Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/323830343a363732383a383930303a3a2f34302d3430203d3e20323639363038.roa
File:                     323830343a363732383a383930303a3a2f34302d3430203d3e20323639363038.roa (raw, json)
Hash identifier:          trCiygggJKUbmWEwtO62CgQ7ChAc66RVMXN1qNSk1ZY=
Subject key identifier:   3B:02:A8:17:8D:69:B9:46:59:5B:96:5B:7F:A6:B9:E3:7C:41:06:22
Certificate issuer:       /CN=141D0D9BF25D7F0F2EE720E63711904974FDDC7F
Certificate serial:       1E4068AB059FEFC896D1F7F950518D7DE2777C67
Authority key identifier: 14:1D:0D:9B:F2:5D:7F:0F:2E:E7:20:E6:37:11:90:49:74:FD:DC:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/323830343a363732383a383930303a3a2f34302d3430203d3e20323639363038.roa
Signing time:             Tue 30 Sep 2025 13:13:04 +0000
ROA not before:           Tue 30 Sep 2025 13:08:04 +0000
ROA not after:            Tue 29 Sep 2026 13:13:04 +0000
asID:                     269608
IP address blocks:        2804:6728:8900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.crl
                          rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 23:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:40:68:ab:05:9f:ef:c8:96:d1:f7:f9:50:51:8d:7d:e2:77:7c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=141D0D9BF25D7F0F2EE720E63711904974FDDC7F
        Validity
            Not Before: Sep 30 13:08:04 2025 GMT
            Not After : Sep 29 13:13:04 2026 GMT
        Subject: CN=3B02A8178D69B946595B965B7FA6B9E37C410622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:5b:ad:3f:eb:c1:c2:4e:b4:f8:7f:f4:5d:
                    36:d5:3f:d5:71:43:bd:24:8c:e6:8d:c6:99:33:a1:
                    6d:a0:ff:cc:f0:74:4d:83:e3:35:ff:e7:ce:51:85:
                    4a:33:b5:c3:16:0f:57:35:d2:ee:91:e3:10:af:d6:
                    61:15:43:c0:55:09:f3:05:43:16:64:20:8e:4c:d4:
                    8b:e6:8c:66:3e:fe:16:42:df:d5:17:c7:51:52:d6:
                    2e:0d:3a:91:4d:28:0b:e0:4c:6e:df:fc:36:b2:7f:
                    04:97:22:c3:1d:d8:f4:84:a7:b9:2e:49:0e:f0:c1:
                    b2:99:ce:f8:4a:a4:c1:81:26:65:b9:31:48:eb:5f:
                    51:95:db:93:71:b8:0d:ce:bd:25:f4:ce:9f:13:13:
                    dd:23:f5:23:ef:fc:e9:fb:42:7c:3f:20:3d:b9:91:
                    3e:94:fe:44:d0:93:6f:a4:22:a6:86:1b:56:7b:70:
                    08:f4:91:f2:78:02:ca:7e:98:73:7a:26:43:d3:41:
                    bc:b3:81:5f:1d:1b:90:ca:c3:2f:e6:ac:80:73:60:
                    09:f4:72:a5:f8:f2:60:e7:ef:d1:bd:95:60:a1:15:
                    7c:e9:bb:36:84:62:a1:e2:2e:b1:6c:96:66:dd:cb:
                    7d:05:50:17:c1:18:c6:74:70:78:ac:f4:b7:b0:13:
                    9e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:02:A8:17:8D:69:B9:46:59:5B:96:5B:7F:A6:B9:E3:7C:41:06:22
            X509v3 Authority Key Identifier:
                keyid:14:1D:0D:9B:F2:5D:7F:0F:2E:E7:20:E6:37:11:90:49:74:FD:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/323830343a363732383a383930303a3a2f34302d3430203d3e20323639363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6728:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:19:1c:50:a9:57:00:1c:51:aa:22:ac:9d:5a:7f:91:ae:44:
         a1:ab:c4:94:ba:db:90:1b:c6:46:8a:70:66:19:9a:ba:e2:6a:
         ab:91:57:0c:21:ca:e9:0b:86:2a:d1:7e:b9:fd:6a:8c:30:30:
         ad:74:32:37:4d:af:d8:96:f1:70:57:4a:5a:97:c2:f6:e8:d6:
         ea:c2:8b:41:8b:be:70:9b:dc:6c:10:3c:f6:30:de:11:a3:c2:
         13:9a:6b:a6:00:f9:8e:9d:a2:70:f6:01:15:36:a9:68:9b:bf:
         31:b5:bb:63:99:f5:28:d5:e0:81:c6:31:f5:fc:dc:9a:e4:64:
         cf:d6:70:c1:ed:72:aa:fd:3e:4a:d5:1a:56:57:50:ea:60:78:
         97:20:e1:91:0f:32:ea:09:e5:06:64:f9:ae:a0:6d:b4:2d:3e:
         ea:80:03:4e:fe:34:f6:c3:95:f8:0d:35:40:a0:78:24:48:e3:
         b0:39:46:c4:62:ad:6b:22:fa:40:2e:7a:02:00:f0:81:1e:22:
         cb:98:08:86:62:71:0a:44:bf:c6:22:9f:f2:20:ba:4d:2b:8f:
         46:2e:6d:5a:35:85:53:ad:13:ed:3d:f6:1c:53:a4:9a:03:39:
         82:d8:70:51:51:86:87:15:99:e6:85:26:35:56:e7:21:6c:23:
         4f:12:90:fc
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUHkBoqwWf78iW0ff5UFGNfeJ3fGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQxRDBEOUJGMjVEN0YwRjJFRTcyMEU2MzcxMTkwNDk3
NEZEREM3RjAeFw0yNTA5MzAxMzA4MDRaFw0yNjA5MjkxMzEzMDRaMDMxMTAvBgNV
BAMTKDNCMDJBODE3OEQ2OUI5NDY1OTVCOTY1QjdGQTZCOUUzN0M0MTA2MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+VutP+vBwk60+H/0XTbVP9Vx
Q70kjOaNxpkzoW2g/8zwdE2D4zX/585RhUoztcMWD1c10u6R4xCv1mEVQ8BVCfMF
QxZkII5M1IvmjGY+/hZC39UXx1FS1i4NOpFNKAvgTG7f/DayfwSXIsMd2PSEp7ku
SQ7wwbKZzvhKpMGBJmW5MUjrX1GV25NxuA3OvSX0zp8TE90j9SPv/On7Qnw/ID25
kT6U/kTQk2+kIqaGG1Z7cAj0kfJ4Asp+mHN6JkPTQbyzgV8dG5DKwy/mrIBzYAn0
cqX48mDn79G9lWChFXzpuzaEYqHiLrFslmbdy30FUBfBGMZ0cHis9LewE54xAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUOwKoF41puUZZW5Zbf6a543xBBiIwHwYDVR0j
BBgwFoAUFB0Nm/Jdfw8u5yDmNxGQSXT93H8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlNOWdRRHZpczl5SnZrYkF2WUo2WURucVlKZDU4bTE1V0FXS3Q0b2Va
QVcvMC8xNDFEMEQ5QkYyNUQ3RjBGMkVFNzIwRTYzNzExOTA0OTc0RkREQzdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0MUQwRDlCRjI1RDdGMEYy
RUU3MjBFNjM3MTE5MDQ5NzRGRERDN0YuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5TTlnUUR2aXM5eUp2a2JBdllKNllEbnFZSmQ1OG0xNVdBV0t0NG9lWkFXLzAv
MzIzODMwMzQzYTM2MzczMjM4M2EzODM5MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzOTM2MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEZyiJMA0GCSqGSIb3DQEBCwUA
A4IBAQALGRxQqVcAHFGqIqydWn+RrkShq8SUutuQG8ZGinBmGZq64mqrkVcMIcrp
C4Yq0X65/WqMMDCtdDI3Ta/YlvFwV0pal8L26NbqwotBi75wm9xsEDz2MN4Ro8IT
mmumAPmOnaJw9gEVNqlom78xtbtjmfUo1eCBxjH1/Nya5GTP1nDB7XKq/T5K1RpW
V1DqYHiXIOGRDzLqCeUGZPmuoG20LT7qgANO/jT2w5X4DTVAoHgkSOOwOUbEYq1r
IvpALnoCAPCBHiLLmAiGYnEKRL/GIp/yILpNK49GLm1aNYVTrRPtPfYcU6SaAzmC
2HBRUYaHFZnmhSY1VuchbCNPEpD8
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:42 2025 by rpki-client