Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/323830343a343436303a3a2f33322d313238203d3e20323637363239.roa
File:                     323830343a343436303a3a2f33322d313238203d3e20323637363239.roa (raw, json)
Hash identifier:          hnt34NzhwnnKaxLNz1CVSiq82MWvpdDwTrExqXgUA4I=
Subject key identifier:   CE:23:0C:92:B4:6D:35:C0:B7:19:3D:D9:23:3A:93:4A:E9:70:B9:84
Certificate issuer:       /CN=22072ECE4658EB40DC14284E0D18A33CB11A5E8A
Certificate serial:       41EE48B0E285DE18A6018257D3678A7694CBA8A5
Authority key identifier: 22:07:2E:CE:46:58:EB:40:DC:14:28:4E:0D:18:A3:3C:B1:1A:5E:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22072ECE4658EB40DC14284E0D18A33CB11A5E8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/323830343a343436303a3a2f33322d313238203d3e20323637363239.roa
Signing time:             Sun 07 Sep 2025 22:07:35 +0000
ROA not before:           Sun 07 Sep 2025 22:02:35 +0000
ROA not after:            Sun 06 Sep 2026 22:07:35 +0000
asID:                     267629
IP address blocks:        2804:4460::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/22072ECE4658EB40DC14284E0D18A33CB11A5E8A.crl
                          rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/22072ECE4658EB40DC14284E0D18A33CB11A5E8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22072ECE4658EB40DC14284E0D18A33CB11A5E8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ee:48:b0:e2:85:de:18:a6:01:82:57:d3:67:8a:76:94:cb:a8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22072ECE4658EB40DC14284E0D18A33CB11A5E8A
        Validity
            Not Before: Sep  7 22:02:35 2025 GMT
            Not After : Sep  6 22:07:35 2026 GMT
        Subject: CN=CE230C92B46D35C0B7193DD9233A934AE970B984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:7b:c4:62:95:ad:56:45:c6:40:95:e1:8a:
                    44:8d:a6:af:ea:3e:23:d4:55:03:1b:14:83:32:ab:
                    e4:26:85:1a:6f:86:90:74:a7:c1:07:90:7a:0d:8d:
                    6f:07:fa:37:16:f1:b8:bd:12:38:1b:07:09:5c:0d:
                    6a:3a:ca:22:9d:c5:56:c8:c1:fe:c4:a9:dc:f8:86:
                    1b:11:29:bd:1c:a9:0f:df:ae:04:b7:49:95:66:81:
                    2a:46:f9:2f:13:e2:d7:75:79:2c:24:5c:d7:07:41:
                    b1:c8:d8:ae:e6:3d:31:05:a8:0a:90:59:8b:bb:6a:
                    6e:e0:81:11:3a:6d:13:b5:9c:38:b6:03:a3:2a:c6:
                    b9:b8:74:e8:2e:85:90:0f:a7:f5:14:5e:2d:67:c6:
                    be:79:d9:66:a6:72:7a:7f:96:72:e0:d0:14:c1:af:
                    ff:2a:af:0b:04:2c:b9:e1:6e:40:21:33:9f:54:a9:
                    29:1f:96:c6:79:8c:2b:1d:7b:78:36:a6:e0:c5:27:
                    2d:dd:6f:4e:a8:36:81:6c:34:1a:6b:d2:7a:79:99:
                    c2:b9:9a:c5:1e:72:f3:aa:c7:dd:38:d9:5f:84:93:
                    c4:58:35:0c:ca:12:94:24:56:95:80:02:f9:32:83:
                    d8:88:4f:e0:b4:90:8b:10:0c:9c:e5:43:cb:33:a9:
                    f4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:23:0C:92:B4:6D:35:C0:B7:19:3D:D9:23:3A:93:4A:E9:70:B9:84
            X509v3 Authority Key Identifier:
                keyid:22:07:2E:CE:46:58:EB:40:DC:14:28:4E:0D:18:A3:3C:B1:1A:5E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/22072ECE4658EB40DC14284E0D18A33CB11A5E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22072ECE4658EB40DC14284E0D18A33CB11A5E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MYsWh1JBtSpAcrURcKsAu1Rk8ho3RMdaHGJrPUg4V1Q/0/323830343a343436303a3a2f33322d313238203d3e20323637363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4460::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:3d:27:fc:9f:e0:c0:77:dd:86:07:cf:9a:fd:99:15:56:e9:
         ca:ff:3b:ca:a9:4e:93:a6:3b:de:d4:b9:8d:6a:4a:db:b2:0a:
         e5:84:03:37:b9:e7:af:60:4d:d6:66:d7:5b:f7:8b:51:ff:7c:
         ed:6e:de:3e:c7:19:fd:1e:f3:01:95:05:28:ae:04:fc:13:75:
         e2:83:a0:3e:f7:82:37:e8:d4:24:62:da:41:9d:8b:50:f3:47:
         79:49:d7:a8:13:f8:80:98:73:ca:12:ae:9a:69:d1:4f:24:a6:
         32:16:94:f0:cf:f3:51:1b:2f:64:8b:25:c3:0d:fd:3c:82:98:
         f4:bb:1e:da:86:86:00:a5:98:16:8f:84:f2:e5:60:a4:48:15:
         f0:63:ce:0d:f0:ee:73:44:48:97:df:5a:34:7b:7f:92:87:07:
         26:23:a7:1b:e0:d0:35:a5:16:ba:e9:e0:42:8e:99:c5:fa:f2:
         d5:70:15:0e:fa:3c:28:64:81:e9:b6:2f:f5:e7:85:88:91:f4:
         3a:ec:db:1e:7c:57:20:55:67:77:bd:68:83:02:c8:f7:c7:dc:
         0d:50:5c:97:ab:56:3f:b3:7a:22:2a:82:7a:c5:3c:32:30:3e:
         9b:a4:8e:d3:bf:26:8b:95:0e:47:c1:f3:a4:81:a9:31:53:c2:
         0b:4e:10:08
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQe5IsOKF3himAYJX02eKdpTLqKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIwNzJFQ0U0NjU4RUI0MERDMTQyODRFMEQxOEEzM0NC
MTFBNUU4QTAeFw0yNTA5MDcyMjAyMzVaFw0yNjA5MDYyMjA3MzVaMDMxMTAvBgNV
BAMTKENFMjMwQzkyQjQ2RDM1QzBCNzE5M0REOTIzM0E5MzRBRTk3MEI5ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DHvEYpWtVkXGQJXhikSNpq/q
PiPUVQMbFIMyq+QmhRpvhpB0p8EHkHoNjW8H+jcW8bi9EjgbBwlcDWo6yiKdxVbI
wf7Eqdz4hhsRKb0cqQ/frgS3SZVmgSpG+S8T4td1eSwkXNcHQbHI2K7mPTEFqAqQ
WYu7am7ggRE6bRO1nDi2A6Mqxrm4dOguhZAPp/UUXi1nxr552Wamcnp/lnLg0BTB
r/8qrwsELLnhbkAhM59UqSkflsZ5jCsde3g2puDFJy3db06oNoFsNBpr0np5mcK5
msUecvOqx9042V+Ek8RYNQzKEpQkVpWAAvkyg9iIT+C0kIsQDJzlQ8szqfR3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUziMMkrRtNcC3GT3ZIzqTSulwuYQwHwYDVR0j
BBgwFoAUIgcuzkZY60DcFChODRijPLEaXoowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NWXNXaDFKQnRTcEFjclVSY0tzQXUxUms4aG8zUk1kYUhHSnJQVWc0VjFR
LzAvMjIwNzJFQ0U0NjU4RUI0MERDMTQyODRFMEQxOEEzM0NCMTFBNUU4QS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yMjA3MkVDRTQ2NThFQjQwREMx
NDI4NEUwRDE4QTMzQ0IxMUE1RThBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9N
WXNXaDFKQnRTcEFjclVSY0tzQXUxUms4aG8zUk1kYUhHSnJQVWc0VjFRLzAvMzIz
ODMwMzQzYTM0MzQzNjMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2Mzcz
NjMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB
Af8EETAPMA0EAgACMAcDBQAoBERgMA0GCSqGSIb3DQEBCwUAA4IBAQATPSf8n+DA
d92GB8+a/ZkVVunK/zvKqU6Tpjve1LmNakrbsgrlhAM3ueevYE3WZtdb94tR/3zt
bt4+xxn9HvMBlQUorgT8E3Xig6A+94I36NQkYtpBnYtQ80d5SdeoE/iAmHPKEq6a
adFPJKYyFpTwz/NRGy9kiyXDDf08gpj0ux7ahoYApZgWj4Ty5WCkSBXwY84N8O5z
REiX31o0e3+ShwcmI6cb4NA1pRa66eBCjpnF+vLVcBUO+jwoZIHpti/154WIkfQ6
7NsefFcgVWd3vWiDAsj3x9wNUFyXq1Y/s3oiKoJ6xTwyMD6bpI7TvyaLlQ5HwfOk
gakxU8ILThAI
-----END CERTIFICATE-----
Generated at Thu Sep 18 19:32:41 2025 by rpki-client