Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a343030303a3a2f33342d3334203d3e20323634393939.roa
File:                     323830343a333133303a343030303a3a2f33342d3334203d3e20323634393939.roa (raw, json)
Hash identifier:          NEN2J6R/nKH++laA5jFiUK5WvZIMmvkO2IevtPDiI4Q=
Subject key identifier:   92:F7:1C:73:CF:E8:F8:04:0E:01:73:A2:DC:83:48:A1:5A:8E:1B:97
Certificate issuer:       /CN=96EC498898251C1501401F3A18522521C4648127
Certificate serial:       4D14EE3F451AA4522FA17B98BB2A87654AEF8B5B
Authority key identifier: 96:EC:49:88:98:25:1C:15:01:40:1F:3A:18:52:25:21:C4:64:81:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96EC498898251C1501401F3A18522521C4648127.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a343030303a3a2f33342d3334203d3e20323634393939.roa
Signing time:             Tue 08 Jul 2025 22:33:32 +0000
ROA not before:           Tue 08 Jul 2025 22:28:32 +0000
ROA not after:            Tue 07 Jul 2026 22:33:32 +0000
asID:                     264999
IP address blocks:        2804:3130:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/96EC498898251C1501401F3A18522521C4648127.crl
                          rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/96EC498898251C1501401F3A18522521C4648127.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96EC498898251C1501401F3A18522521C4648127.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 01:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:14:ee:3f:45:1a:a4:52:2f:a1:7b:98:bb:2a:87:65:4a:ef:8b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96EC498898251C1501401F3A18522521C4648127
        Validity
            Not Before: Jul  8 22:28:32 2025 GMT
            Not After : Jul  7 22:33:32 2026 GMT
        Subject: CN=92F71C73CFE8F8040E0173A2DC8348A15A8E1B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:30:86:94:2d:cb:f9:81:8e:f2:02:21:bc:74:
                    54:af:79:e4:a7:ea:7a:af:0a:6a:27:8b:1f:6a:56:
                    50:ea:4c:9e:e4:1d:bb:89:65:8c:24:2f:62:43:04:
                    6a:98:95:ae:94:7f:ce:54:91:64:10:30:e6:7d:96:
                    72:77:5b:67:96:17:6e:40:a2:03:db:28:f7:90:7e:
                    0c:67:a9:90:1a:bf:44:e3:a8:18:c2:8a:d2:6c:86:
                    52:49:b0:83:02:be:a0:56:8d:ae:59:cb:3f:a8:cc:
                    b1:e5:e4:48:1d:94:8b:be:b4:dc:64:0a:17:ad:16:
                    d5:64:32:49:51:ad:33:d5:56:41:04:7e:50:be:06:
                    a0:e1:13:e2:e0:b9:fc:36:3c:be:03:d2:cf:40:48:
                    34:a9:4d:2d:db:0c:17:f7:be:45:b0:71:da:e0:81:
                    64:60:8e:01:d4:68:29:ea:84:eb:74:1c:8f:4e:61:
                    51:8a:f9:df:83:ba:42:c6:55:27:fb:fb:ad:3d:21:
                    5b:eb:d3:a1:ba:c7:d2:56:08:f3:b4:ea:c6:4b:e0:
                    d2:88:5a:bc:b0:9f:c6:f6:88:cc:fc:f6:6c:dd:8b:
                    66:c2:4f:f1:d6:fe:da:72:a3:00:29:23:93:e1:46:
                    e5:d6:e3:6d:2a:39:3d:a3:c5:7d:88:21:44:58:02:
                    7a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F7:1C:73:CF:E8:F8:04:0E:01:73:A2:DC:83:48:A1:5A:8E:1B:97
            X509v3 Authority Key Identifier:
                keyid:96:EC:49:88:98:25:1C:15:01:40:1F:3A:18:52:25:21:C4:64:81:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/96EC498898251C1501401F3A18522521C4648127.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96EC498898251C1501401F3A18522521C4648127.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/323830343a333133303a343030303a3a2f33342d3334203d3e20323634393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3130:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         61:47:b1:bf:3c:3c:ea:21:cf:33:78:61:06:2b:b3:cd:20:07:
         49:90:63:35:28:a9:e4:c2:5f:ee:37:6b:bb:94:88:e8:8f:09:
         b3:80:05:23:de:03:92:7c:04:ef:15:04:ad:25:86:c2:9f:1b:
         5f:7e:8e:03:e6:64:33:33:2b:79:09:3d:06:ba:c6:17:cc:16:
         36:a4:ff:41:d3:f4:cc:19:ff:60:57:5a:7d:ba:48:fe:d8:03:
         9c:b7:89:be:da:5e:1c:d9:b8:d7:17:7e:8f:99:ce:7a:bb:89:
         59:e7:65:0d:27:65:d1:70:59:3f:7a:3e:46:af:73:fe:16:6f:
         fe:75:0f:6d:18:a9:1b:6d:7d:3b:d5:09:a1:1e:b5:6c:f2:c3:
         bc:47:e1:ca:e1:1b:aa:7b:6a:86:49:80:d9:44:b7:22:82:1b:
         58:cf:40:1a:ed:d5:71:5c:0d:38:a1:99:03:82:cc:1f:98:65:
         18:d5:4a:86:ef:c4:29:81:69:a2:27:34:0d:35:b5:75:4d:d9:
         df:b2:d9:aa:e2:a9:0f:24:98:4a:a7:e4:92:dd:30:5c:90:e2:
         c8:20:f5:5e:4a:84:65:42:4a:32:22:09:18:9a:f0:23:9a:8c:
         06:a5:7a:06:0b:bb:04:c3:ac:62:46:7b:bc:50:a2:07:88:e8:
         c6:1a:36:80
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUTRTuP0UapFIvoXuYuyqHZUrvi1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZFQzQ5ODg5ODI1MUMxNTAxNDAxRjNBMTg1MjI1MjFD
NDY0ODEyNzAeFw0yNTA3MDgyMjI4MzJaFw0yNjA3MDcyMjMzMzJaMDMxMTAvBgNV
BAMTKDkyRjcxQzczQ0ZFOEY4MDQwRTAxNzNBMkRDODM0OEExNUE4RTFCOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYMIaULcv5gY7yAiG8dFSveeSn
6nqvCmonix9qVlDqTJ7kHbuJZYwkL2JDBGqYla6Uf85UkWQQMOZ9lnJ3W2eWF25A
ogPbKPeQfgxnqZAav0TjqBjCitJshlJJsIMCvqBWja5Zyz+ozLHl5EgdlIu+tNxk
ChetFtVkMklRrTPVVkEEflC+BqDhE+Lgufw2PL4D0s9ASDSpTS3bDBf3vkWwcdrg
gWRgjgHUaCnqhOt0HI9OYVGK+d+DukLGVSf7+609IVvr06G6x9JWCPO06sZL4NKI
Wrywn8b2iMz89mzdi2bCT/HW/tpyowApI5PhRuXW420qOT2jxX2IIURYAnptAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUkvccc8/o+AQOAXOi3INIoVqOG5cwHwYDVR0j
BBgwFoAUluxJiJglHBUBQB86GFIlIcRkgScwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWcxamdLMkVaNXp4b0dzRk1aRGttZVJlb2FhaVl3RW5xeDVyd1BBUXZN
eE4vMC85NkVDNDk4ODk4MjUxQzE1MDE0MDFGM0ExODUyMjUyMUM0NjQ4MTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2RUM0OTg4OTgyNTFDMTUw
MTQwMUYzQTE4NTIyNTIxQzQ2NDgxMjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VnMWpnSzJFWjV6eG9Hc0ZNWkRrbWVSZW9hYWlZd0VucXg1cndQQVF2TXhOLzAv
MzIzODMwMzQzYTMzMzEzMzMwM2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNDM5MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEMTBAMA0GCSqGSIb3DQEBCwUA
A4IBAQBhR7G/PDzqIc8zeGEGK7PNIAdJkGM1KKnkwl/uN2u7lIjojwmzgAUj3gOS
fATvFQStJYbCnxtffo4D5mQzMyt5CT0GusYXzBY2pP9B0/TMGf9gV1p9ukj+2AOc
t4m+2l4c2bjXF36Pmc56u4lZ52UNJ2XRcFk/ej5Gr3P+Fm/+dQ9tGKkbbX071Qmh
HrVs8sO8R+HK4Ruqe2qGSYDZRLcightYz0Aa7dVxXA04oZkDgswfmGUY1UqG78Qp
gWmiJzQNNbV1Tdnfstmq4qkPJJhKp+SS3TBckOLIIPVeSoRlQkoyIgkYmvAjmowG
pXoGC7sEw6xiRnu8UKIHiOjGGjaA
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:43:29 2025 by rpki-client