Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/323830343a333562343a3a2f33322d313238203d3e20323636333031.roa
File:                     323830343a333562343a3a2f33322d313238203d3e20323636333031.roa (raw, json)
Hash identifier:          7MrsQ1/b5wz7QhZUTah0ZnUkHPx7MNomvFfyakM/hvw=
Subject key identifier:   9B:13:B5:75:DF:1F:9D:F8:8A:E3:E3:BD:5F:09:E8:74:AB:0B:C3:08
Certificate issuer:       /CN=92ACC24D2CC44ADBD228C2878239790FC2359F42
Certificate serial:       2301F6EED78DEB8B29375CAC814294342D7D1BAA
Authority key identifier: 92:AC:C2:4D:2C:C4:4A:DB:D2:28:C2:87:82:39:79:0F:C2:35:9F:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92ACC24D2CC44ADBD228C2878239790FC2359F42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/323830343a333562343a3a2f33322d313238203d3e20323636333031.roa
Signing time:             Tue 05 Aug 2025 19:05:04 +0000
ROA not before:           Tue 05 Aug 2025 19:00:04 +0000
ROA not after:            Tue 04 Aug 2026 19:05:04 +0000
asID:                     266301
IP address blocks:        2804:35b4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/92ACC24D2CC44ADBD228C2878239790FC2359F42.crl
                          rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/92ACC24D2CC44ADBD228C2878239790FC2359F42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92ACC24D2CC44ADBD228C2878239790FC2359F42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:01:f6:ee:d7:8d:eb:8b:29:37:5c:ac:81:42:94:34:2d:7d:1b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92ACC24D2CC44ADBD228C2878239790FC2359F42
        Validity
            Not Before: Aug  5 19:00:04 2025 GMT
            Not After : Aug  4 19:05:04 2026 GMT
        Subject: CN=9B13B575DF1F9DF88AE3E3BD5F09E874AB0BC308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:fa:76:5e:a9:d6:a7:6e:35:b2:0a:b2:8c:
                    75:f2:8d:47:7d:9a:39:74:ab:ae:89:3e:1a:a7:60:
                    5c:2a:90:bc:8f:31:08:2f:e2:27:72:bd:46:ad:55:
                    d3:08:ef:fd:fb:09:ce:7a:53:1c:42:de:c5:bd:1d:
                    f8:9e:9f:95:4f:50:e6:7f:02:8a:87:97:2a:81:3b:
                    24:58:e4:58:0c:e0:8d:46:4d:b0:8e:b8:ba:7b:a6:
                    ad:ed:ab:11:8d:5d:41:c4:e6:05:0b:df:1d:3e:a6:
                    44:1b:cf:e0:e7:1b:ee:6a:19:a6:22:2f:b7:cd:e4:
                    4f:4b:aa:70:10:f7:0f:1d:fc:9a:24:df:01:ac:4a:
                    13:fa:1c:8e:43:1a:f1:7f:77:f9:a8:9d:4e:b5:1f:
                    68:44:4f:26:31:02:c3:ea:2d:49:10:00:b7:07:6d:
                    35:54:3e:46:24:89:bf:9b:15:bb:17:f7:94:9b:c4:
                    e9:74:db:bc:4d:c2:ed:e3:9e:15:4b:c5:6b:48:c6:
                    d9:06:83:3b:36:b1:f6:1b:a2:bc:a9:f7:38:26:35:
                    f6:e8:89:4e:e9:b3:4e:4e:32:42:c2:32:39:30:78:
                    24:32:8d:3a:37:06:ce:81:71:ad:a7:21:94:f0:de:
                    4e:75:47:1b:8c:a0:ea:4f:41:36:92:5e:8c:c2:1b:
                    93:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:13:B5:75:DF:1F:9D:F8:8A:E3:E3:BD:5F:09:E8:74:AB:0B:C3:08
            X509v3 Authority Key Identifier:
                keyid:92:AC:C2:4D:2C:C4:4A:DB:D2:28:C2:87:82:39:79:0F:C2:35:9F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/92ACC24D2CC44ADBD228C2878239790FC2359F42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92ACC24D2CC44ADBD228C2878239790FC2359F42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/323830343a333562343a3a2f33322d313238203d3e20323636333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:87:ea:65:10:89:93:a2:8f:1c:f6:11:52:f8:de:78:9e:7c:
         a4:be:e6:05:0d:da:20:21:4c:e7:08:ae:64:41:46:4f:d7:be:
         90:c1:2c:40:06:ac:b7:4b:84:55:ec:af:e9:ec:1c:65:d2:e3:
         df:a4:41:5f:72:73:2c:9c:0c:9e:9c:ad:e0:f5:74:48:86:52:
         80:6a:73:b5:06:c4:48:61:60:24:da:be:f0:f1:26:bb:a1:c4:
         f6:53:89:6b:5b:5a:5f:08:69:bf:ba:67:d4:79:e7:39:96:c0:
         e0:a4:72:2c:72:95:19:f5:de:50:f9:e7:d3:57:24:bf:c8:8a:
         ad:4c:b3:d6:45:8b:f8:a8:40:e0:89:6d:cc:5e:8b:86:2d:70:
         42:16:ce:d7:2d:51:22:83:62:e9:c6:0e:5c:17:9e:ca:3c:85:
         b1:5d:7e:5e:bd:da:83:d8:ba:0e:d1:99:da:7b:a9:d5:ec:12:
         1a:b2:bd:29:29:5c:30:e4:8c:ac:b1:75:95:aa:4a:c8:8f:71:
         99:26:93:1b:71:98:4c:ea:3e:07:d8:7a:e6:13:ec:16:91:59:
         6a:f0:5d:c9:60:47:a2:d0:db:32:1c:86:9e:02:ae:96:66:8a:
         51:0a:38:81:3c:a5:72:fe:0a:db:22:41:01:1b:b0:5c:2b:d7:
         ff:47:44:2a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUIwH27teN64spN1ysgUKUNC19G6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJBQ0MyNEQyQ0M0NEFEQkQyMjhDMjg3ODIzOTc5MEZD
MjM1OUY0MjAeFw0yNTA4MDUxOTAwMDRaFw0yNjA4MDQxOTA1MDRaMDMxMTAvBgNV
BAMTKDlCMTNCNTc1REYxRjlERjg4QUUzRTNCRDVGMDlFODc0QUIwQkMzMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3//p2XqnWp241sgqyjHXyjUd9
mjl0q66JPhqnYFwqkLyPMQgv4idyvUatVdMI7/37Cc56UxxC3sW9Hfien5VPUOZ/
AoqHlyqBOyRY5FgM4I1GTbCOuLp7pq3tqxGNXUHE5gUL3x0+pkQbz+DnG+5qGaYi
L7fN5E9LqnAQ9w8d/Jok3wGsShP6HI5DGvF/d/monU61H2hETyYxAsPqLUkQALcH
bTVUPkYkib+bFbsX95SbxOl027xNwu3jnhVLxWtIxtkGgzs2sfYboryp9zgmNfbo
iU7ps05OMkLCMjkweCQyjTo3Bs6Bca2nIZTw3k51RxuMoOpPQTaSXozCG5M7AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUmxO1dd8fnfiK4+O9XwnodKsLwwgwHwYDVR0j
BBgwFoAUkqzCTSzEStvSKMKHgjl5D8I1n0IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0VIUDZhMzlyb2l6ZHk1d0hKdUUxbmpIaXQzOHpQc056b0JUREpNdHJG
bkMvMC85MkFDQzI0RDJDQzQ0QURCRDIyOEMyODc4MjM5NzkwRkMyMzU5RjQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyQUNDMjREMkNDNDRBREJE
MjI4QzI4NzgyMzk3OTBGQzIzNTlGNDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNFSFA2YTM5cm9pemR5NXdISnVFMW5qSGl0Mzh6UHNOem9CVERKTXRyRm5DLzAv
MzIzODMwMzQzYTMzMzU2MjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzMzMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDW0MA0GCSqGSIb3DQEBCwUAA4IBAQBEh+pl
EImToo8c9hFS+N54nnykvuYFDdogIUznCK5kQUZP176QwSxABqy3S4RV7K/p7Bxl
0uPfpEFfcnMsnAyenK3g9XRIhlKAanO1BsRIYWAk2r7w8Sa7ocT2U4lrW1pfCGm/
umfUeec5lsDgpHIscpUZ9d5Q+efTVyS/yIqtTLPWRYv4qEDgiW3MXouGLXBCFs7X
LVEig2Lpxg5cF57KPIWxXX5evdqD2LoO0Znae6nV7BIasr0pKVww5IyssXWVqkrI
j3GZJpMbcZhM6j4H2HrmE+wWkVlq8F3JYEei0NsyHIaeAq6WZopRCjiBPKVy/grb
IkEBG7BcK9f/R0Qq
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:49 2025 by rpki-client