Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3a2f33322d3430203d3e20323635313735.roa
File:                     323830343a326263383a3a2f33322d3430203d3e20323635313735.roa (raw, json)
Hash identifier:          Zd3zxWoA9v6UsohVRdSW8d5a3fIS0AYuqU6Twq2DXSE=
Subject key identifier:   B3:D3:4B:2C:E0:9C:17:EA:B0:2F:F3:FF:81:E0:D1:8E:DD:CB:46:8B
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       28637498DBE3A4F4E30F37DDB6AB747BF1C4AD95
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3a2f33322d3430203d3e20323635313735.roa
Signing time:             Tue 09 Sep 2025 19:12:03 +0000
ROA not before:           Tue 09 Sep 2025 19:07:03 +0000
ROA not after:            Tue 08 Sep 2026 19:12:03 +0000
asID:                     265175
IP address blocks:        2804:2bc8::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 19:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:63:74:98:db:e3:a4:f4:e3:0f:37:dd:b6:ab:74:7b:f1:c4:ad:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Sep  9 19:07:03 2025 GMT
            Not After : Sep  8 19:12:03 2026 GMT
        Subject: CN=3082010A0282010100C20768D4CA3D26C7B3ECD6A828CBEF25D7114741E7BEF93C45F5BC167DE910686A3EBC70DCECBCD3274F00E281468A3199FA4C07965DFAA6D768E7130E428F0892E7BE53CCFEE47628C5AE77C6BEB1018303B6FA39D5079862B69E74D4226A68F30FC02DA54A654B0F5C9980E3E595F6FE36D8B66914D1C8C9BC886A49BBE1DA9EEB8ED8665DC798989396BAB13AB34A9440C41F83E47318CDF0364F772A8050E4AE4AC5D86C03DFC5C18490A9E3A879B0E755F9BD60AA0A8E11A4ED737A02946B90608B02E7B5454993998F2226957EAC482B2BA60E4B392B3A2E9F63D8A807E369E7A1344472442D2BAA1CC1E8355D7D820DF2BABCC6DB97536C6D4B21D0C30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:68:d4:ca:3d:26:c7:b3:ec:d6:a8:28:cb:
                    ef:25:d7:11:47:41:e7:be:f9:3c:45:f5:bc:16:7d:
                    e9:10:68:6a:3e:bc:70:dc:ec:bc:d3:27:4f:00:e2:
                    81:46:8a:31:99:fa:4c:07:96:5d:fa:a6:d7:68:e7:
                    13:0e:42:8f:08:92:e7:be:53:cc:fe:e4:76:28:c5:
                    ae:77:c6:be:b1:01:83:03:b6:fa:39:d5:07:98:62:
                    b6:9e:74:d4:22:6a:68:f3:0f:c0:2d:a5:4a:65:4b:
                    0f:5c:99:80:e3:e5:95:f6:fe:36:d8:b6:69:14:d1:
                    c8:c9:bc:88:6a:49:bb:e1:da:9e:eb:8e:d8:66:5d:
                    c7:98:98:93:96:ba:b1:3a:b3:4a:94:40:c4:1f:83:
                    e4:73:18:cd:f0:36:4f:77:2a:80:50:e4:ae:4a:c5:
                    d8:6c:03:df:c5:c1:84:90:a9:e3:a8:79:b0:e7:55:
                    f9:bd:60:aa:0a:8e:11:a4:ed:73:7a:02:94:6b:90:
                    60:8b:02:e7:b5:45:49:93:99:8f:22:26:95:7e:ac:
                    48:2b:2b:a6:0e:4b:39:2b:3a:2e:9f:63:d8:a8:07:
                    e3:69:e7:a1:34:44:72:44:2d:2b:aa:1c:c1:e8:35:
                    5d:7d:82:0d:f2:ba:bc:c6:db:97:53:6c:6d:4b:21:
                    d0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D3:4B:2C:E0:9C:17:EA:B0:2F:F3:FF:81:E0:D1:8E:DD:CB:46:8B
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3a2f33322d3430203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:50:b5:0f:25:2f:64:a8:26:c8:7c:e1:90:bf:03:7f:de:dc:
         5f:15:39:e7:94:7f:57:5b:b1:a9:ad:61:36:b5:36:09:90:4f:
         3b:e8:8d:b8:00:fb:51:82:57:13:c9:45:ae:f8:fa:55:eb:05:
         37:1a:20:85:a5:f3:5d:9a:dd:ae:94:07:41:08:9e:2f:23:2e:
         79:4c:28:14:1c:b3:b0:3f:55:01:43:e7:d6:6a:6b:ec:4f:1e:
         67:67:9e:ad:1a:56:a2:5a:5a:9f:da:a9:5a:7d:9c:a3:87:39:
         0d:85:dd:65:1d:68:02:35:09:3b:ae:d9:38:b3:26:67:f8:ae:
         e1:a8:e2:d3:b7:15:80:a4:c3:b3:13:e8:02:1a:58:d5:11:4b:
         89:97:fd:9c:be:3c:d2:58:a0:e0:72:39:c6:c6:32:a6:08:07:
         ee:c6:a0:b5:06:db:55:f9:12:db:3f:5f:04:8a:3c:99:1c:28:
         34:84:ac:3a:64:d9:f5:15:ba:58:b4:4b:42:ff:0e:7c:a9:bd:
         86:45:8b:ad:7a:57:1b:89:00:4b:34:61:41:f4:f2:7c:59:c3:
         74:3f:2a:13:33:f3:3c:ba:4b:83:d1:29:bd:1a:6d:1c:12:44:
         1e:32:14:60:15:38:4e:91:f5:2e:2d:2b:33:c0:39:15:34:f3:
         e8:0a:c9:5a
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUKGN0mNvjpPTjDzfdtqt0e/HErZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMxRDhDNzk2MDNFOTZEMTMwOURGQjlCQTg4QUVCNkE2
MkM3QzY0MjAeFw0yNTA5MDkxOTA3MDNaFw0yNjA5MDgxOTEyMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzIwNzY4RDRDQTNEMjZDN0Iz
RUNENkE4MjhDQkVGMjVENzExNDc0MUU3QkVGOTNDNDVGNUJDMTY3REU5MTA2ODZB
M0VCQzcwRENFQ0JDRDMyNzRGMDBFMjgxNDY4QTMxOTlGQTRDMDc5NjVERkFBNkQ3
NjhFNzEzMEU0MjhGMDg5MkU3QkU1M0NDRkVFNDc2MjhDNUFFNzdDNkJFQjEwMTgz
MDNCNkZBMzlENTA3OTg2MkI2OUU3NEQ0MjI2QTY4RjMwRkMwMkRBNTRBNjU0QjBG
NUM5OTgwRTNFNTk1RjZGRTM2RDhCNjY5MTREMUM4QzlCQzg4NkE0OUJCRTFEQTlF
RUI4RUQ4NjY1REM3OTg5ODkzOTZCQUIxM0FCMzRBOTQ0MEM0MUY4M0U0NzMxOENE
RjAzNjRGNzcyQTgwNTBFNEFFNEFDNUQ4NkMwM0RGQzVDMTg0OTBBOUUzQTg3OUIw
RTc1NUY5QkQ2MEFBMEE4RTExQTRFRDczN0EwMjk0NkI5MDYwOEIwMkU3QjU0NTQ5
OTM5OThGMjIyNjk1N0VBQzQ4MkIyQkE2MEU0QjM5MkIzQTJFOUY2M0Q4QTgwN0Uz
NjlFN0ExMzQ0NDcyNDQyRDJCQUExQ0MxRTgzNTVEN0Q4MjBERjJCQUJDQzZEQjk3
NTM2QzZENEIyMUQwQzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwgdo1Mo9Jsez7NaoKMvvJdcRR0Hnvvk8RfW8Fn3pEGhqPrxw3Oy8
0ydPAOKBRooxmfpMB5Zd+qbXaOcTDkKPCJLnvlPM/uR2KMWud8a+sQGDA7b6OdUH
mGK2nnTUImpo8w/ALaVKZUsPXJmA4+WV9v422LZpFNHIybyIakm74dqe647YZl3H
mJiTlrqxOrNKlEDEH4PkcxjN8DZPdyqAUOSuSsXYbAPfxcGEkKnjqHmw51X5vWCq
Co4RpO1zegKUa5BgiwLntUVJk5mPIiaVfqxIKyumDks5Kzoun2PYqAfjaeehNERy
RC0rqhzB6DVdfYIN8rq8xtuXU2xtSyHQwwIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FLPTSyzgnBfqsC/z/4Hg0Y7dy0aLMB8GA1UdIwQYMBaAFCMdjHlgPpbRMJ37m6iK
62pix8ZCMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzluNEpSS2pDbXk2NGE5
eVl4NUpuUm04VVA4MzFrM3VWZ3J6emJIQlI2ZzdkLzEvMjMxRDhDNzk2MDNFOTZE
MTMwOURGQjlCQTg4QUVCNkE2MkM3QzY0Mi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMzFEOEM3OTYwM0U5NkQxMzA5REZCOUJBODhBRUI2QTYyQzdD
NjQyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85bjRKUktqQ215NjRhOXlZeDVK
blJtOFVQODMxazN1VmdyenpiSEJSNmc3ZC8xLzMyMzgzMDM0M2EzMjYyNjMzODNh
M2EyZjMzMzIyZDM0MzAyMDNkM2UyMDMyMzYzNTMxMzczNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
K8gwDQYJKoZIhvcNAQELBQADggEBAG5QtQ8lL2SoJsh84ZC/A3/e3F8VOeeUf1db
samtYTa1NgmQTzvojbgA+1GCVxPJRa74+lXrBTcaIIWl812a3a6UB0EIni8jLnlM
KBQcs7A/VQFD59Zqa+xPHmdnnq0aVqJaWp/aqVp9nKOHOQ2F3WUdaAI1CTuu2Tiz
Jmf4ruGo4tO3FYCkw7MT6AIaWNURS4mX/Zy+PNJYoOByOcbGMqYIB+7GoLUG21X5
Ets/XwSKPJkcKDSErDpk2fUVuli0S0L/DnypvYZFi616VxuJAEs0YUH08nxZw3Q/
KhMz8zy6S4PRKb0abRwSRB4yFGAVOE6R9S4tKzPAORU08+gKyVo=
-----END CERTIFICATE-----
Generated at Thu Sep 18 09:50:31 2025 by rpki-client