Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/323830343a6334633a3a2f33322d3438203d3e203532363839.roa
File:                     323830343a6334633a3a2f33322d3438203d3e203532363839.roa (raw, json)
Hash identifier:          +WzcrsO3GPoMUv79znyACTCey8II1kVgHOqmM8adGdo=
Subject key identifier:   B4:70:9F:0A:D2:F7:E4:C0:62:4A:3F:9B:D1:25:C1:FE:F4:E5:01:1B
Certificate issuer:       /CN=D4F7947FFA165065796964648407CC7868D8C807
Certificate serial:       5BDBA809DF059951BF5FAD01D0DA95685AA7C216
Authority key identifier: D4:F7:94:7F:FA:16:50:65:79:69:64:64:84:07:CC:78:68:D8:C8:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F7947FFA165065796964648407CC7868D8C807.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/323830343a6334633a3a2f33322d3438203d3e203532363839.roa
Signing time:             Mon 15 Sep 2025 00:25:59 +0000
ROA not before:           Mon 15 Sep 2025 00:20:59 +0000
ROA not after:            Mon 14 Sep 2026 00:25:59 +0000
asID:                     52689
IP address blocks:        2804:c4c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/D4F7947FFA165065796964648407CC7868D8C807.crl
                          rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/D4F7947FFA165065796964648407CC7868D8C807.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F7947FFA165065796964648407CC7868D8C807.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 00:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:db:a8:09:df:05:99:51:bf:5f:ad:01:d0:da:95:68:5a:a7:c2:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F7947FFA165065796964648407CC7868D8C807
        Validity
            Not Before: Sep 15 00:20:59 2025 GMT
            Not After : Sep 14 00:25:59 2026 GMT
        Subject: CN=3082010A0282010100B96EC3EAF8BADEE95B65EC20A61AF5A0DE7DE0909F00B60AEC8990D69EDC7E4A74C6F5ACE12CF3E80A6B795CFEFFE40E87F8C4793EB69EB515EE85624A4E5DBB6AE017DE9E5101C943A1167577A6344EEE5C5ED0A4C568862115A0A19542731A7FA76B698793F2E8BB457DCCBFB73A688FB6317F8960DC4F67698CE99FFD5CAC04FD3D67EA87D28B91D3CAF09D12E49FF24CA96B2549908C85C1EA07D15EFFA03CB61CD2198FD5667C8E7A36EC1172D98C7022343B9B530559E1D5F61E010D709A2A20C53AEE85B0B43C77FB61F912BD3B6B29A1CDCAB66868457BE5565275AE28319F74AEFA1872526CB1E8659EF7DF125A2014F1C98BE2CB1075A47083276F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:c3:ea:f8:ba:de:e9:5b:65:ec:20:a6:1a:
                    f5:a0:de:7d:e0:90:9f:00:b6:0a:ec:89:90:d6:9e:
                    dc:7e:4a:74:c6:f5:ac:e1:2c:f3:e8:0a:6b:79:5c:
                    fe:ff:e4:0e:87:f8:c4:79:3e:b6:9e:b5:15:ee:85:
                    62:4a:4e:5d:bb:6a:e0:17:de:9e:51:01:c9:43:a1:
                    16:75:77:a6:34:4e:ee:5c:5e:d0:a4:c5:68:86:21:
                    15:a0:a1:95:42:73:1a:7f:a7:6b:69:87:93:f2:e8:
                    bb:45:7d:cc:bf:b7:3a:68:8f:b6:31:7f:89:60:dc:
                    4f:67:69:8c:e9:9f:fd:5c:ac:04:fd:3d:67:ea:87:
                    d2:8b:91:d3:ca:f0:9d:12:e4:9f:f2:4c:a9:6b:25:
                    49:90:8c:85:c1:ea:07:d1:5e:ff:a0:3c:b6:1c:d2:
                    19:8f:d5:66:7c:8e:7a:36:ec:11:72:d9:8c:70:22:
                    34:3b:9b:53:05:59:e1:d5:f6:1e:01:0d:70:9a:2a:
                    20:c5:3a:ee:85:b0:b4:3c:77:fb:61:f9:12:bd:3b:
                    6b:29:a1:cd:ca:b6:68:68:45:7b:e5:56:52:75:ae:
                    28:31:9f:74:ae:fa:18:72:52:6c:b1:e8:65:9e:f7:
                    df:12:5a:20:14:f1:c9:8b:e2:cb:10:75:a4:70:83:
                    27:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:70:9F:0A:D2:F7:E4:C0:62:4A:3F:9B:D1:25:C1:FE:F4:E5:01:1B
            X509v3 Authority Key Identifier:
                keyid:D4:F7:94:7F:FA:16:50:65:79:69:64:64:84:07:CC:78:68:D8:C8:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/D4F7947FFA165065796964648407CC7868D8C807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4F7947FFA165065796964648407CC7868D8C807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/948iD2h8XvwkiBNCCTMxW71LCSUEHmYP41H8qdB943ti/0/323830343a6334633a3a2f33322d3438203d3e203532363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:4b:6b:44:16:a4:29:28:05:9e:68:a3:30:60:c9:c0:e5:00:
         f3:ec:f8:a3:7c:8f:d3:bf:78:ce:7b:2d:07:7c:39:b0:26:30:
         bc:5d:39:d3:ba:c4:ad:9d:16:13:85:78:db:24:aa:ea:b8:23:
         c7:3d:5b:26:4c:ba:2f:33:95:88:83:48:7f:85:36:35:c1:e9:
         94:9d:f0:b5:5f:a8:52:8d:d2:14:b9:35:d9:db:46:5f:26:73:
         11:cc:c7:b1:dd:9e:46:77:34:04:98:4f:5d:74:2b:d8:b4:2d:
         de:93:ed:a9:81:19:05:ad:37:f0:24:59:47:c0:4a:ec:0b:0c:
         60:64:13:f5:e9:f4:49:04:f8:6b:a3:b7:0d:64:ec:d8:13:52:
         52:39:c9:d1:b9:9b:c4:29:13:86:4c:7f:ec:8e:fd:6e:df:dc:
         55:b1:58:bb:7f:e8:6a:79:71:10:8c:8a:e8:f4:30:f3:65:b1:
         19:dc:67:37:9e:89:0e:ae:49:06:51:bc:37:c9:16:e7:8a:f1:
         1d:50:cf:f9:d9:a0:1d:6c:b0:a7:dd:20:9b:92:bb:83:c5:b9:
         e1:08:15:d7:6b:00:74:d7:b6:fe:2d:88:f0:1b:f6:be:4d:b3:
         6a:84:de:80:15:c6:2c:4d:29:11:da:0c:6e:1c:85:30:a4:a5:
         ff:c1:be:03
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUW9uoCd8FmVG/X60B0NqVaFqnwhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRGNzk0N0ZGQTE2NTA2NTc5Njk2NDY0ODQwN0NDNzg2
OEQ4QzgwNzAeFw0yNTA5MTUwMDIwNTlaFw0yNjA5MTQwMDI1NTlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjk2RUMzRUFGOEJBREVFOTVC
NjVFQzIwQTYxQUY1QTBERTdERTA5MDlGMDBCNjBBRUM4OTkwRDY5RURDN0U0QTc0
QzZGNUFDRTEyQ0YzRTgwQTZCNzk1Q0ZFRkZFNDBFODdGOEM0NzkzRUI2OUVCNTE1
RUU4NTYyNEE0RTVEQkI2QUUwMTdERTlFNTEwMUM5NDNBMTE2NzU3N0E2MzQ0RUVF
NUM1RUQwQTRDNTY4ODYyMTE1QTBBMTk1NDI3MzFBN0ZBNzZCNjk4NzkzRjJFOEJC
NDU3RENDQkZCNzNBNjg4RkI2MzE3Rjg5NjBEQzRGNjc2OThDRTk5RkZENUNBQzA0
RkQzRDY3RUE4N0QyOEI5MUQzQ0FGMDlEMTJFNDlGRjI0Q0E5NkIyNTQ5OTA4Qzg1
QzFFQTA3RDE1RUZGQTAzQ0I2MUNEMjE5OEZENTY2N0M4RTdBMzZFQzExNzJEOThD
NzAyMjM0M0I5QjUzMDU1OUUxRDVGNjFFMDEwRDcwOUEyQTIwQzUzQUVFODVCMEI0
M0M3N0ZCNjFGOTEyQkQzQjZCMjlBMUNEQ0FCNjY4Njg0NTdCRTU1NjUyNzVBRTI4
MzE5Rjc0QUVGQTE4NzI1MjZDQjFFODY1OUVGN0RGMTI1QTIwMTRGMUM5OEJFMkNC
MTA3NUE0NzA4MzI3NkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuW7D6vi63ulbZewgphr1oN594JCfALYK7ImQ1p7cfkp0xvWs4Szz
6ApreVz+/+QOh/jEeT62nrUV7oViSk5du2rgF96eUQHJQ6EWdXemNE7uXF7QpMVo
hiEVoKGVQnMaf6draYeT8ui7RX3Mv7c6aI+2MX+JYNxPZ2mM6Z/9XKwE/T1n6ofS
i5HTyvCdEuSf8kypayVJkIyFweoH0V7/oDy2HNIZj9VmfI56NuwRctmMcCI0O5tT
BVnh1fYeAQ1wmiogxTruhbC0PHf7YfkSvTtrKaHNyrZoaEV75VZSda4oMZ90rvoY
clJssehlnvffElogFPHJi+LLEHWkcIMnbwIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FLRwnwrS9+TAYko/m9Elwf705QEbMB8GA1UdIwQYMBaAFNT3lH/6FlBleWlkZIQH
zHho2MgHMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzk0OGlEMmg4WHZ3a2lC
TkNDVE14VzcxTENTVUVIbVlQNDFIOHFkQjk0M3RpLzAvRDRGNzk0N0ZGQTE2NTA2
NTc5Njk2NDY0ODQwN0NDNzg2OEQ4QzgwNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENEY3OTQ3RkZBMTY1MDY1Nzk2OTY0NjQ4NDA3Q0M3ODY4RDhD
ODA3LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85NDhpRDJoOFh2d2tpQk5DQ1RN
eFc3MUxDU1VFSG1ZUDQxSDhxZEI5NDN0aS8wLzMyMzgzMDM0M2E2MzM0NjMzYTNh
MmYzMzMyMmQzNDM4MjAzZDNlMjAzNTMyMzYzODM5LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAQMTDAN
BgkqhkiG9w0BAQsFAAOCAQEANUtrRBakKSgFnmijMGDJwOUA8+z4o3yP0794znst
B3w5sCYwvF0507rErZ0WE4V42ySq6rgjxz1bJky6LzOViINIf4U2NcHplJ3wtV+o
Uo3SFLk12dtGXyZzEczHsd2eRnc0BJhPXXQr2LQt3pPtqYEZBa038CRZR8BK7AsM
YGQT9en0SQT4a6O3DWTs2BNSUjnJ0bmbxCkThkx/7I79bt/cVbFYu3/oanlxEIyK
6PQw82WxGdxnN56JDq5JBlG8N8kW54rxHVDP+dmgHWywp90gm5K7g8W54QgV12sA
dNe2/i2I8Bv2vk2zaoTegBXGLE0pEdoMbhyFMKSl/8G+Aw==
-----END CERTIFICATE-----
Generated at Fri Sep 19 16:25:07 2025 by rpki-client