Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a313030303a3a2f34302d3430203d3e203238313238.roa
File:                     323830343a333435383a313030303a3a2f34302d3430203d3e203238313238.roa (raw, json)
Hash identifier:          LiykGPUTAXAtqHQBmf9EXBAm3JXKiu9m+ZUFdDClkgI=
Subject key identifier:   D2:7B:6C:98:7C:61:6D:A8:0A:34:BF:8D:07:DE:7A:04:76:C0:96:D1
Certificate issuer:       /CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
Certificate serial:       4A265008A2EBD910AC47930EF7A897FC07805B43
Authority key identifier: 06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a313030303a3a2f34302d3430203d3e203238313238.roa
Signing time:             Fri 12 Sep 2025 14:32:32 +0000
ROA not before:           Fri 12 Sep 2025 14:27:32 +0000
ROA not after:            Fri 11 Sep 2026 14:32:32 +0000
asID:                     28128
IP address blocks:        2804:3458:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl
                          rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 11:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:26:50:08:a2:eb:d9:10:ac:47:93:0e:f7:a8:97:fc:07:80:5b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061B914BC0C6CDA6D37C2CB0708F7F728F9C5272
        Validity
            Not Before: Sep 12 14:27:32 2025 GMT
            Not After : Sep 11 14:32:32 2026 GMT
        Subject: CN=D27B6C987C616DA80A34BF8D07DE7A0476C096D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:d4:2c:77:5c:48:cb:b6:a4:83:5c:2f:19:
                    76:cd:44:3c:4f:30:6c:92:dd:f9:6f:b8:7d:15:96:
                    73:e1:02:2c:ff:e9:de:ce:21:9d:ac:33:14:b5:7a:
                    52:05:5e:de:5e:31:c1:bf:4d:b8:43:a8:ba:01:88:
                    d0:ed:c4:95:6e:eb:aa:6f:cf:86:52:39:c8:1e:42:
                    5d:23:1e:a0:d9:87:3c:44:b2:2c:3e:fa:4d:e0:0a:
                    ae:07:4e:00:d4:33:5e:0e:bc:77:0d:62:cd:3c:39:
                    e3:bc:0a:ca:16:5d:e7:0e:e6:fa:a4:7c:38:f3:db:
                    ff:5e:4a:c6:4c:9b:61:19:25:f8:49:2b:f9:f9:b1:
                    b8:4e:8a:25:d7:d6:89:ae:15:65:6d:57:4b:98:58:
                    96:d1:60:d6:1b:76:db:88:5f:86:dd:ce:5c:68:94:
                    f3:da:8a:d9:ff:03:bb:33:54:79:89:ca:c4:c3:7d:
                    04:b3:19:11:e2:23:29:8f:0e:18:b5:a1:3f:7d:d3:
                    43:d9:c2:9d:5c:d5:7e:8d:8f:21:34:fb:3f:bb:b3:
                    33:53:25:fd:85:22:60:92:38:fc:6e:8d:0f:2d:ba:
                    fc:35:73:89:17:ce:b1:cc:b7:cc:c9:b4:e7:0c:13:
                    5e:ad:e6:8e:e9:84:22:3f:ae:a7:cc:a4:37:a1:15:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7B:6C:98:7C:61:6D:A8:0A:34:BF:8D:07:DE:7A:04:76:C0:96:D1
            X509v3 Authority Key Identifier:
                keyid:06:1B:91:4B:C0:C6:CD:A6:D3:7C:2C:B0:70:8F:7F:72:8F:9C:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/061B914BC0C6CDA6D37C2CB0708F7F728F9C5272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/323830343a333435383a313030303a3a2f34302d3430203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3458:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:28:45:e2:71:e6:43:9a:c2:b8:2c:8a:25:ab:57:c5:02:69:
         72:56:04:34:dd:4b:f0:9f:90:5d:4a:07:94:c7:05:91:bf:d7:
         3f:d3:c7:4e:c1:80:8a:54:d6:b5:14:71:ac:63:22:14:67:7d:
         59:0b:92:45:c2:9d:fb:41:a0:32:de:b8:44:23:4a:ab:7e:57:
         eb:8c:df:7c:dd:1c:dd:3d:15:11:80:57:ed:60:ba:30:56:53:
         75:2c:cd:c7:d9:61:14:62:79:5f:d2:86:ce:69:a5:97:aa:7f:
         9e:9c:eb:8f:05:e5:7c:6d:dd:32:ad:3b:71:5b:27:dd:38:32:
         fc:6c:5e:ef:1b:91:f1:00:15:c8:a5:31:62:8f:73:39:ca:11:
         08:90:aa:c9:25:9c:e2:ae:42:d3:4c:d6:64:78:15:e6:1b:e5:
         5c:52:e8:fa:73:37:b2:a8:8f:ef:b3:2a:08:5b:5f:f4:ad:e1:
         78:43:84:6a:c3:b6:c0:a0:07:b2:cf:08:00:1f:b5:8c:d6:3b:
         0d:59:1b:25:4b:f2:2d:9a:d9:85:36:f5:92:95:91:a7:ac:16:
         82:c9:ff:fe:05:3f:a7:41:12:d4:c5:4e:e4:04:c0:7c:d8:00:
         cb:93:6e:a3:30:e5:b8:d7:95:33:4e:ee:12:33:fa:2a:e3:f6:
         73:11:fd:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSiZQCKLr2RCsR5MO96iX/AeAW0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxQjkxNEJDMEM2Q0RBNkQzN0MyQ0IwNzA4RjdGNzI4
RjlDNTI3MjAeFw0yNTA5MTIxNDI3MzJaFw0yNjA5MTExNDMyMzJaMDMxMTAvBgNV
BAMTKEQyN0I2Qzk4N0M2MTZEQTgwQTM0QkY4RDA3REU3QTA0NzZDMDk2RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEudQsd1xIy7akg1wvGXbNRDxP
MGyS3flvuH0VlnPhAiz/6d7OIZ2sMxS1elIFXt5eMcG/TbhDqLoBiNDtxJVu66pv
z4ZSOcgeQl0jHqDZhzxEsiw++k3gCq4HTgDUM14OvHcNYs08OeO8CsoWXecO5vqk
fDjz2/9eSsZMm2EZJfhJK/n5sbhOiiXX1omuFWVtV0uYWJbRYNYbdtuIX4bdzlxo
lPPaitn/A7szVHmJysTDfQSzGRHiIymPDhi1oT9900PZwp1c1X6NjyE0+z+7szNT
Jf2FImCSOPxujQ8tuvw1c4kXzrHMt8zJtOcME16t5o7phCI/rqfMpDehFZhRAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU0ntsmHxhbagKNL+NB956BHbAltEwHwYDVR0j
BBgwFoAUBhuRS8DGzabTfCywcI9/co+cUnIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWpzdzdiNHhwRWFGTE1RdFVaUDJNdnhORlg0RmVjU2hYcGtpYWJ0YWIx
OUQvMC8wNjFCOTE0QkMwQzZDREE2RDM3QzJDQjA3MDhGN0Y3MjhGOUM1MjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2MUI5MTRCQzBDNkNEQTZE
MzdDMkNCMDcwOEY3RjcyOEY5QzUyNzIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vqc3c3YjR4cEVhRkxNUXRVWlAyTXZ4TkZYNEZlY1NoWHBraWFidGFiMTlELzAv
MzIzODMwMzQzYTMzMzQzNTM4M2EzMTMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzgzMTMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBDRYEDANBgkqhkiG9w0BAQsFAAOC
AQEAZChF4nHmQ5rCuCyKJatXxQJpclYENN1L8J+QXUoHlMcFkb/XP9PHTsGAilTW
tRRxrGMiFGd9WQuSRcKd+0GgMt64RCNKq35X64zffN0c3T0VEYBX7WC6MFZTdSzN
x9lhFGJ5X9KGzmmll6p/npzrjwXlfG3dMq07cVsn3Tgy/Gxe7xuR8QAVyKUxYo9z
OcoRCJCqySWc4q5C00zWZHgV5hvlXFLo+nM3sqiP77MqCFtf9K3heEOEasO2wKAH
ss8IAB+1jNY7DVkbJUvyLZrZhTb1kpWRp6wWgsn//gU/p0ES1MVO5ATAfNgAy5Nu
ozDluNeVM07uEjP6KuP2cxH9yg==
-----END CERTIFICATE-----
Generated at Fri Sep 19 08:48:36 2025 by rpki-client