Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa
File:                     323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa (raw, json)
Hash identifier:          Z8VMqKtS6c8oQSl/sZyuGYDCXY6Slrmo17tssEBJDrI=
Subject key identifier:   63:6B:F9:DD:2B:8D:0E:74:B7:AF:D7:E8:5E:AC:DE:DE:26:73:7F:1D
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       206EEB66C3944C41E4BB7786228A846D88657DBE
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa
Signing time:             Thu 11 Sep 2025 17:45:37 +0000
ROA not before:           Thu 11 Sep 2025 17:40:37 +0000
ROA not after:            Thu 10 Sep 2026 17:45:37 +0000
asID:                     53052
IP address blocks:        2804:2f48:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 19:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6e:eb:66:c3:94:4c:41:e4:bb:77:86:22:8a:84:6d:88:65:7d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep 11 17:40:37 2025 GMT
            Not After : Sep 10 17:45:37 2026 GMT
        Subject: CN=636BF9DD2B8D0E74B7AFD7E85EACDEDE26737F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:5f:d4:a8:66:a8:4f:70:04:96:a5:87:21:
                    d6:00:b2:d0:ba:f8:51:e3:af:8d:48:14:60:ff:7c:
                    2c:a4:2a:57:bf:1f:38:c0:bf:59:18:49:75:70:70:
                    7c:db:b6:8b:22:24:7f:a0:ed:89:d7:ce:e9:a0:76:
                    dc:0d:b1:3b:e4:c7:fd:c3:e0:b0:03:19:9b:17:c5:
                    b5:15:db:a7:c4:0c:0a:f1:39:29:1d:1c:75:d5:7a:
                    c1:36:01:36:38:6a:a9:c1:43:ec:10:ef:01:04:10:
                    14:19:61:8c:e3:0b:68:20:28:5c:21:9b:ce:ef:8e:
                    05:16:62:4b:2e:3f:5c:24:2a:03:7d:ad:1e:49:4e:
                    b8:d4:b9:0b:4f:83:d6:1e:e3:51:af:c9:20:9d:ce:
                    e7:00:35:8c:67:4a:1c:6e:2e:ed:34:99:94:a6:45:
                    3b:16:e2:76:5d:cd:0e:49:14:19:3b:74:9d:f8:05:
                    97:7b:26:d5:c9:47:24:ae:77:d4:e1:d4:c1:59:7b:
                    2b:57:bf:fb:e5:3c:8c:a4:de:01:c1:84:c1:71:64:
                    b2:e7:4e:26:67:b8:83:1c:e6:e5:4d:4e:89:ea:5d:
                    96:3c:d9:5a:25:e9:39:da:3e:d5:0f:46:a2:70:ca:
                    7a:57:f5:c2:53:b4:56:d3:9d:ac:41:4c:a7:d8:60:
                    cf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6B:F9:DD:2B:8D:0E:74:B7:AF:D7:E8:5E:AC:DE:DE:26:73:7F:1D
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/323830343a326634383a323030303a3a2f33352d3335203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f48:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         50:92:f1:45:61:7a:70:ee:fb:12:53:6d:8d:3b:03:df:d4:95:
         57:f7:29:38:6d:1a:cf:40:82:0d:11:56:96:56:fe:d0:d1:23:
         77:a2:0d:58:d6:78:61:00:45:39:96:b6:52:7d:d2:21:3e:a3:
         0e:75:af:ef:ee:c5:b8:8f:9b:d1:85:c2:98:63:92:af:88:51:
         dd:fd:7e:39:45:61:2e:91:47:84:f7:c9:54:31:f7:db:99:fb:
         94:5f:97:d9:c7:8c:70:f3:90:95:3c:9f:14:1b:e7:9e:51:0c:
         58:af:c3:c8:42:9d:86:ee:c1:7e:97:4a:6a:60:40:99:44:97:
         75:43:b1:89:23:1b:08:98:2d:4b:67:a3:6b:3e:03:c3:11:73:
         86:d9:6c:73:f1:45:51:92:84:2e:d1:dc:6d:5d:3c:18:01:64:
         f8:88:f3:a6:98:51:d9:de:e7:08:c3:03:d9:4c:00:1a:38:13:
         af:73:22:38:ee:9b:4a:03:5d:0b:fd:c5:0d:d1:99:da:44:01:
         10:df:84:2f:3b:05:7f:ee:3d:66:b4:e0:0b:f0:e4:49:6a:5f:
         aa:bd:ca:bd:bf:22:df:b9:6a:bf:e2:73:be:6c:0b:4e:c9:ea:
         7e:96:71:61:47:c9:2d:4c:35:3a:be:59:9b:cd:75:c6:07:fe:
         cf:e1:a2:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIG7rZsOUTEHku3eGIoqEbYhlfb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FBNjUxNEQyREQxQUY0NkU3OTdEOTFDMzM0Qzc4QTQ0
OUI3NDAzRDAeFw0yNTA5MTExNzQwMzdaFw0yNjA5MTAxNzQ1MzdaMDMxMTAvBgNV
BAMTKDYzNkJGOUREMkI4RDBFNzRCN0FGRDdFODVFQUNERURFMjY3MzdGMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8l/UqGaoT3AElqWHIdYAstC6
+FHjr41IFGD/fCykKle/HzjAv1kYSXVwcHzbtosiJH+g7YnXzumgdtwNsTvkx/3D
4LADGZsXxbUV26fEDArxOSkdHHXVesE2ATY4aqnBQ+wQ7wEEEBQZYYzjC2ggKFwh
m87vjgUWYksuP1wkKgN9rR5JTrjUuQtPg9Ye41GvySCdzucANYxnShxuLu00mZSm
RTsW4nZdzQ5JFBk7dJ34BZd7JtXJRySud9Th1MFZeytXv/vlPIyk3gHBhMFxZLLn
TiZnuIMc5uVNTonqXZY82Vol6TnaPtUPRqJwynpX9cJTtFbTnaxBTKfYYM/JAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUY2v53SuNDnS3r9foXqze3iZzfx0wHwYDVR0j
BBgwFoAUyqZRTS3Rr0bnl9kcM0x4pEm3QD0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVlVM3VMUWdVWHU1RWJSazd1V01hWmRmTENLQmdqUW1YOUZnMnRDdzVM
RFUvMC9DQUE2NTE0RDJERDFBRjQ2RTc5N0Q5MUMzMzRDNzhBNDQ5Qjc0MDNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBQTY1MTREMkREMUFGNDZF
Nzk3RDkxQzMzNEM3OEE0NDlCNzQwM0QuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlZVTN1TFFnVVh1NUViUms3dVdNYVpkZkxDS0JnalFtWDlGZzJ0Q3c1TERVLzAv
MzIzODMwMzQzYTMyNjYzNDM4M2EzMjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDM1MzMzMDM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUoBC9IIDANBgkqhkiG9w0BAQsFAAOC
AQEAUJLxRWF6cO77ElNtjTsD39SVV/cpOG0az0CCDRFWllb+0NEjd6INWNZ4YQBF
OZa2Un3SIT6jDnWv7+7FuI+b0YXCmGOSr4hR3f1+OUVhLpFHhPfJVDH325n7lF+X
2ceMcPOQlTyfFBvnnlEMWK/DyEKdhu7BfpdKamBAmUSXdUOxiSMbCJgtS2ejaz4D
wxFzhtlsc/FFUZKELtHcbV08GAFk+IjzpphR2d7nCMMD2UwAGjgTr3MiOO6bSgNd
C/3FDdGZ2kQBEN+ELzsFf+49ZrTgC/DkSWpfqr3Kvb8i37lqv+JzvmwLTsnqfpZx
YUfJLUw1Or5Zm811xgf+z+Gitg==
-----END CERTIFICATE-----
Generated at Thu Sep 18 07:38:53 2025 by rpki-client