Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/323830343a363162343a3a2f33322d313238203d3e20323639323531.roa
File:                     323830343a363162343a3a2f33322d313238203d3e20323639323531.roa (raw, json)
Hash identifier:          vTMSQ0NcGNW7SwsUL0mwA0ATgC9+9p6vx7LJ6LWK5rc=
Subject key identifier:   6D:D4:A7:69:84:D5:8F:25:40:E6:9D:62:14:1C:38:68:BE:48:09:A7
Certificate issuer:       /CN=DD96C22DA79157384B8F68AB1845AAF1E794A86D
Certificate serial:       0786D2DFBF8E9B51B12F0E8889B9105F467676A3
Authority key identifier: DD:96:C2:2D:A7:91:57:38:4B:8F:68:AB:18:45:AA:F1:E7:94:A8:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/323830343a363162343a3a2f33322d313238203d3e20323639323531.roa
Signing time:             Fri 22 Aug 2025 12:25:31 +0000
ROA not before:           Fri 22 Aug 2025 12:20:31 +0000
ROA not after:            Fri 21 Aug 2026 12:25:31 +0000
asID:                     269251
IP address blocks:        2804:61b4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.crl
                          rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:86:d2:df:bf:8e:9b:51:b1:2f:0e:88:89:b9:10:5f:46:76:76:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD96C22DA79157384B8F68AB1845AAF1E794A86D
        Validity
            Not Before: Aug 22 12:20:31 2025 GMT
            Not After : Aug 21 12:25:31 2026 GMT
        Subject: CN=6DD4A76984D58F2540E69D62141C3868BE4809A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e6:99:4b:f5:67:d2:83:14:4f:44:1c:8b:3b:
                    8b:9d:b5:f6:15:15:61:1b:a4:42:0c:9b:a5:f5:2a:
                    40:b1:b3:da:1d:11:d4:12:fa:41:3d:51:31:58:ac:
                    34:0d:80:ef:51:00:82:7a:49:c1:56:58:35:98:0a:
                    e1:ef:2c:c3:e5:98:7a:55:57:21:71:73:a7:bf:a9:
                    ec:43:cc:80:72:ad:89:a3:9c:34:a7:59:51:35:df:
                    76:b9:41:06:31:d0:4f:5b:9b:93:c6:87:08:c0:fe:
                    62:72:01:2d:88:45:56:47:b1:f3:6e:35:a6:a9:90:
                    32:e0:43:ed:ee:e2:ef:af:ac:e9:db:27:d9:35:7b:
                    62:3d:e1:57:d7:07:de:27:2f:63:42:c0:42:2e:88:
                    a6:57:dc:e6:bb:23:ca:c5:21:f4:97:e4:d7:10:fe:
                    1e:59:a6:2d:2d:fc:b2:e8:df:cd:a5:6d:01:ba:a1:
                    80:90:a5:c7:8b:c6:85:c9:37:4d:77:53:4b:aa:75:
                    48:8b:2d:f8:dc:e7:0d:37:ef:57:c9:f5:a3:dd:11:
                    66:12:0e:d8:3e:05:4c:a1:9e:cf:fd:ed:cd:a4:fd:
                    5c:ad:7f:aa:ff:2b:89:ff:fc:41:2d:f9:93:fe:8c:
                    5f:d9:e0:d3:44:58:ea:4f:fc:bb:ad:e2:37:28:7c:
                    ac:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D4:A7:69:84:D5:8F:25:40:E6:9D:62:14:1C:38:68:BE:48:09:A7
            X509v3 Authority Key Identifier:
                keyid:DD:96:C2:2D:A7:91:57:38:4B:8F:68:AB:18:45:AA:F1:E7:94:A8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/DD96C22DA79157384B8F68AB1845AAF1E794A86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD96C22DA79157384B8F68AB1845AAF1E794A86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SvbCbS2kmo4qCFPG2gzG6UJaYeWWsZCZ3GoodH5LAh6/0/323830343a363162343a3a2f33322d313238203d3e20323639323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:b9:6d:26:fd:a3:05:82:8a:48:0f:ea:64:8f:d5:a5:01:1a:
         c5:5e:e6:f6:68:cd:06:39:3f:4b:22:46:0a:2b:5b:0c:31:99:
         03:e2:86:e1:a3:9d:07:5d:42:59:55:85:ab:4f:1d:e8:da:dd:
         0e:e9:92:93:38:6c:98:2c:a3:3a:7b:53:89:7c:1a:56:37:b9:
         c8:61:01:4e:25:f5:13:a0:f7:e8:94:05:1a:30:f3:e1:d1:10:
         e0:48:6e:b7:97:5f:2d:74:c2:36:a1:72:3b:e9:79:7c:41:83:
         3f:17:f2:a8:bd:ee:a1:17:08:32:1d:77:b9:7d:fe:b4:62:a2:
         b2:0a:21:19:f0:a1:fe:e2:52:6a:e9:da:dc:37:7f:8f:ff:1e:
         b6:e3:e6:4b:14:5c:2d:7a:c1:13:45:a4:89:4c:98:27:4c:17:
         af:2d:3a:fa:ae:51:c8:5f:06:dc:1f:b4:28:b3:f4:e1:a8:30:
         3d:6e:f0:27:2d:e5:a0:cd:33:18:a4:60:9a:96:71:79:28:57:
         bd:4e:2b:37:79:35:06:89:c4:60:27:58:75:2c:fe:74:06:d7:
         bf:3b:66:34:da:70:1e:44:58:34:08:79:9d:38:51:5f:fa:95:
         bb:37:88:94:e3:bd:30:b8:53:ba:ca:c3:3f:54:f2:73:34:d9:
         ea:40:82:61
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUB4bS37+Om1GxLw6IibkQX0Z2dqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ5NkMyMkRBNzkxNTczODRCOEY2OEFCMTg0NUFBRjFF
Nzk0QTg2RDAeFw0yNTA4MjIxMjIwMzFaFw0yNjA4MjExMjI1MzFaMDMxMTAvBgNV
BAMTKDZERDRBNzY5ODRENThGMjU0MEU2OUQ2MjE0MUMzODY4QkU0ODA5QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl5plL9WfSgxRPRByLO4udtfYV
FWEbpEIMm6X1KkCxs9odEdQS+kE9UTFYrDQNgO9RAIJ6ScFWWDWYCuHvLMPlmHpV
VyFxc6e/qexDzIByrYmjnDSnWVE133a5QQYx0E9bm5PGhwjA/mJyAS2IRVZHsfNu
NaapkDLgQ+3u4u+vrOnbJ9k1e2I94VfXB94nL2NCwEIuiKZX3Oa7I8rFIfSX5NcQ
/h5Zpi0t/LLo382lbQG6oYCQpceLxoXJN013U0uqdUiLLfjc5w0371fJ9aPdEWYS
Dtg+BUyhns/97c2k/Vytf6r/K4n//EEt+ZP+jF/Z4NNEWOpP/Lut4jcofKzxAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUbdSnaYTVjyVA5p1iFBw4aL5ICacwHwYDVR0j
BBgwFoAU3ZbCLaeRVzhLj2irGEWq8eeUqG0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVN2YkNiUzJrbW80cUNGUEcyZ3pHNlVKYVllV1dzWkNaM0dvb2RINUxB
aDYvMC9ERDk2QzIyREE3OTE1NzM4NEI4RjY4QUIxODQ1QUFGMUU3OTRBODZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REOTZDMjJEQTc5MTU3Mzg0
QjhGNjhBQjE4NDVBQUYxRTc5NEE4NkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlTdmJDYlMya21vNHFDRlBHMmd6RzZVSmFZZVdXc1pDWjNHb29kSDVMQWg2LzAv
MzIzODMwMzQzYTM2MzE2MjM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzkzMjM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBGG0MA0GCSqGSIb3DQEBCwUAA4IBAQA9uW0m
/aMFgopID+pkj9WlARrFXub2aM0GOT9LIkYKK1sMMZkD4obho50HXUJZVYWrTx3o
2t0O6ZKTOGyYLKM6e1OJfBpWN7nIYQFOJfUToPfolAUaMPPh0RDgSG63l18tdMI2
oXI76Xl8QYM/F/Kove6hFwgyHXe5ff60YqKyCiEZ8KH+4lJq6drcN3+P/x624+ZL
FFwtesETRaSJTJgnTBevLTr6rlHIXwbcH7Qos/ThqDA9bvAnLeWgzTMYpGCalnF5
KFe9Tis3eTUGicRgJ1h1LP50Bte/O2Y02nAeRFg0CHmdOFFf+pW7N4iU470wuFO6
ysM/VPJzNNnqQIJh
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:13:24 2025 by rpki-client