Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/323830343a393537633a383030303a3a2f33342d3334203d3e20323734353138.roa
File:                     323830343a393537633a383030303a3a2f33342d3334203d3e20323734353138.roa (raw, json)
Hash identifier:          mKtBkzh6XG4sTlhoPWFLc5Pd7DgaZ6VR/rArRM9AyYs=
Subject key identifier:   2D:90:23:2C:9C:8A:2E:72:AC:72:CF:F5:47:56:B5:76:0F:AD:82:39
Certificate issuer:       /CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
Certificate serial:       59B6131321EDDA1106D1E11AE763611B6E624AE3
Authority key identifier: CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/323830343a393537633a383030303a3a2f33342d3334203d3e20323734353138.roa
Signing time:             Fri 05 Sep 2025 19:29:36 +0000
ROA not before:           Fri 05 Sep 2025 19:24:36 +0000
ROA not after:            Fri 04 Sep 2026 19:29:36 +0000
asID:                     274518
IP address blocks:        2804:957c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl
                          rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 01:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b6:13:13:21:ed:da:11:06:d1:e1:1a:e7:63:61:1b:6e:62:4a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
        Validity
            Not Before: Sep  5 19:24:36 2025 GMT
            Not After : Sep  4 19:29:36 2026 GMT
        Subject: CN=2D90232C9C8A2E72AC72CFF54756B5760FAD8239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8b:06:b3:f0:dc:72:4a:b2:00:e7:f8:33:5a:
                    ab:ac:63:4a:a0:3d:df:69:9c:3b:a9:a8:13:53:61:
                    de:43:8f:84:aa:29:7e:d5:f3:e9:da:da:9c:5b:df:
                    93:06:d0:1d:1a:04:25:b6:bc:5d:e7:5e:91:af:1d:
                    5b:2a:ec:43:05:ec:c5:80:be:3f:f4:82:cf:b5:e7:
                    1a:75:0b:c3:c2:37:88:38:6a:20:07:c0:d4:bb:4c:
                    61:5c:63:90:16:c7:86:08:6e:1e:cc:53:38:30:24:
                    48:fa:e1:55:af:4f:3e:2f:c0:cf:8a:0e:79:8c:18:
                    0f:6b:49:73:ab:67:55:2a:4a:cd:13:68:63:b6:80:
                    65:55:2b:ae:30:a6:48:80:35:98:76:0c:53:fb:9a:
                    46:4e:cd:4c:50:3d:ee:34:1b:f5:f3:d5:88:0c:7d:
                    c9:57:6f:9d:c0:b1:aa:d0:f0:84:35:02:7b:80:f2:
                    5c:ec:f7:ef:4c:d9:e5:a1:00:d6:09:3e:6d:b4:e0:
                    2d:ae:2c:f5:a9:94:6a:6d:fa:dd:5b:73:12:72:1f:
                    e5:79:98:b2:31:0a:71:79:73:4e:08:84:dd:0f:d5:
                    06:06:c5:72:06:ce:9f:31:b9:a0:b8:81:ea:7f:66:
                    6b:6e:df:86:7c:09:8a:12:76:01:da:7c:e8:81:bf:
                    21:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:90:23:2C:9C:8A:2E:72:AC:72:CF:F5:47:56:B5:76:0F:AD:82:39
            X509v3 Authority Key Identifier:
                keyid:CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/323830343a393537633a383030303a3a2f33342d3334203d3e20323734353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:957c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         67:7c:b8:1c:59:d9:76:d7:1f:d2:e6:bd:66:3f:b3:bb:3b:e4:
         c6:8b:03:de:c5:4b:0f:92:c1:c3:b8:3a:9d:a7:10:29:10:2f:
         d8:13:db:b7:7a:bd:8e:70:76:0e:7b:3c:24:16:66:ce:27:63:
         04:c4:5d:60:20:e1:58:9f:cb:f9:c4:2d:fb:89:c3:a2:12:bf:
         72:56:ab:b7:35:d7:4d:7a:e6:a9:53:6e:22:68:34:30:33:ca:
         25:ad:a8:9f:e3:28:4e:21:79:05:41:80:1c:55:8d:0d:7c:25:
         7c:70:2b:f2:b4:c9:3f:b5:25:a6:10:ff:59:e9:4d:2d:61:e6:
         af:35:f9:7a:87:a1:1d:f5:4c:96:8e:10:e5:da:e4:30:4e:15:
         84:a8:2b:a2:1c:b9:c1:61:e0:5e:05:0a:36:53:8f:21:70:6c:
         34:4b:38:99:56:62:86:d4:ce:c6:0c:ee:73:b8:5e:82:ec:a7:
         11:b9:03:72:cc:f2:11:d5:21:8b:67:26:00:95:b2:ba:9e:31:
         f9:08:89:c4:7d:3f:19:7a:94:f6:f8:72:c5:8e:b8:91:ad:14:
         36:04:02:f3:25:93:c1:c1:bf:ba:de:8d:71:d1:4c:5d:6b:95:
         0a:b3:e9:ce:b1:1f:f4:56:c2:49:2b:35:55:7d:12:fe:b6:29:
         2b:34:74:ed
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUWbYTEyHt2hEG0eEa52NhG25iSuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RENzYxOUJENEY3MTk4N0MyNDdDODY3MEQ5MDY0RjI5
MUIzRTM2RjAeFw0yNTA5MDUxOTI0MzZaFw0yNjA5MDQxOTI5MzZaMDMxMTAvBgNV
BAMTKDJEOTAyMzJDOUM4QTJFNzJBQzcyQ0ZGNTQ3NTZCNTc2MEZBRDgyMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaiwaz8NxySrIA5/gzWqusY0qg
Pd9pnDupqBNTYd5Dj4SqKX7V8+na2pxb35MG0B0aBCW2vF3nXpGvHVsq7EMF7MWA
vj/0gs+15xp1C8PCN4g4aiAHwNS7TGFcY5AWx4YIbh7MUzgwJEj64VWvTz4vwM+K
DnmMGA9rSXOrZ1UqSs0TaGO2gGVVK64wpkiANZh2DFP7mkZOzUxQPe40G/Xz1YgM
fclXb53AsarQ8IQ1AnuA8lzs9+9M2eWhANYJPm204C2uLPWplGpt+t1bcxJyH+V5
mLIxCnF5c04IhN0P1QYGxXIGzp8xuaC4gep/Zmtu34Z8CYoSdgHafOiBvyHLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQULZAjLJyKLnKscs/1R1a1dg+tgjkwHwYDVR0j
BBgwFoAUzddhm9T3GYfCR8hnDZBk8pGz428wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHdIMWpIN3BicmtpNVhjOHBvbzJZeGFrem1hNXJkUFB0ejdMYXdTMWFi
TDQvMC9DREQ3NjE5QkQ0RjcxOTg3QzI0N0M4NjcwRDkwNjRGMjkxQjNFMzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NERDc2MTlCRDRGNzE5ODdD
MjQ3Qzg2NzBEOTA2NEYyOTFCM0UzNkYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR3SDFqSDdwYnJraTVYYzhwb28yWXhha3ptYTVyZFBQdHo3TGF3UzFhYkw0LzAv
MzIzODMwMzQzYTM5MzUzNzYzM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczNDM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigElXyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBnfLgcWdl21x/S5r1mP7O7O+TGiwPexUsPksHDuDqdpxApEC/YE9u3er2O
cHYOezwkFmbOJ2MExF1gIOFYn8v5xC37icOiEr9yVqu3NddNeuapU24iaDQwM8ol
raif4yhOIXkFQYAcVY0NfCV8cCvytMk/tSWmEP9Z6U0tYeavNfl6h6Ed9UyWjhDl
2uQwThWEqCuiHLnBYeBeBQo2U48hcGw0SziZVmKG1M7GDO5zuF6C7KcRuQNyzPIR
1SGLZyYAlbK6njH5CInEfT8ZepT2+HLFjriRrRQ2BALzJZPBwb+63o1x0Uxda5UK
s+nOsR/0VsJJKzVVfRL+tikrNHTt
-----END CERTIFICATE-----
Generated at Thu Sep 18 09:50:02 2025 by rpki-client