Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/323830343a386561303a383030323a3a2f34382d3438203d3e20323733343338.roa
File:                     323830343a386561303a383030323a3a2f34382d3438203d3e20323733343338.roa (raw, json)
Hash identifier:          86t55mVxlcn8HcP7U9xRTX0GlQTobWHgAOnCllWR+R4=
Subject key identifier:   8B:A7:C3:7B:67:A5:36:13:75:8D:0C:FD:32:CF:24:0B:A1:08:3D:59
Certificate issuer:       /CN=78EEB73CE335838F80FE0D32902455D8BEBE7641
Certificate serial:       52671FD44179CFC6458FD02E9678743BA1A402D8
Authority key identifier: 78:EE:B7:3C:E3:35:83:8F:80:FE:0D:32:90:24:55:D8:BE:BE:76:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/323830343a386561303a383030323a3a2f34382d3438203d3e20323733343338.roa
Signing time:             Wed 17 Sep 2025 20:09:01 +0000
ROA not before:           Wed 17 Sep 2025 20:04:01 +0000
ROA not after:            Wed 16 Sep 2026 20:09:01 +0000
asID:                     273438
IP address blocks:        2804:8ea0:8002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.crl
                          rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:67:1f:d4:41:79:cf:c6:45:8f:d0:2e:96:78:74:3b:a1:a4:02:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78EEB73CE335838F80FE0D32902455D8BEBE7641
        Validity
            Not Before: Sep 17 20:04:01 2025 GMT
            Not After : Sep 16 20:09:01 2026 GMT
        Subject: CN=8BA7C37B67A53613758D0CFD32CF240BA1083D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:8b:51:b9:d6:1d:33:65:19:4c:5d:e7:3c:
                    e3:7b:3d:6d:c7:83:e9:87:9c:ec:cc:62:57:91:61:
                    0e:1b:5f:d7:bb:90:45:4a:e5:42:44:2f:93:e2:26:
                    cd:8c:de:e4:65:c4:ab:09:08:62:48:04:76:6c:d3:
                    c0:d8:48:ae:46:f7:bf:ad:bd:b3:5e:e2:c7:3e:6a:
                    22:94:24:5f:2e:e4:58:1f:cf:44:f7:5a:01:20:fe:
                    d6:6e:47:6b:f2:36:9d:46:45:fe:32:cd:ac:31:05:
                    11:6d:1a:32:57:1b:de:5c:7a:47:e9:9c:44:0d:dc:
                    d2:5b:fd:07:c2:54:54:d0:c1:9c:ed:61:ea:e5:42:
                    83:32:f1:29:c8:aa:42:83:83:a0:3d:89:9b:9c:26:
                    a7:82:70:73:b5:32:d2:b3:ad:0b:53:c3:ba:e5:bc:
                    db:92:6b:61:ae:c8:32:ae:0c:5d:33:dd:36:ba:76:
                    19:3c:31:ff:32:c8:cf:24:60:10:47:ad:bb:de:74:
                    e0:94:46:1b:60:1c:ea:d5:41:d7:0a:38:73:dc:3a:
                    8d:93:dd:2e:8f:3c:f4:48:93:ab:ac:21:5e:2e:48:
                    59:e8:91:d5:75:d4:46:51:23:5b:18:8e:79:9c:b8:
                    fd:95:b0:49:1d:08:d4:4e:92:b4:98:a8:47:7e:73:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A7:C3:7B:67:A5:36:13:75:8D:0C:FD:32:CF:24:0B:A1:08:3D:59
            X509v3 Authority Key Identifier:
                keyid:78:EE:B7:3C:E3:35:83:8F:80:FE:0D:32:90:24:55:D8:BE:BE:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78EEB73CE335838F80FE0D32902455D8BEBE7641.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLZXpu5mfvVCDExjb7LPV5ref5HFUPot8ZArPTvD8xKn/1/323830343a386561303a383030323a3a2f34382d3438203d3e20323733343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ea0:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:9f:a3:81:e1:75:2f:d0:a3:f3:ce:3b:31:e9:90:6e:35:0b:
         a8:e9:a3:32:fa:91:a1:86:5f:76:49:f0:67:8c:42:17:f1:86:
         5a:eb:e6:be:10:38:42:ca:54:66:8c:6d:83:a8:df:a2:ff:3b:
         ee:77:e5:41:d2:46:8f:18:3a:fd:57:c4:c8:ca:b4:32:39:40:
         78:ba:db:ff:d4:03:d8:4f:28:1a:93:e3:c9:44:9d:99:06:88:
         35:fc:af:03:6c:b0:86:ad:75:09:48:9a:0a:c8:73:69:47:36:
         7c:be:72:fc:3e:51:ca:45:00:1e:ae:4d:9b:45:0f:37:c3:91:
         3b:2a:61:d7:7d:1f:36:4b:da:d5:0b:9d:20:a5:95:9c:ac:8d:
         9a:89:60:ac:0d:79:be:5e:84:e2:32:32:67:bb:ab:21:01:6a:
         d7:28:0f:8c:ca:31:34:20:1f:dc:29:c7:54:ee:d1:08:45:8d:
         04:c6:a8:ea:04:4a:b2:4f:de:c8:25:25:cc:1d:93:63:9f:94:
         b7:ed:75:3c:45:2f:9e:3c:23:22:e7:1f:0a:09:35:38:70:b8:
         e3:5e:0e:e7:eb:3f:a4:16:00:cc:d8:c7:98:a1:40:43:2e:2b:
         16:48:91:0c:5a:c7:aa:c6:59:25:b2:8c:bb:21:63:52:74:8a:
         00:93:3b:15
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUUmcf1EF5z8ZFj9Aulnh0O6GkAtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhFRUI3M0NFMzM1ODM4RjgwRkUwRDMyOTAyNDU1RDhC
RUJFNzY0MTAeFw0yNTA5MTcyMDA0MDFaFw0yNjA5MTYyMDA5MDFaMDMxMTAvBgNV
BAMTKDhCQTdDMzdCNjdBNTM2MTM3NThEMENGRDMyQ0YyNDBCQTEwODNENTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ3ItRudYdM2UZTF3nPON7PW3H
g+mHnOzMYleRYQ4bX9e7kEVK5UJEL5PiJs2M3uRlxKsJCGJIBHZs08DYSK5G97+t
vbNe4sc+aiKUJF8u5Fgfz0T3WgEg/tZuR2vyNp1GRf4yzawxBRFtGjJXG95cekfp
nEQN3NJb/QfCVFTQwZztYerlQoMy8SnIqkKDg6A9iZucJqeCcHO1MtKzrQtTw7rl
vNuSa2GuyDKuDF0z3Ta6dhk8Mf8yyM8kYBBHrbvedOCURhtgHOrVQdcKOHPcOo2T
3S6PPPRIk6usIV4uSFnokdV11EZRI1sYjnmcuP2VsEkdCNROkrSYqEd+cwU5AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUi6fDe2elNhN1jQz9Ms8kC6EIPVkwHwYDVR0j
BBgwFoAUeO63POM1g4+A/g0ykCRV2L6+dkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRExaWHB1NW1mdlZDREV4amI3TFBWNXJlZjVIRlVQb3Q4WkFyUFR2RDh4
S24vMS83OEVFQjczQ0UzMzU4MzhGODBGRTBEMzI5MDI0NTVEOEJFQkU3NjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4RUVCNzNDRTMzNTgzOEY4
MEZFMEQzMjkwMjQ1NUQ4QkVCRTc2NDEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RMWlhwdTVtZnZWQ0RFeGpiN0xQVjVyZWY1SEZVUG90OFpBclBUdkQ4eEtuLzEv
MzIzODMwMzQzYTM4NjU2MTMwM2EzODMwMzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzczMzM0MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEjqCAAjANBgkqhkiG9w0BAQsF
AAOCAQEAVZ+jgeF1L9Cj8847MemQbjULqOmjMvqRoYZfdknwZ4xCF/GGWuvmvhA4
QspUZoxtg6jfov877nflQdJGjxg6/VfEyMq0MjlAeLrb/9QD2E8oGpPjyUSdmQaI
NfyvA2ywhq11CUiaCshzaUc2fL5y/D5RykUAHq5Nm0UPN8OROyph130fNkva1Qud
IKWVnKyNmolgrA15vl6E4jIyZ7urIQFq1ygPjMoxNCAf3CnHVO7RCEWNBMao6gRK
sk/eyCUlzB2TY5+Ut+11PEUvnjwjIucfCgk1OHC4414O5+s/pBYAzNjHmKFAQy4r
FkiRDFrHqsZZJbKMuyFjUnSKAJM7FQ==
-----END CERTIFICATE-----
Generated at Fri Sep 19 08:12:10 2025 by rpki-client