Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/323830343a376663343a666666663a3a2f34382d3438203d3e20323731373038.roa
File:                     323830343a376663343a666666663a3a2f34382d3438203d3e20323731373038.roa (raw, json)
Hash identifier:          vKUnLn7P8oPw0w3pBAEq0wBq/HcSgypWNtviWt9bonw=
Subject key identifier:   4E:37:C0:FB:C4:20:F1:23:95:28:B3:A4:1F:58:A6:37:E5:A4:26:F2
Certificate issuer:       /CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
Certificate serial:       6A8B3949E84B52F9D8BA1D6540E8027F9E1954C3
Authority key identifier: 70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/323830343a376663343a666666663a3a2f34382d3438203d3e20323731373038.roa
Signing time:             Tue 29 Jul 2025 22:34:44 +0000
ROA not before:           Tue 29 Jul 2025 22:29:44 +0000
ROA not after:            Tue 28 Jul 2026 22:34:44 +0000
asID:                     271708
IP address blocks:        2804:7fc4:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl
                          rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 16:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8b:39:49:e8:4b:52:f9:d8:ba:1d:65:40:e8:02:7f:9e:19:54:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7040E70A343ED61D14BF33985442CD6EB7927B4D
        Validity
            Not Before: Jul 29 22:29:44 2025 GMT
            Not After : Jul 28 22:34:44 2026 GMT
        Subject: CN=4E37C0FBC420F1239528B3A41F58A637E5A426F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:23:e4:46:f1:6d:a2:7f:e1:18:38:ce:f1:
                    7b:59:51:13:34:43:e0:31:10:05:02:cb:2f:e0:07:
                    84:49:21:73:b3:a5:dd:ba:59:da:8f:21:c6:b8:55:
                    4b:11:7a:57:71:d6:a3:f2:06:b3:bb:fc:bd:79:13:
                    cd:c3:ce:1c:e0:a4:7d:f4:81:aa:7b:84:d8:77:66:
                    40:8c:a6:7d:c9:dd:b0:11:b2:08:8b:aa:0f:53:12:
                    c6:ab:8f:ed:50:2e:0b:2f:8e:53:e5:8c:30:59:83:
                    f1:fd:2e:95:cf:2a:0a:51:cd:f8:d4:92:92:e6:8d:
                    35:17:09:3f:d8:6c:2f:3d:9d:f7:77:fd:c0:22:c4:
                    e9:23:28:66:8b:30:d4:78:66:24:d6:12:94:fd:12:
                    64:6d:93:04:23:18:e2:7a:55:a1:cd:b7:e0:52:fe:
                    69:4b:55:fc:2e:7f:a1:66:b0:5c:56:80:79:84:81:
                    6a:dd:5c:fb:be:f4:e7:46:e9:35:70:07:2b:c6:78:
                    4d:44:f3:5f:34:5b:a5:ae:58:46:2f:cf:85:46:45:
                    f6:93:f8:a2:74:dc:14:61:ee:37:4a:7c:f0:e1:95:
                    1b:5f:5c:9a:61:16:ac:94:01:d8:7b:72:5e:98:9b:
                    be:af:83:f8:3f:91:78:02:c6:3b:7d:97:24:ea:b0:
                    7c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:37:C0:FB:C4:20:F1:23:95:28:B3:A4:1F:58:A6:37:E5:A4:26:F2
            X509v3 Authority Key Identifier:
                keyid:70:40:E7:0A:34:3E:D6:1D:14:BF:33:98:54:42:CD:6E:B7:92:7B:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/7040E70A343ED61D14BF33985442CD6EB7927B4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7040E70A343ED61D14BF33985442CD6EB7927B4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AokTipvk2Ho6ybT1PEneHRyjpAdCJLdHv915B9fp6CC7/0/323830343a376663343a666666663a3a2f34382d3438203d3e20323731373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fc4:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:a8:2c:17:52:c4:a1:d4:48:5a:a0:67:60:ad:21:23:82:72:
         1d:b5:f3:cf:f3:5c:4f:8c:61:81:0f:23:59:b7:37:bc:0b:14:
         18:b8:b9:8b:e1:af:a8:7c:60:09:8c:5e:8f:ae:8e:c0:fd:bf:
         16:93:81:a0:9d:06:72:38:4b:a7:68:66:23:7d:f0:10:61:77:
         1c:89:7c:a3:9d:7d:31:42:96:f2:ab:b6:87:2b:19:f6:82:1a:
         be:41:d9:8a:de:98:c4:3f:3f:d1:f1:c5:e5:1e:90:26:48:fd:
         23:ea:05:9f:82:26:2e:a1:7c:75:3a:10:f6:b9:60:2e:fa:e9:
         58:dd:f8:07:48:81:a4:7d:f1:f3:71:81:50:50:0a:ad:ec:68:
         d2:eb:44:a3:43:1d:b2:c9:3d:5a:c8:1a:ad:8e:c0:ae:68:ef:
         81:61:b5:6d:03:71:bb:be:98:36:8d:4a:0f:5e:94:e2:5b:ac:
         e8:bd:03:34:0c:58:53:54:11:cb:0e:f0:3e:35:2b:b0:a5:56:
         4c:3c:3f:97:12:38:c0:be:24:76:8e:05:90:10:31:91:38:84:
         c0:d5:96:03:25:79:d2:6e:a5:cf:99:65:08:71:27:b1:4a:de:
         17:7e:9e:0c:89:83:65:fa:30:6c:4f:f7:c5:02:4b:b8:96:ef:
         b1:70:d8:ac
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUaos5SehLUvnYuh1lQOgCf54ZVMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA0MEU3MEEzNDNFRDYxRDE0QkYzMzk4NTQ0MkNENkVC
NzkyN0I0RDAeFw0yNTA3MjkyMjI5NDRaFw0yNjA3MjgyMjM0NDRaMDMxMTAvBgNV
BAMTKDRFMzdDMEZCQzQyMEYxMjM5NTI4QjNBNDFGNThBNjM3RTVBNDI2RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCptSPkRvFton/hGDjO8XtZURM0
Q+AxEAUCyy/gB4RJIXOzpd26WdqPIca4VUsReldx1qPyBrO7/L15E83DzhzgpH30
gap7hNh3ZkCMpn3J3bARsgiLqg9TEsarj+1QLgsvjlPljDBZg/H9LpXPKgpRzfjU
kpLmjTUXCT/YbC89nfd3/cAixOkjKGaLMNR4ZiTWEpT9EmRtkwQjGOJ6VaHNt+BS
/mlLVfwuf6FmsFxWgHmEgWrdXPu+9OdG6TVwByvGeE1E8180W6WuWEYvz4VGRfaT
+KJ03BRh7jdKfPDhlRtfXJphFqyUAdh7cl6Ym76vg/g/kXgCxjt9lyTqsHwjAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUTjfA+8Qg8SOVKLOkH1imN+WkJvIwHwYDVR0j
BBgwFoAUcEDnCjQ+1h0UvzOYVELNbreSe00wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW9rVGlwdmsySG82eWJUMVBFbmVIUnlqcEFkQ0pMZEh2OTE1QjlmcDZD
QzcvMC83MDQwRTcwQTM0M0VENjFEMTRCRjMzOTg1NDQyQ0Q2RUI3OTI3QjRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwNDBFNzBBMzQzRUQ2MUQx
NEJGMzM5ODU0NDJDRDZFQjc5MjdCNEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Fva1RpcHZrMkhvNnliVDFQRW5lSFJ5anBBZENKTGRIdjkxNUI5ZnA2Q0M3LzAv
MzIzODMwMzQzYTM3NjY2MzM0M2E2NjY2NjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMTM3MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEf8T//zANBgkqhkiG9w0BAQsF
AAOCAQEAQ6gsF1LEodRIWqBnYK0hI4JyHbXzz/NcT4xhgQ8jWbc3vAsUGLi5i+Gv
qHxgCYxej66OwP2/FpOBoJ0GcjhLp2hmI33wEGF3HIl8o519MUKW8qu2hysZ9oIa
vkHZit6YxD8/0fHF5R6QJkj9I+oFn4ImLqF8dToQ9rlgLvrpWN34B0iBpH3x83GB
UFAKrexo0utEo0Mdssk9WsgarY7ArmjvgWG1bQNxu76YNo1KD16U4lus6L0DNAxY
U1QRyw7wPjUrsKVWTDw/lxI4wL4kdo4FkBAxkTiEwNWWAyV50m6lz5llCHEnsUre
F36eDImDZfowbE/3xQJLuJbvsXDYrA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:05:31 2025 by rpki-client