Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/323830343a333436383a3a2f33322d3438203d3e20323635343535.roa
File:                     323830343a333436383a3a2f33322d3438203d3e20323635343535.roa (raw, json)
Hash identifier:          uZXJimdQ7v3fryl2/a2l1MLx/tUjQNRVje79pYidNQ8=
Subject key identifier:   C3:EF:76:BB:49:DB:19:8D:31:FC:80:8B:66:F8:FC:C8:DF:F1:48:99
Certificate issuer:       /CN=7830A523B99F768956B66F820E23586991FC83CB
Certificate serial:       5BACCDF4F706494AA6DCC927FDD00A61AB9BC1C7
Authority key identifier: 78:30:A5:23:B9:9F:76:89:56:B6:6F:82:0E:23:58:69:91:FC:83:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7830A523B99F768956B66F820E23586991FC83CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/323830343a333436383a3a2f33322d3438203d3e20323635343535.roa
Signing time:             Mon 30 Jun 2025 17:32:46 +0000
ROA not before:           Mon 30 Jun 2025 17:27:46 +0000
ROA not after:            Mon 29 Jun 2026 17:32:46 +0000
asID:                     265455
IP address blocks:        2804:3468::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/7830A523B99F768956B66F820E23586991FC83CB.crl
                          rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/7830A523B99F768956B66F820E23586991FC83CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7830A523B99F768956B66F820E23586991FC83CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 08:52:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ac:cd:f4:f7:06:49:4a:a6:dc:c9:27:fd:d0:0a:61:ab:9b:c1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7830A523B99F768956B66F820E23586991FC83CB
        Validity
            Not Before: Jun 30 17:27:46 2025 GMT
            Not After : Jun 29 17:32:46 2026 GMT
        Subject: CN=C3EF76BB49DB198D31FC808B66F8FCC8DFF14899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1e:e4:da:b7:f4:9c:c5:0e:5e:c8:61:f5:33:
                    5c:32:cc:db:a9:be:17:b3:6a:15:56:79:d7:72:60:
                    e4:36:32:4f:21:07:47:44:17:36:01:10:8f:f3:ba:
                    c4:5f:0e:dd:b4:13:5d:c4:7c:59:aa:4d:5e:32:cd:
                    26:92:34:f8:9b:f6:ac:fd:bc:57:13:60:dc:7e:36:
                    f7:c7:a5:68:bd:42:43:82:03:94:6f:e2:5d:da:ac:
                    48:66:00:02:3c:0f:bd:05:fc:9f:8a:85:80:40:0c:
                    19:1c:ac:de:48:6a:6a:53:19:54:fe:ad:1d:cb:3a:
                    01:e6:07:4a:5f:41:64:70:3c:0c:27:0d:7e:f3:ad:
                    0c:de:33:dc:46:c6:0a:45:9f:05:e3:7b:8b:67:c0:
                    c9:79:f4:2a:f2:b4:4d:e1:a4:1f:81:35:8b:bb:aa:
                    24:3a:6f:30:31:a6:58:19:a5:6d:fe:b3:77:42:b6:
                    d3:3f:16:2d:13:fd:60:d0:5f:13:4b:49:f2:53:32:
                    af:e7:c7:9a:cd:14:89:f0:84:c2:05:2f:48:c6:84:
                    94:5d:4b:52:67:eb:3e:84:d0:2c:c6:da:5f:80:8e:
                    0d:ae:c3:6e:bc:d7:9f:75:97:15:c7:d5:21:00:50:
                    90:53:58:a3:52:23:21:76:e2:d5:30:53:75:5b:1a:
                    88:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EF:76:BB:49:DB:19:8D:31:FC:80:8B:66:F8:FC:C8:DF:F1:48:99
            X509v3 Authority Key Identifier:
                keyid:78:30:A5:23:B9:9F:76:89:56:B6:6F:82:0E:23:58:69:91:FC:83:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/7830A523B99F768956B66F820E23586991FC83CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7830A523B99F768956B66F820E23586991FC83CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/323830343a333436383a3a2f33322d3438203d3e20323635343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3468::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:fe:25:1e:61:39:3d:76:38:da:7b:ec:dc:90:a0:c6:52:7f:
         e8:57:e3:ad:28:d1:84:2c:4d:23:9b:fb:c3:4c:61:75:10:97:
         70:d9:03:76:30:d0:15:07:72:e5:da:28:e9:46:a6:2e:40:2c:
         57:c2:2b:c1:30:bf:33:2c:c1:90:53:d9:a7:72:c4:04:f1:45:
         e6:a0:82:96:18:24:dc:fa:4d:1e:dd:f7:11:75:28:95:33:18:
         88:4e:75:bb:f2:04:f7:60:80:03:6c:cd:64:35:96:8b:8f:64:
         0d:03:3a:95:ff:7e:3e:2f:7a:c6:02:05:45:1d:a5:b9:9a:45:
         d2:72:20:f0:3c:e7:a2:bb:09:60:52:23:f9:24:49:6b:af:af:
         6b:99:42:ea:6d:27:8a:7a:79:f7:44:e1:21:57:f2:a1:c2:c3:
         5e:c7:df:75:09:41:f6:b6:0d:df:f8:0b:71:42:37:0b:cb:cd:
         0c:8a:47:92:00:32:ec:62:af:31:04:2e:13:d1:0d:6b:c7:73:
         44:61:a9:4c:c6:ea:6d:0c:1a:f3:35:a4:46:49:27:eb:99:6e:
         9f:64:48:c1:4a:9e:03:94:d0:f2:cd:34:53:a5:7f:e3:b8:f2:
         46:11:d5:97:3f:7f:af:5f:a9:cf:20:4d:aa:72:e5:0a:42:da:
         ef:00:1e:fb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUW6zN9PcGSUqm3Mkn/dAKYaubwccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgzMEE1MjNCOTlGNzY4OTU2QjY2RjgyMEUyMzU4Njk5
MUZDODNDQjAeFw0yNTA2MzAxNzI3NDZaFw0yNjA2MjkxNzMyNDZaMDMxMTAvBgNV
BAMTKEMzRUY3NkJCNDlEQjE5OEQzMUZDODA4QjY2RjhGQ0M4REZGMTQ4OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJHuTat/ScxQ5eyGH1M1wyzNup
vhezahVWeddyYOQ2Mk8hB0dEFzYBEI/zusRfDt20E13EfFmqTV4yzSaSNPib9qz9
vFcTYNx+NvfHpWi9QkOCA5Rv4l3arEhmAAI8D70F/J+KhYBADBkcrN5IampTGVT+
rR3LOgHmB0pfQWRwPAwnDX7zrQzeM9xGxgpFnwXje4tnwMl59CrytE3hpB+BNYu7
qiQ6bzAxplgZpW3+s3dCttM/Fi0T/WDQXxNLSfJTMq/nx5rNFInwhMIFL0jGhJRd
S1Jn6z6E0CzG2l+Ajg2uw2681591lxXH1SEAUJBTWKNSIyF24tUwU3VbGogTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUw+92u0nbGY0x/ICLZvj8yN/xSJkwHwYDVR0j
BBgwFoAUeDClI7mfdolWtm+CDiNYaZH8g8swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXNhTGRibnE4aTNiZnFCbUpoNTNSWUVDTEY0TW9MYW5GN0x1SzhwemdY
VTEvMC83ODMwQTUyM0I5OUY3Njg5NTZCNjZGODIwRTIzNTg2OTkxRkM4M0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4MzBBNTIzQjk5Rjc2ODk1
NkI2NkY4MjBFMjM1ODY5OTFGQzgzQ0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlzYUxkYm5xOGkzYmZxQm1KaDUzUllFQ0xGNE1vTGFuRjdMdUs4cHpnWFUxLzAv
MzIzODMwMzQzYTMzMzQzNjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzQzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ0aDANBgkqhkiG9w0BAQsFAAOCAQEAi/4lHmE5
PXY42nvs3JCgxlJ/6FfjrSjRhCxNI5v7w0xhdRCXcNkDdjDQFQdy5doo6UamLkAs
V8IrwTC/MyzBkFPZp3LEBPFF5qCClhgk3PpNHt33EXUolTMYiE51u/IE92CAA2zN
ZDWWi49kDQM6lf9+Pi96xgIFRR2luZpF0nIg8DznorsJYFIj+SRJa6+va5lC6m0n
inp590ThIVfyocLDXsffdQlB9rYN3/gLcUI3C8vNDIpHkgAy7GKvMQQuE9ENa8dz
RGGpTMbqbQwa8zWkRkkn65lun2RIwUqeA5TQ8s00U6V/47jyRhHVlz9/r1+pzyBN
qnLlCkLa7wAe+w==
-----END CERTIFICATE-----
Generated at Fri Jul 4 10:33:58 2025 by rpki-client