Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/323830343a356335383a3a2f33322d313238203d3e20323638393033.roa
File:                     323830343a356335383a3a2f33322d313238203d3e20323638393033.roa (raw, json)
Hash identifier:          IIW9hW+qK8/KHMA+BF2cwVNDnXIXq4JyBCjYuo72sH0=
Subject key identifier:   99:50:EF:E2:FA:74:F4:DD:4E:A8:9F:53:A0:DF:22:1D:43:25:95:67
Certificate issuer:       /CN=D498782804B701D4D741A81F6C4C70B8F52156BD
Certificate serial:       4B4F9EC7D163FCCB32422E5144491F3D077472EB
Authority key identifier: D4:98:78:28:04:B7:01:D4:D7:41:A8:1F:6C:4C:70:B8:F5:21:56:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D498782804B701D4D741A81F6C4C70B8F52156BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/323830343a356335383a3a2f33322d313238203d3e20323638393033.roa
Signing time:             Wed 13 Aug 2025 21:02:59 +0000
ROA not before:           Wed 13 Aug 2025 20:57:59 +0000
ROA not after:            Wed 12 Aug 2026 21:02:59 +0000
asID:                     268903
IP address blocks:        2804:5c58::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/D498782804B701D4D741A81F6C4C70B8F52156BD.crl
                          rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/D498782804B701D4D741A81F6C4C70B8F52156BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D498782804B701D4D741A81F6C4C70B8F52156BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4f:9e:c7:d1:63:fc:cb:32:42:2e:51:44:49:1f:3d:07:74:72:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D498782804B701D4D741A81F6C4C70B8F52156BD
        Validity
            Not Before: Aug 13 20:57:59 2025 GMT
            Not After : Aug 12 21:02:59 2026 GMT
        Subject: CN=9950EFE2FA74F4DD4EA89F53A0DF221D43259567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:29:85:ec:b2:38:aa:cc:13:f0:d4:54:83:a7:
                    f9:9b:fa:9c:96:ed:7f:bc:05:49:ab:b9:47:b3:4c:
                    86:fe:ca:58:55:50:5b:47:d4:1d:59:e7:06:e1:e2:
                    9e:e2:4a:f8:cd:cb:f5:b0:84:58:2f:ee:73:73:67:
                    63:4b:03:7b:02:cd:93:04:6b:48:06:35:ee:de:a1:
                    3e:c8:3e:15:e3:7b:93:9b:00:12:fa:ef:77:26:f2:
                    a5:4e:7d:d0:b7:b1:d3:ca:07:29:41:9e:d5:eb:6c:
                    6d:4d:84:d9:f9:a1:8e:e5:24:36:37:97:62:85:ca:
                    c3:58:b3:c1:4b:65:ed:c9:bd:5e:d8:82:4c:81:3a:
                    63:1f:16:ba:af:9c:30:f1:99:af:50:a1:ac:0f:95:
                    10:97:0b:62:11:f1:ec:e5:ae:2c:05:cd:72:3a:ec:
                    3c:46:ee:47:57:76:ce:d6:02:25:cf:47:74:a1:19:
                    91:3f:4a:27:6a:da:36:39:01:b5:74:e5:8c:a4:55:
                    e4:53:84:61:15:d1:c9:83:c6:ed:70:f5:21:00:29:
                    d6:8d:7a:b1:c3:72:10:2d:04:1a:7a:94:21:b1:cd:
                    0e:8b:9b:50:2a:b4:ac:79:cb:f3:5f:96:f5:67:09:
                    17:e2:2d:92:e5:68:98:61:ea:bd:87:8f:5e:bd:d0:
                    7a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:50:EF:E2:FA:74:F4:DD:4E:A8:9F:53:A0:DF:22:1D:43:25:95:67
            X509v3 Authority Key Identifier:
                keyid:D4:98:78:28:04:B7:01:D4:D7:41:A8:1F:6C:4C:70:B8:F5:21:56:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/D498782804B701D4D741A81F6C4C70B8F52156BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D498782804B701D4D741A81F6C4C70B8F52156BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/323830343a356335383a3a2f33322d313238203d3e20323638393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c58::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:a6:f0:b5:b1:b9:78:07:7c:af:9d:a9:2b:be:f2:5a:a3:f8:
         74:a1:5f:98:9a:0f:0d:e6:5f:ca:a8:21:bc:9a:18:44:eb:0a:
         93:6b:65:cc:dc:3d:b5:59:c5:91:8d:05:d4:14:85:f3:1c:46:
         1d:13:43:41:6a:d0:9a:b4:96:cd:13:31:a4:bc:a7:01:de:1f:
         7c:11:e5:93:4f:31:cd:ee:8c:a3:5f:e8:fd:0e:a3:39:e4:94:
         75:c1:29:0c:d0:17:3d:b3:b2:e4:e3:35:8c:61:f3:73:55:f1:
         f9:2f:dd:23:27:bc:66:48:43:d0:c0:5e:f4:6d:da:61:c5:98:
         5e:7d:6d:06:93:75:81:ab:1b:ff:be:79:ef:ef:a6:86:e1:79:
         64:98:90:30:40:3b:b8:04:5d:2a:33:bd:a0:d1:c7:68:71:0c:
         fb:16:5b:4c:7c:78:3e:5f:45:85:bd:6b:89:27:70:4a:07:49:
         be:e8:97:ed:20:12:5d:03:e9:0f:f2:55:dc:c6:ab:f1:6f:24:
         41:d0:5e:10:9c:ab:6c:08:36:46:39:84:b6:aa:67:57:be:31:
         02:d7:4b:7f:69:51:9a:66:e4:c2:df:24:55:11:05:61:10:95:
         72:e4:25:93:44:ab:e1:fa:4a:fd:f3:54:59:3d:8d:9b:a6:53:
         4d:a6:37:9d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUS0+ex9Fj/MsyQi5RREkfPQd0cuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ5ODc4MjgwNEI3MDFENEQ3NDFBODFGNkM0QzcwQjhG
NTIxNTZCRDAeFw0yNTA4MTMyMDU3NTlaFw0yNjA4MTIyMTAyNTlaMDMxMTAvBgNV
BAMTKDk5NTBFRkUyRkE3NEY0REQ0RUE4OUY1M0EwREYyMjFENDMyNTk1NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJKYXssjiqzBPw1FSDp/mb+pyW
7X+8BUmruUezTIb+ylhVUFtH1B1Z5wbh4p7iSvjNy/WwhFgv7nNzZ2NLA3sCzZME
a0gGNe7eoT7IPhXje5ObABL673cm8qVOfdC3sdPKBylBntXrbG1NhNn5oY7lJDY3
l2KFysNYs8FLZe3JvV7YgkyBOmMfFrqvnDDxma9QoawPlRCXC2IR8ezlriwFzXI6
7DxG7kdXds7WAiXPR3ShGZE/Sidq2jY5AbV05YykVeRThGEV0cmDxu1w9SEAKdaN
erHDchAtBBp6lCGxzQ6Lm1AqtKx5y/NflvVnCRfiLZLlaJhh6r2Hj1690HphAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUmVDv4vp09N1OqJ9ToN8iHUMllWcwHwYDVR0j
BBgwFoAU1Jh4KAS3AdTXQagfbExwuPUhVr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmFkM25LNGkzanZQbU5GYlYzSnM1bkN0VGdiQUdyQkcxdXBpVG5WYVI5
NnkvMC9ENDk4NzgyODA0QjcwMUQ0RDc0MUE4MUY2QzRDNzBCOEY1MjE1NkJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0OTg3ODI4MDRCNzAxRDRE
NzQxQTgxRjZDNEM3MEI4RjUyMTU2QkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JhZDNuSzRpM2p2UG1ORmJWM0pzNW5DdFRnYkFHckJHMXVwaVRuVmFSOTZ5LzAv
MzIzODMwMzQzYTM1NjMzNTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzOTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFxYMA0GCSqGSIb3DQEBCwUAA4IBAQCtpvC1
sbl4B3yvnakrvvJao/h0oV+Ymg8N5l/KqCG8mhhE6wqTa2XM3D21WcWRjQXUFIXz
HEYdE0NBatCatJbNEzGkvKcB3h98EeWTTzHN7oyjX+j9DqM55JR1wSkM0Bc9s7Lk
4zWMYfNzVfH5L90jJ7xmSEPQwF70bdphxZhefW0Gk3WBqxv/vnnv76aG4XlkmJAw
QDu4BF0qM72g0cdocQz7FltMfHg+X0WFvWuJJ3BKB0m+6JftIBJdA+kP8lXcxqvx
byRB0F4QnKtsCDZGOYS2qmdXvjEC10t/aVGaZuTC3yRVEQVhEJVy5CWTRKvh+kr9
81RZPY2bplNNpjed
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:23:15 2025 by rpki-client