf:a0:
                    42:bf:9d:68:04:49:60:d6:45:db:92:e1:11:15:63:
                    1f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6D:1A:81:B9:70:E2:84:40:C5:25:43:27:D6:EF:AA:62:B1:B2:03
            X509v3 Authority Key Identifier:
                keyid:DE:1B:26:1E:C6:57:E0:49:29:48:F0:7F:01:B7:D7:F9:08:1D:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/DE1B261EC657E0492948F07F01B7D7F9081D188F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1B261EC657E0492948F07F01B7D7F9081D188F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33342d3334203d3e20323732313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8330::/34

    Signature Algorithm: sha256WithRSAEncryption
         a0:a4:10:aa:af:5c:d4:12:fd:80:6d:37:ba:10:d1:06:b5:e6:
         f3:cc:4f:14:bf:d7:19:4f:a6:d3:1d:95:a4:4a:b7:75:e4:cc:
         dd:94:75:c5:3e:5c:f6:72:89:a8:0c:fb:7a:4a:55:01:fd:6c:
         f1:95:b5:9e:a0:eb:6b:65:e2:c7:fb:f0:39:7e:26:81:63:3d:
         d7:9e:a9:7a:18:ea:00:39:38:33:09:ca:5b:dc:b0:af:d3:4f:
         49:38:e7:9e:e4:96:79:70:bc:13:e2:03:6c:8d:e0:df:20:61:
         23:b5:d2:f6:69:d9:93:8b:98:ed:d9:5c:ea:fe:85:27:b6:a2:
         ba:d3:db:c8:59:0a:e4:09:35:dd:3f:8b:09:ff:bc:74:f0:14:
         1c:13:e0:99:78:4e:1f:f2:cb:43:b1:49:fd:d8:56:78:92:e1:
         6e:1a:3f:6f:2f:ff:2d:43:b4:47:d2:16:08:24:e7:0f:15:a4:
         a8:45:38:49:0b:20:0b:1e:69:88:29:8c:97:06:1d:90:c0:00:
         c4:2e:da:2e:50:77:1a:9c:88:81:5d:70:f1:d6:3f:40:58:80:
         fb:86:9b:fd:e9:f0:bb:f9:94:ab:5c:71:cd:d0:d4:7b:a6:c3:
         90:66:61:fd:4e:b8:8c:91:93:45:8e:87:cb:bc:fc:bd:c5:be:
         66:7c:78:5d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaowumeKH6tz7VUH8cUdYu9LjIxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUxQjI2MUVDNjU3RTA0OTI5NDhGMDdGMDFCN0Q3Rjkw
ODFEMTg4RjAeFw0yNTA4MDgxODI3NTFaFw0yNjA4MDcxODMyNTFaMDMxMTAvBgNV
BAMTKEM0NkQxQTgxQjk3MEUyODQ0MEM1MjU0MzI3RDZFRkFBNjJCMUIyMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGI8H/AYBG3QYEMWB0pPQyO8uq
YrHdH9vRnWgJjgVs68nM/5XNqV+FQowk5nnM7T2Ju7KyR9uzNpCNQfkmgOX7HzJs
OORcxopCwesZF3jjVd+L+kL4o2BBIEdjMGtNm+SP01ZQspX0Vk2fQgFDehloeW3F
hZ1MXk/812chxVEbpWu+7GV7gCqhB+MfeGaKPNZbRfovjQXZZm/i58eGFzTBwzcZ
PGxADKlpc5+kitojrmQD6+kmd8Qvt6n6XQxI2Z6DuoCB717dpYnFWWej9mSOWvVd
i5TC3zNyYaV/Qmovj5XiFunPAPlWMA1MJ8/PoEK/nWgESWDWRduS4REVYx+dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxG0agblw4oRAxSVDJ9bvqmKxsgMwHwYDVR0j
BBgwFoAU3hsmHsZX4EkpSPB/AbfX+QgdGI8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFR6ZEdLVVNaOXZCdktYdko1MWd4VnI5Y1dQR01BUEtYRjNIYWJvY2tG
UGcvMC9ERTFCMjYxRUM2NTdFMDQ5Mjk0OEYwN0YwMUI3RDdGOTA4MUQxODhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUIyNjFFQzY1N0UwNDky
OTQ4RjA3RjAxQjdEN0Y5MDgxRDE4OEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhUemRHS1VTWjl2QnZLWHZKNTFneFZyOWNXUEdNQVBLWEYzSGFib2NrRlBnLzAv
MzIzODMwMzQzYTM4MzMzMzMwM2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNzMy
MzEzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKASDMAAwDQYJKoZIhvcNAQELBQADggEBAKCkEKqv
XNQS/YBtN7oQ0Qa15vPMTxS/1xlPptMdlaRKt3XkzN2UdcU+XPZyiagM+3pKVQH9
bPGVtZ6g62tl4sf78Dl+JoFjPdeeqXoY6gA5ODMJylvcsK/TT0k4557klnlwvBPi
A2yN4N8gYSO10vZp2ZOLmO3ZXOr+hSe2orrT28hZCuQJNd0/iwn/vHTwFBwT4Jl4
Th/yy0OxSf3YVniS4W4aP28v/y1DtEfSFggk5w8VpKhFOEkLIAseaYgpjJcGHZDA
AMQu2i5QdxqciIFdcPHWP0BYgPuGm/3p8Lv5lKtccc3Q1Humw5BmYf1OuIyRk0WO
h8u8/L3FvmZ8eF0=
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:07 2025 by rpki-client