Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/323830343a383366383a383030303a3a2f33362d3438203d3e20323732323331.roa
File:                     323830343a383366383a383030303a3a2f33362d3438203d3e20323732323331.roa (raw, json)
Hash identifier:          aiI8DugfocV6kV6BYnXN8XhAl68QsUvS6ajv1n2dvbo=
Subject key identifier:   48:05:E1:88:02:95:7C:07:57:DF:21:E6:83:A5:9D:30:2B:9A:74:E8
Certificate issuer:       /CN=0A599CD5A640A0E3A544CCB6B190F72359D610B2
Certificate serial:       78D673261AE5D43BB11EF9F7F82EF4182C1211D6
Authority key identifier: 0A:59:9C:D5:A6:40:A0:E3:A5:44:CC:B6:B1:90:F7:23:59:D6:10:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A599CD5A640A0E3A544CCB6B190F72359D610B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/323830343a383366383a383030303a3a2f33362d3438203d3e20323732323331.roa
Signing time:             Wed 16 Jul 2025 22:04:13 +0000
ROA not before:           Wed 16 Jul 2025 21:59:13 +0000
ROA not after:            Wed 15 Jul 2026 22:04:13 +0000
asID:                     272231
IP address blocks:        2804:83f8:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.crl
                          rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A599CD5A640A0E3A544CCB6B190F72359D610B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 07:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d6:73:26:1a:e5:d4:3b:b1:1e:f9:f7:f8:2e:f4:18:2c:12:11:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A599CD5A640A0E3A544CCB6B190F72359D610B2
        Validity
            Not Before: Jul 16 21:59:13 2025 GMT
            Not After : Jul 15 22:04:13 2026 GMT
        Subject: CN=4805E18802957C0757DF21E683A59D302B9A74E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f4:f7:ac:c5:af:3c:d3:05:10:99:28:92:90:
                    81:db:b4:87:39:d5:05:0c:63:e3:e9:91:be:47:8b:
                    97:15:d7:2f:db:a7:2d:bb:98:41:45:c6:95:04:07:
                    22:d1:36:46:9f:ab:41:5f:07:7e:21:a2:d4:a5:2f:
                    bc:67:b6:25:69:20:ad:e1:fd:e6:71:bf:5f:7c:13:
                    10:1a:09:9a:52:2b:e4:52:59:bc:d3:b0:ff:10:9f:
                    a0:86:84:ec:fe:49:fd:fb:04:f4:7b:94:62:9c:6c:
                    5e:2b:3d:a2:dd:b2:6b:d9:ea:b3:da:39:6e:ff:37:
                    a9:92:ca:1f:3b:c9:e8:96:8a:da:a4:c7:83:de:d0:
                    e2:33:40:bd:e2:63:e2:6c:ca:37:84:33:c6:64:60:
                    eb:94:a6:fb:e3:47:e7:5c:e5:cd:84:df:09:1d:57:
                    12:50:70:08:54:07:bd:c4:dd:99:6d:9b:c8:59:d6:
                    bf:12:da:e0:e5:05:4b:00:ac:31:76:0e:b9:b8:07:
                    fc:e6:50:b8:10:48:39:df:00:63:98:06:ac:82:87:
                    68:d1:33:16:aa:0e:c1:f7:62:1a:3c:7b:bf:e6:8a:
                    34:04:6e:7d:6a:a0:c8:7a:4d:7c:32:7b:9d:9c:4a:
                    14:ad:de:6e:35:10:ae:f1:5d:76:76:85:73:0f:89:
                    42:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:05:E1:88:02:95:7C:07:57:DF:21:E6:83:A5:9D:30:2B:9A:74:E8
            X509v3 Authority Key Identifier:
                keyid:0A:59:9C:D5:A6:40:A0:E3:A5:44:CC:B6:B1:90:F7:23:59:D6:10:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A599CD5A640A0E3A544CCB6B190F72359D610B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/323830343a383366383a383030303a3a2f33362d3438203d3e20323732323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83f8:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         91:27:81:5d:5c:38:41:3d:9a:b7:e8:c8:91:c9:2d:79:9b:b3:
         7f:33:bd:48:d3:3a:a6:2d:d1:be:59:12:45:77:72:5e:da:0a:
         fe:a9:96:88:f2:88:c4:0f:f5:3c:22:63:38:92:86:40:4e:57:
         26:a8:b3:09:8c:86:f1:88:b0:80:bc:62:36:3c:0d:0a:42:4f:
         58:cb:ae:a0:7e:f3:eb:6d:7c:3e:af:38:18:61:4c:b8:74:86:
         1f:f8:6d:5d:c3:4f:e2:bd:12:e1:74:ef:ba:09:8d:ef:91:80:
         7b:cd:95:c7:67:48:e8:23:c6:7c:19:85:f8:5e:8d:9f:75:67:
         c5:b5:6b:d9:24:e3:ec:7b:f0:d1:e7:6a:52:65:37:b2:19:ed:
         09:2f:80:01:6d:be:90:8c:d8:86:62:be:5e:60:94:5c:64:4e:
         4e:12:83:1d:7b:17:4b:64:3b:3e:b7:b5:ac:4b:55:c4:1f:73:
         8a:e7:2c:04:fc:5e:9e:81:74:46:88:c1:c2:42:5b:30:10:a2:
         e0:f7:b8:c7:04:f4:f4:72:5c:5f:64:d2:9b:41:d9:c7:26:92:
         59:45:b0:39:d1:cd:66:5b:02:1b:32:f4:6e:00:21:a3:f6:34:
         c1:f1:3a:b4:25:d4:36:3d:78:1b:6d:eb:83:fe:45:10:2a:ca:
         c1:ae:d0:ad
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUeNZzJhrl1DuxHvn3+C70GCwSEdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE1OTlDRDVBNjQwQTBFM0E1NDRDQ0I2QjE5MEY3MjM1
OUQ2MTBCMjAeFw0yNTA3MTYyMTU5MTNaFw0yNjA3MTUyMjA0MTNaMDMxMTAvBgNV
BAMTKDQ4MDVFMTg4MDI5NTdDMDc1N0RGMjFFNjgzQTU5RDMwMkI5QTc0RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY9Pesxa880wUQmSiSkIHbtIc5
1QUMY+Ppkb5Hi5cV1y/bpy27mEFFxpUEByLRNkafq0FfB34hotSlL7xntiVpIK3h
/eZxv198ExAaCZpSK+RSWbzTsP8Qn6CGhOz+Sf37BPR7lGKcbF4rPaLdsmvZ6rPa
OW7/N6mSyh87yeiWitqkx4Pe0OIzQL3iY+JsyjeEM8ZkYOuUpvvjR+dc5c2E3wkd
VxJQcAhUB73E3Zltm8hZ1r8S2uDlBUsArDF2Drm4B/zmULgQSDnfAGOYBqyCh2jR
MxaqDsH3Yho8e7/mijQEbn1qoMh6TXwye52cShSt3m41EK7xXXZ2hXMPiUKhAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUSAXhiAKVfAdX3yHmg6WdMCuadOgwHwYDVR0j
BBgwFoAUClmc1aZAoOOlRMy2sZD3I1nWELIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTVIVW1yajRud3ZEbXFFWkNWWHVCRzE4S01NSHBHTDkzOFlKUXNDZTVx
QjgvMC8wQTU5OUNENUE2NDBBMEUzQTU0NENDQjZCMTkwRjcyMzU5RDYxMEIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBNTk5Q0Q1QTY0MEEwRTNB
NTQ0Q0NCNkIxOTBGNzIzNTlENjEwQjIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk1SFVtcmo0bnd2RG1xRVpDVlh1QkcxOEtNTUhwR0w5MzhZSlFzQ2U1cUI4LzAv
MzIzODMwMzQzYTM4MzM2NjM4M2EzODMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNk
M2UyMDMyMzczMjMyMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEg/iAMA0GCSqGSIb3DQEBCwUA
A4IBAQCRJ4FdXDhBPZq36MiRyS15m7N/M71I0zqmLdG+WRJFd3Je2gr+qZaI8ojE
D/U8ImM4koZATlcmqLMJjIbxiLCAvGI2PA0KQk9Yy66gfvPrbXw+rzgYYUy4dIYf
+G1dw0/ivRLhdO+6CY3vkYB7zZXHZ0joI8Z8GYX4Xo2fdWfFtWvZJOPse/DR52pS
ZTeyGe0JL4ABbb6QjNiGYr5eYJRcZE5OEoMdexdLZDs+t7WsS1XEH3OK5ywE/F6e
gXRGiMHCQlswEKLg97jHBPT0clxfZNKbQdnHJpJZRbA50c1mWwIbMvRuACGj9jTB
8Tq0JdQ2PXgbbeuD/kUQKsrBrtCt
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:59:21 2025 by rpki-client