Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/323830343a6634633a3a2f33322d313238203d3e20323633353738.roa
File:                     323830343a6634633a3a2f33322d313238203d3e20323633353738.roa (raw, json)
Hash identifier:          tnjJpaX42qhrNEfwxFNIHRMECda6natWe4mEIY7HkLY=
Subject key identifier:   D2:2F:A6:97:C6:2D:57:FE:3F:BB:C9:40:68:58:A6:B1:B1:AB:B5:70
Certificate issuer:       /CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9
Certificate serial:       1734292ADF5C77D2573E37A69EFF92EBDDE1E40E
Authority key identifier: 93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/323830343a6634633a3a2f33322d313238203d3e20323633353738.roa
Signing time:             Fri 25 Jul 2025 19:57:23 +0000
ROA not before:           Fri 25 Jul 2025 19:52:23 +0000
ROA not after:            Fri 24 Jul 2026 19:57:23 +0000
asID:                     263578
IP address blocks:        2804:f4c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl
                          rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 20:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:34:29:2a:df:5c:77:d2:57:3e:37:a6:9e:ff:92:eb:dd:e1:e4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9
        Validity
            Not Before: Jul 25 19:52:23 2025 GMT
            Not After : Jul 24 19:57:23 2026 GMT
        Subject: CN=D22FA697C62D57FE3FBBC9406858A6B1B1ABB570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:67:43:3c:9a:c8:18:88:b6:ad:31:5c:ed:fd:
                    eb:05:a8:ac:15:08:84:4f:fd:a4:23:27:27:7f:49:
                    9a:76:da:26:b5:b8:7e:bd:98:9e:35:e8:d9:80:d5:
                    c9:11:96:ab:51:6b:be:b7:bb:3a:b2:9b:cc:0b:95:
                    09:1b:5b:8b:9c:49:98:04:ab:6b:c4:c0:86:a7:5c:
                    c2:19:d4:03:d4:55:27:71:08:d9:03:4e:a0:6a:df:
                    ff:7b:10:19:c7:6b:03:ab:15:86:4d:a2:ce:26:52:
                    55:d6:a9:ff:e5:fb:ce:2f:35:35:92:d2:40:5a:3a:
                    18:a4:46:26:ef:ef:1f:32:58:5e:86:7f:0a:2a:91:
                    c1:2a:ac:d8:1b:1a:29:1c:c2:9a:5f:fa:51:69:28:
                    db:f7:34:d2:5a:07:23:28:88:29:31:ee:26:bc:e6:
                    a4:de:7d:38:6a:d0:c7:43:29:4b:57:c1:df:25:aa:
                    87:85:01:0e:71:d2:a3:d0:e9:8d:2a:ea:1e:2f:d0:
                    55:2d:00:8f:47:a6:3f:74:d6:e6:76:d1:4c:d5:30:
                    c1:f9:5c:54:e7:c9:17:a2:03:c5:76:8a:38:9f:0e:
                    59:01:4f:90:ee:0b:5a:a5:c6:4e:ab:c7:fd:ff:7c:
                    f9:31:fc:2e:cd:40:31:6e:91:a9:99:64:e5:d1:d2:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2F:A6:97:C6:2D:57:FE:3F:BB:C9:40:68:58:A6:B1:B1:AB:B5:70
            X509v3 Authority Key Identifier:
                keyid:93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/323830343a6634633a3a2f33322d313238203d3e20323633353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:0f:ea:99:5d:68:03:8e:3d:52:6e:93:1f:a6:ac:27:ff:60:
         7b:14:fe:24:55:c0:26:61:33:cf:e3:fe:93:99:f1:91:87:aa:
         83:95:d0:ed:4a:83:79:eb:b3:2c:ad:1f:1e:48:8c:e3:19:4b:
         be:93:b9:28:97:11:52:fa:ba:fe:8d:77:ba:2a:ce:6d:b1:0a:
         58:0b:21:99:90:c6:10:fb:be:b5:df:55:93:8e:3b:b2:64:3d:
         f6:5c:22:d8:40:01:1c:4b:bb:f4:fd:cf:43:df:ca:59:a4:85:
         9c:f6:88:aa:02:24:ee:bc:27:71:2e:1c:11:fe:49:25:ee:6e:
         29:07:8a:e1:c1:a2:05:16:d1:f1:ab:e1:b9:92:27:e5:99:6d:
         06:98:e7:6e:04:cd:99:fb:9e:06:9f:d0:39:89:c9:23:91:77:
         ae:cd:07:3a:6b:3a:0f:f2:93:ad:66:6e:c9:4c:99:a5:e9:f4:
         65:cc:3c:8c:c9:10:25:87:bb:2c:01:11:12:ea:a1:98:a8:39:
         b4:e6:75:cb:de:a8:d3:29:9a:ca:c4:51:bf:92:bc:8c:1b:a8:
         d6:11:1d:2b:30:5a:25:04:71:f2:55:7f:e1:31:c0:6a:96:09:
         80:64:68:a7:87:96:6b:b5:35:b6:44:71:43:27:8a:75:3f:67:
         7a:e8:be:24
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFzQpKt9cd9JXPjemnv+S693h5A4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM5N0MyOEUzMDY1RkJFNDgxMjU0QUE4QzBDRUY2OTA2
RjY2QUJFOTAeFw0yNTA3MjUxOTUyMjNaFw0yNjA3MjQxOTU3MjNaMDMxMTAvBgNV
BAMTKEQyMkZBNjk3QzYyRDU3RkUzRkJCQzk0MDY4NThBNkIxQjFBQkI1NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTZ0M8msgYiLatMVzt/esFqKwV
CIRP/aQjJyd/SZp22ia1uH69mJ416NmA1ckRlqtRa763uzqym8wLlQkbW4ucSZgE
q2vEwIanXMIZ1APUVSdxCNkDTqBq3/97EBnHawOrFYZNos4mUlXWqf/l+84vNTWS
0kBaOhikRibv7x8yWF6GfwoqkcEqrNgbGikcwppf+lFpKNv3NNJaByMoiCkx7ia8
5qTefThq0MdDKUtXwd8lqoeFAQ5x0qPQ6Y0q6h4v0FUtAI9Hpj901uZ20UzVMMH5
XFTnyReiA8V2ijifDlkBT5DuC1qlxk6rx/3/fPkx/C7NQDFukamZZOXR0gQjAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU0i+ml8YtV/4/u8lAaFimsbGrtXAwHwYDVR0j
BBgwFoAUk5fCjjBl++SBJUqowM72kG9mq+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXNoalRieHhpa2N3dk4yS0V4d0NGaGREaEJ0VjdEV0pKTGM2NUMxMUFU
aHUvMC85Mzk3QzI4RTMwNjVGQkU0ODEyNTRBQThDMENFRjY5MDZGNjZBQkU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOTdDMjhFMzA2NUZCRTQ4
MTI1NEFBOEMwQ0VGNjkwNkY2NkFCRTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzaGpUYnh4aWtjd3ZOMktFeHdDRmhkRGhCdFY3RFdKSkxjNjVDMTFBVGh1LzAv
MzIzODMwMzQzYTY2MzQ2MzNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMz
MzUzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQPTDANBgkqhkiG9w0BAQsFAAOCAQEAdA/qmV1o
A449Um6TH6asJ/9gexT+JFXAJmEzz+P+k5nxkYeqg5XQ7UqDeeuzLK0fHkiM4xlL
vpO5KJcRUvq6/o13uirObbEKWAshmZDGEPu+td9Vk447smQ99lwi2EABHEu79P3P
Q9/KWaSFnPaIqgIk7rwncS4cEf5JJe5uKQeK4cGiBRbR8avhuZIn5ZltBpjnbgTN
mfueBp/QOYnJI5F3rs0HOms6D/KTrWZuyUyZpen0Zcw8jMkQJYe7LAEREuqhmKg5
tOZ1y96o0ymaysRRv5K8jBuo1hEdKzBaJQRx8lV/4THAapYJgGRop4eWa7U1tkRx
QyeKdT9neui+JA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:13:44 2025 by rpki-client