Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a3a2f33342d3334203d3e20323639353032.roa
File:                     323830343a363539383a3a2f33342d3334203d3e20323639353032.roa (raw, json)
Hash identifier:          mTdcKaAn0DG682fYPMM6XbhcUwRq0LZVaMgsA3DtOjY=
Subject key identifier:   B9:8A:40:CC:6F:2C:57:1E:8C:E0:B1:AD:91:62:2D:AB:3D:F0:17:12
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       0FF3D71592664F8BB63904AB089B7B6A2EA7BD37
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a3a2f33342d3334203d3e20323639353032.roa
Signing time:             Sat 16 Aug 2025 14:00:03 +0000
ROA not before:           Sat 16 Aug 2025 13:55:03 +0000
ROA not after:            Sat 15 Aug 2026 14:00:03 +0000
asID:                     269502
IP address blocks:        2804:6598::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f3:d7:15:92:66:4f:8b:b6:39:04:ab:08:9b:7b:6a:2e:a7:bd:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: Aug 16 13:55:03 2025 GMT
            Not After : Aug 15 14:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:85:52:74:12:88:99:b9:76:38:62:4f:0f:ed:
                    4c:aa:95:28:82:12:9e:e6:2b:77:5a:03:a4:c4:07:
                    5d:81:f5:8e:66:e6:99:36:1d:15:be:b3:62:3e:9b:
                    00:8c:9f:ac:d5:14:9f:39:5f:3f:4e:53:5e:ed:79:
                    b4:1c:43:a5:7b:84:ff:b1:e9:b7:e5:bf:b1:29:dd:
                    13:28:af:7a:3d:66:c0:2e:6e:35:f5:64:a7:32:66:
                    48:c4:b2:c8:40:6b:83:90:b0:11:24:65:1a:c9:cf:
                    d8:02:86:a7:59:e2:31:68:3a:66:34:8d:89:95:c1:
                    94:77:fe:b8:1e:bf:3e:9c:2d:a5:c9:59:30:23:e8:
                    44:2b:9c:4f:ce:06:01:06:ed:c6:3a:70:a8:fc:10:
                    c7:f5:af:6d:92:21:cc:c2:f5:24:11:a7:bb:33:e2:
                    b7:bd:1c:fa:72:49:38:19:4c:0c:26:04:9c:ee:02:
                    9f:c7:98:17:5f:f8:5c:06:f4:65:96:e4:58:d5:cd:
                    c5:81:06:2c:cf:40:f4:0e:21:0d:eb:30:36:71:1b:
                    cd:89:2d:81:5e:0a:94:f0:1b:e0:23:64:26:db:a4:
                    80:e5:88:f5:0d:40:e1:33:49:ea:41:db:f8:46:b6:
                    f3:3d:b9:81:34:c6:3e:55:28:38:b4:7d:9e:b9:a6:
                    fd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8A:40:CC:6F:2C:57:1E:8C:E0:B1:AD:91:62:2D:AB:3D:F0:17:12
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a3a2f33342d3334203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598::/34

    Signature Algorithm: sha256WithRSAEncryption
         aa:41:a0:8b:47:87:c8:3a:4a:e4:b9:7b:8f:9b:75:d0:ed:26:
         73:61:23:6b:0f:f8:4b:d0:a5:63:6c:05:65:96:66:3c:a1:2a:
         74:97:8b:3d:cb:59:ae:55:f4:bc:4f:34:07:c0:cb:3d:28:5c:
         cf:ea:66:ce:70:89:80:0c:ce:6c:71:d5:81:6b:16:01:31:85:
         fd:b8:9f:6a:77:a1:75:51:89:41:85:22:35:4c:8b:e4:53:c5:
         92:2e:02:5a:56:44:a9:fa:c2:10:3d:29:fe:c5:02:d7:e8:e2:
         cc:5f:8f:18:6e:a4:29:55:fd:08:4e:0e:41:76:c3:1d:d2:cc:
         47:de:88:b3:cd:53:b0:1b:d0:4e:80:21:fb:49:fa:fb:fb:f5:
         2d:fa:b8:70:cf:79:21:e4:83:46:b9:bb:29:a7:2e:37:ce:19:
         10:48:2f:a1:32:a4:26:cc:dd:25:77:85:21:4b:41:48:2c:1c:
         fb:0c:d2:2e:52:1a:3b:8c:97:fd:64:82:5a:b2:1c:39:0d:e3:
         1d:d7:7e:8c:a1:be:3d:84:ac:bd:c8:56:2c:87:5d:ea:28:6d:
         12:76:b3:dd:c7:c1:33:19:bf:36:52:4c:79:ad:05:1e:67:a3:
         64:cd:f8:8b:2b:62:f7:cd:a5:50:2c:66:ed:8d:27:5e:4d:33:
         86:33:18:ab
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUD/PXFZJmT4u2OQSrCJt7ai6nvTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIxNDE0NDFEMjJBNDk3QTFCRjVBREI1ODBBMjE4NjM3
OTMwRkE5NTAeFw0yNTA4MTYxMzU1MDNaFw0yNjA4MTUxNDAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjI4NTUyNzQxMjg4OTlCOTc2
Mzg2MjRGMEZFRDRDQUE5NTI4ODIxMjlFRTYyQjc3NUEwM0E0QzQwNzVEODFGNThF
NjZFNjk5MzYxRDE1QkVCMzYyM0U5QjAwOEM5RkFDRDUxNDlGMzk1RjNGNEU1MzVF
RUQ3OUI0MUM0M0E1N0I4NEZGQjFFOUI3RTVCRkIxMjlERDEzMjhBRjdBM0Q2NkMw
MkU2RTM1RjU2NEE3MzI2NjQ4QzRCMkM4NDA2QjgzOTBCMDExMjQ2NTFBQzlDRkQ4
MDI4NkE3NTlFMjMxNjgzQTY2MzQ4RDg5OTVDMTk0NzdGRUI4MUVCRjNFOUMyREE1
Qzk1OTMwMjNFODQ0MkI5QzRGQ0UwNjAxMDZFREM2M0E3MEE4RkMxMEM3RjVBRjZE
OTIyMUNDQzJGNTI0MTFBN0JCMzNFMkI3QkQxQ0ZBNzI0OTM4MTk0QzBDMjYwNDlD
RUUwMjlGQzc5ODE3NUZGODVDMDZGNDY1OTZFNDU4RDVDREM1ODEwNjJDQ0Y0MEY0
MEUyMTBERUIzMDM2NzExQkNEODkyRDgxNUUwQTk0RjAxQkUwMjM2NDI2REJBNDgw
RTU4OEY1MEQ0MEUxMzM0OUVBNDFEQkY4NDZCNkYzM0RCOTgxMzRDNjNFNTUyODM4
QjQ3RDlFQjlBNkZEOEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8oVSdBKImbl2OGJPD+1MqpUoghKe5it3WgOkxAddgfWOZuaZNh0V
vrNiPpsAjJ+s1RSfOV8/TlNe7Xm0HEOle4T/sem35b+xKd0TKK96PWbALm419WSn
MmZIxLLIQGuDkLARJGUayc/YAoanWeIxaDpmNI2JlcGUd/64Hr8+nC2lyVkwI+hE
K5xPzgYBBu3GOnCo/BDH9a9tkiHMwvUkEae7M+K3vRz6ckk4GUwMJgSc7gKfx5gX
X/hcBvRlluRY1c3FgQYsz0D0DiEN6zA2cRvNiS2BXgqU8BvgI2Qm26SA5Yj1DUDh
M0nqQdv4RrbzPbmBNMY+VSg4tH2euab9jwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FLmKQMxvLFcejOCxrZFiLas98BcSMB8GA1UdIwQYMBaAFLsUFEHSKkl6G/WttYCi
GGN5MPqVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JScjlIS1Q4RUU5SlRa
TGpSaVVCcVNGRjlnTVdUYWVkQXJuU3lEQXE1YkprLzEvQkIxNDE0NDFEMjJBNDk3
QTFCRjVBREI1ODBBMjE4NjM3OTMwRkE5NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CQjE0MTQ0MUQyMkE0OTdBMUJGNUFEQjU4MEEyMTg2Mzc5MzBG
QTk1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CUnI5SEtUOEVFOUpUWkxqUmlV
QnFTRkY5Z01XVGFlZEFyblN5REFxNWJKay8xLzMyMzgzMDM0M2EzNjM1MzkzODNh
M2EyZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzYzOTM1MzAzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigE
ZZgAMA0GCSqGSIb3DQEBCwUAA4IBAQCqQaCLR4fIOkrkuXuPm3XQ7SZzYSNrD/hL
0KVjbAVllmY8oSp0l4s9y1muVfS8TzQHwMs9KFzP6mbOcImADM5scdWBaxYBMYX9
uJ9qd6F1UYlBhSI1TIvkU8WSLgJaVkSp+sIQPSn+xQLX6OLMX48YbqQpVf0ITg5B
dsMd0sxH3oizzVOwG9BOgCH7Sfr7+/Ut+rhwz3kh5INGubsppy43zhkQSC+hMqQm
zN0ld4UhS0FILBz7DNIuUho7jJf9ZIJashw5DeMd136Mob49hKy9yFYsh13qKG0S
drPdx8EzGb82Ukx5rQUeZ6NkzfiLK2L3zaVQLGbtjSdeTTOGMxir
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:59:31 2025 by rpki-client