Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a633030303a3a2f33342d3334203d3e20323731333538.roa
File:                     323830343a376134303a633030303a3a2f33342d3334203d3e20323731333538.roa (raw, json)
Hash identifier:          pjZdAHFc5tZ7XtZL2n6YkWEC8g4Jg+X2QrV1JhSmBAw=
Subject key identifier:   5E:2E:DD:0E:2B:92:01:E0:9E:E8:86:87:B6:D9:E6:F8:47:8C:9E:11
Certificate issuer:       /CN=9EE45671B244BF73463D23EF8E56E13CE6A19A84
Certificate serial:       63A99ADED47063761D0431A71874938867033F32
Authority key identifier: 9E:E4:56:71:B2:44:BF:73:46:3D:23:EF:8E:56:E1:3C:E6:A1:9A:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a633030303a3a2f33342d3334203d3e20323731333538.roa
Signing time:             Mon 28 Jul 2025 20:27:58 +0000
ROA not before:           Mon 28 Jul 2025 20:22:58 +0000
ROA not after:            Mon 27 Jul 2026 20:27:58 +0000
asID:                     271358
IP address blocks:        2804:7a40:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.crl
                          rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 22:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a9:9a:de:d4:70:63:76:1d:04:31:a7:18:74:93:88:67:03:3f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE45671B244BF73463D23EF8E56E13CE6A19A84
        Validity
            Not Before: Jul 28 20:22:58 2025 GMT
            Not After : Jul 27 20:27:58 2026 GMT
        Subject: CN=5E2EDD0E2B9201E09EE88687B6D9E6F8478C9E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:22:04:e3:b1:2c:83:2b:11:b5:62:fb:62:07:
                    9b:17:0b:72:e7:04:47:73:ea:19:0f:09:65:64:ae:
                    54:48:fa:9c:b0:96:d0:9f:32:c0:12:70:ef:56:9d:
                    06:4c:ad:e3:62:f2:8a:96:2b:69:bd:65:83:59:55:
                    e1:47:46:3d:2d:48:56:88:b5:97:43:e5:47:10:d0:
                    bb:af:c3:a3:2d:c2:a5:b7:8b:13:07:51:59:5f:53:
                    48:51:de:dc:a0:4b:6e:ad:ba:cd:48:cb:18:2e:df:
                    8a:30:c2:b0:a0:09:ed:eb:4f:eb:89:41:1b:c7:4a:
                    b0:83:b0:ba:ea:99:e8:90:a0:4d:7a:be:84:21:bf:
                    40:a1:b5:5e:1d:d6:b8:21:60:70:58:f0:15:f5:dd:
                    97:72:5c:0b:95:91:a6:c0:51:cc:8f:09:25:21:cc:
                    f2:58:30:42:78:f8:54:71:6a:87:24:1e:2c:ee:0b:
                    6f:43:b2:1d:d2:37:90:bf:d3:8a:23:14:e0:0b:56:
                    5d:af:c6:67:85:52:11:92:72:17:ec:1b:c4:07:34:
                    03:35:0e:0b:07:32:bb:8c:6b:66:ad:f2:4e:21:83:
                    46:a8:dc:85:eb:b5:dc:3f:06:79:19:ab:6b:a7:40:
                    54:e7:0f:c7:a5:10:4d:ad:26:78:d8:d7:f2:01:68:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2E:DD:0E:2B:92:01:E0:9E:E8:86:87:B6:D9:E6:F8:47:8C:9E:11
            X509v3 Authority Key Identifier:
                keyid:9E:E4:56:71:B2:44:BF:73:46:3D:23:EF:8E:56:E1:3C:E6:A1:9A:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a633030303a3a2f33342d3334203d3e20323731333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a40:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:da:13:cc:68:b8:02:69:c4:27:e3:e4:9e:2a:a4:e3:fb:2e:
         76:d1:99:17:15:14:84:78:c9:44:4a:77:d8:0e:5a:66:e2:06:
         90:e0:c7:8c:b2:18:3e:65:13:a5:75:76:9a:a8:74:de:0e:a4:
         7f:f7:18:3c:57:e0:a4:2d:22:8a:c6:ed:4c:f2:f7:aa:9c:29:
         97:6c:3a:73:cf:a0:65:80:84:45:22:8f:ad:90:5c:18:6c:2d:
         c4:dd:0a:45:69:5d:0d:c7:a6:c9:52:6c:1b:7e:92:33:67:3a:
         1f:02:cd:46:d2:41:22:13:5b:32:c2:17:e3:49:a5:4a:8d:b8:
         26:e4:58:76:92:73:6d:77:46:aa:a7:de:1c:a4:19:16:64:e5:
         a0:95:d6:f1:9c:84:2f:56:1e:c3:65:de:37:95:81:b8:de:89:
         6b:de:5a:95:12:ce:c0:d1:57:f7:51:8c:2b:aa:c5:3b:ae:26:
         66:18:5a:42:c4:f7:d9:fb:bf:29:19:df:b8:e9:e1:b9:70:73:
         78:b1:99:54:00:14:28:02:0a:d1:e6:e7:62:8f:dd:00:db:bf:
         fa:b1:ad:b9:b1:e2:c0:a2:e6:54:48:22:15:be:f1:4f:31:58:
         3b:e8:8f:8f:0e:60:1c:bb:f5:e8:3a:dc:4e:6c:5f:b1:62:d9:
         ec:67:58:21
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUY6ma3tRwY3YdBDGnGHSTiGcDPzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVFNDU2NzFCMjQ0QkY3MzQ2M0QyM0VGOEU1NkUxM0NF
NkExOUE4NDAeFw0yNTA3MjgyMDIyNThaFw0yNjA3MjcyMDI3NThaMDMxMTAvBgNV
BAMTKDVFMkVERDBFMkI5MjAxRTA5RUU4ODY4N0I2RDlFNkY4NDc4QzlFMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVIgTjsSyDKxG1YvtiB5sXC3Ln
BEdz6hkPCWVkrlRI+pywltCfMsAScO9WnQZMreNi8oqWK2m9ZYNZVeFHRj0tSFaI
tZdD5UcQ0Luvw6MtwqW3ixMHUVlfU0hR3tygS26tus1Iyxgu34owwrCgCe3rT+uJ
QRvHSrCDsLrqmeiQoE16voQhv0ChtV4d1rghYHBY8BX13ZdyXAuVkabAUcyPCSUh
zPJYMEJ4+FRxaockHizuC29Dsh3SN5C/04ojFOALVl2vxmeFUhGSchfsG8QHNAM1
DgsHMruMa2at8k4hg0ao3IXrtdw/BnkZq2unQFTnD8elEE2tJnjY1/IBaIaJAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUXi7dDiuSAeCe6IaHttnm+EeMnhEwHwYDVR0j
BBgwFoAUnuRWcbJEv3NGPSPvjlbhPOahmoQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGl0b0xnUlhlQkNNcWFOTWRDV3A4dGoxa3BaOTRGa1dUaE5Ma2ZHZkV0
YXQvMC85RUU0NTY3MUIyNDRCRjczNDYzRDIzRUY4RTU2RTEzQ0U2QTE5QTg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFRTQ1NjcxQjI0NEJGNzM0
NjNEMjNFRjhFNTZFMTNDRTZBMTlBODQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpdG9MZ1JYZUJDTXFhTk1kQ1dwOHRqMWtwWjk0RmtXVGhOTGtmR2ZFdGF0LzAv
MzIzODMwMzQzYTM3NjEzNDMwM2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMTMzMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEekDAMA0GCSqGSIb3DQEBCwUA
A4IBAQBT2hPMaLgCacQn4+SeKqTj+y520ZkXFRSEeMlESnfYDlpm4gaQ4MeMshg+
ZROldXaaqHTeDqR/9xg8V+CkLSKKxu1M8veqnCmXbDpzz6BlgIRFIo+tkFwYbC3E
3QpFaV0Nx6bJUmwbfpIzZzofAs1G0kEiE1sywhfjSaVKjbgm5Fh2knNtd0aqp94c
pBkWZOWgldbxnIQvVh7DZd43lYG43olr3lqVEs7A0Vf3UYwrqsU7riZmGFpCxPfZ
+78pGd+46eG5cHN4sZlUABQoAgrR5udij90A27/6sa25seLAouZUSCIVvvFPMVg7
6I+PDmAcu/XoOtxObF+xYtnsZ1gh
-----END CERTIFICATE-----
Generated at Tue Jul 29 00:14:41 2025 by rpki-client