Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/323830343a333464303a3a2f33322d3336203d3e20323635343832.roa
File:                     323830343a333464303a3a2f33322d3336203d3e20323635343832.roa (raw, json)
Hash identifier:          PPM7kY0qXPS8AvcffqDsd3weyCXJenhpAnrtiH1bkq0=
Subject key identifier:   CA:4D:3D:EA:5C:51:A9:99:63:35:47:DD:E9:E7:A3:40:F5:FC:2A:97
Certificate issuer:       /CN=934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB
Certificate serial:       05A1711847DC5576655492C46A7CD17FDA4C2B71
Authority key identifier: 93:4D:D1:2E:97:C2:F4:04:35:AD:E3:46:2B:AE:C1:F3:7C:8F:B7:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/323830343a333464303a3a2f33322d3336203d3e20323635343832.roa
Signing time:             Thu 18 Sep 2025 21:06:13 +0000
ROA not before:           Thu 18 Sep 2025 21:01:13 +0000
ROA not after:            Thu 17 Sep 2026 21:06:13 +0000
asID:                     265482
IP address blocks:        2804:34d0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB.crl
                          rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a1:71:18:47:dc:55:76:65:54:92:c4:6a:7c:d1:7f:da:4c:2b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB
        Validity
            Not Before: Sep 18 21:01:13 2025 GMT
            Not After : Sep 17 21:06:13 2026 GMT
        Subject: CN=CA4D3DEA5C51A999633547DDE9E7A340F5FC2A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6a:82:68:de:16:9c:08:f6:a9:a2:e7:a4:e7:
                    da:aa:6b:97:5f:a6:b8:a2:d4:12:0b:94:2c:00:e2:
                    f9:fa:c3:e9:18:57:b2:88:82:a8:84:b5:6c:47:37:
                    11:37:d0:bc:dc:4d:8f:1b:be:3a:e1:21:c9:fa:49:
                    ac:fc:da:41:86:33:20:92:e1:45:4d:ca:07:f8:d9:
                    e2:81:8f:dc:91:74:4c:76:76:b8:0d:dd:a9:35:88:
                    89:cf:a0:e2:fe:e5:34:cf:d3:45:15:cb:d5:d9:0d:
                    f5:d1:5b:d9:44:67:fd:89:41:56:75:94:01:52:04:
                    48:5c:97:64:e4:5b:d5:7c:bd:03:ae:27:44:e9:d2:
                    fd:56:6d:6c:7c:2c:af:98:52:81:ac:1d:00:d0:0f:
                    b0:eb:8c:42:a8:87:3a:2d:e4:97:49:5e:cf:69:61:
                    2c:2d:d6:d8:8c:42:83:64:94:f2:8a:48:58:30:f1:
                    4b:3f:17:4a:bb:3a:99:68:ba:2e:8f:d3:74:df:8b:
                    38:cd:4c:6a:d1:65:ad:de:4b:0a:9e:fd:6a:8b:b8:
                    ac:f1:dd:57:1a:5e:e7:43:05:26:5e:47:aa:11:51:
                    0a:94:83:e8:54:36:f0:ed:98:f3:c4:7d:0e:bd:c0:
                    cf:3c:ba:94:df:50:5d:52:8e:fe:6a:c4:61:1b:6d:
                    1e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4D:3D:EA:5C:51:A9:99:63:35:47:DD:E9:E7:A3:40:F5:FC:2A:97
            X509v3 Authority Key Identifier:
                keyid:93:4D:D1:2E:97:C2:F4:04:35:AD:E3:46:2B:AE:C1:F3:7C:8F:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/934DD12E97C2F40435ADE3462BAEC1F37C8FB7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/323830343a333464303a3a2f33322d3336203d3e20323635343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:de:2b:19:80:53:1a:d6:d0:31:69:2f:25:56:a1:c7:1b:74:
         72:cd:ad:4f:7b:e5:53:a3:42:d6:20:7c:52:bb:83:cb:87:a0:
         26:f2:f4:ad:2a:99:38:8f:13:6e:40:f3:0d:28:a9:4d:b9:1a:
         0b:bb:19:ad:ad:20:87:40:b5:61:6b:f8:6b:f9:00:10:2d:ce:
         10:d9:e6:f0:bd:7e:1f:6f:71:f6:fc:67:ba:c0:a9:f8:0e:09:
         6d:87:69:e1:f0:1b:85:b5:b1:0c:b2:06:10:ee:dd:d7:81:9a:
         a2:b9:8b:aa:45:0a:d7:ee:b2:12:d2:79:be:1d:f2:82:39:13:
         4b:a4:2c:01:8f:d9:40:1f:51:48:ea:92:53:2e:73:1c:35:4f:
         df:4a:73:29:62:2f:34:46:c2:45:9d:7b:62:f1:92:17:f5:ac:
         ba:40:be:16:4a:78:07:96:fa:dd:5d:4f:41:30:65:e5:62:c6:
         91:9c:30:db:fe:05:d8:44:9a:49:13:97:57:ec:42:6d:87:ea:
         4c:dc:f6:1f:a0:28:a2:9d:b2:d0:39:3f:c0:29:63:c6:50:ef:
         e6:9f:19:bd:37:d4:9a:0b:0a:02:5a:97:99:28:d3:3a:64:6f:
         a1:c3:67:dc:2c:b5:a1:aa:9f:9e:2a:c3:b1:a3:4c:7a:2c:7c:
         47:95:05:6d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBaFxGEfcVXZlVJLEanzRf9pMK3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM0REQxMkU5N0MyRjQwNDM1QURFMzQ2MkJBRUMxRjM3
QzhGQjdGQjAeFw0yNTA5MTgyMTAxMTNaFw0yNjA5MTcyMTA2MTNaMDMxMTAvBgNV
BAMTKENBNEQzREVBNUM1MUE5OTk2MzM1NDdEREU5RTdBMzQwRjVGQzJBOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLaoJo3hacCPapouek59qqa5df
prii1BILlCwA4vn6w+kYV7KIgqiEtWxHNxE30LzcTY8bvjrhIcn6Saz82kGGMyCS
4UVNygf42eKBj9yRdEx2drgN3ak1iInPoOL+5TTP00UVy9XZDfXRW9lEZ/2JQVZ1
lAFSBEhcl2TkW9V8vQOuJ0Tp0v1WbWx8LK+YUoGsHQDQD7DrjEKohzot5JdJXs9p
YSwt1tiMQoNklPKKSFgw8Us/F0q7Oploui6P03TfizjNTGrRZa3eSwqe/WqLuKzx
3VcaXudDBSZeR6oRUQqUg+hUNvDtmPPEfQ69wM88upTfUF1Sjv5qxGEbbR6fAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUyk096lxRqZljNUfd6eejQPX8KpcwHwYDVR0j
BBgwFoAUk03RLpfC9AQ1reNGK67B83yPt/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnJnNzlDMVFvdlJBOGpONUZqWHBWQWJ6YVdzQ2V2WkZpeVNWZ1g4V1BR
N28vMC85MzRERDEyRTk3QzJGNDA0MzVBREUzNDYyQkFFQzFGMzdDOEZCN0ZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzNEREMTJFOTdDMkY0MDQz
NUFERTM0NjJCQUVDMUYzN0M4RkI3RkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZyZzc5QzFRb3ZSQThqTjVGalhwVkFiemFXc0NldlpGaXlTVmdYOFdQUTdvLzAv
MzIzODMwMzQzYTMzMzQ2NDMwM2EzYTJmMzMzMjJkMzMzNjIwM2QzZTIwMzIzNjM1
MzQzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ00DANBgkqhkiG9w0BAQsFAAOCAQEAXd4rGYBT
GtbQMWkvJVahxxt0cs2tT3vlU6NC1iB8UruDy4egJvL0rSqZOI8TbkDzDSipTbka
C7sZra0gh0C1YWv4a/kAEC3OENnm8L1+H29x9vxnusCp+A4JbYdp4fAbhbWxDLIG
EO7d14GaormLqkUK1+6yEtJ5vh3ygjkTS6QsAY/ZQB9RSOqSUy5zHDVP30pzKWIv
NEbCRZ17YvGSF/WsukC+Fkp4B5b63V1PQTBl5WLGkZww2/4F2ESaSROXV+xCbYfq
TNz2H6Aoop2y0Dk/wCljxlDv5p8ZvTfUmgsKAlqXmSjTOmRvocNn3Cy1oaqfnirD
saNMeix8R5UFbQ==
-----END CERTIFICATE-----
Generated at Fri Sep 19 03:57:46 2025 by rpki-client