Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/323830343a376332383a3a2f33332d313238203d3e20323731343739.roa
File:                     323830343a376332383a3a2f33332d313238203d3e20323731343739.roa (raw, json)
Hash identifier:          LM86KHNMPIPZP1fKhXMR5dLu5cLNghRwZ5KB5ZPSADs=
Subject key identifier:   EB:B9:F6:0F:26:86:44:AE:E6:11:BD:46:D7:CA:AC:0D:FC:0C:BF:55
Certificate issuer:       /CN=F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713
Certificate serial:       773A6F2DB8503778C98136A2286C5B35CACDE289
Authority key identifier: F2:BC:DE:E2:7F:CE:80:9F:BB:2C:BD:31:8E:D1:6F:50:77:F2:E7:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/323830343a376332383a3a2f33332d313238203d3e20323731343739.roa
Signing time:             Thu 24 Jul 2025 03:48:44 +0000
ROA not before:           Thu 24 Jul 2025 03:43:44 +0000
ROA not after:            Thu 23 Jul 2026 03:48:44 +0000
asID:                     271479
IP address blocks:        2804:7c28::/33 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.crl
                          rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 18:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3a:6f:2d:b8:50:37:78:c9:81:36:a2:28:6c:5b:35:ca:cd:e2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713
        Validity
            Not Before: Jul 24 03:43:44 2025 GMT
            Not After : Jul 23 03:48:44 2026 GMT
        Subject: CN=EBB9F60F268644AEE611BD46D7CAAC0DFC0CBF55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b4:e6:b9:16:ea:e5:99:cc:ff:f1:47:95:bb:
                    43:fc:73:3f:ad:61:05:c1:ed:2c:95:0d:3f:94:00:
                    84:a5:c8:e1:24:42:f9:bd:e3:f0:cf:21:dc:4b:9b:
                    45:14:26:59:e2:66:ce:9f:9b:ed:ef:6c:24:04:01:
                    1d:7c:fc:68:6a:2c:1d:31:c6:50:2b:51:cf:f4:f7:
                    c4:62:e4:5b:54:64:32:db:19:6f:74:cf:ee:17:44:
                    f2:c1:71:73:91:f6:af:49:d3:f3:4e:ab:7a:88:e2:
                    21:31:01:93:fd:ad:7d:c9:76:2c:7e:c9:47:7f:76:
                    90:b4:b6:9c:4c:da:a9:7b:09:a3:4e:c0:f0:c6:ff:
                    93:38:14:04:79:ff:96:10:0a:31:71:1f:39:ef:96:
                    00:b8:c4:1b:d8:81:16:ec:da:3c:b4:0a:fa:f3:b8:
                    0c:16:49:1c:18:fd:7c:9e:59:f2:a4:23:3a:7b:ca:
                    36:88:e5:c7:52:45:bd:f9:a0:6e:ae:7a:5e:77:b8:
                    92:79:36:5b:3a:9a:00:66:45:a2:21:f9:e4:d5:18:
                    dd:35:b1:5f:9a:0e:94:8f:ad:5f:79:bd:32:e5:8a:
                    a8:95:27:30:b3:5b:f7:41:ef:32:30:cc:e8:b7:88:
                    df:5d:81:0b:9b:b7:0d:45:f7:c4:a1:52:4b:8f:7c:
                    4a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B9:F6:0F:26:86:44:AE:E6:11:BD:46:D7:CA:AC:0D:FC:0C:BF:55
            X509v3 Authority Key Identifier:
                keyid:F2:BC:DE:E2:7F:CE:80:9F:BB:2C:BD:31:8E:D1:6F:50:77:F2:E7:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/323830343a376332383a3a2f33332d313238203d3e20323731343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c28::/33

    Signature Algorithm: sha256WithRSAEncryption
         b4:74:bb:5f:bd:e2:3b:f0:98:3d:cb:b4:57:8d:64:6a:38:74:
         30:7d:79:c3:f0:af:e4:44:f7:3f:c6:28:d8:36:cc:ec:6a:f5:
         2e:b1:b8:a2:28:ef:b8:08:a0:db:97:e0:2f:c1:9d:11:62:d9:
         2c:ff:6d:6a:80:95:17:59:f2:c1:5f:6a:ce:e4:a0:fb:db:e6:
         f0:09:fd:0f:6a:69:7f:41:34:4c:f0:dd:ca:6b:e4:54:50:05:
         26:88:d5:26:12:57:d6:e6:c4:30:91:c4:0d:16:f0:bb:42:c3:
         af:ca:02:ad:c8:e7:91:d5:ac:81:2d:a7:76:69:4e:a8:d5:48:
         36:b5:f3:5c:20:69:04:06:7b:a9:9c:fe:5f:d0:0b:07:2b:c6:
         78:81:4f:30:77:fa:ae:f9:0e:d9:a7:4b:d7:81:de:6a:51:db:
         74:25:68:19:e2:97:d4:28:da:0a:04:0a:a2:d2:09:16:22:fc:
         9d:ba:e5:6d:26:ce:0a:8e:c2:d6:fa:7a:6e:06:92:b5:38:9c:
         62:54:d1:2f:9a:b6:e9:92:87:3e:9e:c1:c3:bf:8f:ba:68:ce:
         70:94:d6:d3:c4:1d:1d:74:31:f1:6e:b2:ec:91:7a:98:1e:6f:
         4a:3d:99:07:80:6a:b3:d0:c0:d0:1f:92:78:5d:55:b0:84:35:
         b0:89:78:01
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdzpvLbhQN3jJgTaiKGxbNcrN4okwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJCQ0RFRTI3RkNFODA5RkJCMkNCRDMxOEVEMTZGNTA3
N0YyRTcxMzAeFw0yNTA3MjQwMzQzNDRaFw0yNjA3MjMwMzQ4NDRaMDMxMTAvBgNV
BAMTKEVCQjlGNjBGMjY4NjQ0QUVFNjExQkQ0NkQ3Q0FBQzBERkMwQ0JGNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdtOa5Furlmcz/8UeVu0P8cz+t
YQXB7SyVDT+UAISlyOEkQvm94/DPIdxLm0UUJlniZs6fm+3vbCQEAR18/GhqLB0x
xlArUc/098Ri5FtUZDLbGW90z+4XRPLBcXOR9q9J0/NOq3qI4iExAZP9rX3Jdix+
yUd/dpC0tpxM2ql7CaNOwPDG/5M4FAR5/5YQCjFxHznvlgC4xBvYgRbs2jy0Cvrz
uAwWSRwY/XyeWfKkIzp7yjaI5cdSRb35oG6uel53uJJ5Nls6mgBmRaIh+eTVGN01
sV+aDpSPrV95vTLliqiVJzCzW/dB7zIwzOi3iN9dgQubtw1F98ShUkuPfEpTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU67n2DyaGRK7mEb1G18qsDfwMv1UwHwYDVR0j
BBgwFoAU8rze4n/OgJ+7LL0xjtFvUHfy5xMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3AxVWRxQVRhcTNGbzlVVEpiNEdzMkNrSDVzem9wWU00THhhaHpvN2RZ
bW8vMC9GMkJDREVFMjdGQ0U4MDlGQkIyQ0JEMzE4RUQxNkY1MDc3RjJFNzEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyQkNERUUyN0ZDRTgwOUZC
QjJDQkQzMThFRDE2RjUwNzdGMkU3MTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dwMVVkcUFUYXEzRm85VVRKYjRHczJDa0g1c3pvcFlNNEx4YWh6bzdkWW1vLzAv
MzIzODMwMzQzYTM3NjMzMjM4M2EzYTJmMzMzMzJkMzEzMjM4MjAzZDNlMjAzMjM3
MzEzNDM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgcoBHwoADANBgkqhkiG9w0BAQsFAAOCAQEAtHS7
X73iO/CYPcu0V41kajh0MH15w/Cv5ET3P8Yo2DbM7Gr1LrG4oijvuAig25fgL8Gd
EWLZLP9taoCVF1nywV9qzuSg+9vm8An9D2ppf0E0TPDdymvkVFAFJojVJhJX1ubE
MJHEDRbwu0LDr8oCrcjnkdWsgS2ndmlOqNVINrXzXCBpBAZ7qZz+X9ALByvGeIFP
MHf6rvkO2adL14HealHbdCVoGeKX1CjaCgQKotIJFiL8nbrlbSbOCo7C1vp6bgaS
tTicYlTRL5q26ZKHPp7Bw7+PumjOcJTW08QdHXQx8W6y7JF6mB5vSj2ZB4Bqs9DA
0B+SeF1VsIQ1sIl4AQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:33:14 2025 by rpki-client