Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/323830343a313236303a3a2f33322d313238203d3e20323633343733.roa
File:                     323830343a313236303a3a2f33322d313238203d3e20323633343733.roa (raw, json)
Hash identifier:          P5tpt3sNZYNxkNQZ5A3TTCitEaagJlKaWoGIaLkqVfE=
Subject key identifier:   4A:CF:BE:D4:AC:E2:30:19:3A:31:25:F3:EC:F7:50:6A:B2:2C:9E:9C
Certificate issuer:       /CN=1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53
Certificate serial:       74C18F62AC71DB7C3C2188B457B4F706F4FA5895
Authority key identifier: 19:20:A0:AD:22:86:EB:26:B5:D8:87:A0:E2:DA:2E:52:90:F7:AD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/323830343a313236303a3a2f33322d313238203d3e20323633343733.roa
Signing time:             Tue 05 Aug 2025 23:19:46 +0000
ROA not before:           Tue 05 Aug 2025 23:14:46 +0000
ROA not after:            Tue 04 Aug 2026 23:19:46 +0000
asID:                     263473
IP address blocks:        2804:1260::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.crl
                          rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c1:8f:62:ac:71:db:7c:3c:21:88:b4:57:b4:f7:06:f4:fa:58:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53
        Validity
            Not Before: Aug  5 23:14:46 2025 GMT
            Not After : Aug  4 23:19:46 2026 GMT
        Subject: CN=4ACFBED4ACE230193A3125F3ECF7506AB22C9E9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:a1:a4:b8:09:fd:3d:b0:e9:9d:e1:69:b1:
                    fc:0d:0a:03:4e:d1:2c:1a:de:7c:61:70:35:03:f9:
                    82:ba:bd:f2:bd:80:0f:59:e6:e3:1d:64:31:0c:35:
                    7f:5c:8f:cf:6d:06:71:47:0c:aa:bf:76:c7:92:f8:
                    53:17:e5:af:0d:44:60:a4:22:f8:c4:7f:43:ab:d3:
                    44:27:bb:8f:5f:ea:3b:3e:a5:2c:ca:ef:79:5a:10:
                    ae:5c:ae:9a:7c:cd:63:58:37:e6:96:55:59:bc:7f:
                    dc:cf:2c:08:2b:a8:8f:ab:8e:01:af:a0:49:46:f9:
                    53:a4:69:a1:be:ba:1e:8f:cc:39:40:fd:b6:79:78:
                    44:60:ed:cd:6e:da:19:41:79:91:d4:c6:8e:d2:86:
                    ce:f0:5a:ea:df:7f:5b:49:42:69:ef:53:64:a5:86:
                    1d:69:3a:11:e2:53:73:cc:fd:e5:b3:8f:aa:24:4f:
                    a6:15:dd:77:c7:8a:62:d4:34:d5:42:35:9e:6a:d4:
                    68:a9:b9:83:e7:ef:95:7f:58:ee:e5:a0:8e:3e:02:
                    1f:df:0e:42:ed:83:55:98:72:75:89:c2:c6:47:a0:
                    32:dd:c8:a0:7e:31:f2:22:8f:52:70:37:92:e5:97:
                    04:8e:03:ca:e7:f0:f2:1b:02:fb:49:90:76:32:ba:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CF:BE:D4:AC:E2:30:19:3A:31:25:F3:EC:F7:50:6A:B2:2C:9E:9C
            X509v3 Authority Key Identifier:
                keyid:19:20:A0:AD:22:86:EB:26:B5:D8:87:A0:E2:DA:2E:52:90:F7:AD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/323830343a313236303a3a2f33322d313238203d3e20323633343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1260::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:c9:88:f4:0d:25:4a:e3:7b:5b:57:77:a9:51:51:15:8c:eb:
         cb:ef:f7:38:2a:a1:d2:3e:2e:6d:2a:dd:02:53:1a:79:86:0c:
         d1:06:f7:60:ee:10:4c:f2:b7:ac:47:72:c7:ac:a1:6c:35:60:
         3c:a2:16:f0:76:41:a2:00:62:89:d7:8c:ab:50:8b:ae:67:5d:
         ce:24:7f:bd:9b:5e:93:1b:d6:d3:99:2d:75:e3:61:05:9d:61:
         9b:26:51:39:e6:58:e3:ad:cb:4f:5a:1b:9f:df:1e:a0:00:4c:
         5a:e2:13:03:7e:e7:63:20:21:4b:70:70:11:08:a3:ce:73:32:
         30:1d:6d:52:1b:86:1d:ac:a8:f2:3f:c1:6e:c6:a9:69:b0:9a:
         67:29:b2:e2:61:1c:83:6e:ce:bc:65:95:e1:6f:d3:2e:20:27:
         03:24:06:87:22:33:84:c6:46:7b:81:ec:a6:0a:44:26:8e:d3:
         d4:1d:f5:4f:84:d7:ed:a5:ba:d8:83:35:db:5e:b0:43:89:26:
         93:cf:05:56:92:11:57:73:37:92:a1:2d:4f:99:6f:e9:b8:8c:
         80:93:b6:cd:ee:ff:1f:b2:42:cb:df:39:5f:ef:07:25:4c:07:
         16:1d:54:c5:b6:1f:3e:da:18:a3:6f:ac:a9:54:b1:f9:10:80:
         30:e6:88:39
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUdMGPYqxx23w8IYi0V7T3BvT6WJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkyMEEwQUQyMjg2RUIyNkI1RDg4N0EwRTJEQTJFNTI5
MEY3QUQ1MzAeFw0yNTA4MDUyMzE0NDZaFw0yNjA4MDQyMzE5NDZaMDMxMTAvBgNV
BAMTKDRBQ0ZCRUQ0QUNFMjMwMTkzQTMxMjVGM0VDRjc1MDZBQjIyQzlFOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5z6GkuAn9PbDpneFpsfwNCgNO
0Swa3nxhcDUD+YK6vfK9gA9Z5uMdZDEMNX9cj89tBnFHDKq/dseS+FMX5a8NRGCk
IvjEf0Or00Qnu49f6js+pSzK73laEK5crpp8zWNYN+aWVVm8f9zPLAgrqI+rjgGv
oElG+VOkaaG+uh6PzDlA/bZ5eERg7c1u2hlBeZHUxo7Shs7wWurff1tJQmnvU2Sl
hh1pOhHiU3PM/eWzj6okT6YV3XfHimLUNNVCNZ5q1GipuYPn75V/WO7loI4+Ah/f
DkLtg1WYcnWJwsZHoDLdyKB+MfIij1JwN5LllwSOA8rn8PIbAvtJkHYyuvQDAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUSs++1KziMBk6MSXz7PdQarIsnpwwHwYDVR0j
BBgwFoAUGSCgrSKG6ya12Ieg4touUpD3rVMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUQ0VGh2dUJzQllHRWpKS0hYSkh0NjMyWExhNTZUbVhneHB0SllmZzZi
VEUvMC8xOTIwQTBBRDIyODZFQjI2QjVEODg3QTBFMkRBMkU1MjkwRjdBRDUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MjBBMEFEMjI4NkVCMjZC
NUQ4ODdBMEUyREEyRTUyOTBGN0FENTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FENFRodnVCc0JZR0VqSktIWEpIdDYzMlhMYTU2VG1YZ3hwdEpZZmc2YlRFLzAv
MzIzODMwMzQzYTMxMzIzNjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzNDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBBJgMA0GCSqGSIb3DQEBCwUAA4IBAQAnyYj0
DSVK43tbV3epUVEVjOvL7/c4KqHSPi5tKt0CUxp5hgzRBvdg7hBM8resR3LHrKFs
NWA8ohbwdkGiAGKJ14yrUIuuZ13OJH+9m16TG9bTmS1142EFnWGbJlE55ljjrctP
Whuf3x6gAExa4hMDfudjICFLcHARCKPOczIwHW1SG4YdrKjyP8FuxqlpsJpnKbLi
YRyDbs68ZZXhb9MuICcDJAaHIjOExkZ7geymCkQmjtPUHfVPhNftpbrYgzXbXrBD
iSaTzwVWkhFXczeSoS1PmW/puIyAk7bN7v8fskLL3zlf7wclTAcWHVTFth8+2hij
b6ypVLH5EIAw5og5
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:53:45 2025 by rpki-client