Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/323830343a366563383a3a2f33322d313238203d3e20323730363138.roa
File:                     323830343a366563383a3a2f33322d313238203d3e20323730363138.roa (raw, json)
Hash identifier:          x87eBH+DzA1bwStUsY3ov3cCPNX6b/Fmr9pOc9L8pws=
Subject key identifier:   6C:98:A8:79:8F:D2:29:E5:CD:A8:8C:CF:91:E0:DC:3D:E2:F8:7B:59
Certificate issuer:       /CN=1A384BFA8860D53ABCEDBC8A91B37A972B89181B
Certificate serial:       4DB640127FEF61EC042EF61D74BA69090C43F6
Authority key identifier: 1A:38:4B:FA:88:60:D5:3A:BC:ED:BC:8A:91:B3:7A:97:2B:89:18:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/323830343a366563383a3a2f33322d313238203d3e20323730363138.roa
Signing time:             Sun 31 Aug 2025 17:08:54 +0000
ROA not before:           Sun 31 Aug 2025 17:03:54 +0000
ROA not after:            Sun 30 Aug 2026 17:08:54 +0000
asID:                     270618
IP address blocks:        2804:6ec8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl
                          rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b6:40:12:7f:ef:61:ec:04:2e:f6:1d:74:ba:69:09:0c:43:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A384BFA8860D53ABCEDBC8A91B37A972B89181B
        Validity
            Not Before: Aug 31 17:03:54 2025 GMT
            Not After : Aug 30 17:08:54 2026 GMT
        Subject: CN=6C98A8798FD229E5CDA88CCF91E0DC3DE2F87B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:58:77:24:90:77:ad:7e:18:69:68:ea:d8:
                    dc:61:6c:dc:cd:f6:40:cd:0c:cf:e4:7f:4d:ec:89:
                    fb:ca:8b:ac:8a:8e:80:1a:5e:07:4d:6d:07:44:e1:
                    7e:a6:b5:2d:dc:68:bf:96:ef:b8:bd:48:09:1f:1b:
                    c9:a4:fd:e5:ec:50:a9:56:c9:54:1c:71:84:61:f4:
                    f8:54:12:97:74:2e:65:b0:01:11:98:6e:23:fc:e0:
                    14:a2:82:36:3b:ef:b0:28:41:dd:a5:6f:ad:e8:9c:
                    65:c6:dd:92:e1:c7:db:3c:4a:c5:3e:82:f4:67:90:
                    a1:6f:b5:72:1e:f9:8f:b0:5a:78:55:cd:ce:74:6c:
                    c4:8e:52:45:ad:0e:d6:82:4a:ab:6d:01:49:c6:13:
                    15:e9:5a:95:26:23:8b:8e:de:49:a2:8f:0b:3e:58:
                    4e:e4:d7:2c:35:18:2a:de:d7:50:aa:69:15:cd:7a:
                    37:84:70:03:87:aa:fc:f0:f4:de:bf:b9:45:6c:87:
                    3b:be:be:1f:7c:f3:92:eb:ad:93:71:6d:ce:5e:ea:
                    9b:22:3f:16:b8:dd:f1:1a:f1:7c:27:d1:74:c7:85:
                    a0:bd:e1:71:8d:7f:11:91:91:d2:0d:8f:5a:91:37:
                    7c:77:8a:c6:25:c9:54:8e:ff:11:fc:1c:68:80:4e:
                    6f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:98:A8:79:8F:D2:29:E5:CD:A8:8C:CF:91:E0:DC:3D:E2:F8:7B:59
            X509v3 Authority Key Identifier:
                keyid:1A:38:4B:FA:88:60:D5:3A:BC:ED:BC:8A:91:B3:7A:97:2B:89:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A384BFA8860D53ABCEDBC8A91B37A972B89181B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mhGEHEoFTFe3NccUFF43zAi1ApHj7eWCv5rbayY3BSZ/1/323830343a366563383a3a2f33322d313238203d3e20323730363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ec8::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:8f:7a:1c:3c:2b:51:2e:0b:66:e1:b8:c7:57:d2:2a:1c:94:
         28:d7:a7:c8:96:b9:d5:e2:2c:fd:6e:38:67:14:0b:02:0e:c4:
         c0:e0:d9:c1:79:3e:4f:1e:0f:69:fc:9d:aa:58:97:1c:e3:a0:
         93:e2:ed:2c:b7:69:1c:67:63:f1:f8:37:c8:9b:4a:be:04:6f:
         05:11:0e:86:3b:bd:6e:68:d8:9e:91:6f:83:3d:0c:fd:02:0d:
         48:d5:51:ce:c6:77:5b:0d:bf:dc:a2:1e:6d:28:74:59:03:22:
         49:21:b9:24:38:14:86:a2:79:9a:06:48:60:1d:0c:6e:d8:a3:
         61:70:53:7c:19:4e:83:b6:fb:32:76:17:fc:6d:d8:4f:47:03:
         49:a8:86:a0:45:4a:45:9d:85:da:55:86:30:87:ba:f3:7c:53:
         1e:b8:4a:dd:fd:9d:28:80:a0:dc:f3:86:4b:8f:41:65:72:35:
         11:0b:e0:05:45:8f:6c:44:0c:9e:eb:75:9b:d5:61:c3:f7:16:
         9f:0b:90:1c:05:42:78:0b:96:8a:a4:a2:36:d6:78:1c:bf:47:
         37:5c:a6:7a:1f:e3:9a:02:c0:a2:36:53:83:1d:12:5a:de:a9:
         40:38:3c:3a:b8:98:28:50:aa:b1:b6:a0:95:8c:1f:6d:5c:12:
         d0:81:8a:1c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgITTbZAEn/vYewELvYddLppCQxD9jANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygxQTM4NEJGQTg4NjBENTNBQkNFREJDOEE5MUIzN0E5NzJC
ODkxODFCMB4XDTI1MDgzMTE3MDM1NFoXDTI2MDgzMDE3MDg1NFowMzExMC8GA1UE
AxMoNkM5OEE4Nzk4RkQyMjlFNUNEQTg4Q0NGOTFFMERDM0RFMkY4N0I1OTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKyiWHckkHetfhhpaOrY3GFs3M32
QM0Mz+R/TeyJ+8qLrIqOgBpeB01tB0Thfqa1Ldxov5bvuL1ICR8byaT95exQqVbJ
VBxxhGH0+FQSl3QuZbABEZhuI/zgFKKCNjvvsChB3aVvreicZcbdkuHH2zxKxT6C
9GeQoW+1ch75j7BaeFXNznRsxI5SRa0O1oJKq20BScYTFelalSYji47eSaKPCz5Y
TuTXLDUYKt7XUKppFc16N4RwA4eq/PD03r+5RWyHO76+H3zzkuutk3Ftzl7qmyI/
Frjd8RrxfCfRdMeFoL3hcY1/EZGR0g2PWpE3fHeKxiXJVI7/EfwcaIBObysCAwEA
AaOCAk8wggJLMB0GA1UdDgQWBBRsmKh5j9Ip5c2ojM+R4Nw94vh7WTAfBgNVHSME
GDAWgBQaOEv6iGDVOrztvIqRs3qXK4kYGzAOBgNVHQ8BAf8EBAMCB4AwgZIGA1Ud
HwSBijCBhzCBhKCBgaB/hn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9y
ZXBvL21oR0VIRW9GVEZlM05jY1VGRjQzekFpMUFwSGo3ZVdDdjVyYmF5WTNCU1ov
MS8xQTM4NEJGQTg4NjBENTNBQkNFREJDOEE5MUIzN0E5NzJCODkxODFCLmNybDB4
BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBMzg0QkZBODg2MEQ1M0FCQ0VE
QkM4QTkxQjM3QTk3MkI4OTE4MUIuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYI
KwYBBQUHMAuGgY1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL21o
R0VIRW9GVEZlM05jY1VGRjQzekFpMUFwSGo3ZVdDdjVyYmF5WTNCU1ovMS8zMjM4
MzAzNDNhMzY2NTYzMzgzYTNhMmYzMzMyMmQzMTMyMzgyMDNkM2UyMDMyMzczMDM2
MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEbsgwDQYJKoZIhvcNAQELBQADggEBACmPehw8K1Eu
C2bhuMdX0ioclCjXp8iWudXiLP1uOGcUCwIOxMDg2cF5Pk8eD2n8napYlxzjoJPi
7Sy3aRxnY/H4N8ibSr4EbwURDoY7vW5o2J6Rb4M9DP0CDUjVUc7Gd1sNv9yiHm0o
dFkDIkkhuSQ4FIaieZoGSGAdDG7Yo2FwU3wZToO2+zJ2F/xt2E9HA0mohqBFSkWd
hdpVhjCHuvN8Ux64St39nSiAoNzzhkuPQWVyNREL4AVFj2xEDJ7rdZvVYcP3Fp8L
kBwFQngLloqkojbWeBy/Rzdcpnof45oCwKI2U4MdElreqUA4PDq4mChQqrG2oJWM
H21cEtCBihw=
-----END CERTIFICATE-----
Generated at Fri Sep 19 02:46:29 2025 by rpki-client