Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a343030303a3a2f33362d3336203d3e20323635343631.roa
File:                     323830343a333437633a343030303a3a2f33362d3336203d3e20323635343631.roa (raw, json)
Hash identifier:          i+MfEOKhmhGZpBUgdLviL7dhasGJaVgJWzgxupkIXP8=
Subject key identifier:   35:38:AD:AA:25:42:08:4A:91:4F:1C:26:B5:EA:8D:A4:C9:02:1B:05
Certificate issuer:       /CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
Certificate serial:       6BDA403B4F9721A18B4F6E8DCC9234CEACF07F52
Authority key identifier: 8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a343030303a3a2f33362d3336203d3e20323635343631.roa
Signing time:             Fri 12 Sep 2025 15:36:22 +0000
ROA not before:           Fri 12 Sep 2025 15:31:22 +0000
ROA not after:            Fri 11 Sep 2026 15:36:22 +0000
asID:                     265461
IP address blocks:        2804:347c:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 04:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:da:40:3b:4f:97:21:a1:8b:4f:6e:8d:cc:92:34:ce:ac:f0:7f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
        Validity
            Not Before: Sep 12 15:31:22 2025 GMT
            Not After : Sep 11 15:36:22 2026 GMT
        Subject: CN=3538ADAA2542084A914F1C26B5EA8DA4C9021B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:97:43:89:29:61:71:8c:e3:a3:24:4e:23:
                    d4:13:65:7b:24:e2:55:b9:07:ca:06:58:8f:ce:6f:
                    3d:81:25:02:5b:ec:4a:fc:ce:4f:3a:45:7d:aa:53:
                    b8:b7:24:9f:5e:09:a3:76:68:ca:f5:6d:81:62:29:
                    e2:4c:08:b7:8a:d8:8a:95:ec:03:19:98:46:32:1e:
                    05:a7:e9:4c:5c:e0:b8:22:5d:79:ae:2c:77:7a:f0:
                    9c:a1:14:d7:bb:6e:f5:48:fb:74:c2:50:16:11:a9:
                    5c:49:b8:60:f0:2b:cd:c5:8c:5a:bf:b9:df:b9:a0:
                    f5:82:68:dd:ba:6a:47:cf:a5:ab:0b:76:43:51:32:
                    a5:6d:49:bf:e2:35:c1:fb:6e:df:08:e6:04:8e:5e:
                    75:c0:85:68:75:a6:a1:f3:71:ac:5b:ea:3c:18:ab:
                    77:18:ba:f8:15:b6:ff:9d:18:3d:56:f0:eb:0a:67:
                    37:2a:3f:9e:f5:96:51:57:a1:9d:6c:dc:81:9a:42:
                    03:ac:b5:e2:2a:04:1c:94:29:21:3e:32:0d:68:43:
                    64:83:d8:11:7a:a6:d7:b5:93:90:74:1b:61:42:40:
                    6f:1d:e7:ba:c2:c8:f1:1f:e5:6c:33:02:c1:5c:9a:
                    61:5c:74:c7:f0:db:d2:f2:bb:5f:b5:89:95:65:c0:
                    d3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:38:AD:AA:25:42:08:4A:91:4F:1C:26:B5:EA:8D:A4:C9:02:1B:05
            X509v3 Authority Key Identifier:
                keyid:8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a343030303a3a2f33362d3336203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:347c:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         10:ff:9d:8d:7c:5d:bc:fe:d6:36:72:37:79:df:cc:85:fc:5e:
         1c:06:22:17:de:48:ef:f6:1b:bc:3c:80:d5:75:00:3c:ea:cc:
         75:8a:12:84:b4:38:1a:f2:11:8f:15:10:a1:e8:b5:06:ac:ee:
         91:3e:2d:0f:b2:8f:68:70:c2:a3:d9:34:a2:17:3d:f3:46:db:
         25:20:42:b7:e5:37:a2:20:82:21:a0:f6:75:b5:45:9f:e9:61:
         9e:78:a4:da:54:da:f1:95:79:99:71:1e:53:70:6c:64:5b:3b:
         d1:c2:1a:11:c3:b9:e7:a4:2a:21:6f:39:7f:a7:13:65:69:2d:
         2d:83:2c:15:73:a2:e8:a8:0d:51:81:7a:29:1d:fa:18:d4:33:
         57:18:d8:3d:47:a0:eb:45:5d:e1:c4:da:92:6a:a6:6e:d0:99:
         8f:22:ea:02:e2:d8:51:f6:52:ec:06:b6:41:33:d5:b4:f2:4e:
         78:2f:64:c6:33:bc:80:3c:7a:ad:83:77:9d:26:00:14:2b:25:
         df:ea:6a:35:bb:53:91:5f:e3:a3:de:9a:dd:01:91:c4:09:b6:
         1f:db:d9:fd:4f:c9:6d:4e:e6:c1:7e:43:c8:32:1a:bd:eb:67:
         19:82:eb:56:52:e6:31:28:6d:64:9e:3d:de:a5:cc:fd:39:d4:
         ff:fe:77:7e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUa9pAO0+XIaGLT26NzJI0zqzwf1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM3QjVGMURGOEM2NTlENkRDOUZDQzUzMkE5M0I5RUYx
QzQzQzU2OTAeFw0yNTA5MTIxNTMxMjJaFw0yNjA5MTExNTM2MjJaMDMxMTAvBgNV
BAMTKDM1MzhBREFBMjU0MjA4NEE5MTRGMUMyNkI1RUE4REE0QzkwMjFCMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaF5dDiSlhcYzjoyROI9QTZXsk
4lW5B8oGWI/Obz2BJQJb7Er8zk86RX2qU7i3JJ9eCaN2aMr1bYFiKeJMCLeK2IqV
7AMZmEYyHgWn6Uxc4LgiXXmuLHd68JyhFNe7bvVI+3TCUBYRqVxJuGDwK83FjFq/
ud+5oPWCaN26akfPpasLdkNRMqVtSb/iNcH7bt8I5gSOXnXAhWh1pqHzcaxb6jwY
q3cYuvgVtv+dGD1W8OsKZzcqP571llFXoZ1s3IGaQgOsteIqBByUKSE+Mg1oQ2SD
2BF6pte1k5B0G2FCQG8d57rCyPEf5WwzAsFcmmFcdMfw29Lyu1+1iZVlwNPHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUNTitqiVCCEqRTxwmteqNpMkCGwUwHwYDVR0j
BBgwFoAUjHtfHfjGWdbcn8xTKpO57xxDxWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVpZdFViWmlwaFE5aXc5eVZjNHZzZEdIaEVCWXU4Ymd4bW9YTGZIZmNi
MncvMC84QzdCNUYxREY4QzY1OUQ2REM5RkNDNTMyQTkzQjlFRjFDNDNDNTY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDN0I1RjFERjhDNjU5RDZE
QzlGQ0M1MzJBOTNCOUVGMUM0M0M1NjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlaWXRVYlppcGhROWl3OXlWYzR2c2RHSGhFQll1OGJneG1vWExmSGZjYjJ3LzAv
MzIzODMwMzQzYTMzMzQzNzYzM2EzNDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNTM0MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgENHxAMA0GCSqGSIb3DQEBCwUA
A4IBAQAQ/52NfF28/tY2cjd538yF/F4cBiIX3kjv9hu8PIDVdQA86sx1ihKEtDga
8hGPFRCh6LUGrO6RPi0Pso9ocMKj2TSiFz3zRtslIEK35TeiIIIhoPZ1tUWf6WGe
eKTaVNrxlXmZcR5TcGxkWzvRwhoRw7nnpCohbzl/pxNlaS0tgywVc6LoqA1RgXop
HfoY1DNXGNg9R6DrRV3hxNqSaqZu0JmPIuoC4thR9lLsBrZBM9W08k54L2TGM7yA
PHqtg3edJgAUKyXf6mo1u1ORX+Oj3prdAZHECbYf29n9T8ltTubBfkPIMhq962cZ
gutWUuYxKG1knj3epcz9OdT//nd+
-----END CERTIFICATE-----
Generated at Thu Sep 18 19:20:07 2025 by rpki-client