Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/323830343a346432383a3a2f33322d3438203d3e20323637343135.roa
File:                     323830343a346432383a3a2f33322d3438203d3e20323637343135.roa (raw, json)
Hash identifier:          yW2r4OO6HaNkgVRp4DgS6hG9uXe1ZHHYqm4FwQdhoJM=
Subject key identifier:   DE:60:44:49:DF:34:3A:BB:A6:C9:EE:41:71:F0:E4:1B:37:C2:11:5F
Certificate issuer:       /CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390
Certificate serial:       5AA95C729311CB059BE9B767EBB5C42836D9D96D
Authority key identifier: 28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/323830343a346432383a3a2f33322d3438203d3e20323637343135.roa
Signing time:             Thu 04 Sep 2025 17:23:13 +0000
ROA not before:           Thu 04 Sep 2025 17:18:13 +0000
ROA not after:            Thu 03 Sep 2026 17:23:13 +0000
asID:                     267415
IP address blocks:        2804:4d28::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl
                          rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a9:5c:72:93:11:cb:05:9b:e9:b7:67:eb:b5:c4:28:36:d9:d9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28B4ABBAFB7C76854CFBF3A446470DAA95AF3390
        Validity
            Not Before: Sep  4 17:18:13 2025 GMT
            Not After : Sep  3 17:23:13 2026 GMT
        Subject: CN=DE604449DF343ABBA6C9EE4171F0E41B37C2115F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:bb:f3:64:32:bc:fe:86:2c:97:5c:78:8d:
                    6b:72:07:d4:87:c4:f2:de:54:3a:68:ef:6c:8d:38:
                    19:bf:3e:36:93:a0:84:01:5f:bb:37:20:bb:f4:a1:
                    0c:a6:d7:42:dd:24:5d:9e:7e:c7:7f:e4:5d:c8:37:
                    7b:b1:59:4c:f3:97:ea:bf:48:bc:d2:10:36:c8:d9:
                    b7:7c:5e:4a:f1:fb:5d:66:9c:58:da:b4:58:e5:e3:
                    5d:a9:ca:ff:c2:88:ee:b1:30:8a:b0:ff:1b:4d:36:
                    12:74:00:a6:bc:f2:3a:d0:2b:c9:f6:ff:5b:4f:1e:
                    fe:80:40:8a:d7:df:a1:33:72:45:b9:60:72:68:48:
                    f6:66:06:62:fc:0f:74:38:82:b1:9f:0a:5d:64:4d:
                    03:73:ec:93:3d:1c:25:98:67:83:0c:b4:a5:d5:5c:
                    66:46:8e:90:32:33:66:31:72:33:3f:b3:8b:75:6c:
                    15:2c:9c:6c:7a:fb:6f:46:28:34:94:8c:d8:eb:94:
                    10:97:fc:03:58:65:d9:e7:bf:62:4a:42:fb:a3:0a:
                    16:7d:4d:cc:7f:83:ae:98:bf:54:b0:c2:8e:be:8e:
                    3e:71:2f:08:08:8d:04:43:0f:bc:3e:2b:3c:22:74:
                    ba:c4:91:65:18:66:f3:db:db:bc:83:29:e8:8e:00:
                    fc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:60:44:49:DF:34:3A:BB:A6:C9:EE:41:71:F0:E4:1B:37:C2:11:5F
            X509v3 Authority Key Identifier:
                keyid:28:B4:AB:BA:FB:7C:76:85:4C:FB:F3:A4:46:47:0D:AA:95:AF:33:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28B4ABBAFB7C76854CFBF3A446470DAA95AF3390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SxxTBkzJBZS6LuEx2ZD159qqWMpsnXL8XexGKsqn84A/0/323830343a346432383a3a2f33322d3438203d3e20323637343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d28::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:6e:67:2b:75:91:cd:1f:2d:9b:e7:6b:79:3d:30:27:7d:04:
         df:54:51:97:fe:21:21:9c:0c:f8:22:4d:18:86:a0:51:95:7e:
         c9:f1:6c:d4:2b:22:48:ae:46:83:88:ff:a7:04:8a:74:c1:52:
         ff:64:90:9c:4c:0a:2a:8a:a8:d6:d6:8a:46:07:dc:7d:78:c4:
         c4:7a:f5:10:7c:a2:b8:ff:67:d0:09:c5:25:7c:5b:b9:39:1a:
         8b:13:66:d8:b9:9f:6e:2d:58:a7:e5:b5:ab:b6:04:a7:60:b9:
         85:72:c7:c4:49:d8:84:5d:f6:5d:64:c5:a1:e2:8f:be:a3:7a:
         e3:00:c8:c3:7e:d9:36:88:9d:7d:50:ec:87:1f:fe:85:8b:49:
         0a:86:91:b7:32:46:8d:98:47:f5:1a:16:71:8c:70:e0:91:df:
         04:0f:62:dc:f4:92:93:6e:8b:cf:56:33:bf:5d:1d:58:55:d3:
         b3:7a:96:91:28:21:94:cc:a3:a3:9f:12:28:7f:5a:29:07:1a:
         37:80:d8:85:6f:d3:ee:ad:d5:f4:45:44:2d:85:94:12:67:eb:
         e0:d7:83:f3:bf:84:be:36:ba:12:74:4f:1e:06:8c:8c:cc:07:
         ab:99:f5:bd:b7:7b:79:61:42:2a:53:47:c2:dc:0a:48:99:04:
         87:89:78:bb
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUWqlccpMRywWb6bdn67XEKDbZ2W0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhCNEFCQkFGQjdDNzY4NTRDRkJGM0E0NDY0NzBEQUE5
NUFGMzM5MDAeFw0yNTA5MDQxNzE4MTNaFw0yNjA5MDMxNzIzMTNaMDMxMTAvBgNV
BAMTKERFNjA0NDQ5REYzNDNBQkJBNkM5RUU0MTcxRjBFNDFCMzdDMjExNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzw7vzZDK8/oYsl1x4jWtyB9SH
xPLeVDpo72yNOBm/PjaToIQBX7s3ILv0oQym10LdJF2efsd/5F3IN3uxWUzzl+q/
SLzSEDbI2bd8Xkrx+11mnFjatFjl412pyv/CiO6xMIqw/xtNNhJ0AKa88jrQK8n2
/1tPHv6AQIrX36EzckW5YHJoSPZmBmL8D3Q4grGfCl1kTQNz7JM9HCWYZ4MMtKXV
XGZGjpAyM2YxcjM/s4t1bBUsnGx6+29GKDSUjNjrlBCX/ANYZdnnv2JKQvujChZ9
Tcx/g66Yv1Swwo6+jj5xLwgIjQRDD7w+KzwidLrEkWUYZvPb27yDKeiOAPxjAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU3mBESd80Orumye5BcfDkGzfCEV8wHwYDVR0j
BBgwFoAUKLSruvt8doVM+/OkRkcNqpWvM5AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9TeHhUQmt6SkJaUzZMdUV4MlpEMTU5cXFXTXBzblhMOFhleEdLc3FuODRB
LzAvMjhCNEFCQkFGQjdDNzY4NTRDRkJGM0E0NDY0NzBEQUE5NUFGMzM5MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yOEI0QUJCQUZCN0M3Njg1NENG
QkYzQTQ0NjQ3MERBQTk1QUYzMzkwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9T
eHhUQmt6SkJaUzZMdUV4MlpEMTU5cXFXTXBzblhMOFhleEdLc3FuODRBLzAvMzIz
ODMwMzQzYTM0NjQzMjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3MzQz
MTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARNKDANBgkqhkiG9w0BAQsFAAOCAQEAem5nK3WRzR8t
m+dreT0wJ30E31RRl/4hIZwM+CJNGIagUZV+yfFs1CsiSK5Gg4j/pwSKdMFS/2SQ
nEwKKoqo1taKRgfcfXjExHr1EHyiuP9n0AnFJXxbuTkaixNm2Lmfbi1Yp+W1q7YE
p2C5hXLHxEnYhF32XWTFoeKPvqN64wDIw37ZNoidfVDshx/+hYtJCoaRtzJGjZhH
9RoWcYxw4JHfBA9i3PSSk26Lz1Yzv10dWFXTs3qWkSghlMyjo58SKH9aKQcaN4DY
hW/T7q3V9EVELYWUEmfr4NeD87+Evja6EnRPHgaMjMwHq5n1vbd7eWFCKlNHwtwK
SJkEh4l4uw==
-----END CERTIFICATE-----
Generated at Thu Sep 18 23:27:37 2025 by rpki-client