Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33332d3333203d3e203631383531.roa
File:                     323830343a316134633a3a2f33332d3333203d3e203631383531.roa (raw, json)
Hash identifier:          ulhnMNBWV6ZKvkWg19wbP99EK+gwpBRe7VxHUQv6H2c=
Subject key identifier:   E8:22:9E:9A:70:E9:79:B5:79:C2:5C:93:58:8C:EC:91:69:56:29:64
Certificate issuer:       /CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
Certificate serial:       384A6770E5396F27E452549EFA546E2C81AF348B
Authority key identifier: 99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33332d3333203d3e203631383531.roa
Signing time:             Sun 07 Sep 2025 18:20:53 +0000
ROA not before:           Sun 07 Sep 2025 18:15:53 +0000
ROA not after:            Sun 06 Sep 2026 18:20:53 +0000
asID:                     61851
IP address blocks:        2804:1a4c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4a:67:70:e5:39:6f:27:e4:52:54:9e:fa:54:6e:2c:81:af:34:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D7C44A0449C417C1F22D6C2A40EA99801B4649
        Validity
            Not Before: Sep  7 18:15:53 2025 GMT
            Not After : Sep  6 18:20:53 2026 GMT
        Subject: CN=E8229E9A70E979B579C25C93588CEC9169562964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a5:86:03:f8:8a:23:b5:2a:0c:ee:b5:85:28:
                    5e:35:01:7e:49:93:f7:68:7e:3f:c8:69:06:3d:84:
                    35:da:9c:23:b2:f5:06:96:dc:3d:e3:d6:cd:95:58:
                    43:2c:e7:ba:59:5c:87:01:25:5c:d3:86:e3:bc:af:
                    60:5a:62:23:1c:8d:e7:8f:33:cc:ed:a0:1a:cb:e0:
                    53:38:aa:82:93:f0:ec:96:cc:e4:eb:73:53:1e:c8:
                    36:e9:1a:42:f5:ae:aa:c0:55:20:89:a6:9d:98:8b:
                    14:57:05:fb:53:c2:e3:29:38:7a:8c:71:c7:7a:aa:
                    2b:0c:8f:04:66:2d:80:97:9d:da:0f:23:fb:80:a7:
                    cc:59:cd:70:88:75:bf:2e:db:9a:cf:b2:b3:2c:a4:
                    35:1f:20:fa:7f:a2:6c:20:67:cc:6d:27:99:a7:0b:
                    fd:9f:02:54:01:f5:60:cc:9d:63:d1:82:58:2d:ca:
                    5f:e2:40:a7:90:5e:64:f7:e6:95:8e:cb:82:18:65:
                    ab:84:4b:4b:66:e8:31:7d:ce:ff:46:d6:4b:89:75:
                    2c:0c:93:94:fc:3b:ef:17:ab:94:26:a3:0f:dc:71:
                    17:38:cf:c9:06:5d:e5:ff:62:38:63:70:04:e4:69:
                    c6:b4:03:62:9a:7f:b4:d5:61:d3:98:81:58:bb:2e:
                    84:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:22:9E:9A:70:E9:79:B5:79:C2:5C:93:58:8C:EC:91:69:56:29:64
            X509v3 Authority Key Identifier:
                keyid:99:D7:C4:4A:04:49:C4:17:C1:F2:2D:6C:2A:40:EA:99:80:1B:46:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/99D7C44A0449C417C1F22D6C2A40EA99801B4649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99D7C44A0449C417C1F22D6C2A40EA99801B4649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33332d3333203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a4c::/33

    Signature Algorithm: sha256WithRSAEncryption
         83:84:38:1c:3b:2b:e1:0a:df:ae:69:05:a7:36:c1:07:ff:1b:
         3e:7d:eb:6a:23:e7:80:4a:49:d2:63:24:3d:10:dd:c5:df:c4:
         da:e0:f8:6a:d0:b6:26:ee:0d:c9:d3:73:c3:80:c2:12:8b:00:
         84:8a:33:99:10:58:7e:98:52:ae:0b:6c:17:90:43:cc:18:05:
         6e:55:9a:20:9e:0b:b3:36:1f:4d:47:ed:71:c5:f4:02:d7:dc:
         a4:88:ec:9e:23:85:9c:fb:55:08:c3:d2:6e:9a:fa:bb:6d:bf:
         c4:57:51:29:f0:f6:b8:14:c8:33:53:61:54:df:0f:25:c5:c1:
         a7:08:52:ac:02:41:7b:e6:d2:06:65:a6:fa:ab:8e:38:16:d1:
         eb:36:43:16:39:3a:d7:e5:c7:b4:72:06:53:eb:c1:97:48:c8:
         15:8c:b6:83:d3:d5:f7:35:51:7f:40:d6:88:08:2b:5e:15:52:
         75:3f:29:b2:c4:9a:31:6d:e1:36:dc:ce:3e:e9:c6:bf:c1:34:
         1a:13:d5:75:e3:1f:d9:29:d3:4f:29:19:38:26:c5:d0:f4:e7:
         68:25:3e:28:98:b9:30:77:ab:de:c5:89:04:79:fe:4e:68:ea:
         bd:db:84:28:42:e1:c8:59:3e:89:a1:ad:a1:f6:85:77:6d:ee:
         32:ab:63:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:18:19 2025 by rpki-client