Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/323830343a3935633a3a2f33322d3438203d3e203238363534.roa
File:                     323830343a3935633a3a2f33322d3438203d3e203238363534.roa (raw, json)
Hash identifier:          bSv931oEWM3tPMeaLOseE5Ktkmu6E1mBH8bOEVVPwiM=
Subject key identifier:   58:C1:05:32:1A:E3:6E:58:D6:75:5B:7D:D6:D9:A2:DC:B5:2E:A4:02
Certificate issuer:       /CN=930909AA3662DF88849EF968F649C7749F3E8DAF
Certificate serial:       47C866347D53253F274B9136F97AB3857C0740C0
Authority key identifier: 93:09:09:AA:36:62:DF:88:84:9E:F9:68:F6:49:C7:74:9F:3E:8D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/930909AA3662DF88849EF968F649C7749F3E8DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/323830343a3935633a3a2f33322d3438203d3e203238363534.roa
Signing time:             Wed 23 Jul 2025 15:00:59 +0000
ROA not before:           Wed 23 Jul 2025 14:55:59 +0000
ROA not after:            Wed 22 Jul 2026 15:00:59 +0000
asID:                     28654
IP address blocks:        2804:95c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/930909AA3662DF88849EF968F649C7749F3E8DAF.crl
                          rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/930909AA3662DF88849EF968F649C7749F3E8DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/930909AA3662DF88849EF968F649C7749F3E8DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 13:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c8:66:34:7d:53:25:3f:27:4b:91:36:f9:7a:b3:85:7c:07:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930909AA3662DF88849EF968F649C7749F3E8DAF
        Validity
            Not Before: Jul 23 14:55:59 2025 GMT
            Not After : Jul 22 15:00:59 2026 GMT
        Subject: CN=58C105321AE36E58D6755B7DD6D9A2DCB52EA402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:3a:d0:f6:fc:83:f1:90:d0:55:d1:6f:d9:
                    2e:20:35:5e:a8:dd:62:7f:05:08:01:c7:aa:3b:61:
                    42:51:0e:cf:89:22:ec:e5:7c:59:cc:04:8f:79:7c:
                    2d:7a:7c:42:6a:a4:ba:75:fc:f9:64:4d:cd:c6:05:
                    4a:bf:04:69:fe:31:37:c7:4d:14:10:44:e0:7f:9e:
                    92:65:46:25:6f:e7:c2:dd:41:ff:00:1d:de:62:17:
                    70:34:41:51:0f:56:6e:45:62:0b:0a:b9:9e:3f:21:
                    01:3b:d5:0f:f6:af:44:e6:2a:5a:4e:1a:dc:f1:a8:
                    1a:8c:32:72:f1:8c:d1:59:e0:c2:8e:38:22:f0:38:
                    7a:da:a3:ba:ae:d7:11:99:41:4e:57:56:02:73:86:
                    80:46:16:8a:0f:76:cf:6d:f9:e8:c6:14:fa:99:db:
                    71:4f:e5:3e:b4:55:bc:4a:8b:73:87:12:88:4b:ab:
                    6c:b0:35:9c:e6:8e:27:0c:7d:e5:b9:51:ea:65:89:
                    99:f4:22:0c:f0:6b:7c:d1:a3:d2:0f:bc:5b:fb:12:
                    38:94:4a:27:61:f8:43:b6:01:e1:10:3f:4d:89:23:
                    b6:4a:45:da:8d:78:8b:1b:7d:db:76:a3:28:94:d5:
                    64:40:fd:67:70:d4:1b:fe:be:f3:52:db:f7:90:ea:
                    ef:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C1:05:32:1A:E3:6E:58:D6:75:5B:7D:D6:D9:A2:DC:B5:2E:A4:02
            X509v3 Authority Key Identifier:
                keyid:93:09:09:AA:36:62:DF:88:84:9E:F9:68:F6:49:C7:74:9F:3E:8D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/930909AA3662DF88849EF968F649C7749F3E8DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/930909AA3662DF88849EF968F649C7749F3E8DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/323830343a3935633a3a2f33322d3438203d3e203238363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:95c::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:2c:9a:dd:e5:27:70:1c:37:96:32:8e:05:8d:d5:70:cd:3f:
         4e:0a:2e:96:30:9f:fe:2c:9b:93:88:bd:2b:02:ff:b4:e1:a3:
         3f:6b:ff:96:82:50:bf:1b:50:d9:c3:f5:63:33:d1:0e:6a:6f:
         11:82:82:2a:bd:71:5d:55:13:6a:e1:28:09:66:4a:ea:2b:13:
         de:05:0d:39:26:94:56:91:f7:ac:3a:7b:d4:80:4f:3e:c3:9f:
         70:ca:b1:14:99:f6:17:c7:e0:b4:9c:ae:a2:b8:3c:ea:ff:6b:
         b3:91:56:60:5c:e7:30:f1:9a:af:fb:97:4c:a6:08:4a:64:d2:
         5c:76:63:c8:fc:2e:23:5a:5a:39:8b:84:0a:7a:23:73:a3:76:
         76:e4:fe:12:2b:83:1e:75:87:3b:e1:f5:87:0d:a3:e1:62:14:
         2a:c5:da:28:9b:6c:52:21:29:a5:bf:15:4a:3e:97:c8:39:99:
         4b:9f:13:61:20:72:21:65:d6:57:5b:da:28:1c:fc:1b:93:65:
         e7:5d:50:ff:71:e5:46:d5:c4:0f:51:58:26:92:88:5c:0b:00:
         9c:bd:16:a4:03:ae:fb:2d:4a:07:f5:17:e6:dc:07:cc:99:28:
         53:46:84:bd:9d:9b:20:e4:08:6c:df:4f:e2:40:f7:53:3e:6f:
         f6:8c:a7:b1
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUR8hmNH1TJT8nS5E2+XqzhXwHQMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMwOTA5QUEzNjYyREY4ODg0OUVGOTY4RjY0OUM3NzQ5
RjNFOERBRjAeFw0yNTA3MjMxNDU1NTlaFw0yNjA3MjIxNTAwNTlaMDMxMTAvBgNV
BAMTKDU4QzEwNTMyMUFFMzZFNThENjc1NUI3REQ2RDlBMkRDQjUyRUE0MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/lDrQ9vyD8ZDQVdFv2S4gNV6o
3WJ/BQgBx6o7YUJRDs+JIuzlfFnMBI95fC16fEJqpLp1/PlkTc3GBUq/BGn+MTfH
TRQQROB/npJlRiVv58LdQf8AHd5iF3A0QVEPVm5FYgsKuZ4/IQE71Q/2r0TmKlpO
GtzxqBqMMnLxjNFZ4MKOOCLwOHrao7qu1xGZQU5XVgJzhoBGFooPds9t+ejGFPqZ
23FP5T60VbxKi3OHEohLq2ywNZzmjicMfeW5UepliZn0Igzwa3zRo9IPvFv7EjiU
Sidh+EO2AeEQP02JI7ZKRdqNeIsbfdt2oyiU1WRA/Wdw1Bv+vvNS2/eQ6u+9AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUWMEFMhrjbljWdVt91tmi3LUupAIwHwYDVR0j
BBgwFoAUkwkJqjZi34iEnvlo9knHdJ8+ja8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFBQRWR4Y2ZoYUdHM0ZvejNqTXRqRU5QZkc5S25RNUoyRjVzQkpMZXhY
NEovMC85MzA5MDlBQTM2NjJERjg4ODQ5RUY5NjhGNjQ5Qzc3NDlGM0U4REFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzMDkwOUFBMzY2MkRGODg4
NDlFRjk2OEY2NDlDNzc0OUYzRThEQUYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRQUEVkeGNmaGFHRzNGb3ozak10akVOUGZHOUtuUTVKMkY1c0JKTGV4WDRKLzAv
MzIzODMwMzQzYTM5MzU2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzgzNjM1
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAoBAlcMA0GCSqGSIb3DQEBCwUAA4IBAQBXLJrd5SdwHDeW
Mo4FjdVwzT9OCi6WMJ/+LJuTiL0rAv+04aM/a/+WglC/G1DZw/VjM9EOam8RgoIq
vXFdVRNq4SgJZkrqKxPeBQ05JpRWkfesOnvUgE8+w59wyrEUmfYXx+C0nK6iuDzq
/2uzkVZgXOcw8Zqv+5dMpghKZNJcdmPI/C4jWlo5i4QKeiNzo3Z25P4SK4MedYc7
4fWHDaPhYhQqxdoom2xSISmlvxVKPpfIOZlLnxNhIHIhZdZXW9ooHPwbk2XnXVD/
ceVG1cQPUVgmkohcCwCcvRakA677LUoH9Rfm3AfMmShTRoS9nZsg5Ahs30/iQPdT
Pm/2jKex
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:53:45 2025 by rpki-client