Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a633030303a3a2f33362d3336203d3e20323635343631.roa
File:                     323830343a333437633a633030303a3a2f33362d3336203d3e20323635343631.roa (raw, json)
Hash identifier:          /x0r92timG5YwaJhwVPPM2RSs3DVOUeJAuukIqM37hQ=
Subject key identifier:   6B:0D:0F:3B:35:A8:86:91:59:F4:6F:B5:AF:76:10:02:DA:0D:F1:2F
Certificate issuer:       /CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
Certificate serial:       0879293A6CADF8BE4F0CDDEC15F319D2D054BEE6
Authority key identifier: 8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a633030303a3a2f33362d3336203d3e20323635343631.roa
Signing time:             Fri 12 Sep 2025 15:36:22 +0000
ROA not before:           Fri 12 Sep 2025 15:31:22 +0000
ROA not after:            Fri 11 Sep 2026 15:36:22 +0000
asID:                     265461
IP address blocks:        2804:347c:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 04:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:79:29:3a:6c:ad:f8:be:4f:0c:dd:ec:15:f3:19:d2:d0:54:be:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
        Validity
            Not Before: Sep 12 15:31:22 2025 GMT
            Not After : Sep 11 15:36:22 2026 GMT
        Subject: CN=6B0D0F3B35A8869159F46FB5AF761002DA0DF12F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a5:b2:00:ab:b6:b8:52:d4:19:6a:74:0d:8c:
                    55:56:1f:90:93:17:7f:5d:84:ee:0b:cf:93:03:30:
                    e0:db:0e:a7:c7:c9:67:4d:b3:df:9f:12:cc:d0:05:
                    99:1b:7b:a0:57:e2:91:cf:db:25:5b:a3:fe:8f:5a:
                    06:f4:28:c3:0b:2b:6f:0e:1f:ba:a9:f8:df:a0:de:
                    67:f4:34:f8:68:fc:7f:98:2f:1f:90:2b:5c:50:e9:
                    c4:3e:cb:ca:1d:4c:5c:20:af:7a:df:a4:2e:13:6e:
                    46:24:47:8f:2a:89:46:48:d7:95:c8:c5:a8:c2:3c:
                    93:b7:9f:b9:9d:7a:4a:cc:ba:aa:1c:98:51:b7:01:
                    3c:0d:24:6d:bb:34:29:02:cc:13:eb:61:88:7f:d0:
                    ae:c1:e1:73:ed:06:9d:40:16:6f:a2:ee:4f:05:e0:
                    93:c4:a3:37:ba:00:64:e5:d2:7d:73:ff:66:90:f1:
                    bf:b0:fc:84:11:88:ec:87:48:18:d4:00:9a:76:e3:
                    d0:59:6a:d3:ed:26:71:37:2c:17:ff:69:24:46:b0:
                    c5:f5:b2:83:22:a2:35:27:17:c8:7a:3f:9c:b5:92:
                    6b:28:5a:fb:59:18:54:ca:24:9a:31:14:ba:c7:6d:
                    19:bf:d5:eb:a7:c0:72:43:7e:89:34:e6:2a:86:85:
                    32:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0D:0F:3B:35:A8:86:91:59:F4:6F:B5:AF:76:10:02:DA:0D:F1:2F
            X509v3 Authority Key Identifier:
                keyid:8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a633030303a3a2f33362d3336203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:347c:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2b:18:6b:92:d8:da:60:22:0d:16:8e:e5:47:84:5d:e1:75:d9:
         fe:d5:02:25:b1:8b:f9:fe:0e:86:df:bc:d7:31:c5:a8:4e:99:
         44:94:21:ef:f7:4c:6b:15:60:74:64:00:cf:eb:a4:03:cd:d5:
         5c:84:1e:6a:7c:47:ca:6c:23:5f:bb:9e:d3:70:a1:80:bf:ce:
         73:50:41:33:77:fc:a2:2f:dc:7a:f4:88:06:27:08:ae:84:ba:
         08:22:2f:b0:f6:e9:28:38:38:c1:8a:f7:eb:f6:02:cd:44:d4:
         c8:76:ab:5e:77:28:b8:d6:76:f8:62:e4:4b:79:8e:4b:b6:f2:
         f9:27:70:d8:40:a9:89:b5:38:50:1c:89:af:3a:2a:b3:b5:7d:
         5e:21:9e:db:85:e7:e0:b4:6c:15:be:b0:a2:8b:45:63:fd:df:
         2e:99:cb:7e:32:2a:23:d9:82:d8:74:a5:13:47:e2:79:69:72:
         8a:d3:11:ae:01:13:f5:99:cb:a5:da:00:e2:99:5c:b7:21:ff:
         29:99:35:eb:76:23:af:ef:49:28:50:50:a0:99:fc:2e:3e:9e:
         a0:11:f7:af:36:f7:9d:1a:8c:b4:a1:1f:e8:5f:ab:f2:8d:ba:
         cf:df:85:5d:43:73:33:b6:76:de:b5:89:00:ca:e0:4a:1d:a2:
         f4:72:df:ce
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCHkpOmyt+L5PDN3sFfMZ0tBUvuYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM3QjVGMURGOEM2NTlENkRDOUZDQzUzMkE5M0I5RUYx
QzQzQzU2OTAeFw0yNTA5MTIxNTMxMjJaFw0yNjA5MTExNTM2MjJaMDMxMTAvBgNV
BAMTKDZCMEQwRjNCMzVBODg2OTE1OUY0NkZCNUFGNzYxMDAyREEwREYxMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDppbIAq7a4UtQZanQNjFVWH5CT
F39dhO4Lz5MDMODbDqfHyWdNs9+fEszQBZkbe6BX4pHP2yVbo/6PWgb0KMMLK28O
H7qp+N+g3mf0NPho/H+YLx+QK1xQ6cQ+y8odTFwgr3rfpC4TbkYkR48qiUZI15XI
xajCPJO3n7mdekrMuqocmFG3ATwNJG27NCkCzBPrYYh/0K7B4XPtBp1AFm+i7k8F
4JPEoze6AGTl0n1z/2aQ8b+w/IQRiOyHSBjUAJp249BZatPtJnE3LBf/aSRGsMX1
soMiojUnF8h6P5y1kmsoWvtZGFTKJJoxFLrHbRm/1eunwHJDfok05iqGhTKFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUaw0POzWohpFZ9G+1r3YQAtoN8S8wHwYDVR0j
BBgwFoAUjHtfHfjGWdbcn8xTKpO57xxDxWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVpZdFViWmlwaFE5aXc5eVZjNHZzZEdIaEVCWXU4Ymd4bW9YTGZIZmNi
MncvMC84QzdCNUYxREY4QzY1OUQ2REM5RkNDNTMyQTkzQjlFRjFDNDNDNTY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDN0I1RjFERjhDNjU5RDZE
QzlGQ0M1MzJBOTNCOUVGMUM0M0M1NjkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlaWXRVYlppcGhROWl3OXlWYzR2c2RHSGhFQll1OGJneG1vWExmSGZjYjJ3LzAv
MzIzODMwMzQzYTMzMzQzNzYzM2E2MzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNTM0MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgENHzAMA0GCSqGSIb3DQEBCwUA
A4IBAQArGGuS2NpgIg0WjuVHhF3hddn+1QIlsYv5/g6G37zXMcWoTplElCHv90xr
FWB0ZADP66QDzdVchB5qfEfKbCNfu57TcKGAv85zUEEzd/yiL9x69IgGJwiuhLoI
Ii+w9ukoODjBivfr9gLNRNTIdqtedyi41nb4YuRLeY5LtvL5J3DYQKmJtThQHImv
OiqztX1eIZ7bhefgtGwVvrCii0Vj/d8umct+Mioj2YLYdKUTR+J5aXKK0xGuARP1
mcul2gDimVy3If8pmTXrdiOv70koUFCgmfwuPp6gEfevNvedGoy0oR/oX6vyjbrP
34VdQ3MztnbetYkAyuBKHaL0ct/O
-----END CERTIFICATE-----
Generated at Thu Sep 18 19:19:07 2025 by rpki-client