Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/323830343a3265343a3a2f33322d3438203d3e203533323334.roa
File:                     323830343a3265343a3a2f33322d3438203d3e203533323334.roa (raw, json)
Hash identifier:          4y75WrPTrxC3DwpGL9SbT1HsU6Eb97/6ZwqA//FpiEU=
Subject key identifier:   57:B9:72:5B:AD:C6:C0:3C:32:9C:77:E8:CA:97:40:A1:6A:7E:44:85
Certificate issuer:       /CN=9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985
Certificate serial:       7594C2F193DD8B4A6D123631F0DF01DC8B40E260
Authority key identifier: 9E:6A:13:08:7D:3A:BE:7F:80:F3:2B:82:AB:7B:ED:B9:DE:C9:E9:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/323830343a3265343a3a2f33322d3438203d3e203533323334.roa
Signing time:             Tue 16 Sep 2025 15:53:47 +0000
ROA not before:           Tue 16 Sep 2025 15:48:47 +0000
ROA not after:            Tue 15 Sep 2026 15:53:47 +0000
asID:                     53234
IP address blocks:        2804:2e4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.crl
                          rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:94:c2:f1:93:dd:8b:4a:6d:12:36:31:f0:df:01:dc:8b:40:e2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985
        Validity
            Not Before: Sep 16 15:48:47 2025 GMT
            Not After : Sep 15 15:53:47 2026 GMT
        Subject: CN=57B9725BADC6C03C329C77E8CA9740A16A7E4485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0d:13:67:08:5d:56:a8:75:1a:e6:fd:02:89:
                    79:b6:58:aa:dc:f7:76:9a:41:80:8b:32:43:39:46:
                    d7:25:e2:b3:a2:ae:8c:66:7b:99:c3:6c:56:5d:b3:
                    21:0d:44:8d:5a:62:58:ff:85:69:2b:da:bc:ea:ca:
                    e4:5b:9a:13:3f:5e:ad:fa:e4:8a:0b:2a:eb:0b:49:
                    f2:03:8a:3d:12:c6:7a:81:07:ee:20:e8:a0:9e:45:
                    b1:14:9d:db:f3:c9:27:0f:07:e9:52:53:91:6a:37:
                    34:bb:14:17:e8:38:50:2b:18:c0:9a:64:e4:ad:30:
                    48:30:62:a2:1c:3c:66:d3:79:67:4e:3d:07:31:18:
                    97:1e:7f:92:fb:78:5f:67:9d:36:fd:a3:44:83:3b:
                    75:ca:a1:dd:fd:32:6a:51:af:0d:94:ad:46:1a:87:
                    d4:9f:62:f6:9c:a5:7e:db:1c:29:45:a8:ba:29:4e:
                    64:d9:68:85:92:d1:d2:94:1e:f5:c0:ca:35:06:59:
                    ad:9d:35:90:0d:2b:80:5a:ea:c3:b8:fb:38:e0:7c:
                    94:50:00:d6:05:7a:5e:43:50:dc:63:07:e5:ef:32:
                    82:94:a9:77:3c:b7:e4:4d:5b:e4:f1:44:f6:fe:7f:
                    79:0d:eb:39:ad:8d:25:50:3d:db:f5:2f:6c:bb:8d:
                    9c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B9:72:5B:AD:C6:C0:3C:32:9C:77:E8:CA:97:40:A1:6A:7E:44:85
            X509v3 Authority Key Identifier:
                keyid:9E:6A:13:08:7D:3A:BE:7F:80:F3:2B:82:AB:7B:ED:B9:DE:C9:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E6A13087D3ABE7F80F32B82AB7BEDB9DEC9E985.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJofFfkQ8w1rACmxSk2DiV3k1H4ZhR5JcsnKuPY5YHuW/0/323830343a3265343a3a2f33322d3438203d3e203533323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:04:30:d0:33:68:c7:33:e0:bd:02:22:1d:e2:ae:26:04:3d:
         e3:d9:b9:57:df:e2:5c:d0:4a:a2:e3:ab:11:f8:68:fc:93:c6:
         31:fe:00:8f:d4:2e:7a:80:e0:c7:8f:a1:44:9d:0c:0c:3a:27:
         df:c0:ba:88:60:20:9a:41:61:ac:3f:7e:5b:32:f5:94:dd:a7:
         2f:ac:e0:b4:87:a6:4a:7f:5b:20:6a:62:25:8e:4f:ea:d7:ba:
         a1:68:2b:a3:d4:0b:a9:3d:57:20:1b:12:a0:76:c9:d2:28:ff:
         b8:e5:30:be:f0:94:b0:52:d4:43:3d:c1:2d:69:b3:dd:61:83:
         19:f8:65:c2:89:c4:07:6f:c2:28:85:9b:84:e5:73:fe:eb:72:
         58:23:ac:51:19:10:ae:9b:fc:98:a0:27:b7:33:68:ed:8b:a6:
         0f:d4:cd:46:eb:75:af:3d:c6:50:10:80:5b:49:f0:42:55:da:
         6b:96:3e:c8:9d:49:6d:4e:6c:a1:6b:50:7b:52:e6:54:fc:09:
         11:02:00:f4:51:ed:fb:6e:b3:35:76:4f:d1:2c:c2:31:5e:a9:
         e7:7c:d4:11:e9:07:86:0b:5b:77:84:70:d3:24:c5:6d:fc:05:
         e6:7e:22:cb:79:cc:2c:15:a5:bb:e0:fe:c3:9b:14:ef:f9:dc:
         8b:0e:55:90
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUdZTC8ZPdi0ptEjYx8N8B3ItA4mAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU2QTEzMDg3RDNBQkU3RjgwRjMyQjgyQUI3QkVEQjlE
RUM5RTk4NTAeFw0yNTA5MTYxNTQ4NDdaFw0yNjA5MTUxNTUzNDdaMDMxMTAvBgNV
BAMTKDU3Qjk3MjVCQURDNkMwM0MzMjlDNzdFOENBOTc0MEExNkE3RTQ0ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnDRNnCF1WqHUa5v0CiXm2WKrc
93aaQYCLMkM5Rtcl4rOiroxme5nDbFZdsyENRI1aYlj/hWkr2rzqyuRbmhM/Xq36
5IoLKusLSfIDij0SxnqBB+4g6KCeRbEUndvzyScPB+lSU5FqNzS7FBfoOFArGMCa
ZOStMEgwYqIcPGbTeWdOPQcxGJcef5L7eF9nnTb9o0SDO3XKod39MmpRrw2UrUYa
h9SfYvacpX7bHClFqLopTmTZaIWS0dKUHvXAyjUGWa2dNZANK4Ba6sO4+zjgfJRQ
ANYFel5DUNxjB+XvMoKUqXc8t+RNW+TxRPb+f3kN6zmtjSVQPdv1L2y7jZytAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUV7lyW63GwDwynHfoypdAoWp+RIUwHwYDVR0j
BBgwFoAUnmoTCH06vn+A8yuCq3vtud7J6YUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUpvZkZma1E4dzFyQUNteFNrMkRpVjNrMUg0WmhSNUpjc25LdVBZNVlI
dVcvMC85RTZBMTMwODdEM0FCRTdGODBGMzJCODJBQjdCRURCOURFQzlFOTg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFNkExMzA4N0QzQUJFN0Y4
MEYzMkI4MkFCN0JFREI5REVDOUU5ODUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VKb2ZGZmtROHcxckFDbXhTazJEaVYzazFINFpoUjVKY3NuS3VQWTVZSHVXLzAv
MzIzODMwMzQzYTMyNjUzNDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM1MzMzMjMz
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBALkMA0GCSqGSIb3DQEBCwUAA4IBAQA/BDDQM2jHM+C9
AiId4q4mBD3j2blX3+Jc0Eqi46sR+Gj8k8Yx/gCP1C56gODHj6FEnQwMOiffwLqI
YCCaQWGsP35bMvWU3acvrOC0h6ZKf1sgamIljk/q17qhaCuj1AupPVcgGxKgdsnS
KP+45TC+8JSwUtRDPcEtabPdYYMZ+GXCicQHb8IohZuE5XP+63JYI6xRGRCum/yY
oCe3M2jti6YP1M1G63WvPcZQEIBbSfBCVdprlj7InUltTmyha1B7UuZU/AkRAgD0
Ue37brM1dk/RLMIxXqnnfNQR6QeGC1t3hHDTJMVt/AXmfiLLecwsFaW74P7DmxTv
+dyLDlWQ
-----END CERTIFICATE-----
Generated at Sat Sep 20 06:21:09 2025 by rpki-client