Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a3a2f33332d3333203d3e20323730373131.roa
File:                     323830343a373033303a3a2f33332d3333203d3e20323730373131.roa (raw, json)
Hash identifier:          cBZ2zjVah5pWCr1ZMg8ZJm1ZgXXyXgTxldwPITdPTKU=
Subject key identifier:   E3:2E:01:E0:3F:47:4F:D8:FE:55:A6:F5:A7:F5:4F:A2:56:80:00:DF
Certificate issuer:       /CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
Certificate serial:       6100CB971FC5977FA250BEDA89F219E3646B75C4
Authority key identifier: 44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a3a2f33332d3333203d3e20323730373131.roa
Signing time:             Thu 31 Jul 2025 15:08:23 +0000
ROA not before:           Thu 31 Jul 2025 15:03:23 +0000
ROA not after:            Thu 30 Jul 2026 15:08:23 +0000
asID:                     270711
IP address blocks:        2804:7030::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl
                          rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 01:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:00:cb:97:1f:c5:97:7f:a2:50:be:da:89:f2:19:e3:64:6b:75:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
        Validity
            Not Before: Jul 31 15:03:23 2025 GMT
            Not After : Jul 30 15:08:23 2026 GMT
        Subject: CN=E32E01E03F474FD8FE55A6F5A7F54FA2568000DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a2:01:92:d3:1c:85:9c:12:bf:4a:33:4a:d4:
                    b6:c9:03:e7:c8:2f:fa:29:82:37:05:12:77:f9:81:
                    65:8e:77:ad:40:6c:62:76:49:40:14:71:f2:0d:22:
                    96:a9:4c:d2:f3:33:4a:cc:b7:1b:09:49:16:67:8c:
                    71:e1:52:94:d1:0e:20:99:d4:ce:d4:09:9a:30:93:
                    8d:ee:6e:64:7a:ba:a2:75:d3:07:ba:31:ff:87:d8:
                    73:cc:12:ed:9f:b8:1f:11:55:90:0a:af:a6:7d:95:
                    39:14:10:6c:38:22:4d:1c:c9:d7:b4:fa:ef:5e:96:
                    2d:f5:43:d1:16:35:7c:ee:28:47:cd:ec:56:1c:47:
                    ce:3e:98:1f:05:0a:f1:1e:94:30:e4:3c:b3:a1:58:
                    ae:96:f7:0d:92:41:6d:87:30:6e:f4:bd:e7:be:18:
                    3f:e1:c7:5a:cf:e1:d5:c1:74:86:41:9b:0e:0b:64:
                    fb:91:e6:62:e9:16:19:82:d8:21:d7:71:cd:fe:56:
                    78:a5:90:3f:70:4d:e7:53:b7:8c:83:4d:bb:0e:12:
                    c9:e2:f9:e4:e9:f5:7d:43:8c:fb:68:ed:06:c4:55:
                    03:e9:09:ef:0f:aa:9e:c1:b0:36:16:c5:b0:28:5b:
                    82:08:ac:25:58:d1:72:7d:89:06:7f:8a:fd:92:4e:
                    b2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2E:01:E0:3F:47:4F:D8:FE:55:A6:F5:A7:F5:4F:A2:56:80:00:DF
            X509v3 Authority Key Identifier:
                keyid:44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a3a2f33332d3333203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7030::/33

    Signature Algorithm: sha256WithRSAEncryption
         71:81:b7:65:fb:1a:ac:21:da:e0:05:86:e9:2f:ec:a4:2d:b5:
         bd:35:a5:ce:e6:85:01:aa:ef:bc:3f:c3:ea:c9:8f:40:e7:d4:
         e2:56:bf:7d:5e:a0:29:ac:e9:4d:27:e1:90:5e:81:e4:e7:97:
         0f:24:35:04:39:df:91:93:58:0e:de:5f:51:ea:d4:92:13:7e:
         6d:4d:f8:0b:83:81:7c:f2:b3:c2:ef:b5:ff:75:ac:19:37:d7:
         90:ce:f5:71:37:4a:e5:fe:06:f0:46:f3:cc:9e:7a:f1:f8:bb:
         dc:40:3e:91:3b:55:b5:d9:6d:f2:63:ed:24:70:59:30:df:4d:
         56:b4:bc:a0:f4:a8:88:68:41:c5:2a:cc:a8:23:03:f0:d9:2a:
         3b:f7:1e:66:69:42:cd:4e:d0:75:c9:4f:3f:55:a6:12:30:43:
         dc:f8:ac:ff:24:10:6a:89:7f:dd:cb:d6:fd:df:b1:9f:60:ad:
         e3:48:e3:26:3b:a4:a7:24:e3:8e:9f:69:f8:f1:0d:db:ad:9b:
         c6:cd:97:9c:2d:45:02:74:1d:7d:af:2a:1b:d6:6e:99:8b:01:
         0a:8b:01:58:68:a3:71:a1:5d:12:a7:d5:19:70:66:5f:df:52:
         57:ca:07:96:48:85:77:28:b5:30:e1:58:0a:8b:89:48:5c:a5:
         ff:27:1b:02
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYQDLlx/Fl3+iUL7aifIZ42RrdcQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ0MjEwRkMyN0M5OUZCRjZGRDkxRDM0REJBNDAwOTEy
NzJFMEJFNjAeFw0yNTA3MzExNTAzMjNaFw0yNjA3MzAxNTA4MjNaMDMxMTAvBgNV
BAMTKEUzMkUwMUUwM0Y0NzRGRDhGRTU1QTZGNUE3RjU0RkEyNTY4MDAwREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvogGS0xyFnBK/SjNK1LbJA+fI
L/opgjcFEnf5gWWOd61AbGJ2SUAUcfINIpapTNLzM0rMtxsJSRZnjHHhUpTRDiCZ
1M7UCZowk43ubmR6uqJ10we6Mf+H2HPMEu2fuB8RVZAKr6Z9lTkUEGw4Ik0cyde0
+u9eli31Q9EWNXzuKEfN7FYcR84+mB8FCvEelDDkPLOhWK6W9w2SQW2HMG70vee+
GD/hx1rP4dXBdIZBmw4LZPuR5mLpFhmC2CHXcc3+VnilkD9wTedTt4yDTbsOEsni
+eTp9X1DjPto7QbEVQPpCe8Pqp7BsDYWxbAoW4IIrCVY0XJ9iQZ/iv2STrKjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4y4B4D9HT9j+Vab1p/VPolaAAN8wHwYDVR0j
BBgwFoAUREIQ/CfJn79v2R0026QAkScuC+YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjR4dFd4Y0Y4c29XdUwyeFJpYTNXWTJmYWtQOVJBQ25SU0d1ZnVtRFJX
ZmkvMC80NDQyMTBGQzI3Qzk5RkJGNkZEOTFEMzREQkE0MDA5MTI3MkUwQkU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0NDIxMEZDMjdDOTlGQkY2
RkQ5MUQzNERCQTQwMDkxMjcyRTBCRTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y0eHRXeGNGOHNvV3VMMnhSaWEzV1kyZmFrUDlSQUNuUlNHdWZ1bURSV2ZpLzAv
MzIzODMwMzQzYTM3MzAzMzMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMw
MzczMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARwMAAwDQYJKoZIhvcNAQELBQADggEBAHGBt2X7
Gqwh2uAFhukv7KQttb01pc7mhQGq77w/w+rJj0Dn1OJWv31eoCms6U0n4ZBegeTn
lw8kNQQ535GTWA7eX1Hq1JITfm1N+AuDgXzys8Lvtf91rBk315DO9XE3SuX+BvBG
88yeevH4u9xAPpE7VbXZbfJj7SRwWTDfTVa0vKD0qIhoQcUqzKgjA/DZKjv3HmZp
Qs1O0HXJTz9VphIwQ9z4rP8kEGqJf93L1v3fsZ9greNI4yY7pKck446fafjxDdut
m8bNl5wtRQJ0HX2vKhvWbpmLAQqLAVhoo3GhXRKn1RlwZl/fUlfKB5ZIhXcotTDh
WAqLiUhcpf8nGwI=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:01 2025 by rpki-client