Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/323830343a3833303a3a2f33322d3430203d3e203532383532.roa
File:                     323830343a3833303a3a2f33322d3430203d3e203532383532.roa (raw, json)
Hash identifier:          OAY+O492sH9oOGRpJqR13+gX5LH1Nb82jzo1Fv50v3k=
Subject key identifier:   0F:AD:31:E3:EC:47:1A:7B:5F:C3:0A:B8:9A:EE:DA:F1:D8:02:4B:B5
Certificate issuer:       /CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
Certificate serial:       02723248741FF6103783B4C5AB6365B821429797
Authority key identifier: 0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/323830343a3833303a3a2f33322d3430203d3e203532383532.roa
Signing time:             Fri 29 Aug 2025 17:47:09 +0000
ROA not before:           Fri 29 Aug 2025 17:42:09 +0000
ROA not after:            Fri 28 Aug 2026 17:47:09 +0000
asID:                     52852
IP address blocks:        2804:830::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl
                          rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 11:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:72:32:48:74:1f:f6:10:37:83:b4:c5:ab:63:65:b8:21:42:97:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
        Validity
            Not Before: Aug 29 17:42:09 2025 GMT
            Not After : Aug 28 17:47:09 2026 GMT
        Subject: CN=0FAD31E3EC471A7B5FC30AB89AEEDAF1D8024BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:32:59:86:90:54:bb:d0:dc:fa:c0:99:5c:08:
                    05:06:f5:36:65:c6:8c:ab:10:0c:ee:da:e3:58:c9:
                    dc:0e:1f:f4:4b:24:ed:95:a7:69:ba:8d:60:35:3e:
                    6f:be:fc:8f:f7:27:8a:d5:46:5a:ae:7b:10:5b:53:
                    ad:53:a4:b2:22:71:84:d3:50:35:e8:e2:ee:49:f5:
                    d2:e5:53:72:08:05:3e:8c:55:7b:5e:93:72:31:1f:
                    85:d3:9e:97:e0:c4:d7:e7:9d:40:84:b2:80:e1:fd:
                    69:d6:a3:37:c9:54:23:02:d8:37:e4:2e:05:a0:08:
                    e6:9a:63:f5:4a:85:5e:8d:08:17:fc:20:a6:20:b8:
                    5a:3b:0c:0e:eb:06:cd:2d:f6:42:d2:31:21:50:c5:
                    95:a1:5c:d7:e4:10:13:b6:cc:63:60:71:4b:6a:f4:
                    21:24:b0:7b:e8:8f:6f:8f:10:4e:38:12:29:71:7a:
                    ab:23:34:1f:8a:67:d2:32:31:c3:3e:97:55:a1:f4:
                    57:9f:5d:19:e4:3b:9d:c2:b8:b2:09:2d:d3:52:fd:
                    c9:83:a4:c0:e8:17:81:db:b7:41:5f:e0:d9:3e:17:
                    77:86:ef:6f:dc:c9:0e:d1:9e:37:a8:89:bc:f6:da:
                    5b:49:d8:85:d2:dc:3c:df:e2:d0:24:98:5e:24:9e:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AD:31:E3:EC:47:1A:7B:5F:C3:0A:B8:9A:EE:DA:F1:D8:02:4B:B5
            X509v3 Authority Key Identifier:
                keyid:0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/323830343a3833303a3a2f33322d3430203d3e203532383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:830::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:a0:c7:54:53:76:32:0f:d7:af:64:33:ef:fa:fb:4f:8f:46:
         ce:3e:e3:a1:9c:84:a0:99:7d:cc:9b:93:64:23:0d:c1:82:ff:
         48:7b:a8:1e:40:d4:82:b0:25:e5:c4:b8:20:7e:1f:b2:30:44:
         31:52:ee:28:62:b6:92:23:6c:48:1d:8f:57:8c:f4:51:e6:ff:
         83:f3:fc:fc:8a:bf:6e:31:8b:ce:4c:33:f3:10:4d:f2:3f:da:
         0f:7d:1e:3b:ca:a2:0c:c9:78:7e:c2:7a:22:2e:81:ce:31:f4:
         22:63:ad:1b:61:86:06:0e:db:f0:49:55:2c:9b:56:56:5e:89:
         55:e5:04:a5:6e:85:fb:91:e3:d7:07:fa:05:c4:0c:fb:72:d9:
         0b:9e:7e:f7:08:59:ab:26:ff:e8:ec:e1:13:a6:5a:ae:3b:c6:
         0b:30:49:b3:57:9f:18:3c:66:a6:44:58:d4:47:8b:62:60:cb:
         66:37:50:b8:03:0f:cd:f9:16:7b:b3:01:3d:f9:83:e3:43:d2:
         95:ae:d2:e8:9e:02:11:59:97:11:00:8c:0c:52:e2:c8:04:9b:
         ae:5f:01:77:e8:77:b8:74:fc:0c:06:a2:41:ce:b8:2c:68:40:
         93:22:c7:3e:26:ca:37:61:01:5d:e2:8d:55:cb:19:c3:f1:94:
         62:84:00:5a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUAnIySHQf9hA3g7TFq2NluCFCl5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ0ODNCMDgyNUIzRTg4QzY0Mzc2OTNGQjlFQzI2RTQ1
RUFBQ0YyMTAeFw0yNTA4MjkxNzQyMDlaFw0yNjA4MjgxNzQ3MDlaMDMxMTAvBgNV
BAMTKDBGQUQzMUUzRUM0NzFBN0I1RkMzMEFCODlBRUVEQUYxRDgwMjRCQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsMlmGkFS70Nz6wJlcCAUG9TZl
xoyrEAzu2uNYydwOH/RLJO2Vp2m6jWA1Pm++/I/3J4rVRlquexBbU61TpLIicYTT
UDXo4u5J9dLlU3IIBT6MVXtek3IxH4XTnpfgxNfnnUCEsoDh/WnWozfJVCMC2Dfk
LgWgCOaaY/VKhV6NCBf8IKYguFo7DA7rBs0t9kLSMSFQxZWhXNfkEBO2zGNgcUtq
9CEksHvoj2+PEE44EilxeqsjNB+KZ9IyMcM+l1Wh9FefXRnkO53CuLIJLdNS/cmD
pMDoF4Hbt0Ff4Nk+F3eG72/cyQ7Rnjeoibz22ltJ2IXS3Dzf4tAkmF4knhkPAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUD60x4+xHGntfwwq4mu7a8dgCS7UwHwYDVR0j
BBgwFoAUDUg7CCWz6IxkN2k/uewm5F6qzyEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk1jTWkyR3RKaWY2SmlDVGNoczNEdzJ3ekRyUXZDY0FDMXJiMkI1OVh2
UE4vMS8wRDQ4M0IwODI1QjNFODhDNjQzNzY5M0ZCOUVDMjZFNDVFQUFDRjIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENDgzQjA4MjVCM0U4OEM2
NDM3NjkzRkI5RUMyNkU0NUVBQUNGMjEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZNY01pMkd0SmlmNkppQ1RjaHMzRHcyd3pEclF2Q2NBQzFyYjJCNTlYdlBOLzEv
MzIzODMwMzQzYTM4MzMzMDNhM2EyZjMzMzIyZDM0MzAyMDNkM2UyMDM1MzIzODM1
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAgwMA0GCSqGSIb3DQEBCwUAA4IBAQCMoMdUU3YyD9ev
ZDPv+vtPj0bOPuOhnISgmX3Mm5NkIw3Bgv9Ie6geQNSCsCXlxLggfh+yMEQxUu4o
YraSI2xIHY9XjPRR5v+D8/z8ir9uMYvOTDPzEE3yP9oPfR47yqIMyXh+wnoiLoHO
MfQiY60bYYYGDtvwSVUsm1ZWXolV5QSlboX7kePXB/oFxAz7ctkLnn73CFmrJv/o
7OETplquO8YLMEmzV58YPGamRFjUR4tiYMtmN1C4Aw/N+RZ7swE9+YPjQ9KVrtLo
ngIRWZcRAIwMUuLIBJuuXwF36He4dPwMBqJBzrgsaECTIsc+Jso3YQFd4o1VyxnD
8ZRihABa
-----END CERTIFICATE-----
Generated at Fri Sep 19 15:10:33 2025 by rpki-client