Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a313a3a2f34382d3438203d3e20323733333339.roa
File:                     323830343a386432383a313a3a2f34382d3438203d3e20323733333339.roa (raw, json)
Hash identifier:          e9VrC62wmeWtGGArbVOY4ON1WcHO4mJ2tvtYmPzYRnY=
Subject key identifier:   69:6A:E8:07:9C:CC:DE:53:4D:C9:0C:16:DC:23:F8:4D:E9:EF:8C:6D
Certificate issuer:       /CN=A7C3FCD410E53CBCF7F64DC367269EF9625997A7
Certificate serial:       1190B0E53A0CC9D5134CC3FDEF24C8AD137C260A
Authority key identifier: A7:C3:FC:D4:10:E5:3C:BC:F7:F6:4D:C3:67:26:9E:F9:62:59:97:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a313a3a2f34382d3438203d3e20323733333339.roa
Signing time:             Fri 05 Sep 2025 16:32:40 +0000
ROA not before:           Fri 05 Sep 2025 16:27:40 +0000
ROA not after:            Fri 04 Sep 2026 16:32:40 +0000
asID:                     273339
IP address blocks:        2804:8d28:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.crl
                          rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:90:b0:e5:3a:0c:c9:d5:13:4c:c3:fd:ef:24:c8:ad:13:7c:26:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7C3FCD410E53CBCF7F64DC367269EF9625997A7
        Validity
            Not Before: Sep  5 16:27:40 2025 GMT
            Not After : Sep  4 16:32:40 2026 GMT
        Subject: CN=696AE8079CCCDE534DC90C16DC23F84DE9EF8C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:87:09:52:16:16:8a:5b:ce:29:b5:3c:23:
                    2a:39:a2:ca:ef:9a:9e:1e:62:83:17:a5:44:dd:a4:
                    35:18:42:23:27:20:2c:03:7d:01:68:7d:ef:8a:2d:
                    0a:d7:53:34:ac:76:57:f8:66:dc:2e:13:54:4e:80:
                    19:22:11:3c:9f:23:6f:2d:33:b4:bd:1a:c2:84:1f:
                    5a:a7:7f:55:ec:5b:4c:03:82:da:07:29:e0:05:4a:
                    79:4d:af:2d:2b:97:73:f5:e9:8c:74:ac:8a:bb:c7:
                    f6:97:f3:d8:64:c5:97:31:99:19:b4:cd:8c:60:bd:
                    68:5e:5d:b9:ea:2d:f4:95:5b:52:64:11:05:9d:5a:
                    5c:cb:87:24:2d:c3:12:12:e0:05:69:94:70:b9:e9:
                    87:39:fb:99:12:3a:bc:a0:26:49:34:2d:8b:85:d2:
                    34:5b:72:f7:bf:b2:ba:7a:5e:8a:96:3b:7d:31:6d:
                    ac:e0:af:3b:69:56:6e:f4:06:27:3a:20:03:ce:6f:
                    ac:90:fd:30:bc:2e:9c:92:f8:08:21:4d:9e:c8:03:
                    28:61:0b:30:26:f5:f3:81:f6:95:f2:b0:78:f0:87:
                    4e:17:26:1e:80:76:c3:92:e6:0a:e7:16:3a:3c:58:
                    0f:70:75:65:23:84:db:d1:bd:fc:89:28:a2:d4:d1:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6A:E8:07:9C:CC:DE:53:4D:C9:0C:16:DC:23:F8:4D:E9:EF:8C:6D
            X509v3 Authority Key Identifier:
                keyid:A7:C3:FC:D4:10:E5:3C:BC:F7:F6:4D:C3:67:26:9E:F9:62:59:97:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a313a3a2f34382d3438203d3e20323733333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d28:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:02:2a:e3:87:03:4b:eb:23:18:27:ba:35:4a:64:50:33:61:
         20:2e:cf:00:a3:0d:ac:74:1c:ae:a1:49:af:28:38:46:b9:eb:
         8c:18:8b:d4:2d:14:f7:da:7d:0d:39:25:f6:ea:e6:15:2a:c9:
         c2:57:2a:3f:2d:43:2d:2d:88:ff:09:6c:6b:b6:fe:c0:bd:ee:
         3e:a9:ac:5c:df:39:31:cc:11:6f:41:78:84:aa:eb:99:60:9e:
         1e:89:37:14:35:64:72:db:e4:64:a4:d5:c5:73:78:20:13:00:
         3d:21:95:c5:f7:98:da:0c:f5:be:9a:09:c3:d5:ef:29:44:80:
         3a:ea:87:30:d7:5e:e3:64:73:1f:61:b6:16:85:7d:42:5d:13:
         2d:40:48:48:51:82:51:21:c1:ce:82:02:bc:c1:36:56:b5:38:
         45:92:7f:29:32:85:58:49:53:12:c0:2e:7b:67:31:02:0d:c6:
         4b:28:db:8b:35:d3:8a:62:77:ab:e7:d5:92:91:35:dd:30:8a:
         4f:0b:35:2b:19:1f:00:72:c6:28:b4:24:53:ef:a0:ca:e9:55:
         a2:d2:78:04:a4:a9:fd:9d:82:90:21:b7:5b:c8:56:4b:38:fc:
         65:86:f4:5a:20:95:c1:99:21:7e:72:23:b3:26:2b:20:33:5f:
         45:4a:49:f6
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUEZCw5ToMydUTTMP97yTIrRN8JgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdDM0ZDRDQxMEU1M0NCQ0Y3RjY0REMzNjcyNjlFRjk2
MjU5OTdBNzAeFw0yNTA5MDUxNjI3NDBaFw0yNjA5MDQxNjMyNDBaMDMxMTAvBgNV
BAMTKDY5NkFFODA3OUNDQ0RFNTM0REM5MEMxNkRDMjNGODRERTlFRjhDNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzSocJUhYWilvOKbU8Iyo5osrv
mp4eYoMXpUTdpDUYQiMnICwDfQFofe+KLQrXUzSsdlf4ZtwuE1ROgBkiETyfI28t
M7S9GsKEH1qnf1XsW0wDgtoHKeAFSnlNry0rl3P16Yx0rIq7x/aX89hkxZcxmRm0
zYxgvWheXbnqLfSVW1JkEQWdWlzLhyQtwxIS4AVplHC56Yc5+5kSOrygJkk0LYuF
0jRbcve/srp6XoqWO30xbazgrztpVm70Bic6IAPOb6yQ/TC8LpyS+AghTZ7IAyhh
CzAm9fOB9pXysHjwh04XJh6AdsOS5grnFjo8WA9wdWUjhNvRvfyJKKLU0VmfAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUaWroB5zM3lNNyQwW3CP4TenvjG0wHwYDVR0j
BBgwFoAUp8P81BDlPLz39k3DZyae+WJZl6cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRyaExnYWp1dnl1ek56ZXZCbzdZZm8xV3VtVzZESlNXdGFyVHhXUWtz
SEwvMC9BN0MzRkNENDEwRTUzQ0JDRjdGNjREQzM2NzI2OUVGOTYyNTk5N0E3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3QzNGQ0Q0MTBFNTNDQkNG
N0Y2NERDMzY3MjY5RUY5NjI1OTk3QTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0cmhMZ2FqdXZ5dXpOemV2Qm83WWZvMVd1bVc2REpTV3RhclR4V1Frc0hMLzAv
MzIzODMwMzQzYTM4NjQzMjM4M2EzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzczMzMzMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEjSgAATANBgkqhkiG9w0BAQsFAAOCAQEA
jwIq44cDS+sjGCe6NUpkUDNhIC7PAKMNrHQcrqFJryg4RrnrjBiL1C0U99p9DTkl
9urmFSrJwlcqPy1DLS2I/wlsa7b+wL3uPqmsXN85McwRb0F4hKrrmWCeHok3FDVk
ctvkZKTVxXN4IBMAPSGVxfeY2gz1vpoJw9XvKUSAOuqHMNde42RzH2G2FoV9Ql0T
LUBISFGCUSHBzoICvME2VrU4RZJ/KTKFWElTEsAue2cxAg3GSyjbizXTimJ3q+fV
kpE13TCKTws1KxkfAHLGKLQkU++gyulVotJ4BKSp/Z2CkCG3W8hWSzj8ZYb0WiCV
wZkhfnIjsyYrIDNfRUpJ9g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:30:28 2025 by rpki-client