Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a3a2f33362d3336203d3e20323635343631.roa
File:                     323830343a333437633a3a2f33362d3336203d3e20323635343631.roa (raw, json)
Hash identifier:          3WER/jW23JkF6Yqz3PvguCfldP/2lVcz203G7wTqyEs=
Subject key identifier:   35:5F:15:E0:92:74:95:5D:2E:D7:5B:F8:84:81:24:F9:A7:DD:15:EF
Certificate issuer:       /CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
Certificate serial:       595D2124947CA1CF16AF7E5EFA8BBA3E628C4EAC
Authority key identifier: 8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a3a2f33362d3336203d3e20323635343631.roa
Signing time:             Fri 12 Sep 2025 15:36:23 +0000
ROA not before:           Fri 12 Sep 2025 15:31:23 +0000
ROA not after:            Fri 11 Sep 2026 15:36:23 +0000
asID:                     265461
IP address blocks:        2804:347c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5d:21:24:94:7c:a1:cf:16:af:7e:5e:fa:8b:ba:3e:62:8c:4e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
        Validity
            Not Before: Sep 12 15:31:23 2025 GMT
            Not After : Sep 11 15:36:23 2026 GMT
        Subject: CN=355F15E09274955D2ED75BF8848124F9A7DD15EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7a:0c:b5:d5:ba:8b:f8:6d:d1:0e:e8:ec:c4:
                    3f:79:22:28:ab:0b:14:1b:48:69:7f:c5:1c:27:f8:
                    4b:57:74:88:71:22:6d:a9:77:92:96:e0:0c:86:26:
                    ab:3c:43:55:c3:d4:fe:54:5d:d9:de:e5:4e:96:f7:
                    84:df:86:58:cb:29:36:54:62:29:7d:79:c4:24:d6:
                    e3:3d:73:35:c0:be:da:af:69:6d:de:36:33:12:ec:
                    55:a7:15:dd:cd:7e:71:40:74:dc:cd:bf:d2:2b:e4:
                    ce:e0:d1:cc:96:0c:cd:6d:33:02:2c:19:a9:2b:5e:
                    8e:81:9e:d4:84:f4:fe:73:89:ff:74:d0:64:a9:b2:
                    3a:27:8f:51:af:c8:81:f5:73:43:5f:44:8a:58:71:
                    b5:0c:49:76:37:03:ca:11:c8:8c:fa:7a:86:94:d7:
                    ce:7e:82:9a:ee:2f:7f:62:f2:02:ce:5c:7e:6a:fd:
                    19:0f:70:df:2d:23:40:e3:2d:90:84:1a:3d:1c:52:
                    c5:8b:09:fd:c6:1a:ee:c6:47:a1:0b:17:28:85:b6:
                    ec:98:7a:fe:12:ef:3c:5d:1a:30:26:1e:87:13:3c:
                    d6:fc:75:35:09:d4:10:6c:c3:22:39:5d:9a:d4:29:
                    4c:5f:5e:f6:8b:0e:03:d4:f5:c0:39:fd:5f:e5:a5:
                    19:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5F:15:E0:92:74:95:5D:2E:D7:5B:F8:84:81:24:F9:A7:DD:15:EF
            X509v3 Authority Key Identifier:
                keyid:8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a3a2f33362d3336203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:347c::/36

    Signature Algorithm: sha256WithRSAEncryption
         70:cf:03:0d:20:30:c4:a1:62:f3:7e:bb:be:99:46:02:a5:95:
         56:81:ca:e6:53:e7:34:22:ef:78:32:40:08:0b:23:53:c7:29:
         51:08:2e:32:d9:80:06:38:bd:ea:f6:68:8c:18:67:9a:66:a6:
         9a:1d:3a:ba:76:00:18:5a:2e:00:6f:93:26:08:80:7a:87:55:
         bc:2d:ea:7a:0b:0a:b3:2f:ec:0a:14:92:01:55:44:50:dc:b3:
         ea:53:b2:3a:c9:89:01:a6:eb:ef:e3:86:b0:82:77:00:55:81:
         8e:a2:ae:2f:e3:f9:03:28:9b:e6:49:0c:04:55:7d:0d:3c:5f:
         fa:d3:ff:f3:6c:f5:5d:25:32:17:af:78:31:25:7d:d0:fb:01:
         c7:e0:54:33:8c:93:3e:7b:61:a1:02:27:8d:42:71:70:1e:ea:
         2b:35:8a:67:d2:4a:92:7c:8f:76:d1:f5:8a:06:e9:32:af:19:
         33:8e:27:ba:2a:13:da:54:49:fa:a0:7a:65:14:af:98:94:bc:
         f1:c9:db:7c:e7:fb:3d:f0:cd:af:da:b1:50:5b:17:e2:a3:b7:
         10:86:2e:61:78:85:69:ff:5e:4d:4a:af:50:4e:54:74:10:7b:
         fb:69:11:2a:ec:87:2e:09:c2:19:a0:4a:0a:fe:d7:ae:cf:0f:
         8d:36:29:27
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWV0hJJR8oc8Wr35e+ou6PmKMTqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM3QjVGMURGOEM2NTlENkRDOUZDQzUzMkE5M0I5RUYx
QzQzQzU2OTAeFw0yNTA5MTIxNTMxMjNaFw0yNjA5MTExNTM2MjNaMDMxMTAvBgNV
BAMTKDM1NUYxNUUwOTI3NDk1NUQyRUQ3NUJGODg0ODEyNEY5QTdERDE1RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVegy11bqL+G3RDujsxD95Iiir
CxQbSGl/xRwn+EtXdIhxIm2pd5KW4AyGJqs8Q1XD1P5UXdne5U6W94TfhljLKTZU
Yil9ecQk1uM9czXAvtqvaW3eNjMS7FWnFd3NfnFAdNzNv9Ir5M7g0cyWDM1tMwIs
GakrXo6BntSE9P5zif900GSpsjonj1GvyIH1c0NfRIpYcbUMSXY3A8oRyIz6eoaU
185+gpruL39i8gLOXH5q/RkPcN8tI0DjLZCEGj0cUsWLCf3GGu7GR6ELFyiFtuyY
ev4S7zxdGjAmHocTPNb8dTUJ1BBswyI5XZrUKUxfXvaLDgPU9cA5/V/lpRnfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNV8V4JJ0lV0u11v4hIEk+afdFe8wHwYDVR0j
BBgwFoAUjHtfHfjGWdbcn8xTKpO57xxDxWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVpZdFViWmlwaFE5aXc5eVZjNHZzZEdIaEVCWXU4Ymd4bW9YTGZIZmNi
MncvMC84QzdCNUYxREY4QzY1OUQ2REM5RkNDNTMyQTkzQjlFRjFDNDNDNTY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDN0I1RjFERjhDNjU5RDZE
QzlGQ0M1MzJBOTNCOUVGMUM0M0M1NjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlaWXRVYlppcGhROWl3OXlWYzR2c2RHSGhFQll1OGJneG1vWExmSGZjYjJ3LzAv
MzIzODMwMzQzYTMzMzQzNzYzM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjM1
MzQzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKAQ0fAAwDQYJKoZIhvcNAQELBQADggEBAHDPAw0g
MMShYvN+u76ZRgKllVaByuZT5zQi73gyQAgLI1PHKVEILjLZgAY4ver2aIwYZ5pm
ppodOrp2ABhaLgBvkyYIgHqHVbwt6noLCrMv7AoUkgFVRFDcs+pTsjrJiQGm6+/j
hrCCdwBVgY6iri/j+QMom+ZJDARVfQ08X/rT//Ns9V0lMheveDElfdD7AcfgVDOM
kz57YaECJ41CcXAe6is1imfSSpJ8j3bR9YoG6TKvGTOOJ7oqE9pUSfqgemUUr5iU
vPHJ23zn+z3wza/asVBbF+KjtxCGLmF4hWn/Xk1Kr1BOVHQQe/tpESrshy4Jwhmg
Sgr+167PD402KSc=
-----END CERTIFICATE-----
Generated at Fri Sep 19 00:06:53 2025 by rpki-client