Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/323830343a373735343a3a2f33322d3335203d3e203631363034.roa
File:                     323830343a373735343a3a2f33322d3335203d3e203631363034.roa (raw, json)
Hash identifier:          cybHf9QO49luNNjaXJahpoGnvXoKtQlpIwLV4QVyW9A=
Subject key identifier:   DE:87:28:7A:A5:00:70:C8:3E:B6:14:E3:50:F4:1A:0E:33:1D:14:6F
Certificate issuer:       /CN=4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D
Certificate serial:       1546E54B3F732AA6810CB90A19BE859378AA32BF
Authority key identifier: 4C:59:5B:73:7E:C6:F6:BB:05:5D:A0:AA:92:C7:7B:32:CB:CA:5A:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/323830343a373735343a3a2f33322d3335203d3e203631363034.roa
Signing time:             Thu 18 Sep 2025 02:06:18 +0000
ROA not before:           Thu 18 Sep 2025 02:01:18 +0000
ROA not after:            Thu 17 Sep 2026 02:06:18 +0000
asID:                     61604
IP address blocks:        2804:7754::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D.crl
                          rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 16:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:46:e5:4b:3f:73:2a:a6:81:0c:b9:0a:19:be:85:93:78:aa:32:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D
        Validity
            Not Before: Sep 18 02:01:18 2025 GMT
            Not After : Sep 17 02:06:18 2026 GMT
        Subject: CN=DE87287AA50070C83EB614E350F41A0E331D146F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d7:c8:d3:3f:f2:22:ca:aa:b4:7a:92:50:63:
                    07:c1:ae:54:6b:79:68:0b:7c:ae:86:ba:a3:2d:4b:
                    32:c2:59:ad:7f:76:af:60:58:c7:39:23:2d:58:9d:
                    80:08:d2:e1:4a:39:18:7c:ab:e6:80:ea:f6:ae:c3:
                    25:d5:01:28:44:1a:61:dd:a0:b6:ba:d1:49:db:c1:
                    23:a6:09:18:2d:f2:c1:76:64:0e:c7:0b:7f:0c:c3:
                    60:d2:72:83:82:19:24:76:2c:2a:c8:b1:bd:82:1f:
                    fa:7a:41:6f:4e:a5:86:f1:6b:7b:a6:5e:6b:45:9b:
                    dd:76:c7:81:a7:5f:52:2a:41:3c:ce:4d:d2:05:20:
                    d1:93:6c:39:57:17:08:79:d9:3f:82:24:74:75:de:
                    00:41:75:e7:2a:d0:2c:f8:03:af:04:90:7a:b9:f4:
                    bb:6d:6f:95:23:89:59:ff:83:7b:b5:17:38:ab:0c:
                    d0:13:3b:f2:8c:ee:87:20:3e:36:8b:24:86:b4:57:
                    a9:c6:21:aa:2c:79:c9:31:82:6b:78:13:ef:aa:60:
                    6c:70:a9:93:b8:8e:82:af:b3:48:0c:d3:ae:4b:d6:
                    d2:ac:ca:f1:e9:33:1f:d3:ad:3d:7e:7e:4c:7c:a1:
                    82:eb:ae:e7:e1:2e:1d:9e:8e:cb:8d:40:aa:de:70:
                    9b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:87:28:7A:A5:00:70:C8:3E:B6:14:E3:50:F4:1A:0E:33:1D:14:6F
            X509v3 Authority Key Identifier:
                keyid:4C:59:5B:73:7E:C6:F6:BB:05:5D:A0:AA:92:C7:7B:32:CB:CA:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C595B737EC6F6BB055DA0AA92C77B32CBCA5A8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/323830343a373735343a3a2f33322d3335203d3e203631363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7754::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:90:f2:16:a5:37:32:8e:c6:cb:ee:61:ca:6f:1b:df:ae:86:
         39:87:eb:c2:19:b8:7e:f5:eb:d6:69:7a:97:0c:1c:c7:5b:59:
         bc:cc:85:0b:ee:23:53:41:2c:74:2a:95:ea:60:b8:cc:db:dc:
         06:2f:2d:64:ea:0b:90:39:4d:9e:0f:04:9f:31:4d:1b:ff:0e:
         a1:37:23:f7:96:a4:61:e0:ee:2e:c7:cc:21:a7:44:2d:71:38:
         fc:76:a4:f6:00:48:4d:dd:d8:5a:13:3e:85:ef:63:83:cf:73:
         01:de:48:fa:ff:6c:6d:f1:6a:50:38:ca:28:a0:92:e3:98:22:
         8a:93:9c:8d:8b:f9:2d:cb:a4:b0:ff:ae:9e:4d:82:8d:49:a9:
         e0:18:73:8f:ad:5d:8f:6e:41:82:63:c0:47:4f:75:ce:48:a7:
         2a:80:1e:e1:b3:51:0f:7e:13:1d:74:87:98:10:7e:bc:5d:25:
         b5:f6:88:0a:08:87:80:3c:b7:3d:ec:83:6c:a3:99:6d:e7:82:
         31:6b:bd:6d:9d:f6:02:30:26:c1:b6:06:64:20:bf:ce:42:ab:
         0f:fc:99:28:19:8c:90:ad:fb:d6:fc:03:cf:88:ac:65:f4:df:
         26:d0:93:93:57:92:b4:e9:f9:77:5c:f6:50:3e:1f:c5:9a:f3:
         17:62:57:0b
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUFUblSz9zKqaBDLkKGb6Fk3iqMr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM1OTVCNzM3RUM2RjZCQjA1NURBMEFBOTJDNzdCMzJD
QkNBNUE4RDAeFw0yNTA5MTgwMjAxMThaFw0yNjA5MTcwMjA2MThaMDMxMTAvBgNV
BAMTKERFODcyODdBQTUwMDcwQzgzRUI2MTRFMzUwRjQxQTBFMzMxRDE0NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk18jTP/Iiyqq0epJQYwfBrlRr
eWgLfK6GuqMtSzLCWa1/dq9gWMc5Iy1YnYAI0uFKORh8q+aA6vauwyXVAShEGmHd
oLa60UnbwSOmCRgt8sF2ZA7HC38Mw2DScoOCGSR2LCrIsb2CH/p6QW9OpYbxa3um
XmtFm912x4GnX1IqQTzOTdIFINGTbDlXFwh52T+CJHR13gBBdecq0Cz4A68EkHq5
9Lttb5UjiVn/g3u1FzirDNATO/KM7ocgPjaLJIa0V6nGIaoseckxgmt4E++qYGxw
qZO4joKvs0gM065L1tKsyvHpMx/TrT1+fkx8oYLrrufhLh2ejsuNQKrecJuZAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU3ocoeqUAcMg+thTjUPQaDjMdFG8wHwYDVR0j
BBgwFoAUTFlbc37G9rsFXaCqksd7MsvKWo0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFFkNHE3QnBzdGNMTG1Ma2FyQ1lLYURXZXU5Q3BuU3dZV2JhQnNORVZS
TGcvMC80QzU5NUI3MzdFQzZGNkJCMDU1REEwQUE5MkM3N0IzMkNCQ0E1QThELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDNTk1QjczN0VDNkY2QkIw
NTVEQTBBQTkyQzc3QjMyQ0JDQTVBOEQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RRZDRxN0Jwc3RjTExtTGthckNZS2FEV2V1OUNwblN3WVdiYUJzTkVWUkxnLzAv
MzIzODMwMzQzYTM3MzczNTM0M2EzYTJmMzMzMjJkMzMzNTIwM2QzZTIwMzYzMTM2
MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEd1QwDQYJKoZIhvcNAQELBQADggEBAHaQ8halNzKO
xsvuYcpvG9+uhjmH68IZuH7169ZpepcMHMdbWbzMhQvuI1NBLHQqlepguMzb3AYv
LWTqC5A5TZ4PBJ8xTRv/DqE3I/eWpGHg7i7HzCGnRC1xOPx2pPYASE3d2FoTPoXv
Y4PPcwHeSPr/bG3xalA4yiigkuOYIoqTnI2L+S3LpLD/rp5Ngo1JqeAYc4+tXY9u
QYJjwEdPdc5IpyqAHuGzUQ9+Ex10h5gQfrxdJbX2iAoIh4A8tz3sg2yjmW3ngjFr
vW2d9gIwJsG2BmQgv85Cqw/8mSgZjJCt+9b8A8+IrGX03ybQk5NXkrTp+Xdc9lA+
H8Wa8xdiVws=
-----END CERTIFICATE-----
Generated at Fri Sep 19 18:10:36 2025 by rpki-client