Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a383030303a3a2f33332d3333203d3e203631383531.roa
File:                     323830343a316134633a383030303a3a2f33332d3333203d3e203631383531.roa (raw, json)
Hash identifier:          VYkAwog3gFbUqvF304sggDwXo4LT8JOCPEnJWqihXWE=
Subject key identifier:   E3:D3:EA:6D:70:FE:C1:F3:F1:64:68:1E:C9:8F:D5:A2:7F:1E:7E:7E
Certificate issuer:       /CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
Certificate serial:       35F1D61AD6D5033AF67CA02B9E295FF3F3779A3D
Authority key identifier: 99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a383030303a3a2f33332d3333203d3e203631383531.roa
Signing time:             Sun 07 Sep 2025 18:20:45 +0000
ROA not before:           Sun 07 Sep 2025 18:15:45 +0000
ROA not after:            Sun 06 Sep 2026 18:20:45 +0000
asID:                     61851
IP address blocks:        2804:1a4c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f1:d6:1a:d6:d5:03:3a:f6:7c:a0:2b:9e:29:5f:f3:f3:77:9a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
        Validity
            Not Before: Sep  7 18:15:45 2025 GMT
            Not After : Sep  6 18:20:45 2026 GMT
        Subject: CN=E3D3EA6D70FEC1F3F164681EC98FD5A27F1E7E7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c6:53:52:e7:2c:98:16:99:1f:3d:d3:c1:ca:
                    ca:e7:9a:83:24:f3:8a:af:5d:b9:1b:c2:47:8c:c8:
                    78:b1:91:ac:04:57:70:79:b2:7b:73:11:3a:3b:2e:
                    09:a5:71:19:99:f5:f3:89:ea:58:af:18:7b:c4:e8:
                    53:57:47:ea:1f:53:f3:7d:92:b1:73:c2:bb:1c:cc:
                    77:c6:eb:55:7e:3c:1c:1c:72:79:df:e7:1d:ab:cc:
                    f7:b6:25:2d:e2:73:35:bf:8e:6b:99:8b:c5:f0:1b:
                    f1:6b:d4:c6:72:9f:66:1e:ff:d5:11:a0:93:e6:88:
                    b2:15:9b:4a:9f:a8:bc:9a:de:77:e7:bd:53:59:43:
                    56:89:29:3e:72:13:22:48:a0:81:99:fb:c2:65:f3:
                    5f:25:2a:21:5d:3a:bf:a7:e1:e0:a7:47:0d:89:77:
                    0b:ac:70:5d:cb:ec:c6:86:c3:49:03:f9:25:4f:f9:
                    af:20:e2:a0:01:6d:36:ad:a4:b6:e6:5f:a6:23:b7:
                    f4:d7:61:88:12:19:16:11:e6:64:50:29:fe:29:d8:
                    6a:9f:e1:ef:31:23:6f:f0:0e:d8:21:82:f3:29:e6:
                    45:c9:98:31:a9:05:7a:00:4c:82:3c:2d:97:15:8a:
                    02:d9:95:39:92:9d:49:ab:8e:94:0e:cd:49:70:5f:
                    83:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D3:EA:6D:70:FE:C1:F3:F1:64:68:1E:C9:8F:D5:A2:7F:1E:7E:7E
            X509v3 Authority Key Identifier:
                keyid:99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a383030303a3a2f33332d3333203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a4c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8a:e6:86:05:0b:41:6c:4b:62:a6:ca:ed:9a:f7:73:18:de:fa:
         a4:c5:75:f6:35:94:38:25:96:35:56:f8:c5:88:43:d9:91:fb:
         4d:a8:fc:54:1f:2b:b9:1a:be:f5:ad:3c:fe:78:77:16:0d:df:
         3a:93:55:78:52:c4:ea:6d:2a:a1:de:a3:b0:64:3e:1a:06:a0:
         93:a1:28:fc:5a:b0:38:56:cb:f6:4b:d4:14:a7:30:9c:8e:09:
         13:d2:6b:5a:9b:26:63:16:6a:03:a9:33:92:7d:3b:3f:25:66:
         7e:1d:5c:cd:df:7c:93:86:0d:9b:dc:a5:2f:e1:f9:3e:33:c1:
         67:9f:1d:39:b8:c1:bb:02:98:ec:8e:29:e9:34:36:5e:33:a9:
         e8:29:3e:89:e7:98:d3:69:22:50:2d:c8:78:ac:6e:27:c9:64:
         77:77:3e:d0:03:9b:0f:63:dc:bf:78:b6:37:9e:a8:89:97:b9:
         c9:4f:b2:0f:a4:e4:0c:b6:72:50:13:f7:c1:80:6f:71:c7:2e:
         c2:34:5d:7b:db:63:2d:51:0e:00:4d:fb:24:b7:11:cd:77:88:
         31:9f:51:40:58:13:70:3b:ab:3c:25:1c:a7:02:11:52:29:68:
         3c:a9:c6:86:5b:45:5f:e3:b9:7e:a3:0d:25:f5:f7:42:70:9e:
         08:35:53:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:56:43 2025 by rpki-client