Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a643030303a3a2f33362d3336203d3e20323639353032.roa
File:                     323830343a363539383a643030303a3a2f33362d3336203d3e20323639353032.roa (raw, json)
Hash identifier:          RIub0nD8CymdD4H44HFLvMFdMO8d0go/oLBDdPvjs98=
Subject key identifier:   7B:E6:0B:C5:84:50:1D:C2:BA:02:5C:55:BC:66:83:1C:A7:08:D2:C7
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       5B7256045A1EC0875093ED9FD81B1DAE703F419F
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a643030303a3a2f33362d3336203d3e20323639353032.roa
Signing time:             Sat 16 Aug 2025 22:58:47 +0000
ROA not before:           Sat 16 Aug 2025 22:53:47 +0000
ROA not after:            Sat 15 Aug 2026 22:58:47 +0000
asID:                     269502
IP address blocks:        2804:6598:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:72:56:04:5a:1e:c0:87:50:93:ed:9f:d8:1b:1d:ae:70:3f:41:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: Aug 16 22:53:47 2025 GMT
            Not After : Aug 15 22:58:47 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:aa:8a:23:7d:23:f6:b6:89:e4:62:26:8f:e0:
                    0d:78:8c:9b:15:79:49:29:e7:f1:1f:54:d0:29:4b:
                    83:63:6c:1f:14:ea:48:25:8b:ef:7b:38:69:3d:a1:
                    a7:a1:62:53:4c:83:21:df:6e:6b:2a:3c:38:ab:cc:
                    82:5e:80:63:73:09:d5:e8:55:40:93:da:8c:36:18:
                    f3:56:ff:65:0e:1f:17:d6:26:27:84:ba:57:49:cc:
                    e9:6a:39:69:7a:cc:6d:75:8a:a3:e1:9d:2c:f6:64:
                    e6:81:91:8f:7f:39:1d:9c:87:94:38:6a:32:4b:5d:
                    36:ad:bf:df:09:28:ea:87:1f:88:2a:9c:6a:f9:49:
                    9d:2e:fa:7b:60:11:04:d3:6a:e9:5d:f0:2c:9a:46:
                    7a:54:df:2c:7b:de:d2:c8:b9:59:c8:33:1e:1a:20:
                    42:37:19:b4:c1:c3:61:fd:46:36:63:aa:78:b1:ae:
                    17:84:a7:b8:32:aa:21:56:a3:6f:06:be:0b:86:e5:
                    13:c0:45:b7:fe:01:3d:b2:cc:68:66:49:35:8b:60:
                    0d:b5:15:43:c3:c1:0a:67:45:01:41:f8:66:d3:f1:
                    87:ea:86:85:4c:4f:44:91:d8:90:55:1f:8f:54:7b:
                    61:f5:c2:e8:3e:84:1a:60:f5:45:8c:f6:63:ef:a9:
                    24:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E6:0B:C5:84:50:1D:C2:BA:02:5C:55:BC:66:83:1C:A7:08:D2:C7
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a643030303a3a2f33362d3336203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         21:2c:00:a6:d7:e6:23:57:d0:df:27:8a:95:ec:3e:37:44:56:
         e5:80:e9:ec:ef:31:64:ed:18:b6:97:25:44:48:b7:d1:33:7f:
         14:a7:b4:aa:21:34:12:3a:b7:3e:d5:6b:97:53:80:9d:ef:95:
         14:72:d9:48:6a:ac:3e:8f:a1:b5:b4:82:54:84:cd:96:61:87:
         48:90:fa:fc:d8:ef:41:72:64:ac:27:b0:bc:b5:5a:ad:43:fa:
         2e:5b:2e:07:bf:c7:a3:3a:21:f2:e1:59:29:70:3c:6c:a7:47:
         1c:ee:c7:8f:de:78:9b:07:30:e8:da:a8:17:3c:b1:48:a4:a4:
         65:d0:bf:c7:4d:71:86:cb:07:26:62:ac:9e:d0:d4:e3:32:5f:
         7f:3b:c9:cc:34:06:19:06:44:8e:ea:88:c6:06:fa:89:a4:4d:
         b1:3b:2c:48:49:4e:66:2c:29:36:2e:42:2c:60:62:3e:e7:ba:
         ed:4b:30:c4:40:93:34:f2:2a:64:e9:ac:62:6f:bd:4c:6d:6e:
         be:69:63:b4:16:b7:86:06:fe:15:44:e7:b1:87:63:37:91:35:
         ec:4d:56:54:f0:40:9c:7f:51:ad:e9:77:c8:6d:b9:5a:8b:15:
         f4:82:ef:cb:53:54:31:f4:21:07:cb:93:37:e0:05:10:9f:56:
         81:20:b3:1d
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUW3JWBFoewIdQk+2f2BsdrnA/QZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIxNDE0NDFEMjJBNDk3QTFCRjVBREI1ODBBMjE4NjM3
OTMwRkE5NTAeFw0yNTA4MTYyMjUzNDdaFw0yNjA4MTUyMjU4NDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRERBQThBMjM3RDIzRjZCNjg5
RTQ2MjI2OEZFMDBENzg4QzlCMTU3OTQ5MjlFN0YxMUY1NEQwMjk0QjgzNjM2QzFG
MTRFQTQ4MjU4QkVGN0IzODY5M0RBMUE3QTE2MjUzNEM4MzIxREY2RTZCMkEzQzM4
QUJDQzgyNUU4MDYzNzMwOUQ1RTg1NTQwOTNEQThDMzYxOEYzNTZGRjY1MEUxRjE3
RDYyNjI3ODRCQTU3NDlDQ0U5NkEzOTY5N0FDQzZENzU4QUEzRTE5RDJDRjY2NEU2
ODE5MThGN0YzOTFEOUM4Nzk0Mzg2QTMyNEI1RDM2QURCRkRGMDkyOEVBODcxRjg4
MkE5QzZBRjk0OTlEMkVGQTdCNjAxMTA0RDM2QUU5NURGMDJDOUE0NjdBNTRERjJD
N0JERUQyQzhCOTU5QzgzMzFFMUEyMDQyMzcxOUI0QzFDMzYxRkQ0NjM2NjNBQTc4
QjFBRTE3ODRBN0I4MzJBQTIxNTZBMzZGMDZCRTBCODZFNTEzQzA0NUI3RkUwMTNE
QjJDQzY4NjY0OTM1OEI2MDBEQjUxNTQzQzNDMTBBNjc0NTAxNDFGODY2RDNGMTg3
RUE4Njg1NEM0RjQ0OTFEODkwNTUxRjhGNTQ3QjYxRjVDMkU4M0U4NDFBNjBGNTQ1
OENGNjYzRUZBOTI0OEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3aqKI30j9raJ5GImj+ANeIybFXlJKefxH1TQKUuDY2wfFOpIJYvv
ezhpPaGnoWJTTIMh325rKjw4q8yCXoBjcwnV6FVAk9qMNhjzVv9lDh8X1iYnhLpX
SczpajlpesxtdYqj4Z0s9mTmgZGPfzkdnIeUOGoyS102rb/fCSjqhx+IKpxq+Umd
Lvp7YBEE02rpXfAsmkZ6VN8se97SyLlZyDMeGiBCNxm0wcNh/UY2Y6p4sa4XhKe4
MqohVqNvBr4LhuUTwEW3/gE9ssxoZkk1i2ANtRVDw8EKZ0UBQfhm0/GH6oaFTE9E
kdiQVR+PVHth9cLoPoQaYPVFjPZj76kkjwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FHvmC8WEUB3CugJcVbxmgxynCNLHMB8GA1UdIwQYMBaAFLsUFEHSKkl6G/WttYCi
GGN5MPqVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JScjlIS1Q4RUU5SlRa
TGpSaVVCcVNGRjlnTVdUYWVkQXJuU3lEQXE1YkprLzEvQkIxNDE0NDFEMjJBNDk3
QTFCRjVBREI1ODBBMjE4NjM3OTMwRkE5NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CQjE0MTQ0MUQyMkE0OTdBMUJGNUFEQjU4MEEyMTg2Mzc5MzBG
QTk1LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CUnI5SEtUOEVFOUpUWkxqUmlV
QnFTRkY5Z01XVGFlZEFyblN5REFxNWJKay8xLzMyMzgzMDM0M2EzNjM1MzkzODNh
NjQzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzkzNTMwMzIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBGWY0DANBgkqhkiG9w0BAQsFAAOCAQEAISwAptfmI1fQ3yeKlew+
N0RW5YDp7O8xZO0YtpclREi30TN/FKe0qiE0Ejq3PtVrl1OAne+VFHLZSGqsPo+h
tbSCVITNlmGHSJD6/NjvQXJkrCewvLVarUP6LlsuB7/Hozoh8uFZKXA8bKdHHO7H
j954mwcw6NqoFzyxSKSkZdC/x01xhssHJmKsntDU4zJffzvJzDQGGQZEjuqIxgb6
iaRNsTssSElOZiwpNi5CLGBiPue67UswxECTNPIqZOmsYm+9TG1uvmljtBa3hgb+
FUTnsYdjN5E17E1WVPBAnH9Rrel3yG25WosV9ILvy1NUMfQhB8uTN+AFEJ9WgSCz
HQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:08:05 2025 by rpki-client