Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/323830343a356432633a3a2f33322d3438203d3e20323638393535.roa
File:                     323830343a356432633a3a2f33322d3438203d3e20323638393535.roa (raw, json)
Hash identifier:          73J1seQFy7gN9PvO2G0tV2jiq6MbO1z9ZU1/Z/I21Ac=
Subject key identifier:   2F:80:66:4E:F3:C0:11:2B:97:B8:3E:B0:E4:87:92:EA:1E:1E:79:05
Certificate issuer:       /CN=3F84F51408CD88D165CE931B15E48DC9CB8084BE
Certificate serial:       6A0189A3A1BC0F60284CA35BAD0C81723465D167
Authority key identifier: 3F:84:F5:14:08:CD:88:D1:65:CE:93:1B:15:E4:8D:C9:CB:80:84:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F84F51408CD88D165CE931B15E48DC9CB8084BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/323830343a356432633a3a2f33322d3438203d3e20323638393535.roa
Signing time:             Thu 07 Aug 2025 17:14:46 +0000
ROA not before:           Thu 07 Aug 2025 17:09:46 +0000
ROA not after:            Thu 06 Aug 2026 17:14:46 +0000
asID:                     268955
IP address blocks:        2804:5d2c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.crl
                          rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F84F51408CD88D165CE931B15E48DC9CB8084BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 11:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:01:89:a3:a1:bc:0f:60:28:4c:a3:5b:ad:0c:81:72:34:65:d1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F84F51408CD88D165CE931B15E48DC9CB8084BE
        Validity
            Not Before: Aug  7 17:09:46 2025 GMT
            Not After : Aug  6 17:14:46 2026 GMT
        Subject: CN=2F80664EF3C0112B97B83EB0E48792EA1E1E7905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9a:ea:2a:be:dd:27:6b:77:62:15:0f:c1:7e:
                    c8:89:a9:e4:59:73:ac:3e:2e:9a:31:5f:af:31:46:
                    75:cb:f6:fc:ba:cd:d0:90:77:d6:62:53:9e:2b:d2:
                    b5:9e:cc:b9:64:8d:6f:f1:2a:77:d4:99:05:dd:8a:
                    2e:f6:b3:4f:b6:af:a1:ed:c7:d9:e7:9a:43:18:8d:
                    57:a2:42:50:b0:b7:f8:51:f2:59:29:1e:24:ee:67:
                    7c:53:27:74:bc:a5:98:64:9c:2f:07:92:7b:0c:01:
                    72:06:fb:22:ff:c0:7f:3f:58:e3:98:ea:4e:03:51:
                    98:52:68:1b:bd:86:2b:b0:e8:7a:63:f0:04:c7:3f:
                    85:bd:2a:db:20:ed:77:b3:93:e2:e4:a7:77:ed:4f:
                    1d:82:50:34:d3:2d:0f:04:c4:3b:27:d9:84:27:7b:
                    06:70:bc:91:61:eb:49:56:b2:7f:aa:6d:75:0b:2f:
                    3f:a6:6c:73:0f:21:7f:cd:7a:3d:50:c1:52:7b:87:
                    c5:13:46:ff:b5:bb:f9:f8:19:b1:b0:29:74:ff:d1:
                    c5:f4:29:56:73:f5:c5:d1:e2:ce:d1:76:ef:31:5b:
                    0b:39:df:c9:ca:66:3b:3e:02:dc:eb:69:de:5b:9e:
                    3e:37:20:13:bb:43:83:ba:43:e1:b3:cb:d5:fe:ee:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:80:66:4E:F3:C0:11:2B:97:B8:3E:B0:E4:87:92:EA:1E:1E:79:05
            X509v3 Authority Key Identifier:
                keyid:3F:84:F5:14:08:CD:88:D1:65:CE:93:1B:15:E4:8D:C9:CB:80:84:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F84F51408CD88D165CE931B15E48DC9CB8084BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/323830343a356432633a3a2f33322d3438203d3e20323638393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:0a:d6:a1:ed:0b:3b:cd:0c:55:e7:a2:24:d2:d2:c8:f3:65:
         5c:b1:ab:06:bb:c5:ac:3f:5d:bf:0d:2a:d8:ee:3e:d8:57:1d:
         08:ad:29:c7:07:7e:e7:6b:ea:ad:69:0b:c0:9f:b3:d1:5f:16:
         2f:3b:fe:0f:3d:af:e8:d6:87:d9:78:50:33:c0:06:8b:8d:55:
         31:6b:ea:a4:a0:ed:ce:a4:05:26:5c:e3:37:e8:9e:07:88:2c:
         2a:15:02:d5:08:2e:45:41:79:79:76:38:29:af:81:47:8b:0e:
         52:cd:58:7b:bb:cb:81:84:3d:d0:31:92:de:7d:aa:c3:76:ed:
         e7:07:38:ef:b8:87:f1:d7:b8:12:fe:37:de:39:13:ae:e1:8d:
         b4:c4:e0:73:c6:c1:c5:e1:75:77:a5:52:32:d0:4d:cb:a8:13:
         2b:ea:61:20:e0:f7:e5:80:66:0a:8e:f8:33:ee:37:b2:71:b1:
         64:7b:19:84:8c:8c:05:00:2d:96:0c:60:ed:07:aa:68:e2:9d:
         d5:75:c6:87:e9:5e:8d:65:d0:d5:5d:88:78:d9:9e:6f:dc:d1:
         e9:1c:7d:1b:c0:25:eb:44:1d:20:ff:3c:34:c1:48:df:ac:ab:
         b2:06:3b:1d:ed:08:52:6b:8e:51:3f:4e:21:a7:e7:8a:67:cc:
         35:ef:bd:90
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUagGJo6G8D2AoTKNbrQyBcjRl0WcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y4NEY1MTQwOENEODhEMTY1Q0U5MzFCMTVFNDhEQzlD
QjgwODRCRTAeFw0yNTA4MDcxNzA5NDZaFw0yNjA4MDYxNzE0NDZaMDMxMTAvBgNV
BAMTKDJGODA2NjRFRjNDMDExMkI5N0I4M0VCMEU0ODc5MkVBMUUxRTc5MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6muoqvt0na3diFQ/BfsiJqeRZ
c6w+LpoxX68xRnXL9vy6zdCQd9ZiU54r0rWezLlkjW/xKnfUmQXdii72s0+2r6Ht
x9nnmkMYjVeiQlCwt/hR8lkpHiTuZ3xTJ3S8pZhknC8HknsMAXIG+yL/wH8/WOOY
6k4DUZhSaBu9hiuw6Hpj8ATHP4W9Ktsg7Xezk+Lkp3ftTx2CUDTTLQ8ExDsn2YQn
ewZwvJFh60lWsn+qbXULLz+mbHMPIX/Nej1QwVJ7h8UTRv+1u/n4GbGwKXT/0cX0
KVZz9cXR4s7Rdu8xWws538nKZjs+Atzrad5bnj43IBO7Q4O6Q+Gzy9X+7oYZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUL4BmTvPAESuXuD6w5IeS6h4eeQUwHwYDVR0j
BBgwFoAUP4T1FAjNiNFlzpMbFeSNycuAhL4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUNwMjUzcEg5cERzRWs5UG5YeTI2N2ZrZkNlNW00cnVnVXZZazd0bkpm
TTYvMC8zRjg0RjUxNDA4Q0Q4OEQxNjVDRTkzMUIxNUU0OERDOUNCODA4NEJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGODRGNTE0MDhDRDg4RDE2
NUNFOTMxQjE1RTQ4REM5Q0I4MDg0QkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VDcDI1M3BIOXBEc0VrOVBuWHkyNjdma2ZDZTVtNHJ1Z1V2WWs3dG5KZk02LzAv
MzIzODMwMzQzYTM1NjQzMjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzkzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARdLDANBgkqhkiG9w0BAQsFAAOCAQEAIQrWoe0L
O80MVeeiJNLSyPNlXLGrBrvFrD9dvw0q2O4+2FcdCK0pxwd+52vqrWkLwJ+z0V8W
Lzv+Dz2v6NaH2XhQM8AGi41VMWvqpKDtzqQFJlzjN+ieB4gsKhUC1QguRUF5eXY4
Ka+BR4sOUs1Ye7vLgYQ90DGS3n2qw3bt5wc477iH8de4Ev433jkTruGNtMTgc8bB
xeF1d6VSMtBNy6gTK+phIOD35YBmCo74M+43snGxZHsZhIyMBQAtlgxg7QeqaOKd
1XXGh+lejWXQ1V2IeNmeb9zR6Rx9G8Al60QdIP88NMFI36yrsgY7He0IUmuOUT9O
IafnimfMNe+9kA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:45:29 2025 by rpki-client