Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz8fKV4iDah8e55rj9Pghr4LRkesKqS8rj6PkJxM3FWG/0/323830343a393134343a3a2f33322d3332203d3e20323734363330.roa
File:                     323830343a393134343a3a2f33322d3332203d3e20323734363330.roa (raw, json)
Hash identifier:          2EzT6bw+0olJg7swWvR8tB3VrgdAf1aAaqiE4os+UUg=
Subject key identifier:   59:BF:EC:7A:C2:46:85:40:4A:ED:67:58:8F:D1:8D:FC:CB:A3:50:EB
Certificate issuer:       /CN=F34BD98A6231B779AF46F694B01DAC5270C5F21A
Certificate serial:       64DAEBF6D928003DB3BAEFFC4AD6D5F463DE286A
Authority key identifier: F3:4B:D9:8A:62:31:B7:79:AF:46:F6:94:B0:1D:AC:52:70:C5:F2:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34BD98A6231B779AF46F694B01DAC5270C5F21A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz8fKV4iDah8e55rj9Pghr4LRkesKqS8rj6PkJxM3FWG/0/323830343a393134343a3a2f33322d3332203d3e20323734363330.roa
Signing time:             Sat 06 Sep 2025 13:09:28 +0000
ROA not before:           Sat 06 Sep 2025 13:04:28 +0000
ROA not after:            Sat 05 Sep 2026 13:09:28 +0000
asID:                     274630
IP address blocks:        2804:9144::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hz8fKV4iDah8e55rj9Pghr4LRkesKqS8rj6PkJxM3FWG/0/F34BD98A6231B779AF46F694B01DAC5270C5F21A.crl
                          rsync://rpki-repo.registro.br/repo/Hz8fKV4iDah8e55rj9Pghr4LRkesKqS8rj6PkJxM3FWG/0/F34BD98A6231B779AF46F694B01DAC5270C5F21A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34BD98A6231B779AF46F694B01DAC5270C5F21A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 14:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:da:eb:f6:d9:28:00:3d:b3:ba:ef:fc:4a:d6:d5:f4:63:de:28:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F34BD98A6231B779AF46F694B01DAC5270C5F21A
        Validity
            Not Before: Sep  6 13:04:28 2025 GMT
            Not After : Sep  5 13:09:28 2026 GMT
        Subject: CN=59BFEC7AC24685404AED67588FD18DFCCBA350EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:78:37:c9:5c:13:b6:2e:7c:b5:cc:b1:41:b0:
                    bf:5f:1c:c0:c8:43:bc:48:5a:04:12:f9:7a:c5:0e:
                    02:56:85:ab:56:74:83:00:1c:e5:14:b9:92:99:2a:
                    95:b7:45:d1:c5:fb:00:d8:03:14:71:fe:8a:e1:43:
                    1a:ae:7f:72:09:bb:35:90:9d:a9:9b:c3:a3:71:e6:
                    9e:fd:af:b9:cd:46:95:2d:66:d3:c8:a3:dc:8e:0a:
                    6b:32:e2:3f:10:06:05:0b:34:c3:bd:61:57:03:d5:
                    a0:52:61:66:32:49:ca:0e:c4:34:0d:66:a6:b0:ff:
                    96:28:3c:77:92:cc:eb:ab:1d:a2:71:68:2d:99:28:
                    1a:1d:bc:38:7c:2c:9e:b4:5a:84:ab:31:d2:56:c8:
                    47:12:be:46:c0:9f:17:4d:ba:8e:3e:27:e3:41:16:
                    95:c6:6c:3f:d1:d7:7e:47:da:05:95:8c:af:0c:81:
                    73:07:66:b3:5e:15:7c:c3:29:9c:55:60:dd:56:58:
                    be:81:da:35:ad:0d:7d:5d:89:54:c7:23:b9:96:08:
                    1b:cd:b2:71:6f:96:7b:a2:8d:01:cd:26:6d:f0:79:
                    48:c3:61:58:be:0b:c9:c2:5c:12:bf:07:ef:d6:47:
                    d2:f4:96:6a:38:97:41:ba:5e:e0:34:7f:df:bd:46:
                    3f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BF:EC:7A:C2:46:85:40:4A:ED:67:58:8F:D1:8D:FC:CB:A3:50:EB
            X509v3 Authority Key Identifier:
                keyid:F3:4B:D9:8A:62:31:B7:79:AF:46:F6:94:B0:1D:AC:52:70:C5:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz8fKV4iDah8e55rj9Pghr4LRkesKqS8rj6PkJxM3FWG/0/F34BD98A6231B779AF46F694B01DAC5270C5F21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F34BD98A6231B779AF46F694B01DAC5270C5F21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz8fKV4iDah8e55rj9Pghr4LRkesKqS8rj6PkJxM3FWG/0/323830343a393134343a3a2f33322d3332203d3e20323734363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9144::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:99:ca:25:26:ce:87:40:3c:5f:c4:c9:0c:77:d2:b3:26:64:
         0b:58:8a:58:ff:71:72:ef:6b:98:5f:b3:99:c9:f1:47:35:bc:
         6e:88:0e:4e:46:63:f3:aa:26:ff:13:ac:e7:ec:d7:31:64:30:
         e6:0a:07:dd:78:43:6b:2f:56:3e:cf:f5:f2:87:24:72:aa:6d:
         00:ef:03:4b:8d:f4:8a:9e:69:3a:4d:f7:c1:ec:e2:60:ab:0f:
         e4:70:77:6f:2f:da:b6:ae:38:cc:ed:b7:01:b9:b8:0b:42:da:
         1a:07:50:32:5e:3f:f3:c5:5c:52:6a:0d:2c:d7:dc:83:65:29:
         24:b2:12:3c:e1:cc:30:49:5f:20:8d:c6:eb:99:15:bc:20:74:
         88:5f:b2:cf:e2:40:c3:eb:27:dd:3b:6b:2f:ac:b2:91:22:dd:
         0e:11:fc:1b:65:e2:4e:33:4b:f2:62:20:16:35:b8:90:6b:af:
         72:0c:dd:09:a4:13:8e:10:45:d2:6f:6f:c6:10:fe:4c:4d:b7:
         40:39:b5:e7:96:4a:b8:4d:1c:c7:60:7e:53:d2:07:81:93:ad:
         e4:6a:f8:85:1e:c2:ed:e5:9d:32:ef:17:c4:87:71:82:77:66:
         9e:38:f6:c8:58:a7:3f:ce:b3:5c:81:cc:cf:9f:d6:95:40:18:
         12:b7:62:27
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZNrr9tkoAD2zuu/8StbV9GPeKGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM0QkQ5OEE2MjMxQjc3OUFGNDZGNjk0QjAxREFDNTI3
MEM1RjIxQTAeFw0yNTA5MDYxMzA0MjhaFw0yNjA5MDUxMzA5MjhaMDMxMTAvBgNV
BAMTKDU5QkZFQzdBQzI0Njg1NDA0QUVENjc1ODhGRDE4REZDQ0JBMzUwRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOeDfJXBO2Lny1zLFBsL9fHMDI
Q7xIWgQS+XrFDgJWhatWdIMAHOUUuZKZKpW3RdHF+wDYAxRx/orhQxquf3IJuzWQ
nambw6Nx5p79r7nNRpUtZtPIo9yOCmsy4j8QBgULNMO9YVcD1aBSYWYyScoOxDQN
Zqaw/5YoPHeSzOurHaJxaC2ZKBodvDh8LJ60WoSrMdJWyEcSvkbAnxdNuo4+J+NB
FpXGbD/R135H2gWVjK8MgXMHZrNeFXzDKZxVYN1WWL6B2jWtDX1diVTHI7mWCBvN
snFvlnuijQHNJm3weUjDYVi+C8nCXBK/B+/WR9L0lmo4l0G6XuA0f9+9Rj/ZAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUWb/sesJGhUBK7WdYj9GN/MujUOswHwYDVR0j
BBgwFoAU80vZimIxt3mvRvaUsB2sUnDF8howDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHo4ZktWNGlEYWg4ZTU1cmo5UGdocjRMUmtlc0txUzhyajZQa0p4TTNG
V0cvMC9GMzRCRDk4QTYyMzFCNzc5QUY0NkY2OTRCMDFEQUM1MjcwQzVGMjFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzNEJEOThBNjIzMUI3NzlB
RjQ2RjY5NEIwMURBQzUyNzBDNUYyMUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h6OGZLVjRpRGFoOGU1NXJqOVBnaHI0TFJrZXNLcVM4cmo2UGtKeE0zRldHLzAv
MzIzODMwMzQzYTM5MzEzNDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzM0
MzYzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASRRDANBgkqhkiG9w0BAQsFAAOCAQEAfJnKJSbO
h0A8X8TJDHfSsyZkC1iKWP9xcu9rmF+zmcnxRzW8bogOTkZj86om/xOs5+zXMWQw
5goH3XhDay9WPs/18ockcqptAO8DS430ip5pOk33weziYKsP5HB3by/atq44zO23
Abm4C0LaGgdQMl4/88VcUmoNLNfcg2UpJLISPOHMMElfII3G65kVvCB0iF+yz+JA
w+sn3TtrL6yykSLdDhH8G2XiTjNL8mIgFjW4kGuvcgzdCaQTjhBF0m9vxhD+TE23
QDm155ZKuE0cx2B+U9IHgZOt5Gr4hR7C7eWdMu8XxIdxgndmnjj2yFinP86zXIHM
z5/WlUAYErdiJw==
-----END CERTIFICATE-----
Generated at Fri Sep 19 06:09:16 2025 by rpki-client