Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/323830343a326438343a3a2f33342d3334203d3e20323635323837.roa
File:                     323830343a326438343a3a2f33342d3334203d3e20323635323837.roa (raw, json)
Hash identifier:          w/OCu0/ii/J9PK/vsfDOO4fwqjk6y9Y6OTVBFjMXMz0=
Subject key identifier:   28:2E:6E:0D:09:FA:52:9F:6B:19:DB:F4:9F:57:E7:FA:20:65:C4:A8
Certificate issuer:       /CN=16171D3350AE619647CF6C101AB78E2709DD330E
Certificate serial:       34CC0DFCB62935725AE8375675684BCCD8EDA515
Authority key identifier: 16:17:1D:33:50:AE:61:96:47:CF:6C:10:1A:B7:8E:27:09:DD:33:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16171D3350AE619647CF6C101AB78E2709DD330E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/323830343a326438343a3a2f33342d3334203d3e20323635323837.roa
Signing time:             Tue 12 Aug 2025 15:29:17 +0000
ROA not before:           Tue 12 Aug 2025 15:24:17 +0000
ROA not after:            Tue 11 Aug 2026 15:29:17 +0000
asID:                     265287
IP address blocks:        2804:2d84::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/16171D3350AE619647CF6C101AB78E2709DD330E.crl
                          rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/16171D3350AE619647CF6C101AB78E2709DD330E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16171D3350AE619647CF6C101AB78E2709DD330E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:cc:0d:fc:b6:29:35:72:5a:e8:37:56:75:68:4b:cc:d8:ed:a5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16171D3350AE619647CF6C101AB78E2709DD330E
        Validity
            Not Before: Aug 12 15:24:17 2025 GMT
            Not After : Aug 11 15:29:17 2026 GMT
        Subject: CN=282E6E0D09FA529F6B19DBF49F57E7FA2065C4A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:df:7f:06:49:79:76:17:6e:4d:f2:79:cb:d0:
                    3d:12:fc:ea:e3:12:d2:f8:77:c7:6d:1b:e7:81:01:
                    29:26:60:6d:4d:ba:02:dd:ac:4a:33:c3:81:11:46:
                    d4:79:e2:31:7f:61:22:67:38:4f:77:19:10:87:79:
                    60:27:ed:f9:e7:e0:2f:6d:9d:38:fd:8a:74:02:db:
                    60:dd:11:48:74:aa:34:fe:b9:79:b7:7b:dd:69:08:
                    81:23:ce:08:87:85:65:54:08:a2:fc:91:57:24:3b:
                    3c:a9:fe:cf:4c:c5:33:62:98:51:d9:08:fc:90:99:
                    df:49:4f:c8:b4:58:b0:7b:fc:dc:59:27:9b:96:86:
                    c0:43:70:02:f6:d3:4c:4d:fb:7e:f2:a3:99:27:e0:
                    17:71:72:f9:d0:e4:71:ef:a4:f6:8d:37:5f:cc:be:
                    69:19:db:50:ce:53:2a:0d:16:86:5c:d0:fd:a9:b4:
                    41:5b:f2:64:06:c6:c3:f6:f2:19:48:eb:bb:98:c2:
                    e2:d9:b0:bc:b0:8d:10:27:00:ec:a3:4c:a7:22:67:
                    b9:9f:a9:89:32:89:23:93:13:fd:01:90:3b:88:d3:
                    49:77:45:98:01:23:0e:b4:e8:9d:b1:eb:53:06:a1:
                    f4:b0:3f:48:c6:16:77:8e:61:7b:c3:8f:63:46:fb:
                    7d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2E:6E:0D:09:FA:52:9F:6B:19:DB:F4:9F:57:E7:FA:20:65:C4:A8
            X509v3 Authority Key Identifier:
                keyid:16:17:1D:33:50:AE:61:96:47:CF:6C:10:1A:B7:8E:27:09:DD:33:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/16171D3350AE619647CF6C101AB78E2709DD330E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16171D3350AE619647CF6C101AB78E2709DD330E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/323830343a326438343a3a2f33342d3334203d3e20323635323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d84::/34

    Signature Algorithm: sha256WithRSAEncryption
         36:d9:1a:90:d2:2a:7c:fb:40:a6:e3:9a:8e:8e:c5:58:2c:0b:
         e0:85:ee:ac:87:23:ee:a7:c2:8d:a9:9f:13:ee:2e:dc:79:8c:
         6f:47:0d:79:fe:dd:55:d2:7c:69:c0:d5:83:ec:72:db:ea:e0:
         a9:3b:c9:74:b6:4f:5b:44:4a:6a:aa:4d:3e:23:b3:56:7f:ff:
         ed:88:44:ce:c8:e2:44:c9:a6:fa:d0:ea:57:ad:21:76:d6:2a:
         69:7f:2a:9d:04:e1:24:96:83:0b:70:12:8a:92:d8:41:1f:2b:
         25:97:ab:fc:a5:75:a6:3d:8b:a7:13:3f:de:34:30:54:4c:cf:
         c2:70:f0:24:2f:aa:f0:5c:6e:08:d7:f8:4e:e3:a7:70:f4:25:
         ad:f3:07:dc:97:ab:06:8d:20:66:f0:f7:89:f8:ec:7c:e2:cb:
         16:dd:39:af:db:c1:1e:64:5c:a2:60:c2:6a:6a:73:15:6e:93:
         6b:67:55:92:52:c8:04:b7:ff:44:2d:9e:bb:ba:ba:5b:7d:77:
         22:05:b0:86:f3:21:ec:ce:08:53:c7:c2:48:91:19:c7:de:6c:
         90:9b:11:3d:68:34:a6:a4:15:bd:a2:16:92:8c:56:53:74:fb:
         01:2f:f2:06:9c:57:e9:d7:58:f1:0c:49:4d:4c:30:aa:0c:33:
         22:6c:72:1c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNMwN/LYpNXJa6DdWdWhLzNjtpRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYxNzFEMzM1MEFFNjE5NjQ3Q0Y2QzEwMUFCNzhFMjcw
OUREMzMwRTAeFw0yNTA4MTIxNTI0MTdaFw0yNjA4MTExNTI5MTdaMDMxMTAvBgNV
BAMTKDI4MkU2RTBEMDlGQTUyOUY2QjE5REJGNDlGNTdFN0ZBMjA2NUM0QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/338GSXl2F25N8nnL0D0S/Orj
EtL4d8dtG+eBASkmYG1NugLdrEozw4ERRtR54jF/YSJnOE93GRCHeWAn7fnn4C9t
nTj9inQC22DdEUh0qjT+uXm3e91pCIEjzgiHhWVUCKL8kVckOzyp/s9MxTNimFHZ
CPyQmd9JT8i0WLB7/NxZJ5uWhsBDcAL200xN+37yo5kn4BdxcvnQ5HHvpPaNN1/M
vmkZ21DOUyoNFoZc0P2ptEFb8mQGxsP28hlI67uYwuLZsLywjRAnAOyjTKciZ7mf
qYkyiSOTE/0BkDuI00l3RZgBIw606J2x61MGofSwP0jGFneOYXvDj2NG+33NAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKC5uDQn6Up9rGdv0n1fn+iBlxKgwHwYDVR0j
BBgwFoAUFhcdM1CuYZZHz2wQGreOJwndMw4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1FiRkFMQm01RFk1anhYSmNKa3FYNVdYR0dqeEdkYkJSbW9UQ2hOU2s0
Z3QvMC8xNjE3MUQzMzUwQUU2MTk2NDdDRjZDMTAxQUI3OEUyNzA5REQzMzBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2MTcxRDMzNTBBRTYxOTY0
N0NGNkMxMDFBQjc4RTI3MDlERDMzMEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdRYkZBTEJtNURZNWp4WEpjSmtxWDVXWEdHanhHZGJCUm1vVENoTlNrNGd0LzAv
MzIzODMwMzQzYTMyNjQzODM0M2EzYTJmMzMzNDJkMzMzNDIwM2QzZTIwMzIzNjM1
MzIzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYGKAQthAAwDQYJKoZIhvcNAQELBQADggEBADbZGpDS
Knz7QKbjmo6OxVgsC+CF7qyHI+6nwo2pnxPuLtx5jG9HDXn+3VXSfGnA1YPsctvq
4Kk7yXS2T1tESmqqTT4js1Z//+2IRM7I4kTJpvrQ6letIXbWKml/Kp0E4SSWgwtw
EoqS2EEfKyWXq/yldaY9i6cTP940MFRMz8Jw8CQvqvBcbgjX+E7jp3D0Ja3zB9yX
qwaNIGbw94n47HziyxbdOa/bwR5kXKJgwmpqcxVuk2tnVZJSyAS3/0Qtnru6ult9
dyIFsIbzIezOCFPHwkiRGcfebJCbET1oNKakFb2iFpKMVlN0+wEv8gacV+nXWPEM
SU1MMKoMMyJschw=
-----END CERTIFICATE-----
Generated at Fri Sep 19 13:25:52 2025 by rpki-client