Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/323830343a393235383a3a2f33322d313238203d3e20323734373036.roa
File:                     323830343a393235383a3a2f33322d313238203d3e20323734373036.roa (raw, json)
Hash identifier:          5qfys5S0TBbigQIsdFA//QFeQpuuAuKFccvmGfy28xo=
Subject key identifier:   33:C2:A9:CA:25:AD:04:54:CA:1A:66:36:1E:36:01:FF:DF:E4:1C:AB
Certificate issuer:       /CN=431AB4194AA9ED551263DE427F4F121C7979E894
Certificate serial:       1CA0E99B02CD99EB232695E905BD6DD68553192D
Authority key identifier: 43:1A:B4:19:4A:A9:ED:55:12:63:DE:42:7F:4F:12:1C:79:79:E8:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431AB4194AA9ED551263DE427F4F121C7979E894.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/323830343a393235383a3a2f33322d313238203d3e20323734373036.roa
Signing time:             Wed 13 Aug 2025 14:02:07 +0000
ROA not before:           Wed 13 Aug 2025 13:57:07 +0000
ROA not after:            Wed 12 Aug 2026 14:02:07 +0000
asID:                     274706
IP address blocks:        2804:9258::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.crl
                          rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431AB4194AA9ED551263DE427F4F121C7979E894.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a0:e9:9b:02:cd:99:eb:23:26:95:e9:05:bd:6d:d6:85:53:19:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=431AB4194AA9ED551263DE427F4F121C7979E894
        Validity
            Not Before: Aug 13 13:57:07 2025 GMT
            Not After : Aug 12 14:02:07 2026 GMT
        Subject: CN=33C2A9CA25AD0454CA1A66361E3601FFDFE41CAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:78:0f:cc:c6:03:0a:87:c8:62:7c:e1:24:
                    95:93:6d:66:b7:92:b8:97:c5:b1:16:8e:59:ff:0e:
                    f6:e6:b5:6b:2d:10:0c:1c:cf:cb:7e:d5:0d:7b:24:
                    16:5a:0c:30:36:8e:2b:40:3c:e8:34:92:3f:ca:5a:
                    3c:1a:f5:b5:5f:fc:d4:74:55:0b:93:d6:14:a8:1e:
                    13:9a:53:60:ec:44:b0:e8:3a:17:fd:f1:e7:ce:3f:
                    7b:b4:ef:af:6b:01:06:ba:8a:ae:3e:09:72:03:83:
                    38:f8:af:75:f6:ff:af:75:8f:a8:f0:5a:48:c4:60:
                    27:bf:1c:77:5f:33:24:3b:28:80:86:d5:fb:84:60:
                    50:98:e3:c1:b2:e1:b1:93:d5:d5:49:27:24:9d:a2:
                    c8:81:06:5e:8d:72:73:08:b7:52:10:fe:ce:0c:42:
                    ba:9a:de:36:5c:60:40:9e:3a:4b:1f:73:59:eb:bf:
                    9a:b4:5d:61:14:5a:81:4e:1c:88:17:4d:88:91:d8:
                    5e:18:50:e7:39:ff:09:2f:bd:19:3e:30:bc:bf:19:
                    03:cc:f8:c2:f1:be:65:49:45:b9:25:33:76:55:e1:
                    df:c6:24:64:aa:2e:00:12:c7:73:60:dc:08:9a:fb:
                    73:49:ad:82:53:ec:9b:e7:fd:ee:3c:db:3a:df:3b:
                    ad:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C2:A9:CA:25:AD:04:54:CA:1A:66:36:1E:36:01:FF:DF:E4:1C:AB
            X509v3 Authority Key Identifier:
                keyid:43:1A:B4:19:4A:A9:ED:55:12:63:DE:42:7F:4F:12:1C:79:79:E8:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/431AB4194AA9ED551263DE427F4F121C7979E894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/431AB4194AA9ED551263DE427F4F121C7979E894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GRr1jC7UaawCktMXXuGQTAD8rvRakKhtNmjEHVvr2Dcg/0/323830343a393235383a3a2f33322d313238203d3e20323734373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9258::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:f5:92:61:bc:ad:77:50:53:3b:2d:d4:15:86:b0:b8:0e:4b:
         51:ea:95:6a:12:6f:97:81:89:08:e6:5e:fb:49:69:ef:5e:82:
         86:81:ca:38:be:d8:0b:16:45:95:66:ea:65:a5:d1:84:b5:4c:
         b5:6c:8c:7b:5a:61:35:0a:85:86:1d:55:35:14:2d:6c:f3:92:
         2f:9c:79:e2:0a:2d:99:27:ab:5b:17:9d:d4:66:5c:99:96:5a:
         6e:ac:b2:6d:d6:b8:d3:c8:76:76:59:c5:f0:47:90:e2:12:e7:
         40:cb:7c:7d:6e:e9:87:10:32:3d:39:6c:76:e1:e1:00:df:1e:
         50:09:5b:ad:24:e7:06:ae:e1:0a:28:dd:cd:03:56:6e:82:82:
         d9:30:0d:c3:cb:c0:e2:8c:c3:46:f5:ed:20:fa:e6:84:f8:43:
         8f:c8:88:77:2a:4e:ba:16:c9:a1:be:95:4b:11:85:0a:e1:cf:
         6a:0e:57:68:04:45:26:94:9a:27:f3:af:8d:d1:31:d3:6a:46:
         b4:28:55:d5:77:a4:07:58:cb:86:b6:57:15:4a:e1:16:d5:c8:
         6e:8c:74:36:14:8c:d8:76:99:77:ba:26:c9:9c:94:5b:bc:20:
         ad:21:7c:d5:b2:ef:f5:98:4a:76:be:a9:96:39:7b:0b:b4:49:
         5f:c1:1e:55
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUHKDpmwLNmesjJpXpBb1t1oVTGS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMxQUI0MTk0QUE5RUQ1NTEyNjNERTQyN0Y0RjEyMUM3
OTc5RTg5NDAeFw0yNTA4MTMxMzU3MDdaFw0yNjA4MTIxNDAyMDdaMDMxMTAvBgNV
BAMTKDMzQzJBOUNBMjVBRDA0NTRDQTFBNjYzNjFFMzYwMUZGREZFNDFDQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAoXgPzMYDCofIYnzhJJWTbWa3
kriXxbEWjln/DvbmtWstEAwcz8t+1Q17JBZaDDA2jitAPOg0kj/KWjwa9bVf/NR0
VQuT1hSoHhOaU2DsRLDoOhf98efOP3u0769rAQa6iq4+CXIDgzj4r3X2/691j6jw
WkjEYCe/HHdfMyQ7KICG1fuEYFCY48Gy4bGT1dVJJySdosiBBl6NcnMIt1IQ/s4M
Qrqa3jZcYECeOksfc1nrv5q0XWEUWoFOHIgXTYiR2F4YUOc5/wkvvRk+MLy/GQPM
+MLxvmVJRbklM3ZV4d/GJGSqLgASx3Ng3Aia+3NJrYJT7Jvn/e482zrfO609AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUM8KpyiWtBFTKGmY2HjYB/9/kHKswHwYDVR0j
BBgwFoAUQxq0GUqp7VUSY95Cf08SHHl56JQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1JyMWpDN1VhYXdDa3RNWFh1R1FUQUQ4cnZSYWtLaHRObWpFSFZ2cjJE
Y2cvMC80MzFBQjQxOTRBQTlFRDU1MTI2M0RFNDI3RjRGMTIxQzc5NzlFODk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzMUFCNDE5NEFBOUVENTUx
MjYzREU0MjdGNEYxMjFDNzk3OUU4OTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dScjFqQzdVYWF3Q2t0TVhYdUdRVEFEOHJ2UmFrS2h0Tm1qRUhWdnIyRGNnLzAv
MzIzODMwMzQzYTM5MzIzNTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzQzNzMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBJJYMA0GCSqGSIb3DQEBCwUAA4IBAQBP9ZJh
vK13UFM7LdQVhrC4DktR6pVqEm+XgYkI5l77SWnvXoKGgco4vtgLFkWVZuplpdGE
tUy1bIx7WmE1CoWGHVU1FC1s85IvnHniCi2ZJ6tbF53UZlyZllpurLJt1rjTyHZ2
WcXwR5DiEudAy3x9bumHEDI9OWx24eEA3x5QCVutJOcGruEKKN3NA1ZugoLZMA3D
y8DijMNG9e0g+uaE+EOPyIh3Kk66FsmhvpVLEYUK4c9qDldoBEUmlJon86+N0THT
aka0KFXVd6QHWMuGtlcVSuEW1chujHQ2FIzYdpl3uibJnJRbvCCtIXzVsu/1mEp2
vqmWOXsLtElfwR5V
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:33 2025 by rpki-client