Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3a2f33322d3335203d3e20323639313434.roa
File:                     323830343a363031343a3a2f33322d3335203d3e20323639313434.roa (raw, json)
Hash identifier:          QavDR/lP8MlRxD6ltzK8AApZ+0fn+opNMagbkafiohQ=
Subject key identifier:   7D:9F:0C:55:E9:29:1F:40:A4:73:25:46:87:ED:2F:25:50:F0:5E:88
Certificate issuer:       /CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
Certificate serial:       5396E7D7945DAAD2972D32913245B881D890B510
Authority key identifier: 47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3a2f33322d3335203d3e20323639313434.roa
Signing time:             Thu 10 Jul 2025 13:40:32 +0000
ROA not before:           Thu 10 Jul 2025 13:35:32 +0000
ROA not after:            Thu 09 Jul 2026 13:40:32 +0000
asID:                     269144
IP address blocks:        2804:6014::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl
                          rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 22:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:96:e7:d7:94:5d:aa:d2:97:2d:32:91:32:45:b8:81:d8:90:b5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
        Validity
            Not Before: Jul 10 13:35:32 2025 GMT
            Not After : Jul  9 13:40:32 2026 GMT
        Subject: CN=7D9F0C55E9291F40A473254687ED2F2550F05E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:31:11:fa:61:e5:dd:b2:c0:9e:e7:e6:67:
                    d8:74:3f:d0:7f:7a:ab:72:47:28:20:66:c1:62:dd:
                    ce:26:60:3c:e5:80:69:ff:e5:46:35:0d:a6:09:79:
                    1a:c8:0d:fb:5c:b3:1f:b4:bb:aa:dc:89:3f:1f:14:
                    e0:8f:6d:b5:71:15:3c:bc:7b:04:66:1c:15:f2:51:
                    88:8f:07:84:17:44:02:2b:77:8a:37:23:f5:4a:75:
                    4b:57:29:3a:ca:6b:97:96:f1:7d:39:78:02:b2:cd:
                    8f:89:9f:b1:ba:d9:25:63:cf:73:d6:c8:fe:53:ff:
                    d0:93:61:fc:1d:ac:3b:37:74:05:0e:00:e3:01:c7:
                    c8:1d:ac:f5:f0:a9:06:a0:5f:49:6b:2e:74:fc:83:
                    c4:44:74:3a:b7:b3:8c:ad:84:ca:d3:0e:65:3f:a8:
                    56:f7:ff:39:10:77:45:98:0c:c6:4d:6b:cd:8d:b2:
                    c3:6b:35:1d:4d:ce:70:3f:f0:f6:e4:2e:d5:41:de:
                    3d:be:16:e8:a0:04:6d:d9:fb:8a:83:36:17:d8:eb:
                    b0:80:cf:c9:56:fc:5c:9e:2b:82:50:a7:4e:66:04:
                    5d:03:87:bd:47:15:58:6a:dc:8f:50:e3:4e:90:e2:
                    b8:f3:ff:d4:43:d9:c2:a6:62:c4:ea:eb:78:5d:ec:
                    88:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9F:0C:55:E9:29:1F:40:A4:73:25:46:87:ED:2F:25:50:F0:5E:88
            X509v3 Authority Key Identifier:
                keyid:47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3a2f33322d3335203d3e20323639313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6014::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:d0:40:de:6a:7e:2b:cb:78:73:19:e2:36:18:44:98:45:88:
         4e:71:25:62:e3:23:ec:7d:69:85:b4:4d:d6:f8:a6:76:af:f1:
         2f:14:9d:84:42:99:6c:3f:4c:5a:53:99:4b:8c:43:03:02:27:
         81:ee:7c:a9:c0:f9:19:fd:d9:ea:27:8a:07:ab:f9:75:b2:83:
         49:78:6b:32:b9:12:e5:c0:55:4b:35:52:2e:d3:e3:01:4e:88:
         8b:c6:c5:df:3f:54:b7:f7:f3:df:be:a9:3d:28:40:d4:ca:11:
         05:59:bc:e8:26:b4:eb:79:56:2c:9d:41:ea:4c:d5:79:c6:bb:
         61:be:a9:0f:06:a4:2f:7e:ab:2f:7c:00:c1:1e:15:e8:a7:92:
         16:96:49:2e:45:69:82:e1:fd:43:f6:6d:a3:45:41:07:39:09:
         53:6e:41:b0:ab:e0:17:2d:41:f2:c8:ed:74:d1:af:dd:f2:18:
         07:89:61:95:a5:ce:1e:c4:2b:19:b1:c1:99:20:a5:ea:09:53:
         ff:ac:aa:11:5a:c9:1b:a8:16:bb:f5:11:69:20:c1:33:bb:7b:
         8b:70:ea:9e:4d:80:29:d3:cd:df:a0:5d:99:06:c5:98:e6:8d:
         29:d9:e6:4a:1f:00:68:15:41:7b:31:49:00:b6:35:ca:7e:37:
         c6:7f:ce:b2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUU5bn15RdqtKXLTKRMkW4gdiQtRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc0RTRGRTZDMDU4NTgzMjkzNUU2RTVEOUE2N0VFNDEw
QjI3NENDQjAeFw0yNTA3MTAxMzM1MzJaFw0yNjA3MDkxMzQwMzJaMDMxMTAvBgNV
BAMTKDdEOUYwQzU1RTkyOTFGNDBBNDczMjU0Njg3RUQyRjI1NTBGMDVFODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+hjER+mHl3bLAnufmZ9h0P9B/
eqtyRyggZsFi3c4mYDzlgGn/5UY1DaYJeRrIDftcsx+0u6rciT8fFOCPbbVxFTy8
ewRmHBXyUYiPB4QXRAIrd4o3I/VKdUtXKTrKa5eW8X05eAKyzY+Jn7G62SVjz3PW
yP5T/9CTYfwdrDs3dAUOAOMBx8gdrPXwqQagX0lrLnT8g8REdDq3s4ythMrTDmU/
qFb3/zkQd0WYDMZNa82NssNrNR1NznA/8PbkLtVB3j2+FuigBG3Z+4qDNhfY67CA
z8lW/FyeK4JQp05mBF0Dh71HFVhq3I9Q406Q4rjz/9RD2cKmYsTq63hd7IhBAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUfZ8MVekpH0CkcyVGh+0vJVDwXogwHwYDVR0j
BBgwFoAUR05P5sBYWDKTXm5dmmfuQQsnTMswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pWa281dUYyVkJNeFdVenByNkJZWVhxc2NpRjZOTjF6elhXOFRzSno0
S3kvMC80NzRFNEZFNkMwNTg1ODMyOTM1RTZFNUQ5QTY3RUU0MTBCMjc0Q0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3NEU0RkU2QzA1ODU4MzI5
MzVFNkU1RDlBNjdFRTQxMEIyNzRDQ0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0daVmtvNXVGMlZCTXhXVXpwcjZCWVlYcXNjaUY2Tk4xenpYVzhUc0p6NEt5LzAv
MzIzODMwMzQzYTM2MzAzMTM0M2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzIzNjM5
MzEzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARgFDANBgkqhkiG9w0BAQsFAAOCAQEAO9BA3mp+
K8t4cxniNhhEmEWITnElYuMj7H1phbRN1vimdq/xLxSdhEKZbD9MWlOZS4xDAwIn
ge58qcD5Gf3Z6ieKB6v5dbKDSXhrMrkS5cBVSzVSLtPjAU6Ii8bF3z9Ut/fz376p
PShA1MoRBVm86Ca063lWLJ1B6kzVeca7Yb6pDwakL36rL3wAwR4V6KeSFpZJLkVp
guH9Q/Zto0VBBzkJU25BsKvgFy1B8sjtdNGv3fIYB4lhlaXOHsQrGbHBmSCl6glT
/6yqEVrJG6gWu/URaSDBM7t7i3Dqnk2AKdPN36BdmQbFmOaNKdnmSh8AaBVBezFJ
ALY1yn43xn/Osg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:57:14 2025 by rpki-client