Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33322d3334203d3e20323732353031.roa
File:                     323830343a383232343a3a2f33322d3334203d3e20323732353031.roa (raw, json)
Hash identifier:          Z0J4eT+/Pm37ea2jwyYZIrXM8+ylfxcILtCFUN3f0nU=
Subject key identifier:   E7:D6:99:C7:89:EF:89:1B:61:20:57:3E:81:83:C2:1D:39:37:E6:DE
Certificate issuer:       /CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
Certificate serial:       479D0A8993154521C47ADBB6DDF0BF972AC22097
Authority key identifier: 24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33322d3334203d3e20323732353031.roa
Signing time:             Sat 12 Jul 2025 03:17:41 +0000
ROA not before:           Sat 12 Jul 2025 03:12:41 +0000
ROA not after:            Sat 11 Jul 2026 03:17:41 +0000
asID:                     272501
IP address blocks:        2804:8224::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl
                          rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9d:0a:89:93:15:45:21:c4:7a:db:b6:dd:f0:bf:97:2a:c2:20:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24220776A3FCE0838B2F269EB0AB473E05D59CBD
        Validity
            Not Before: Jul 12 03:12:41 2025 GMT
            Not After : Jul 11 03:17:41 2026 GMT
        Subject: CN=E7D699C789EF891B6120573E8183C21D3937E6DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:04:34:18:88:46:b1:2a:e0:f6:5e:8c:86:
                    83:7f:37:c1:f0:f6:dd:af:ed:e8:ba:ff:31:d7:b0:
                    2f:a6:3b:3e:9a:a8:2d:95:dd:c1:00:ff:6a:68:f2:
                    42:ab:bc:9c:e9:d1:30:4d:15:71:a1:a7:f5:04:cd:
                    af:b9:b0:ed:a6:fb:06:dd:78:79:d1:be:4c:46:c9:
                    41:59:ad:8b:ac:d2:24:86:38:b2:a7:6a:b2:f6:dc:
                    f9:64:35:f2:57:7f:e1:aa:59:c4:c6:c3:7e:3c:fe:
                    ca:37:52:45:1e:62:02:ce:ff:ec:7a:72:4f:64:15:
                    df:70:ac:81:c2:c1:82:cd:3d:e4:3f:f6:1e:6a:f2:
                    c0:5b:fa:b6:19:ed:57:e9:12:7d:95:7f:42:19:7e:
                    8b:61:d2:70:7b:0c:18:81:4e:44:6b:f1:92:58:81:
                    27:42:88:1f:96:f5:6d:7e:53:c5:68:54:95:b6:da:
                    a6:5b:10:c8:f1:55:02:3e:fc:3b:9f:ee:07:3b:c4:
                    12:4f:09:3a:35:11:08:57:b3:42:a7:50:7b:26:c2:
                    5f:17:3f:c7:7c:90:a7:8d:48:f6:0d:a4:8f:96:73:
                    77:4b:b3:b7:10:ee:8a:b5:98:a2:83:69:90:d3:3e:
                    18:da:33:48:bf:1f:05:04:f8:fb:c1:8e:e7:89:e8:
                    39:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D6:99:C7:89:EF:89:1B:61:20:57:3E:81:83:C2:1D:39:37:E6:DE
            X509v3 Authority Key Identifier:
                keyid:24:22:07:76:A3:FC:E0:83:8B:2F:26:9E:B0:AB:47:3E:05:D5:9C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/24220776A3FCE0838B2F269EB0AB473E05D59CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24220776A3FCE0838B2F269EB0AB473E05D59CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Heh5dSWN61zTkpXgLw8nNNAh53gSD7b9HYARiVzz4NHS/0/323830343a383232343a3a2f33322d3334203d3e20323732353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8224::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:71:9a:a7:a3:fc:97:b4:8e:32:24:e5:f2:b9:62:cc:63:3e:
         1f:0a:1d:27:e1:a4:f8:2f:88:0c:dc:b4:5f:e7:55:e8:11:1d:
         5d:bf:7f:1d:ed:16:02:4f:02:02:98:cc:14:c6:06:9c:55:99:
         69:c2:1e:a0:97:dd:2b:16:13:44:a5:43:a4:2c:24:e5:1e:82:
         ee:1b:7b:ff:91:36:70:27:82:fa:96:fc:38:e7:5a:43:dd:d6:
         85:11:df:02:df:37:33:35:a3:43:97:19:10:2a:ba:b6:06:d3:
         18:4e:8a:82:de:0a:49:c4:cd:29:a8:56:a1:8b:56:11:f8:9f:
         9f:b7:b8:79:7d:2a:63:88:6f:d3:35:3a:1d:70:e7:61:fc:8c:
         f7:a2:38:96:e6:5e:0f:13:35:57:45:1b:19:ab:04:9b:6c:1d:
         8f:ee:d8:95:80:ad:8f:ff:b4:e2:e5:32:ab:c7:60:bd:b1:cd:
         1a:90:e2:0d:de:07:48:0c:ad:8f:17:29:1e:c4:73:36:e4:f9:
         97:18:4f:b0:1d:91:e4:ce:1c:22:4b:ca:27:4b:84:e0:52:d0:
         95:11:a8:2c:ce:10:45:3d:a6:de:80:bc:a1:fe:b4:b4:90:74:
         2a:50:34:f7:4c:69:c2:b2:ae:b5:8c:cb:b9:d9:d1:bc:5a:3b:
         91:29:a5:20
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUR50KiZMVRSHEetu23fC/lyrCIJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQyMjA3NzZBM0ZDRTA4MzhCMkYyNjlFQjBBQjQ3M0Uw
NUQ1OUNCRDAeFw0yNTA3MTIwMzEyNDFaFw0yNjA3MTEwMzE3NDFaMDMxMTAvBgNV
BAMTKEU3RDY5OUM3ODlFRjg5MUI2MTIwNTczRTgxODNDMjFEMzkzN0U2REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVHwQ0GIhGsSrg9l6MhoN/N8Hw
9t2v7ei6/zHXsC+mOz6aqC2V3cEA/2po8kKrvJzp0TBNFXGhp/UEza+5sO2m+wbd
eHnRvkxGyUFZrYus0iSGOLKnarL23PlkNfJXf+GqWcTGw348/so3UkUeYgLO/+x6
ck9kFd9wrIHCwYLNPeQ/9h5q8sBb+rYZ7VfpEn2Vf0IZfoth0nB7DBiBTkRr8ZJY
gSdCiB+W9W1+U8VoVJW22qZbEMjxVQI+/Duf7gc7xBJPCTo1EQhXs0KnUHsmwl8X
P8d8kKeNSPYNpI+Wc3dLs7cQ7oq1mKKDaZDTPhjaM0i/HwUE+PvBjueJ6Dl5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU59aZx4nviRthIFc+gYPCHTk35t4wHwYDVR0j
BBgwFoAUJCIHdqP84IOLLyaesKtHPgXVnL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGVoNWRTV042MXpUa3BYZ0x3OG5OTkFoNTNnU0Q3YjlIWUFSaVZ6ejRO
SFMvMC8yNDIyMDc3NkEzRkNFMDgzOEIyRjI2OUVCMEFCNDczRTA1RDU5Q0JELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MjIwNzc2QTNGQ0UwODM4
QjJGMjY5RUIwQUI0NzNFMDVENTlDQkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hlaDVkU1dONjF6VGtwWGdMdzhuTk5BaDUzZ1NEN2I5SFlBUmlWeno0TkhTLzAv
MzIzODMwMzQzYTM4MzIzMjM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzMy
MzUzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASCJDANBgkqhkiG9w0BAQsFAAOCAQEApnGap6P8
l7SOMiTl8rlizGM+HwodJ+Gk+C+IDNy0X+dV6BEdXb9/He0WAk8CApjMFMYGnFWZ
acIeoJfdKxYTRKVDpCwk5R6C7ht7/5E2cCeC+pb8OOdaQ93WhRHfAt83MzWjQ5cZ
ECq6tgbTGE6Kgt4KScTNKahWoYtWEfifn7e4eX0qY4hv0zU6HXDnYfyM96I4luZe
DxM1V0UbGasEm2wdj+7YlYCtj/+04uUyq8dgvbHNGpDiDd4HSAytjxcpHsRzNuT5
lxhPsB2R5M4cIkvKJ0uE4FLQlRGoLM4QRT2m3oC8of60tJB0KlA090xpwrKutYzL
udnRvFo7kSmlIA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:38 2025 by rpki-client