Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/323830343a3161343a3a2f33322d313238203d3e203238313430.roa
File:                     323830343a3161343a3a2f33322d313238203d3e203238313430.roa (raw, json)
Hash identifier:          caYv1jpsMAp/JahQjOqYbyDNCjOoJUnZnx92R0H3VE0=
Subject key identifier:   64:4E:C5:7A:D3:9D:2E:19:F0:A2:36:37:C3:42:2B:8D:4F:E3:9C:7C
Certificate issuer:       /CN=9D9F73448694649C4F988D98A0F12757A6913C2D
Certificate serial:       74BA7A0A32A3F3869C2A80C1CDFC0F496B835175
Authority key identifier: 9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/323830343a3161343a3a2f33322d313238203d3e203238313430.roa
Signing time:             Thu 03 Jul 2025 20:55:46 +0000
ROA not before:           Thu 03 Jul 2025 20:50:46 +0000
ROA not after:            Thu 02 Jul 2026 20:55:46 +0000
asID:                     28140
IP address blocks:        2804:1a4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl
                          rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ba:7a:0a:32:a3:f3:86:9c:2a:80:c1:cd:fc:0f:49:6b:83:51:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9F73448694649C4F988D98A0F12757A6913C2D
        Validity
            Not Before: Jul  3 20:50:46 2025 GMT
            Not After : Jul  2 20:55:46 2026 GMT
        Subject: CN=644EC57AD39D2E19F0A23637C3422B8D4FE39C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:81:b5:2a:d1:fc:7a:d6:6b:ef:5a:fc:8b:
                    e9:e5:61:c0:7a:94:72:43:72:4b:52:f5:93:0c:15:
                    15:8f:4d:8f:44:75:9a:5d:5a:e0:81:23:e4:ce:37:
                    8d:8a:fe:e4:e2:0f:01:93:03:82:37:e4:9a:1e:50:
                    57:ba:1f:02:ee:f2:6c:a6:8a:ab:68:b0:ec:33:da:
                    d2:71:86:05:3f:7d:ea:b1:67:7e:8b:1f:6f:c7:d8:
                    53:bb:e6:dd:a7:f8:cc:42:f9:61:56:69:51:d6:2d:
                    fe:ad:4d:3e:fe:6c:ff:79:b7:4d:62:6b:f5:73:e5:
                    9e:99:78:31:cc:ac:51:fa:5b:15:90:a3:59:a3:c3:
                    4a:9a:b0:fd:34:ad:92:2a:c3:da:c4:ee:3e:13:64:
                    03:09:d0:9c:b6:45:1b:b8:8d:88:e9:ed:0f:b8:ba:
                    1a:da:b2:7f:7f:67:44:b4:32:18:f0:89:59:31:e1:
                    1d:3a:e1:05:c0:71:51:39:4c:c0:0e:64:0c:d8:8c:
                    1d:14:f4:32:32:d7:63:94:db:6d:59:9b:76:02:ed:
                    43:1a:9c:d9:4f:21:f1:32:41:76:40:d1:74:f7:4d:
                    f8:07:f5:2f:88:6b:f4:ca:3a:60:90:a5:45:dd:18:
                    50:87:55:61:9f:e2:ab:fd:86:46:98:94:ca:bd:42:
                    6d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4E:C5:7A:D3:9D:2E:19:F0:A2:36:37:C3:42:2B:8D:4F:E3:9C:7C
            X509v3 Authority Key Identifier:
                keyid:9D:9F:73:44:86:94:64:9C:4F:98:8D:98:A0:F1:27:57:A6:91:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/9D9F73448694649C4F988D98A0F12757A6913C2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9F73448694649C4F988D98A0F12757A6913C2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J8UwqwagHB8YtrsjaWibULQMxFJ6fiZ9PM2UB9Ps1wiJ/1/323830343a3161343a3a2f33322d313238203d3e203238313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:1d:7c:09:85:3c:88:1f:ab:f9:98:ae:e2:37:ad:a8:e1:b0:
         d3:f8:20:6b:22:29:4d:a6:43:2d:22:64:1d:3f:32:f7:69:9d:
         6d:88:f9:f7:96:cc:c5:a1:4c:e6:e3:34:21:ec:a2:a7:5b:70:
         ea:46:25:1b:15:48:61:67:5a:b7:e5:4c:15:93:6d:ab:fb:48:
         fc:ee:90:99:1a:eb:40:79:47:36:d3:57:c4:79:72:0c:74:ce:
         95:e5:a7:f3:f5:04:4d:c3:30:43:ea:5a:6c:25:ff:fa:c1:80:
         13:4c:5f:3e:06:cf:5e:60:61:b1:a4:39:cc:98:9c:35:a5:9a:
         7b:5f:c7:88:3e:8d:8c:29:77:b2:b0:2e:54:2f:00:75:cb:1d:
         0c:40:7b:2e:f6:6e:f7:d3:4c:42:55:d7:dc:ac:0f:5b:3a:98:
         0b:68:8a:ca:ec:f1:84:86:cc:b4:4d:ce:d1:26:c0:7c:e8:0a:
         37:ad:f2:0f:8a:e9:fd:ab:f0:03:01:fa:97:82:7e:b3:8f:bc:
         b5:ea:ec:80:61:c8:65:60:87:53:c8:a9:0d:1d:b3:50:a1:85:
         3d:7c:1d:46:ae:47:d0:bb:f8:bd:89:fd:0a:0c:39:5e:8c:23:
         08:85:12:5a:ba:b0:c9:0d:d0:46:61:2d:4e:c0:60:19:97:b2:
         6a:89:cf:89
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUdLp6CjKj84acKoDBzfwPSWuDUXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ5RjczNDQ4Njk0NjQ5QzRGOTg4RDk4QTBGMTI3NTdB
NjkxM0MyRDAeFw0yNTA3MDMyMDUwNDZaFw0yNjA3MDIyMDU1NDZaMDMxMTAvBgNV
BAMTKDY0NEVDNTdBRDM5RDJFMTlGMEEyMzYzN0MzNDIyQjhENEZFMzlDN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1y4G1KtH8etZr71r8i+nlYcB6
lHJDcktS9ZMMFRWPTY9EdZpdWuCBI+TON42K/uTiDwGTA4I35JoeUFe6HwLu8mym
iqtosOwz2tJxhgU/feqxZ36LH2/H2FO75t2n+MxC+WFWaVHWLf6tTT7+bP95t01i
a/Vz5Z6ZeDHMrFH6WxWQo1mjw0qasP00rZIqw9rE7j4TZAMJ0Jy2RRu4jYjp7Q+4
uhrasn9/Z0S0MhjwiVkx4R064QXAcVE5TMAOZAzYjB0U9DIy12OU221Zm3YC7UMa
nNlPIfEyQXZA0XT3TfgH9S+Ia/TKOmCQpUXdGFCHVWGf4qv9hkaYlMq9Qm2TAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUZE7FetOdLhnwojY3w0IrjU/jnHwwHwYDVR0j
BBgwFoAUnZ9zRIaUZJxPmI2YoPEnV6aRPC0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjhVd3F3YWdIQjhZdHJzamFXaWJVTFFNeEZKNmZpWjlQTTJVQjlQczF3
aUovMS85RDlGNzM0NDg2OTQ2NDlDNEY5ODhEOThBMEYxMjc1N0E2OTEzQzJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEOUY3MzQ0ODY5NDY0OUM0
Rjk4OEQ5OEEwRjEyNzU3QTY5MTNDMkQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o4VXdxd2FnSEI4WXRyc2phV2liVUxRTXhGSjZmaVo5UE0yVUI5UHMxd2lKLzEv
MzIzODMwMzQzYTMxNjEzNDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzODMx
MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEAaQwDQYJKoZIhvcNAQELBQADggEBALodfAmFPIgf
q/mYruI3rajhsNP4IGsiKU2mQy0iZB0/MvdpnW2I+feWzMWhTObjNCHsoqdbcOpG
JRsVSGFnWrflTBWTbav7SPzukJka60B5RzbTV8R5cgx0zpXlp/P1BE3DMEPqWmwl
//rBgBNMXz4Gz15gYbGkOcyYnDWlmntfx4g+jYwpd7KwLlQvAHXLHQxAey72bvfT
TEJV19ysD1s6mAtoisrs8YSGzLRNztEmwHzoCjet8g+K6f2r8AMB+peCfrOPvLXq
7IBhyGVgh1PIqQ0ds1ChhT18HUauR9C7+L2J/QoMOV6MIwiFElq6sMkN0EZhLU7A
YBmXsmqJz4k=
-----END CERTIFICATE-----
Generated at Sun Aug 24 07:19:07 2025 by rpki-client