Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9stwk7Ry8DLuZbJqdtzh3KyssB3AokPi71Z3XJLzoeU3/0/323830343a316237633a3a2f33322d3438203d3e203631373331.roa
File:                     323830343a316237633a3a2f33322d3438203d3e203631373331.roa (raw, json)
Hash identifier:          fXPKcCAdLDoHVjPd2Br0WrTSlPDpLJsYGIyEcjCRkiA=
Subject key identifier:   4C:6C:FE:F7:11:F5:F9:AA:05:FA:AB:4A:57:A6:40:6A:EF:37:FC:72
Certificate issuer:       /CN=A9F19B8A3D0E31C83704968F43CDC66CB4EFA97C
Certificate serial:       606DC277F37381E7260C649190222FF91E090090
Authority key identifier: A9:F1:9B:8A:3D:0E:31:C8:37:04:96:8F:43:CD:C6:6C:B4:EF:A9:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9F19B8A3D0E31C83704968F43CDC66CB4EFA97C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9stwk7Ry8DLuZbJqdtzh3KyssB3AokPi71Z3XJLzoeU3/0/323830343a316237633a3a2f33322d3438203d3e203631373331.roa
Signing time:             Mon 12 May 2025 18:07:28 +0000
ROA not before:           Mon 12 May 2025 18:02:28 +0000
ROA not after:            Mon 11 May 2026 18:07:28 +0000
asID:                     61731
IP address blocks:        2804:1b7c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9stwk7Ry8DLuZbJqdtzh3KyssB3AokPi71Z3XJLzoeU3/0/A9F19B8A3D0E31C83704968F43CDC66CB4EFA97C.crl
                          rsync://rpki-repo.registro.br/repo/9stwk7Ry8DLuZbJqdtzh3KyssB3AokPi71Z3XJLzoeU3/0/A9F19B8A3D0E31C83704968F43CDC66CB4EFA97C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9F19B8A3D0E31C83704968F43CDC66CB4EFA97C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 07:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6d:c2:77:f3:73:81:e7:26:0c:64:91:90:22:2f:f9:1e:09:00:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9F19B8A3D0E31C83704968F43CDC66CB4EFA97C
        Validity
            Not Before: May 12 18:02:28 2025 GMT
            Not After : May 11 18:07:28 2026 GMT
        Subject: CN=4C6CFEF711F5F9AA05FAAB4A57A6406AEF37FC72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:57:a0:ab:83:07:15:07:26:81:3c:19:dc:50:
                    59:81:0f:4b:13:e7:34:70:cd:9a:e4:c6:4a:77:6e:
                    89:aa:17:60:c4:d6:13:8b:42:c2:cb:0d:f8:40:c6:
                    8c:9c:8e:64:93:0c:c2:e0:82:60:83:a7:87:a3:7e:
                    15:18:cb:2b:cd:56:49:dd:25:6d:af:1f:0b:43:27:
                    3c:83:01:f3:fd:a6:49:b4:27:7b:e3:a8:cf:e2:5a:
                    90:99:f5:60:dd:47:40:b6:5d:3e:aa:69:e6:8f:43:
                    36:07:cf:f3:14:d5:65:1c:73:64:53:df:e2:eb:e9:
                    b1:d1:08:85:f9:0d:88:1c:ee:4f:a1:59:d8:de:b4:
                    52:1c:b6:4e:6b:80:cd:ae:02:c3:67:1a:41:45:5a:
                    19:ea:8f:94:2c:9e:9a:e9:32:c3:80:88:6c:ed:a5:
                    1c:98:c1:cb:0f:cd:48:af:d5:83:78:04:97:93:8e:
                    8c:34:5e:5b:b0:0c:0c:86:bd:bc:cd:f5:f3:8e:dd:
                    57:bb:ca:e4:4e:b9:79:1c:75:25:a0:1c:f3:81:40:
                    60:56:b5:a1:08:e8:7e:55:d5:e7:e3:60:7a:36:5d:
                    8d:df:2f:45:8b:75:f1:51:e3:5c:fa:b9:70:38:5d:
                    f5:89:14:47:a2:68:df:57:e7:f1:be:f5:7e:01:d9:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6C:FE:F7:11:F5:F9:AA:05:FA:AB:4A:57:A6:40:6A:EF:37:FC:72
            X509v3 Authority Key Identifier:
                keyid:A9:F1:9B:8A:3D:0E:31:C8:37:04:96:8F:43:CD:C6:6C:B4:EF:A9:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9stwk7Ry8DLuZbJqdtzh3KyssB3AokPi71Z3XJLzoeU3/0/A9F19B8A3D0E31C83704968F43CDC66CB4EFA97C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9F19B8A3D0E31C83704968F43CDC66CB4EFA97C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9stwk7Ry8DLuZbJqdtzh3KyssB3AokPi71Z3XJLzoeU3/0/323830343a316237633a3a2f33322d3438203d3e203631373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:e2:42:4e:16:fe:c9:ff:04:89:63:53:58:1a:8e:69:26:96:
         e6:98:3e:fc:5b:ed:9d:ac:06:5f:b9:1e:cf:1d:09:78:cf:2f:
         7a:66:7b:23:c1:1e:6a:37:71:97:3b:80:7f:ee:60:76:b2:a6:
         46:6e:68:e2:6a:d8:51:f3:7d:0d:e9:8d:4d:f9:32:68:b1:47:
         c9:dc:14:5b:41:db:07:62:64:f5:a2:b1:b7:3a:47:66:93:0e:
         16:42:f8:b7:e0:be:22:2a:a5:92:0d:2e:8a:c1:f9:e9:32:1b:
         9d:e7:e0:58:98:38:c8:8d:75:71:e5:fb:aa:e2:38:90:fe:be:
         91:ed:ba:f8:f3:c6:1b:a6:ab:9b:3d:d8:01:6e:5d:35:55:83:
         f9:16:51:7c:94:3a:1e:ab:66:c6:c5:5d:d2:34:a4:64:34:aa:
         e9:af:15:f0:39:ec:4d:ff:0e:fe:b1:5f:02:0f:c0:bb:86:d9:
         f7:be:df:c4:26:1e:75:42:02:02:4e:23:7a:3e:95:a3:49:00:
         a9:be:58:67:9d:4b:23:d0:aa:23:00:d1:19:1a:d0:85:31:c5:
         cf:39:ba:fd:2e:46:55:85:69:dc:44:32:86:d8:fd:a9:fc:fb:
         6e:83:3e:08:72:f9:15:16:07:91:5a:be:23:75:b5:bc:2c:29:
         15:e5:e5:07
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUYG3Cd/NzgecmDGSRkCIv+R4JAJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlGMTlCOEEzRDBFMzFDODM3MDQ5NjhGNDNDREM2NkNC
NEVGQTk3QzAeFw0yNTA1MTIxODAyMjhaFw0yNjA1MTExODA3MjhaMDMxMTAvBgNV
BAMTKDRDNkNGRUY3MTFGNUY5QUEwNUZBQUI0QTU3QTY0MDZBRUYzN0ZDNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjV6CrgwcVByaBPBncUFmBD0sT
5zRwzZrkxkp3bomqF2DE1hOLQsLLDfhAxoycjmSTDMLggmCDp4ejfhUYyyvNVknd
JW2vHwtDJzyDAfP9pkm0J3vjqM/iWpCZ9WDdR0C2XT6qaeaPQzYHz/MU1WUcc2RT
3+Lr6bHRCIX5DYgc7k+hWdjetFIctk5rgM2uAsNnGkFFWhnqj5QsnprpMsOAiGzt
pRyYwcsPzUiv1YN4BJeTjow0XluwDAyGvbzN9fOO3Ve7yuROuXkcdSWgHPOBQGBW
taEI6H5V1efjYHo2XY3fL0WLdfFR41z6uXA4XfWJFEeiaN9X5/G+9X4B2atrAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUTGz+9xH1+aoF+qtKV6ZAau83/HIwHwYDVR0j
BBgwFoAUqfGbij0OMcg3BJaPQ83GbLTvqXwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXN0d2s3Unk4REx1WmJKcWR0emgzS3lzc0IzQW9rUGk3MVozWEpMem9l
VTMvMC9BOUYxOUI4QTNEMEUzMUM4MzcwNDk2OEY0M0NEQzY2Q0I0RUZBOTdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5RjE5QjhBM0QwRTMxQzgz
NzA0OTY4RjQzQ0RDNjZDQjRFRkE5N0MuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlzdHdrN1J5OERMdVpiSnFkdHpoM0t5c3NCM0Fva1BpNzFaM1hKTHpvZVUzLzAv
MzIzODMwMzQzYTMxNjIzNzYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMTM3
MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEG3wwDQYJKoZIhvcNAQELBQADggEBAEziQk4W/sn/
BIljU1gajmkmluaYPvxb7Z2sBl+5Hs8dCXjPL3pmeyPBHmo3cZc7gH/uYHaypkZu
aOJq2FHzfQ3pjU35MmixR8ncFFtB2wdiZPWisbc6R2aTDhZC+LfgviIqpZINLorB
+ekyG53n4FiYOMiNdXHl+6riOJD+vpHtuvjzxhumq5s92AFuXTVVg/kWUXyUOh6r
ZsbFXdI0pGQ0qumvFfA57E3/Dv6xXwIPwLuG2fe+38QmHnVCAgJOI3o+laNJAKm+
WGedSyPQqiMA0Rka0IUxxc85uv0uRlWFadxEMobY/an8+26DPghy+RUWB5FaviN1
tbwsKRXl5Qc=
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:27:15 2025 by rpki-client