Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/323830343a383835383a383030303a3a2f33342d3334203d3e20323732373635.roa
File:                     323830343a383835383a383030303a3a2f33342d3334203d3e20323732373635.roa (raw, json)
Hash identifier:          54Y3D2BUwFfY1un6D5KKG32aU/X49bH8VXi3n6hDwBA=
Subject key identifier:   A1:22:62:1F:BA:81:2F:5C:D9:06:FD:9C:1B:D0:9A:5D:06:F1:42:13
Certificate issuer:       /CN=4556575234FAB5B5EB40632FC9E93E2BF6A5A631
Certificate serial:       0547C4B491A390C4629AE599ABC6FCF805897C90
Authority key identifier: 45:56:57:52:34:FA:B5:B5:EB:40:63:2F:C9:E9:3E:2B:F6:A5:A6:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/323830343a383835383a383030303a3a2f33342d3334203d3e20323732373635.roa
Signing time:             Fri 19 Sep 2025 19:35:24 +0000
ROA not before:           Fri 19 Sep 2025 19:30:24 +0000
ROA not after:            Fri 18 Sep 2026 19:35:24 +0000
asID:                     272765
IP address blocks:        2804:8858:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.crl
                          rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 10:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:47:c4:b4:91:a3:90:c4:62:9a:e5:99:ab:c6:fc:f8:05:89:7c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4556575234FAB5B5EB40632FC9E93E2BF6A5A631
        Validity
            Not Before: Sep 19 19:30:24 2025 GMT
            Not After : Sep 18 19:35:24 2026 GMT
        Subject: CN=A122621FBA812F5CD906FD9C1BD09A5D06F14213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:85:c5:28:74:c5:12:4c:f2:f1:4e:b9:9e:64:
                    1b:00:a8:9a:f6:ea:30:af:67:16:31:3b:3c:e6:23:
                    28:0f:d5:da:e8:2a:75:4a:84:d9:04:2a:b4:a3:b3:
                    7b:56:aa:8a:29:ff:57:de:f6:98:b5:21:8a:fc:5f:
                    b1:50:47:08:65:f5:8c:ef:ee:f6:d8:3f:5d:f6:3d:
                    b7:8e:58:09:7d:08:25:6a:bc:a7:5b:28:80:1d:50:
                    cf:43:71:75:c8:13:43:47:aa:58:27:dd:0e:c8:48:
                    40:25:ea:86:e7:f1:5a:64:58:01:5f:0d:e1:ea:ad:
                    7c:31:4f:01:92:ad:64:3d:f3:ac:5d:71:37:37:83:
                    74:a5:fe:24:69:13:a3:5e:76:18:58:d4:7e:fa:da:
                    92:60:9c:ba:f3:f5:9d:42:31:dd:43:02:44:60:82:
                    4a:dc:a3:e1:30:d3:57:19:06:b4:9d:90:31:4c:96:
                    fb:f5:36:b1:c0:51:bf:1c:92:4d:63:6b:fb:53:0c:
                    d7:06:3d:2d:f5:37:02:0a:b5:2c:28:6a:74:d7:7f:
                    b3:62:7c:1c:32:c2:ac:9c:34:c9:ec:c8:c5:0f:72:
                    87:a3:4d:2e:c5:a2:63:cc:f4:4c:9a:4a:e5:a4:f6:
                    d5:99:0f:99:3f:2d:3f:ac:61:d1:b4:0a:a0:43:b2:
                    99:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:22:62:1F:BA:81:2F:5C:D9:06:FD:9C:1B:D0:9A:5D:06:F1:42:13
            X509v3 Authority Key Identifier:
                keyid:45:56:57:52:34:FA:B5:B5:EB:40:63:2F:C9:E9:3E:2B:F6:A5:A6:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/323830343a383835383a383030303a3a2f33342d3334203d3e20323732373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8858:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b3:25:f9:57:28:9a:7b:03:75:be:60:67:91:e7:97:5e:b0:3e:
         05:88:d1:9a:35:a7:ce:cc:be:d0:80:4a:42:78:2a:c6:88:4f:
         2e:53:82:c6:76:55:82:21:e8:c8:73:25:20:5f:7a:78:08:76:
         20:be:2b:76:43:65:b0:65:a8:7e:fe:8d:31:d2:7d:a4:72:5d:
         f3:eb:5e:e7:92:f7:04:0f:e1:28:92:6a:41:34:d3:8b:7d:14:
         fe:37:92:77:9a:fb:20:75:5c:24:d5:7e:84:7e:64:d1:83:b3:
         36:88:74:34:3a:2e:59:04:24:7a:97:ca:4e:66:f3:c0:99:42:
         64:0a:a7:66:8b:2e:1e:77:a9:b3:81:59:5a:a3:48:26:6c:fa:
         fa:d2:ad:07:51:9d:4b:18:50:f9:ee:22:4a:cb:62:e8:9e:19:
         13:74:4c:20:33:e4:c2:f1:06:23:db:e1:96:e5:a1:31:20:e9:
         35:5e:15:b2:ec:7c:31:62:bc:82:7d:ce:84:78:32:14:b1:e6:
         0b:ea:a7:59:57:83:37:00:21:60:95:9d:bb:d6:8a:08:21:4a:
         af:be:36:5a:fa:8e:2f:03:15:42:05:17:76:14:af:32:8f:dc:
         bb:33:2f:74:c5:bd:fa:c7:56:72:7a:11:b8:81:f2:e2:33:7a:
         26:1e:b0:ee
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBUfEtJGjkMRimuWZq8b8+AWJfJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU1NjU3NTIzNEZBQjVCNUVCNDA2MzJGQzlFOTNFMkJG
NkE1QTYzMTAeFw0yNTA5MTkxOTMwMjRaFw0yNjA5MTgxOTM1MjRaMDMxMTAvBgNV
BAMTKEExMjI2MjFGQkE4MTJGNUNEOTA2RkQ5QzFCRDA5QTVEMDZGMTQyMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdhcUodMUSTPLxTrmeZBsAqJr2
6jCvZxYxOzzmIygP1droKnVKhNkEKrSjs3tWqoop/1fe9pi1IYr8X7FQRwhl9Yzv
7vbYP132PbeOWAl9CCVqvKdbKIAdUM9DcXXIE0NHqlgn3Q7ISEAl6obn8VpkWAFf
DeHqrXwxTwGSrWQ986xdcTc3g3Sl/iRpE6NedhhY1H762pJgnLrz9Z1CMd1DAkRg
gkrco+Ew01cZBrSdkDFMlvv1NrHAUb8ckk1ja/tTDNcGPS31NwIKtSwoanTXf7Ni
fBwywqycNMnsyMUPcoejTS7FomPM9EyaSuWk9tWZD5k/LT+sYdG0CqBDspnvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUoSJiH7qBL1zZBv2cG9CaXQbxQhMwHwYDVR0j
BBgwFoAURVZXUjT6tbXrQGMvyek+K/alpjEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjZISG5KZ1hxWXp1Q2t6aHJ3bXVSZ3FRZjFTTkZCM1BuNzJFaHM5VG9o
djcvMC80NTU2NTc1MjM0RkFCNUI1RUI0MDYzMkZDOUU5M0UyQkY2QTVBNjMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1NTY1NzUyMzRGQUI1QjVF
QjQwNjMyRkM5RTkzRTJCRjZBNUE2MzEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o2SEhuSmdYcVl6dUNremhyd211UmdxUWYxU05GQjNQbjcyRWhzOVRvaHY3LzAv
MzIzODMwMzQzYTM4MzgzNTM4M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzczMjM3MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEiFiAMA0GCSqGSIb3DQEBCwUA
A4IBAQCzJflXKJp7A3W+YGeR55desD4FiNGaNafOzL7QgEpCeCrGiE8uU4LGdlWC
IejIcyUgX3p4CHYgvit2Q2WwZah+/o0x0n2kcl3z617nkvcED+EokmpBNNOLfRT+
N5J3mvsgdVwk1X6EfmTRg7M2iHQ0Oi5ZBCR6l8pOZvPAmUJkCqdmiy4ed6mzgVla
o0gmbPr60q0HUZ1LGFD57iJKy2LonhkTdEwgM+TC8QYj2+GW5aExIOk1XhWy7Hwx
YryCfc6EeDIUseYL6qdZV4M3ACFglZ271ooIIUqvvjZa+o4vAxVCBRd2FK8yj9y7
My90xb36x1ZyehG4gfLiM3omHrDu
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:44 2025 by rpki-client