Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/323830343a323130303a3a2f33322d313238203d3e20323634353236.roa
File:                     323830343a323130303a3a2f33322d313238203d3e20323634353236.roa (raw, json)
Hash identifier:          3dJUAFy0Mn7p5tkYc/PxKve1ZXvdXoTHifvyRYx1mhA=
Subject key identifier:   D2:DF:DB:AD:75:6C:7B:62:D6:1C:F5:C6:75:EA:1C:94:4F:3B:7E:80
Certificate issuer:       /CN=9BED692AC52E48610AB67427AB955CE0534480E2
Certificate serial:       49DBDCCB49F6581CF53DE75227ADD4A48018AF85
Authority key identifier: 9B:ED:69:2A:C5:2E:48:61:0A:B6:74:27:AB:95:5C:E0:53:44:80:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BED692AC52E48610AB67427AB955CE0534480E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/323830343a323130303a3a2f33322d313238203d3e20323634353236.roa
Signing time:             Mon 08 Sep 2025 18:15:50 +0000
ROA not before:           Mon 08 Sep 2025 18:10:50 +0000
ROA not after:            Mon 07 Sep 2026 18:15:50 +0000
asID:                     264526
IP address blocks:        2804:2100::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/9BED692AC52E48610AB67427AB955CE0534480E2.crl
                          rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/9BED692AC52E48610AB67427AB955CE0534480E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BED692AC52E48610AB67427AB955CE0534480E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 06:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:db:dc:cb:49:f6:58:1c:f5:3d:e7:52:27:ad:d4:a4:80:18:af:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BED692AC52E48610AB67427AB955CE0534480E2
        Validity
            Not Before: Sep  8 18:10:50 2025 GMT
            Not After : Sep  7 18:15:50 2026 GMT
        Subject: CN=D2DFDBAD756C7B62D61CF5C675EA1C944F3B7E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e9:a2:54:13:83:10:5d:26:2e:a2:83:53:28:
                    56:63:8d:84:c2:83:47:53:27:6c:fe:71:4f:48:02:
                    a3:47:b6:d1:58:f1:5b:24:a4:17:69:e4:0e:2f:63:
                    01:fa:ce:b6:3f:25:d7:4f:ef:d7:44:a6:60:b0:7f:
                    93:00:78:7a:8e:82:53:57:93:34:b8:16:f5:c3:af:
                    68:c5:9c:f1:87:db:cf:0b:9f:6f:22:c0:1e:5e:ed:
                    15:11:00:e3:42:89:dd:41:9e:0d:12:1c:99:68:fe:
                    4f:1f:6c:1f:84:d6:92:c8:57:a9:4d:a3:97:e2:8e:
                    1d:1a:7a:a7:74:66:5b:4e:70:59:d8:59:e2:65:cb:
                    a2:97:33:d1:6f:cb:da:79:7c:31:ea:52:9d:bb:b8:
                    fb:7a:15:58:37:14:c6:9c:6d:c6:46:b6:0d:33:01:
                    ba:de:26:38:17:16:1a:56:4f:f9:b9:49:5b:d8:0f:
                    7a:e1:66:33:79:1a:94:80:c0:b5:31:5f:46:2a:d9:
                    05:c0:5c:96:83:ee:23:bf:7a:16:bf:0e:4b:58:db:
                    e9:3c:a3:1d:1d:62:e5:81:17:79:55:e2:bd:91:9a:
                    8b:09:c0:73:0d:70:26:d6:2f:03:e0:d1:4a:c2:08:
                    18:a7:35:e0:1a:d3:1c:72:4f:b8:f0:7c:82:32:3d:
                    b8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DF:DB:AD:75:6C:7B:62:D6:1C:F5:C6:75:EA:1C:94:4F:3B:7E:80
            X509v3 Authority Key Identifier:
                keyid:9B:ED:69:2A:C5:2E:48:61:0A:B6:74:27:AB:95:5C:E0:53:44:80:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/9BED692AC52E48610AB67427AB955CE0534480E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BED692AC52E48610AB67427AB955CE0534480E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu6Pj23icDLcCS6ivAsbXekaWw5tuhcrG3VTaZms4YoC/0/323830343a323130303a3a2f33322d313238203d3e20323634353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2100::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:70:cb:30:fb:59:3d:0f:22:47:c5:8c:b3:a4:bf:26:60:9c:
         0a:37:7c:d0:e1:78:96:87:c8:1a:5e:12:f3:da:8e:b8:10:87:
         e0:04:89:80:ee:e7:f1:35:61:c1:ad:84:f5:1e:8a:f8:cc:51:
         71:84:fd:cc:c4:c4:f8:a2:f7:fe:c6:47:03:d1:53:9a:60:ee:
         74:ab:dc:b9:b3:fc:35:3e:b2:c3:6b:d1:9e:e9:4f:d3:c6:24:
         82:9c:c2:df:9a:27:a5:79:22:78:c9:17:e3:a3:32:80:07:5c:
         7c:ec:8a:44:ca:c9:aa:ad:10:2e:2f:93:19:d3:14:6e:ae:56:
         5a:8b:2c:e4:c2:ee:e7:be:58:91:68:64:33:2b:b8:a7:22:85:
         95:79:59:a1:db:c0:94:85:57:2d:48:e3:12:be:54:21:dd:04:
         1e:f9:bf:b7:ea:79:e5:28:a7:99:52:96:26:c6:ff:d9:a7:b7:
         2e:d1:84:b6:b6:bd:d6:da:81:f4:57:ab:16:48:66:62:58:7d:
         03:dd:11:f5:b5:3b:cc:b9:44:44:a0:d2:11:cd:24:05:09:8d:
         6a:57:6d:94:72:ee:4e:1d:f7:8e:fa:8f:ee:4f:9c:91:fb:25:
         26:32:30:20:19:2c:42:5f:e3:e3:94:e0:6b:d9:98:d8:2a:85:
         9e:a2:e5:b5
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUSdvcy0n2WBz1PedSJ63UpIAYr4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJFRDY5MkFDNTJFNDg2MTBBQjY3NDI3QUI5NTVDRTA1
MzQ0ODBFMjAeFw0yNTA5MDgxODEwNTBaFw0yNjA5MDcxODE1NTBaMDMxMTAvBgNV
BAMTKEQyREZEQkFENzU2QzdCNjJENjFDRjVDNjc1RUExQzk0NEYzQjdFODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6aJUE4MQXSYuooNTKFZjjYTC
g0dTJ2z+cU9IAqNHttFY8VskpBdp5A4vYwH6zrY/JddP79dEpmCwf5MAeHqOglNX
kzS4FvXDr2jFnPGH288Ln28iwB5e7RURAONCid1Bng0SHJlo/k8fbB+E1pLIV6lN
o5fijh0aeqd0ZltOcFnYWeJly6KXM9Fvy9p5fDHqUp27uPt6FVg3FMacbcZGtg0z
AbreJjgXFhpWT/m5SVvYD3rhZjN5GpSAwLUxX0Yq2QXAXJaD7iO/eha/DktY2+k8
ox0dYuWBF3lV4r2RmosJwHMNcCbWLwPg0UrCCBinNeAa0xxyT7jwfIIyPbiLAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU0t/brXVse2LWHPXGdeoclE87foAwHwYDVR0j
BBgwFoAUm+1pKsUuSGEKtnQnq5Vc4FNEgOIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHU2UGoyM2ljRExjQ1M2aXZBc2JYZWthV3c1dHVoY3JHM1ZUYVptczRZ
b0MvMC85QkVENjkyQUM1MkU0ODYxMEFCNjc0MjdBQjk1NUNFMDUzNDQ4MEUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCRUQ2OTJBQzUyRTQ4NjEw
QUI2NzQyN0FCOTU1Q0UwNTM0NDgwRTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1NlBqMjNpY0RMY0NTNml2QXNiWGVrYVd3NXR1aGNyRzNWVGFabXM0WW9DLzAv
MzIzODMwMzQzYTMyMzEzMDMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzNTMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCEAMA0GCSqGSIb3DQEBCwUAA4IBAQB6cMsw
+1k9DyJHxYyzpL8mYJwKN3zQ4XiWh8gaXhLz2o64EIfgBImA7ufxNWHBrYT1Hor4
zFFxhP3MxMT4ovf+xkcD0VOaYO50q9y5s/w1PrLDa9Ge6U/TxiSCnMLfmieleSJ4
yRfjozKAB1x87IpEysmqrRAuL5MZ0xRurlZaiyzkwu7nvliRaGQzK7inIoWVeVmh
28CUhVctSOMSvlQh3QQe+b+36nnlKKeZUpYmxv/Zp7cu0YS2tr3W2oH0V6sWSGZi
WH0D3RH1tTvMuUREoNIRzSQFCY1qV22Ucu5OHfeO+o/uT5yR+yUmMjAgGSxCX+Pj
lOBr2ZjYKoWeouW1
-----END CERTIFICATE-----
Generated at Thu Sep 18 13:48:00 2025 by rpki-client