Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/323830343a383366383a3a2f33362d3438203d3e20323732323331.roa
File:                     323830343a383366383a3a2f33362d3438203d3e20323732323331.roa (raw, json)
Hash identifier:          SJ/9XRh/S3JcAR+UzZfvI9vhztzX1uE4KCpPNvs90PA=
Subject key identifier:   63:F0:B6:99:C7:FD:E6:8E:A3:E8:AC:11:28:5E:D1:D7:A6:0A:08:E0
Certificate issuer:       /CN=0A599CD5A640A0E3A544CCB6B190F72359D610B2
Certificate serial:       35B24DACFDA0545F0EC9D252F23E3564B8292895
Authority key identifier: 0A:59:9C:D5:A6:40:A0:E3:A5:44:CC:B6:B1:90:F7:23:59:D6:10:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A599CD5A640A0E3A544CCB6B190F72359D610B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/323830343a383366383a3a2f33362d3438203d3e20323732323331.roa
Signing time:             Wed 16 Jul 2025 22:03:48 +0000
ROA not before:           Wed 16 Jul 2025 21:58:48 +0000
ROA not after:            Wed 15 Jul 2026 22:03:48 +0000
asID:                     272231
IP address blocks:        2804:83f8::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.crl
                          rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A599CD5A640A0E3A544CCB6B190F72359D610B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b2:4d:ac:fd:a0:54:5f:0e:c9:d2:52:f2:3e:35:64:b8:29:28:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A599CD5A640A0E3A544CCB6B190F72359D610B2
        Validity
            Not Before: Jul 16 21:58:48 2025 GMT
            Not After : Jul 15 22:03:48 2026 GMT
        Subject: CN=63F0B699C7FDE68EA3E8AC11285ED1D7A60A08E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6c:46:69:6d:38:22:e9:77:53:2e:04:d8:d6:
                    f5:b3:ac:2e:5b:86:05:bb:c8:31:90:4b:70:7f:56:
                    a2:04:83:7b:97:31:56:08:98:de:78:7c:23:ff:63:
                    39:c0:75:16:8e:3d:1a:4b:94:07:6b:bc:ce:5d:32:
                    fd:4f:12:e3:c0:ab:1c:86:f6:c0:3b:6b:0c:65:25:
                    45:6b:25:ec:4f:98:15:02:0c:3a:58:57:d0:25:a3:
                    dd:92:2c:e5:cf:2d:97:a7:9c:31:4d:87:ae:28:bb:
                    89:e4:2e:02:4f:7c:e6:eb:13:92:06:0a:f5:6c:fe:
                    04:5a:3a:ea:19:ac:f4:4f:80:4f:2f:d5:44:c0:12:
                    44:84:04:e3:d8:29:40:ad:51:4c:c0:73:93:50:cc:
                    28:1a:41:11:4e:5f:f2:d2:bc:40:e8:6e:e6:77:c7:
                    00:b1:38:d1:ec:51:73:ad:cf:41:9c:fd:18:7b:30:
                    a5:0e:1f:3e:1f:32:9e:d8:f9:bb:44:ee:f3:34:d2:
                    4c:6a:03:95:16:2b:d3:a4:6d:d8:39:68:a4:7d:88:
                    af:50:85:96:7b:c5:10:b9:06:34:67:ae:53:2b:21:
                    e0:b5:f4:7f:e9:03:16:9e:4a:ee:1a:f9:e0:85:63:
                    0b:12:94:f6:a7:da:2c:4c:ca:24:e7:bf:27:e6:cb:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F0:B6:99:C7:FD:E6:8E:A3:E8:AC:11:28:5E:D1:D7:A6:0A:08:E0
            X509v3 Authority Key Identifier:
                keyid:0A:59:9C:D5:A6:40:A0:E3:A5:44:CC:B6:B1:90:F7:23:59:D6:10:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/0A599CD5A640A0E3A544CCB6B190F72359D610B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A599CD5A640A0E3A544CCB6B190F72359D610B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95HUmrj4nwvDmqEZCVXuBG18KMMHpGL938YJQsCe5qB8/0/323830343a383366383a3a2f33362d3438203d3e20323732323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83f8::/36

    Signature Algorithm: sha256WithRSAEncryption
         62:8e:bd:3c:5f:46:71:c7:06:8a:f1:dc:f5:ad:59:42:28:b3:
         37:e7:0d:67:c9:e9:db:d2:90:9d:ec:af:49:94:d8:77:e6:6c:
         4c:36:c0:1a:25:62:18:43:13:4a:82:ca:6f:78:9f:cb:b3:5e:
         52:4c:00:cf:da:75:13:bd:73:14:10:48:15:03:fc:41:c5:69:
         3f:9c:9e:da:67:e5:2f:2b:27:f3:61:a1:73:40:45:da:bf:56:
         ae:01:71:06:ae:49:87:cc:9a:f1:24:60:01:ce:b5:04:8b:9b:
         ef:ad:cd:67:3a:a2:45:87:cb:d2:5f:cd:77:4f:36:a0:87:10:
         22:35:1f:c1:d5:10:cf:b8:ee:c7:a6:07:1a:28:37:09:2f:d1:
         e1:eb:cf:ff:9d:8e:6d:bf:38:1b:bb:50:d4:75:91:93:57:3d:
         59:77:0b:86:c9:d3:78:97:b9:0f:a3:c0:a2:e3:9a:0e:ff:ee:
         9e:91:f8:04:31:54:84:60:a5:97:47:2a:a8:6b:db:81:eb:70:
         10:ca:87:c2:a7:50:43:30:23:96:57:0c:32:ae:29:8f:51:bb:
         d6:62:a4:ec:ec:25:1c:fb:8d:94:64:8b:25:f5:fa:48:56:81:
         97:9b:b3:62:5e:af:e2:c1:f2:af:35:d8:9d:67:d4:bb:a0:fb:
         2d:07:c1:f3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNbJNrP2gVF8OydJS8j41ZLgpKJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE1OTlDRDVBNjQwQTBFM0E1NDRDQ0I2QjE5MEY3MjM1
OUQ2MTBCMjAeFw0yNTA3MTYyMTU4NDhaFw0yNjA3MTUyMjAzNDhaMDMxMTAvBgNV
BAMTKDYzRjBCNjk5QzdGREU2OEVBM0U4QUMxMTI4NUVEMUQ3QTYwQTA4RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPbEZpbTgi6XdTLgTY1vWzrC5b
hgW7yDGQS3B/VqIEg3uXMVYImN54fCP/YznAdRaOPRpLlAdrvM5dMv1PEuPAqxyG
9sA7awxlJUVrJexPmBUCDDpYV9Alo92SLOXPLZennDFNh64ou4nkLgJPfObrE5IG
CvVs/gRaOuoZrPRPgE8v1UTAEkSEBOPYKUCtUUzAc5NQzCgaQRFOX/LSvEDobuZ3
xwCxONHsUXOtz0Gc/Rh7MKUOHz4fMp7Y+btE7vM00kxqA5UWK9Okbdg5aKR9iK9Q
hZZ7xRC5BjRnrlMrIeC19H/pAxaeSu4a+eCFYwsSlPan2ixMyiTnvyfmy7ArAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUY/C2mcf95o6j6KwRKF7R16YKCOAwHwYDVR0j
BBgwFoAUClmc1aZAoOOlRMy2sZD3I1nWELIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTVIVW1yajRud3ZEbXFFWkNWWHVCRzE4S01NSHBHTDkzOFlKUXNDZTVx
QjgvMC8wQTU5OUNENUE2NDBBMEUzQTU0NENDQjZCMTkwRjcyMzU5RDYxMEIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBNTk5Q0Q1QTY0MEEwRTNB
NTQ0Q0NCNkIxOTBGNzIzNTlENjEwQjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk1SFVtcmo0bnd2RG1xRVpDVlh1QkcxOEtNTUhwR0w5MzhZSlFzQ2U1cUI4LzAv
MzIzODMwMzQzYTM4MzM2NjM4M2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIzNzMy
MzIzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKASD+AAwDQYJKoZIhvcNAQELBQADggEBAGKOvTxf
RnHHBorx3PWtWUIoszfnDWfJ6dvSkJ3sr0mU2HfmbEw2wBolYhhDE0qCym94n8uz
XlJMAM/adRO9cxQQSBUD/EHFaT+cntpn5S8rJ/NhoXNARdq/Vq4BcQauSYfMmvEk
YAHOtQSLm++tzWc6okWHy9JfzXdPNqCHECI1H8HVEM+47semBxooNwkv0eHrz/+d
jm2/OBu7UNR1kZNXPVl3C4bJ03iXuQ+jwKLjmg7/7p6R+AQxVIRgpZdHKqhr24Hr
cBDKh8KnUEMwI5ZXDDKuKY9Ru9ZipOzsJRz7jZRkiyX1+khWgZebs2Jer+LB8q81
2J1n1Lug+y0HwfM=
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:43:53 2025 by rpki-client