Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a3a2f33322d3332203d3e20323734343836.roa
File:                     323830343a393465383a3a2f33322d3332203d3e20323734343836.roa (raw, json)
Hash identifier:          0YN8K2uZgcpBhf58AKM/JQW5B8BFyACM1XgVshc5g64=
Subject key identifier:   0F:8E:B8:B0:9F:C4:15:8B:09:A5:FB:BE:29:DC:AF:6B:49:1B:37:BF
Certificate issuer:       /CN=E819B114306EFF9ED6F04774A37F0338CB16445A
Certificate serial:       6F436ED25B8B930538C74AC58DDD2956CA62C0E9
Authority key identifier: E8:19:B1:14:30:6E:FF:9E:D6:F0:47:74:A3:7F:03:38:CB:16:44:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E819B114306EFF9ED6F04774A37F0338CB16445A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a3a2f33322d3332203d3e20323734343836.roa
Signing time:             Thu 11 Sep 2025 23:59:07 +0000
ROA not before:           Thu 11 Sep 2025 23:54:07 +0000
ROA not after:            Thu 10 Sep 2026 23:59:07 +0000
asID:                     274486
IP address blocks:        2804:94e8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/E819B114306EFF9ED6F04774A37F0338CB16445A.crl
                          rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/E819B114306EFF9ED6F04774A37F0338CB16445A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E819B114306EFF9ED6F04774A37F0338CB16445A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 20:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:43:6e:d2:5b:8b:93:05:38:c7:4a:c5:8d:dd:29:56:ca:62:c0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E819B114306EFF9ED6F04774A37F0338CB16445A
        Validity
            Not Before: Sep 11 23:54:07 2025 GMT
            Not After : Sep 10 23:59:07 2026 GMT
        Subject: CN=0F8EB8B09FC4158B09A5FBBE29DCAF6B491B37BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:a0:67:25:72:42:34:35:b9:0f:e2:61:fd:
                    a9:6f:3a:21:fb:66:3a:47:17:93:32:74:cc:43:96:
                    dc:c8:6f:7f:fc:a7:83:66:47:4f:f5:27:04:99:02:
                    61:d5:70:d9:6d:34:61:f9:c6:9a:fd:ba:98:29:02:
                    0e:6d:d4:62:b9:cc:8c:50:1e:93:60:82:3f:05:76:
                    7e:cb:55:ca:1e:81:1b:f3:82:20:23:40:8f:aa:47:
                    52:6c:26:99:40:a6:fa:e7:5f:ba:1e:bf:c2:8b:ad:
                    8e:24:9e:92:eb:f7:51:be:bd:a7:c5:89:f0:c2:76:
                    f8:1f:1e:ad:80:be:56:26:16:e7:4d:f2:bf:cf:9a:
                    b1:a9:f0:4e:fb:9e:f1:70:e2:60:ca:99:2c:c8:ac:
                    43:f0:84:f0:2c:a5:15:00:05:95:f9:bd:7b:19:e6:
                    8f:70:52:0c:77:a4:6d:5a:c0:89:ad:fd:06:11:49:
                    15:11:c5:bd:4e:10:4a:30:71:bf:59:20:ab:93:bd:
                    73:42:5f:a8:87:d3:b6:c7:ce:66:f4:bc:3b:53:b1:
                    16:59:77:ff:44:ea:da:d4:76:a2:e2:2b:38:ef:f6:
                    c8:ab:93:8e:c4:89:78:22:dd:b1:a6:12:b4:fa:3a:
                    16:47:f1:0f:1a:6e:a4:4d:ff:db:84:4a:b9:4e:6c:
                    df:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8E:B8:B0:9F:C4:15:8B:09:A5:FB:BE:29:DC:AF:6B:49:1B:37:BF
            X509v3 Authority Key Identifier:
                keyid:E8:19:B1:14:30:6E:FF:9E:D6:F0:47:74:A3:7F:03:38:CB:16:44:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/E819B114306EFF9ED6F04774A37F0338CB16445A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E819B114306EFF9ED6F04774A37F0338CB16445A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/323830343a393465383a3a2f33322d3332203d3e20323734343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:94e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:aa:f9:85:58:c7:a0:81:56:0c:1c:02:d7:4e:dc:7e:b7:80:
         64:26:2e:2b:14:d3:8f:da:c1:74:32:0d:21:e5:ea:bf:53:8a:
         5d:97:10:11:c7:67:ef:42:53:e6:b6:6e:0b:f6:e3:2a:d1:7c:
         59:0f:61:55:da:5b:4a:62:81:54:75:13:b5:76:9e:57:63:c0:
         1f:a6:34:08:8d:40:ab:27:e2:8b:2b:b8:f2:1b:7d:06:80:04:
         9e:c9:e5:6e:e9:21:73:74:12:ee:ff:a2:19:ba:2e:dc:a4:95:
         ad:f4:03:07:f2:e8:db:65:51:47:4a:ee:03:15:2a:24:d2:8a:
         4c:7e:f3:28:16:dd:b6:72:d9:11:7e:39:5a:a0:f1:d3:49:19:
         17:bb:7f:03:a5:a0:fd:1f:4b:f0:55:30:18:e1:8c:c1:f0:d0:
         7c:8d:01:43:c9:ca:2e:d1:35:e1:6e:b7:2f:cb:d6:57:95:d5:
         43:2a:cb:7a:4f:ff:b3:eb:76:66:a9:6b:db:e0:d8:6c:d6:93:
         20:a7:7e:d8:7b:26:f9:82:9a:6f:66:46:ec:7b:44:ca:08:0c:
         69:16:f5:a4:d4:84:d9:6b:60:c9:93:0b:97:eb:de:e4:49:76:
         39:3b:f8:79:83:55:3f:69:22:7b:e3:9a:62:bc:77:f7:79:11:
         45:ef:c2:e4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUb0Nu0luLkwU4x0rFjd0pVspiwOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTgxOUIxMTQzMDZFRkY5RUQ2RjA0Nzc0QTM3RjAzMzhD
QjE2NDQ1QTAeFw0yNTA5MTEyMzU0MDdaFw0yNjA5MTAyMzU5MDdaMDMxMTAvBgNV
BAMTKDBGOEVCOEIwOUZDNDE1OEIwOUE1RkJCRTI5RENBRjZCNDkxQjM3QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2sKBnJXJCNDW5D+Jh/alvOiH7
ZjpHF5MydMxDltzIb3/8p4NmR0/1JwSZAmHVcNltNGH5xpr9upgpAg5t1GK5zIxQ
HpNggj8Fdn7LVcoegRvzgiAjQI+qR1JsJplApvrnX7oev8KLrY4knpLr91G+vafF
ifDCdvgfHq2AvlYmFudN8r/PmrGp8E77nvFw4mDKmSzIrEPwhPAspRUABZX5vXsZ
5o9wUgx3pG1awImt/QYRSRURxb1OEEowcb9ZIKuTvXNCX6iH07bHzmb0vDtTsRZZ
d/9E6trUdqLiKzjv9sirk47EiXgi3bGmErT6OhZH8Q8abqRN/9uESrlObN+nAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUD464sJ/EFYsJpfu+Kdyva0kbN78wHwYDVR0j
BBgwFoAU6BmxFDBu/57W8Ed0o38DOMsWRFowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0t6anE2U3lCYVFvM2JEZlBkVlhjNExlWnU1OEtMQVJMODh0VDFwUjdw
OXUvMC9FODE5QjExNDMwNkVGRjlFRDZGMDQ3NzRBMzdGMDMzOENCMTY0NDVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4MTlCMTE0MzA2RUZGOUVE
NkYwNDc3NEEzN0YwMzM4Q0IxNjQ0NUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NLempxNlN5QmFRbzNiRGZQZFZYYzRMZVp1NThLTEFSTDg4dFQxcFI3cDl1LzAv
MzIzODMwMzQzYTM5MzQ2NTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzM0
MzQzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASU6DANBgkqhkiG9w0BAQsFAAOCAQEAWKr5hVjH
oIFWDBwC107cfreAZCYuKxTTj9rBdDINIeXqv1OKXZcQEcdn70JT5rZuC/bjKtF8
WQ9hVdpbSmKBVHUTtXaeV2PAH6Y0CI1Aqyfiiyu48ht9BoAEnsnlbukhc3QS7v+i
Gbou3KSVrfQDB/Lo22VRR0ruAxUqJNKKTH7zKBbdtnLZEX45WqDx00kZF7t/A6Wg
/R9L8FUwGOGMwfDQfI0BQ8nKLtE14W63L8vWV5XVQyrLek//s+t2Zqlr2+DYbNaT
IKd+2Hsm+YKab2ZG7HtEyggMaRb1pNSE2WtgyZMLl+ve5El2OTv4eYNVP2kie+Oa
Yrx393kRRe/C5A==
-----END CERTIFICATE-----
Generated at Thu Sep 18 23:49:54 2025 by rpki-client