Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/323830343a393537633a3a2f33332d3333203d3e20323734353138.roa
File:                     323830343a393537633a3a2f33332d3333203d3e20323734353138.roa (raw, json)
Hash identifier:          PF5brDyVR1cmEjB6iFotsFSX3QnhYTrcdVyGy4WP2OY=
Subject key identifier:   23:BE:61:DE:99:CF:D8:56:51:CB:0C:8D:AF:FD:F8:F6:18:6A:CC:55
Certificate issuer:       /CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
Certificate serial:       35CB3A2472FF9AFF9FAE24BE42BDF197E60F9934
Authority key identifier: CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/323830343a393537633a3a2f33332d3333203d3e20323734353138.roa
Signing time:             Fri 05 Sep 2025 19:27:09 +0000
ROA not before:           Fri 05 Sep 2025 19:22:09 +0000
ROA not after:            Fri 04 Sep 2026 19:27:09 +0000
asID:                     274518
IP address blocks:        2804:957c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl
                          rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 01:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:cb:3a:24:72:ff:9a:ff:9f:ae:24:be:42:bd:f1:97:e6:0f:99:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDD7619BD4F71987C247C8670D9064F291B3E36F
        Validity
            Not Before: Sep  5 19:22:09 2025 GMT
            Not After : Sep  4 19:27:09 2026 GMT
        Subject: CN=23BE61DE99CFD85651CB0C8DAFFDF8F6186ACC55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:63:6f:f2:2d:43:3d:5c:7d:a8:3d:74:c8:
                    91:9a:57:e3:ef:16:c1:1d:52:ca:08:d7:9f:02:4d:
                    54:7b:18:ce:e9:d0:ea:f2:a2:17:c9:a3:d4:7b:66:
                    37:ac:e9:81:44:66:66:4d:4c:1d:28:5c:ce:24:6a:
                    62:9d:a1:eb:6d:df:5a:b6:06:c2:4d:5d:6a:32:d8:
                    b1:20:dd:4d:85:23:9f:04:16:47:47:47:c1:a2:d6:
                    3a:84:5d:00:d2:6f:2d:e1:8b:dd:e6:8c:eb:52:d8:
                    0b:fd:b9:c6:62:a4:58:31:fc:cd:76:bc:d0:91:b5:
                    c6:df:65:37:53:42:02:5f:3d:2b:02:12:d7:28:80:
                    1c:82:0b:c5:ec:b5:37:30:c4:4f:2b:ca:23:40:16:
                    df:fc:9e:d2:2b:b7:04:77:ca:7e:3a:11:77:c7:99:
                    a0:0b:da:44:31:50:6e:d9:eb:aa:d5:c4:55:9f:13:
                    57:43:6d:4e:db:06:79:69:0a:0b:4f:b0:4b:13:8f:
                    c2:0e:75:76:6d:dc:a2:7f:b5:d2:c8:73:4b:f8:95:
                    5d:4a:d9:31:89:7e:f5:86:86:f4:72:ba:78:86:76:
                    44:61:1a:90:8e:87:a4:e6:e5:3a:0a:83:c5:4f:f7:
                    99:fd:d9:f0:63:f2:8d:7d:56:ef:12:02:4f:67:47:
                    b8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BE:61:DE:99:CF:D8:56:51:CB:0C:8D:AF:FD:F8:F6:18:6A:CC:55
            X509v3 Authority Key Identifier:
                keyid:CD:D7:61:9B:D4:F7:19:87:C2:47:C8:67:0D:90:64:F2:91:B3:E3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/CDD7619BD4F71987C247C8670D9064F291B3E36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDD7619BD4F71987C247C8670D9064F291B3E36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wH1jH7pbrki5Xc8poo2Yxakzma5rdPPtz7LawS1abL4/0/323830343a393537633a3a2f33332d3333203d3e20323734353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:957c::/33

    Signature Algorithm: sha256WithRSAEncryption
         19:e4:9e:fb:a7:78:27:63:b1:6e:0d:9d:29:f0:1b:61:0f:c5:
         e5:53:1f:4e:b1:b1:7a:68:68:4b:13:bd:87:28:46:9b:46:b2:
         9f:4c:83:a3:65:15:bb:24:a8:10:92:40:86:ab:3b:31:95:28:
         7c:24:36:1f:83:e4:51:5a:84:b8:2d:cc:46:85:db:48:de:81:
         7d:0d:fa:28:90:53:b3:4e:e4:b3:48:5d:4a:7e:11:a7:ba:8a:
         ad:5c:ee:2e:d3:d0:f2:9e:aa:d4:dc:d4:86:36:4b:42:84:9b:
         2b:b9:41:8e:f2:00:c4:fa:91:51:36:9e:fd:03:9e:c4:aa:03:
         25:1d:3b:ae:2e:9e:38:a5:4e:04:15:be:8a:a4:c0:e8:1d:83:
         b0:ee:c1:5f:07:de:25:78:72:0a:2d:4c:e2:0e:4e:a6:64:d0:
         80:76:d9:33:1e:d3:8b:da:83:6e:fb:ce:ba:d5:87:7e:46:e7:
         04:71:c9:dc:cf:65:80:ea:d2:1d:d8:6c:2c:9e:8e:0b:75:b0:
         0f:10:86:c1:21:da:bf:1f:22:67:df:8b:a8:c6:16:a6:74:4c:
         73:81:42:b7:c9:04:7b:0e:c4:4b:57:1c:5d:35:17:40:f6:f1:
         b6:9d:dd:c7:01:88:ce:00:df:c1:22:a4:61:da:84:10:4f:96:
         26:9e:67:0d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNcs6JHL/mv+friS+Qr3xl+YPmTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RENzYxOUJENEY3MTk4N0MyNDdDODY3MEQ5MDY0RjI5
MUIzRTM2RjAeFw0yNTA5MDUxOTIyMDlaFw0yNjA5MDQxOTI3MDlaMDMxMTAvBgNV
BAMTKDIzQkU2MURFOTlDRkQ4NTY1MUNCMEM4REFGRkRGOEY2MTg2QUNDNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFeGNv8i1DPVx9qD10yJGaV+Pv
FsEdUsoI158CTVR7GM7p0OryohfJo9R7Zjes6YFEZmZNTB0oXM4kamKdoett31q2
BsJNXWoy2LEg3U2FI58EFkdHR8Gi1jqEXQDSby3hi93mjOtS2Av9ucZipFgx/M12
vNCRtcbfZTdTQgJfPSsCEtcogByCC8XstTcwxE8ryiNAFt/8ntIrtwR3yn46EXfH
maAL2kQxUG7Z66rVxFWfE1dDbU7bBnlpCgtPsEsTj8IOdXZt3KJ/tdLIc0v4lV1K
2TGJfvWGhvRyuniGdkRhGpCOh6Tm5ToKg8VP95n92fBj8o19Vu8SAk9nR7i5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUI75h3pnP2FZRywyNr/349hhqzFUwHwYDVR0j
BBgwFoAUzddhm9T3GYfCR8hnDZBk8pGz428wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHdIMWpIN3BicmtpNVhjOHBvbzJZeGFrem1hNXJkUFB0ejdMYXdTMWFi
TDQvMC9DREQ3NjE5QkQ0RjcxOTg3QzI0N0M4NjcwRDkwNjRGMjkxQjNFMzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NERDc2MTlCRDRGNzE5ODdD
MjQ3Qzg2NzBEOTA2NEYyOTFCM0UzNkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR3SDFqSDdwYnJraTVYYzhwb28yWXhha3ptYTVyZFBQdHo3TGF3UzFhYkw0LzAv
MzIzODMwMzQzYTM5MzUzNzYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzM0
MzUzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASVfAAwDQYJKoZIhvcNAQELBQADggEBABnknvun
eCdjsW4NnSnwG2EPxeVTH06xsXpoaEsTvYcoRptGsp9Mg6NlFbskqBCSQIarOzGV
KHwkNh+D5FFahLgtzEaF20jegX0N+iiQU7NO5LNIXUp+Eae6iq1c7i7T0PKeqtTc
1IY2S0KEmyu5QY7yAMT6kVE2nv0DnsSqAyUdO64unjilTgQVvoqkwOgdg7DuwV8H
3iV4cgotTOIOTqZk0IB22TMe04vag277zrrVh35G5wRxydzPZYDq0h3YbCyejgt1
sA8QhsEh2r8fImffi6jGFqZ0THOBQrfJBHsOxEtXHF01F0D28bad3ccBiM4A38Ei
pGHahBBPliaeZw0=
-----END CERTIFICATE-----
Generated at Thu Sep 18 09:49:08 2025 by rpki-client