Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3a2f33322d313238203d3e20323637323730.roa
File:                     323830343a346165343a3a2f33322d313238203d3e20323637323730.roa (raw, json)
Hash identifier:          288ogYZMAR9QJphd0axUKi64bXA0iFqxUm8s3TGO0Iw=
Subject key identifier:   C5:38:EA:71:48:33:23:5A:D5:F0:BC:1F:F6:B3:5D:91:11:A0:A2:98
Certificate issuer:       /CN=7ABC8468E5758989936DBE8D1F4AAB06B9B34867
Certificate serial:       340A956D3866026E167DD65F471FE3606F1BE479
Authority key identifier: 7A:BC:84:68:E5:75:89:89:93:6D:BE:8D:1F:4A:AB:06:B9:B3:48:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3a2f33322d313238203d3e20323637323730.roa
Signing time:             Thu 04 Sep 2025 14:05:38 +0000
ROA not before:           Thu 04 Sep 2025 14:00:38 +0000
ROA not after:            Thu 03 Sep 2026 14:05:38 +0000
asID:                     267270
IP address blocks:        2804:4ae4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.crl
                          rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0a:95:6d:38:66:02:6e:16:7d:d6:5f:47:1f:e3:60:6f:1b:e4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABC8468E5758989936DBE8D1F4AAB06B9B34867
        Validity
            Not Before: Sep  4 14:00:38 2025 GMT
            Not After : Sep  3 14:05:38 2026 GMT
        Subject: CN=C538EA714833235AD5F0BC1FF6B35D9111A0A298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a3:40:cf:30:3e:1d:79:26:11:47:0c:16:27:
                    92:29:33:c1:c7:a7:26:7a:f1:e4:02:17:4e:5a:c3:
                    cf:3d:35:8a:10:67:9f:4f:0d:b7:8b:b4:e6:53:d0:
                    4f:b0:67:23:d7:4c:f8:3e:94:25:9a:4e:8d:44:a9:
                    d2:c4:60:ed:06:25:01:35:4a:c2:9d:0e:c8:2b:42:
                    f5:5a:23:e2:72:d1:a1:3e:a8:7e:c4:91:be:bc:53:
                    ea:9d:07:5f:3f:46:2b:f0:fd:8e:3e:a6:f3:4d:85:
                    c0:0a:f8:b9:4c:69:8a:a0:94:fb:f3:db:5c:41:cf:
                    4e:08:9e:51:2e:9b:56:e1:12:e0:e7:dd:dc:c3:f2:
                    44:f4:ed:81:e9:1a:32:cc:3a:40:aa:c0:1e:8e:eb:
                    14:7a:e0:08:c2:40:64:0b:e4:c9:2f:c0:5c:ff:20:
                    46:ec:68:d7:2e:b7:f3:7b:9e:db:cb:53:58:40:02:
                    69:68:7b:b8:e1:95:e0:b6:43:94:09:a3:7a:20:fc:
                    34:65:38:99:da:b8:fc:c6:8e:7a:6b:a9:96:76:2c:
                    65:97:9e:62:25:fc:a8:14:61:84:54:83:2d:76:f4:
                    7b:8b:ec:56:cc:f1:ab:17:44:03:a5:b3:a7:33:d4:
                    7a:01:dc:c8:6c:5f:aa:5a:d2:da:75:24:a5:04:0a:
                    18:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:38:EA:71:48:33:23:5A:D5:F0:BC:1F:F6:B3:5D:91:11:A0:A2:98
            X509v3 Authority Key Identifier:
                keyid:7A:BC:84:68:E5:75:89:89:93:6D:BE:8D:1F:4A:AB:06:B9:B3:48:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ABC8468E5758989936DBE8D1F4AAB06B9B34867.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jvUhasxZZLBynPoA2teaNujVb8mvqngqwZ3Y2pKieFN/0/323830343a346165343a3a2f33322d313238203d3e20323637323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ae4::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:95:cf:a3:4e:54:5d:54:94:46:a4:26:9c:d2:50:bd:04:ca:
         31:de:94:88:2f:44:21:7f:94:60:3f:e9:b6:44:d2:25:9b:76:
         f6:3e:a0:59:05:8d:5f:39:5a:c6:1f:89:bb:aa:68:51:50:8a:
         a2:4a:77:9a:ff:53:d3:df:04:63:68:2f:c5:9e:77:78:48:eb:
         eb:38:79:c5:f9:38:af:ba:92:f9:82:4f:37:0b:35:30:82:ae:
         0e:d9:13:b8:07:ec:83:a0:ff:54:3a:ab:39:77:48:1f:60:2e:
         0c:8e:5b:9e:fc:29:0f:e4:09:aa:66:d0:2f:8d:df:4d:5d:85:
         65:61:4e:a3:5e:94:6c:b7:12:1e:85:fd:96:5b:4e:6f:ad:e0:
         d1:bf:27:da:4f:00:0b:e0:31:3c:3b:95:f9:66:4d:67:17:79:
         1e:eb:95:d6:92:b5:ec:0f:54:4d:fc:7d:7d:ce:c8:e1:b1:ff:
         e2:ed:19:cf:cb:c1:16:58:67:59:9a:ca:33:d4:43:e1:da:b7:
         ba:de:6a:8b:7c:36:b1:02:ff:df:15:2d:b9:33:96:ef:e0:39:
         8b:b6:da:eb:b8:6f:99:b1:3b:fa:7f:64:e8:71:d2:18:8f:73:
         19:48:82:e0:16:ae:09:45:bb:76:ef:d2:ce:cd:07:e5:23:62:
         ea:47:0c:96
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUNAqVbThmAm4WfdZfRx/jYG8b5HkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FCQzg0NjhFNTc1ODk4OTkzNkRCRThEMUY0QUFCMDZC
OUIzNDg2NzAeFw0yNTA5MDQxNDAwMzhaFw0yNjA5MDMxNDA1MzhaMDMxMTAvBgNV
BAMTKEM1MzhFQTcxNDgzMzIzNUFENUYwQkMxRkY2QjM1RDkxMTFBMEEyOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDro0DPMD4deSYRRwwWJ5IpM8HH
pyZ68eQCF05aw889NYoQZ59PDbeLtOZT0E+wZyPXTPg+lCWaTo1EqdLEYO0GJQE1
SsKdDsgrQvVaI+Jy0aE+qH7Ekb68U+qdB18/Rivw/Y4+pvNNhcAK+LlMaYqglPvz
21xBz04InlEum1bhEuDn3dzD8kT07YHpGjLMOkCqwB6O6xR64AjCQGQL5MkvwFz/
IEbsaNcut/N7ntvLU1hAAmloe7jhleC2Q5QJo3og/DRlOJnauPzGjnprqZZ2LGWX
nmIl/KgUYYRUgy129HuL7FbM8asXRAOls6cz1HoB3MhsX6pa0tp1JKUEChiNAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUxTjqcUgzI1rV8Lwf9rNdkRGgopgwHwYDVR0j
BBgwFoAUeryEaOV1iYmTbb6NH0qrBrmzSGcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWp2VWhhc3haWkxCeW5Qb0EydGVhTnVqVmI4bXZxbmdxd1ozWTJwS2ll
Rk4vMC83QUJDODQ2OEU1NzU4OTg5OTM2REJFOEQxRjRBQUIwNkI5QjM0ODY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBQkM4NDY4RTU3NTg5ODk5
MzZEQkU4RDFGNEFBQjA2QjlCMzQ4NjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlqdlVoYXN4WlpMQnluUG9BMnRlYU51alZiOG12cW5ncXdaM1kycEtpZUZOLzAv
MzIzODMwMzQzYTM0NjE2NTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBErkMA0GCSqGSIb3DQEBCwUAA4IBAQAwlc+j
TlRdVJRGpCac0lC9BMox3pSIL0Qhf5RgP+m2RNIlm3b2PqBZBY1fOVrGH4m7qmhR
UIqiSnea/1PT3wRjaC/Fnnd4SOvrOHnF+TivupL5gk83CzUwgq4O2RO4B+yDoP9U
Oqs5d0gfYC4Mjlue/CkP5AmqZtAvjd9NXYVlYU6jXpRstxIehf2WW05vreDRvyfa
TwAL4DE8O5X5Zk1nF3ke65XWkrXsD1RN/H19zsjhsf/i7RnPy8EWWGdZmsoz1EPh
2re63mqLfDaxAv/fFS25M5bv4DmLttrruG+ZsTv6f2TocdIYj3MZSILgFq4JRbt2
79LOzQflI2LqRwyW
-----END CERTIFICATE-----
Generated at Fri Sep 19 03:55:35 2025 by rpki-client