Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a3a2f33322d3438203d3e20323632373235.roa
File:                     323830343a333336303a3a2f33322d3438203d3e20323632373235.roa (raw, json)
Hash identifier:          iZRZHxag0+tPBMVhvuUKsY7/fLV/sxx+xABdX823i5g=
Subject key identifier:   D0:44:24:51:A0:D6:84:D3:E5:68:4D:7E:A4:A6:72:BE:0C:59:62:77
Certificate issuer:       /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
Certificate serial:       2000A423EFA0E9E69AE36EA3B1CED5890C710478
Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a3a2f33322d3438203d3e20323632373235.roa
Signing time:             Tue 14 Oct 2025 16:39:00 +0000
ROA not before:           Tue 14 Oct 2025 16:34:00 +0000
ROA not after:            Tue 13 Oct 2026 16:39:00 +0000
asID:                     262725
IP address blocks:        2804:3360::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl
                          rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:00:a4:23:ef:a0:e9:e6:9a:e3:6e:a3:b1:ce:d5:89:0c:71:04:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
        Validity
            Not Before: Oct 14 16:34:00 2025 GMT
            Not After : Oct 13 16:39:00 2026 GMT
        Subject: CN=D0442451A0D684D3E5684D7EA4A672BE0C596277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:95:c8:c1:ad:a0:5d:ef:44:8f:56:64:fc:7b:
                    5b:b8:8e:cb:78:4e:05:38:41:76:d6:c3:c0:df:83:
                    3f:e2:4c:69:d4:77:f6:13:38:4d:6d:89:0a:6f:0d:
                    cc:c8:e3:a3:32:12:f5:64:7d:0a:b3:fb:19:26:2c:
                    e6:1b:b9:7e:f5:17:3d:f5:d5:32:15:0f:0f:a1:35:
                    eb:80:02:d9:61:2d:3c:12:88:59:76:af:e2:73:0a:
                    ff:4b:e4:c1:bc:10:c9:5f:62:be:7d:b0:8d:d8:1c:
                    d3:ee:b7:39:94:d9:fa:2c:c2:dd:c6:1a:07:9e:90:
                    40:69:cc:7d:fd:39:58:3c:f5:32:fd:16:f7:0b:aa:
                    a9:3c:e7:70:d0:10:58:94:f9:c5:5f:e1:af:03:5b:
                    9d:c5:72:51:91:26:50:23:30:f7:9b:7d:87:31:34:
                    66:be:ea:67:89:2c:bf:86:71:5a:41:6b:6c:89:03:
                    95:12:f2:fd:d3:58:e6:7b:91:66:76:6d:6a:e1:43:
                    19:34:5a:c3:27:5c:cb:0e:e0:9b:8e:c5:d1:04:45:
                    6e:21:86:89:3d:cf:02:26:18:20:16:bb:d0:54:5d:
                    a5:9a:d5:88:7f:f9:48:13:54:2f:2e:79:ac:55:3d:
                    37:bd:14:31:6e:78:56:86:e9:ec:f6:c9:5b:c2:b6:
                    3c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:44:24:51:A0:D6:84:D3:E5:68:4D:7E:A4:A6:72:BE:0C:59:62:77
            X509v3 Authority Key Identifier:
                keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a3a2f33322d3438203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:11:4c:49:16:97:c5:df:d2:35:56:63:e1:a8:d3:23:a0:e1:
         88:a2:ba:27:ef:fa:42:ca:76:2f:c9:29:24:f4:e2:9d:e9:4f:
         fb:2d:e7:40:51:60:d6:ef:ee:bb:c5:4b:2c:94:9f:60:80:96:
         c6:0f:18:0c:f8:f0:23:5c:db:35:37:6c:8b:e2:b3:02:a2:c3:
         96:d7:ba:98:1f:7b:e7:fe:cf:01:ff:9b:65:f5:66:fc:63:4b:
         c2:74:47:af:49:bc:5d:29:f4:5a:96:f7:5f:1c:12:8d:3c:e1:
         e1:8b:09:14:32:46:f3:8f:1d:30:54:bb:89:61:3e:11:57:d6:
         bc:e2:82:27:48:07:b1:1f:18:ee:af:7a:6a:0a:7a:27:84:28:
         a6:bf:a3:ff:0e:82:21:05:0f:e6:d8:8b:74:d1:0e:8b:27:1f:
         3d:41:51:66:84:d8:be:d0:a5:d6:7f:a4:73:fc:a8:52:9f:55:
         f6:d2:30:c1:54:f0:eb:e0:d7:a7:d4:10:e0:dc:9e:85:7b:98:
         e2:63:2e:03:7e:66:59:5d:75:6e:c3:57:c8:72:62:3b:0d:70:
         0b:9b:5b:10:1b:37:63:f0:14:a6:b9:7c:d2:9c:cc:ab:11:b4:
         6a:e0:f2:f9:90:4d:a8:4e:87:0e:fa:25:84:ef:91:ba:a7:12:
         4d:d7:55:80
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIACkI++g6eaa426jsc7ViQxxBHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNEOTlEOThCRkQ5OTNDQjdERTQyODRDRDBCODM0QkRB
QTFGQjc2ODAeFw0yNTEwMTQxNjM0MDBaFw0yNjEwMTMxNjM5MDBaMDMxMTAvBgNV
BAMTKEQwNDQyNDUxQTBENjg0RDNFNTY4NEQ3RUE0QTY3MkJFMEM1OTYyNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKlcjBraBd70SPVmT8e1u4jst4
TgU4QXbWw8Dfgz/iTGnUd/YTOE1tiQpvDczI46MyEvVkfQqz+xkmLOYbuX71Fz31
1TIVDw+hNeuAAtlhLTwSiFl2r+JzCv9L5MG8EMlfYr59sI3YHNPutzmU2foswt3G
GgeekEBpzH39OVg89TL9FvcLqqk853DQEFiU+cVf4a8DW53FclGRJlAjMPebfYcx
NGa+6meJLL+GcVpBa2yJA5US8v3TWOZ7kWZ2bWrhQxk0WsMnXMsO4JuOxdEERW4h
hok9zwImGCAWu9BUXaWa1Yh/+UgTVC8ueaxVPTe9FDFueFaG6ez2yVvCtjwhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU0EQkUaDWhNPlaE1+pKZyvgxZYncwHwYDVR0j
BBgwFoAUM9mdmL/Zk8t95ChM0Lg0vaoft2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNO
VVIvMC8zM0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5RDk4QkZEOTkzQ0I3
REU0Mjg0Q0QwQjgzNEJEQUExRkI3NjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLWGthbjFQMXhjN0pOSmp0UGVMVG1zR0dRdDhpZlJ0VlpQWVR1cmkzTlVSLzAv
MzIzODMwMzQzYTMzMzMzNjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjMy
MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQzYDANBgkqhkiG9w0BAQsFAAOCAQEAihFMSRaX
xd/SNVZj4ajTI6DhiKK6J+/6Qsp2L8kpJPTinelP+y3nQFFg1u/uu8VLLJSfYICW
xg8YDPjwI1zbNTdsi+KzAqLDlte6mB975/7PAf+bZfVm/GNLwnRHr0m8XSn0Wpb3
XxwSjTzh4YsJFDJG848dMFS7iWE+EVfWvOKCJ0gHsR8Y7q96agp6J4Qopr+j/w6C
IQUP5tiLdNEOiycfPUFRZoTYvtCl1n+kc/yoUp9V9tIwwVTw6+DXp9QQ4NyehXuY
4mMuA35mWV11bsNXyHJiOw1wC5tbEBs3Y/AUprl80pzMqxG0auDy+ZBNqE6HDvol
hO+RuqcSTddVgA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 05:52:36 2025 by rpki-client