Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a383030303a3a2f33342d3334203d3e20323731333538.roa
File:                     323830343a376134303a383030303a3a2f33342d3334203d3e20323731333538.roa (raw, json)
Hash identifier:          yqTaG5CnDGrclidPcwDrKLxCoAJcw0IKyPSG/5IUo/E=
Subject key identifier:   EF:54:5D:01:23:29:74:02:9E:ED:A0:73:FA:76:50:94:CA:CA:4E:B0
Certificate issuer:       /CN=9EE45671B244BF73463D23EF8E56E13CE6A19A84
Certificate serial:       51879EA94D8F4B14C87C408873E523B249E5B331
Authority key identifier: 9E:E4:56:71:B2:44:BF:73:46:3D:23:EF:8E:56:E1:3C:E6:A1:9A:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a383030303a3a2f33342d3334203d3e20323731333538.roa
Signing time:             Mon 28 Jul 2025 20:27:57 +0000
ROA not before:           Mon 28 Jul 2025 20:22:57 +0000
ROA not after:            Mon 27 Jul 2026 20:27:57 +0000
asID:                     271358
IP address blocks:        2804:7a40:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.crl
                          rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 18:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:87:9e:a9:4d:8f:4b:14:c8:7c:40:88:73:e5:23:b2:49:e5:b3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE45671B244BF73463D23EF8E56E13CE6A19A84
        Validity
            Not Before: Jul 28 20:22:57 2025 GMT
            Not After : Jul 27 20:27:57 2026 GMT
        Subject: CN=EF545D01232974029EEDA073FA765094CACA4EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:f4:c9:19:88:5f:96:fb:0a:4e:e8:b4:28:
                    da:85:cc:56:a0:ee:6e:c0:4e:75:8a:05:27:dc:82:
                    70:fa:e8:c9:80:d4:06:d1:cd:93:d0:0a:7b:d8:fd:
                    17:18:3a:6c:19:87:ce:af:78:6e:18:c1:f8:af:5f:
                    51:db:68:c5:2e:37:41:4e:92:dc:51:3e:e3:25:93:
                    6a:1c:50:fe:d2:70:2b:12:26:5b:a8:eb:81:7b:bd:
                    0e:29:cf:f6:62:b0:31:c6:d2:53:11:b5:33:5b:23:
                    d7:95:cc:7b:06:88:4f:b5:17:86:e1:b5:d8:53:04:
                    bb:d4:ad:d0:5f:d6:9f:64:17:86:3d:80:eb:44:74:
                    14:e3:66:9e:f5:dc:f4:3e:e7:eb:97:f4:65:b3:17:
                    30:f5:de:75:a0:23:35:55:b6:9e:cb:7e:95:67:07:
                    3e:76:28:75:82:bc:f4:e2:15:67:35:d0:80:6b:c2:
                    1a:26:6b:45:46:6f:4c:95:9c:37:9b:f0:46:73:88:
                    2c:82:64:39:c5:a0:09:ac:b7:ab:87:e3:a5:1b:6b:
                    37:03:4a:5e:22:94:95:1c:f9:66:d8:9f:5f:30:50:
                    b4:bf:76:d2:0d:be:a6:27:2a:95:74:29:07:26:ac:
                    08:70:59:6f:9c:f0:1c:08:71:75:43:d8:91:87:08:
                    77:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:54:5D:01:23:29:74:02:9E:ED:A0:73:FA:76:50:94:CA:CA:4E:B0
            X509v3 Authority Key Identifier:
                keyid:9E:E4:56:71:B2:44:BF:73:46:3D:23:EF:8E:56:E1:3C:E6:A1:9A:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a383030303a3a2f33342d3334203d3e20323731333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a40:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         69:e2:89:04:c7:c8:61:e7:1a:74:1f:a3:20:09:f6:e8:f7:1a:
         a0:23:4e:73:91:f7:c0:06:f7:5e:03:84:c0:75:7f:cf:31:a7:
         90:5a:67:f6:5a:90:03:7c:02:2e:68:a3:68:81:c8:54:da:a5:
         2b:76:b6:96:17:cf:b3:83:d8:62:d2:a5:79:84:fd:59:d4:6a:
         71:a9:ba:c6:41:d4:11:27:a7:01:b0:3f:6c:47:d5:64:ef:e7:
         38:42:34:13:2e:92:8e:ae:16:dd:1d:a4:df:7c:cd:3b:1e:9b:
         91:ae:0a:c0:3b:38:1c:41:33:da:84:da:88:08:db:02:20:5f:
         d2:66:06:5e:bd:94:9c:5f:ab:3e:0e:9f:60:f1:02:ce:e3:80:
         18:8c:e5:8c:71:b7:88:e6:89:64:09:a9:d0:a4:79:5e:67:3e:
         bc:25:01:c9:9e:85:28:2a:3a:9d:8e:5d:fe:60:70:4e:95:57:
         94:fb:84:63:aa:bf:f3:3e:69:d4:9b:4e:cb:f8:ec:22:87:1a:
         6f:86:f8:73:f6:ca:02:11:8e:4c:1e:97:af:20:6d:4e:44:11:
         1b:83:1a:ba:7f:c2:1b:86:42:0e:cf:b3:70:a7:25:68:90:01:
         b6:6a:f8:b2:4d:fb:d7:4d:fb:8f:31:0c:78:4a:f7:18:64:19:
         69:59:c0:78
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUUYeeqU2PSxTIfECIc+UjsknlszEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVFNDU2NzFCMjQ0QkY3MzQ2M0QyM0VGOEU1NkUxM0NF
NkExOUE4NDAeFw0yNTA3MjgyMDIyNTdaFw0yNjA3MjcyMDI3NTdaMDMxMTAvBgNV
BAMTKEVGNTQ1RDAxMjMyOTc0MDI5RUVEQTA3M0ZBNzY1MDk0Q0FDQTRFQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPPvTJGYhflvsKTui0KNqFzFag
7m7ATnWKBSfcgnD66MmA1AbRzZPQCnvY/RcYOmwZh86veG4YwfivX1HbaMUuN0FO
ktxRPuMlk2ocUP7ScCsSJluo64F7vQ4pz/ZisDHG0lMRtTNbI9eVzHsGiE+1F4bh
tdhTBLvUrdBf1p9kF4Y9gOtEdBTjZp713PQ+5+uX9GWzFzD13nWgIzVVtp7LfpVn
Bz52KHWCvPTiFWc10IBrwhoma0VGb0yVnDeb8EZziCyCZDnFoAmst6uH46UbazcD
Sl4ilJUc+WbYn18wULS/dtINvqYnKpV0KQcmrAhwWW+c8BwIcXVD2JGHCHeHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU71RdASMpdAKe7aBz+nZQlMrKTrAwHwYDVR0j
BBgwFoAUnuRWcbJEv3NGPSPvjlbhPOahmoQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGl0b0xnUlhlQkNNcWFOTWRDV3A4dGoxa3BaOTRGa1dUaE5Ma2ZHZkV0
YXQvMC85RUU0NTY3MUIyNDRCRjczNDYzRDIzRUY4RTU2RTEzQ0U2QTE5QTg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFRTQ1NjcxQjI0NEJGNzM0
NjNEMjNFRjhFNTZFMTNDRTZBMTlBODQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpdG9MZ1JYZUJDTXFhTk1kQ1dwOHRqMWtwWjk0RmtXVGhOTGtmR2ZFdGF0LzAv
MzIzODMwMzQzYTM3NjEzNDMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMTMzMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEekCAMA0GCSqGSIb3DQEBCwUA
A4IBAQBp4okEx8hh5xp0H6MgCfbo9xqgI05zkffABvdeA4TAdX/PMaeQWmf2WpAD
fAIuaKNogchU2qUrdraWF8+zg9hi0qV5hP1Z1GpxqbrGQdQRJ6cBsD9sR9Vk7+c4
QjQTLpKOrhbdHaTffM07HpuRrgrAOzgcQTPahNqICNsCIF/SZgZevZScX6s+Dp9g
8QLO44AYjOWMcbeI5olkCanQpHleZz68JQHJnoUoKjqdjl3+YHBOlVeU+4Rjqr/z
PmnUm07L+Owihxpvhvhz9soCEY5MHpevIG1ORBEbgxq6f8IbhkIOz7NwpyVokAG2
aviyTfvXTfuPMQx4SvcYZBlpWcB4
-----END CERTIFICATE-----
Generated at Wed Jul 30 05:55:55 2025 by rpki-client