Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3a2f33352d3335203d3e20323638353933.roa
File:                     323830343a353339343a3a2f33352d3335203d3e20323638353933.roa (raw, json)
Hash identifier:          BwAfGbQXOo220gVqTS88PPcs/YahSegVdCEPkuzE/7Q=
Subject key identifier:   5B:57:D8:D6:51:76:E1:AE:44:F9:8A:97:AE:CA:7D:D9:38:BD:DA:61
Certificate issuer:       /CN=D96D671118BFCD5B1FA9225976AA2DE3A8A52F78
Certificate serial:       09061A9FFD89B97710A5FC0AFA59B0A16E444562
Authority key identifier: D9:6D:67:11:18:BF:CD:5B:1F:A9:22:59:76:AA:2D:E3:A8:A5:2F:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3a2f33352d3335203d3e20323638353933.roa
Signing time:             Tue 07 Oct 2025 00:53:24 +0000
ROA not before:           Tue 07 Oct 2025 00:48:24 +0000
ROA not after:            Tue 06 Oct 2026 00:53:24 +0000
asID:                     268593
IP address blocks:        2804:5394::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.crl
                          rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:06:1a:9f:fd:89:b9:77:10:a5:fc:0a:fa:59:b0:a1:6e:44:45:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D96D671118BFCD5B1FA9225976AA2DE3A8A52F78
        Validity
            Not Before: Oct  7 00:48:24 2025 GMT
            Not After : Oct  6 00:53:24 2026 GMT
        Subject: CN=5B57D8D65176E1AE44F98A97AECA7DD938BDDA61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:44:17:91:9a:20:0d:05:48:c0:4c:a0:94:a5:
                    e0:f5:b0:c2:2b:9b:f0:e2:41:f7:b7:72:fd:37:58:
                    cd:f6:bb:34:f5:8a:64:21:c6:10:c3:66:04:14:a9:
                    95:eb:8b:43:f4:79:79:a7:c5:49:a3:29:e0:23:96:
                    14:9a:58:cc:ab:8f:24:84:73:e0:32:66:51:db:e4:
                    d3:ae:77:cf:94:35:cd:b1:2f:50:ec:7e:44:a8:6d:
                    2c:34:68:fa:73:fa:e0:ae:48:4a:19:54:42:06:62:
                    61:4d:7d:1d:70:23:ce:28:a4:03:5a:b9:ab:a4:64:
                    b7:f6:4a:e8:51:ec:ca:98:97:a9:75:d8:70:7c:99:
                    77:07:bf:6a:e8:0e:3f:36:a9:b1:84:a5:a6:a6:69:
                    f8:14:24:de:08:c1:94:5b:0e:e7:9d:67:f5:e9:a9:
                    bc:23:1e:bc:3d:63:a3:b0:87:66:2f:e9:28:43:41:
                    f8:e4:0f:5e:9b:e3:c1:e9:f1:b4:a1:a7:99:4b:63:
                    ae:81:20:73:cd:52:01:36:8c:87:51:22:2c:97:89:
                    a3:5f:56:82:77:1c:4c:72:19:fb:30:97:9f:fa:85:
                    9b:84:27:76:f1:33:b8:fb:e0:93:ba:1d:4e:bd:78:
                    ef:b9:fb:cf:05:6a:73:03:60:cc:f5:04:78:47:a9:
                    3f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:57:D8:D6:51:76:E1:AE:44:F9:8A:97:AE:CA:7D:D9:38:BD:DA:61
            X509v3 Authority Key Identifier:
                keyid:D9:6D:67:11:18:BF:CD:5B:1F:A9:22:59:76:AA:2D:E3:A8:A5:2F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3a2f33352d3335203d3e20323638353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5394::/35

    Signature Algorithm: sha256WithRSAEncryption
         e3:8a:75:f3:43:89:e5:26:5b:5d:15:a9:ae:2d:fd:f3:1f:53:
         f9:30:f2:c2:a7:91:08:07:2d:6e:e9:b2:d8:37:4a:3c:66:ac:
         7e:2c:de:99:3f:79:fb:ec:df:64:1b:1e:57:cb:8b:0f:eb:73:
         56:51:ec:b2:92:bd:0f:61:06:a4:e0:50:f0:93:53:93:65:ce:
         8d:22:ab:5e:98:a9:3a:c1:50:66:f2:fc:6a:ae:70:76:bd:c7:
         4d:98:f4:1f:58:a3:cf:9e:bf:ac:2c:b3:fe:78:85:9e:d5:93:
         1c:82:84:b0:58:7f:38:d9:51:1f:2a:16:4c:1a:2c:dc:51:2e:
         58:0c:6d:87:d1:1d:be:ea:70:63:50:93:7e:61:ab:0e:6c:d5:
         76:71:75:97:37:5b:06:76:18:87:c1:ef:84:a2:b3:03:a7:53:
         5e:f4:61:28:a2:13:18:18:b8:a3:31:a7:ff:40:e4:44:bb:3f:
         5b:dd:79:9e:b6:00:4d:c6:14:29:65:11:1d:6e:ea:24:ad:71:
         26:97:10:af:c3:72:78:34:a4:59:4f:65:8c:eb:b2:f8:26:2b:
         fe:e1:c9:64:c4:51:96:d0:85:4b:f8:13:14:28:0e:89:ec:06:
         ff:f8:5d:47:fa:9d:99:5d:5b:c7:23:e6:c0:7c:6d:d8:0a:e1:
         57:fb:33:b6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCQYan/2JuXcQpfwK+lmwoW5ERWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk2RDY3MTExOEJGQ0Q1QjFGQTkyMjU5NzZBQTJERTNB
OEE1MkY3ODAeFw0yNTEwMDcwMDQ4MjRaFw0yNjEwMDYwMDUzMjRaMDMxMTAvBgNV
BAMTKDVCNTdEOEQ2NTE3NkUxQUU0NEY5OEE5N0FFQ0E3REQ5MzhCRERBNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURBeRmiANBUjATKCUpeD1sMIr
m/DiQfe3cv03WM32uzT1imQhxhDDZgQUqZXri0P0eXmnxUmjKeAjlhSaWMyrjySE
c+AyZlHb5NOud8+UNc2xL1DsfkSobSw0aPpz+uCuSEoZVEIGYmFNfR1wI84opANa
uaukZLf2SuhR7MqYl6l12HB8mXcHv2roDj82qbGEpaamafgUJN4IwZRbDuedZ/Xp
qbwjHrw9Y6Owh2Yv6ShDQfjkD16b48Hp8bShp5lLY66BIHPNUgE2jIdRIiyXiaNf
VoJ3HExyGfswl5/6hZuEJ3bxM7j74JO6HU69eO+5+88FanMDYMz1BHhHqT9DAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUW1fY1lF24a5E+YqXrsp92Ti92mEwHwYDVR0j
BBgwFoAU2W1nERi/zVsfqSJZdqot46ilL3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1RQdXJqUERtOEE3RVkxWkxMckppbm0xRVBjajZLdHBOR2dvMVNGNU13
eW4vMC9EOTZENjcxMTE4QkZDRDVCMUZBOTIyNTk3NkFBMkRFM0E4QTUyRjc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NkQ2NzExMThCRkNENUIx
RkE5MjI1OTc2QUEyREUzQThBNTJGNzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNUUHVyalBEbThBN0VZMVpMTHJKaW5tMUVQY2o2S3RwTkdnbzFTRjVNd3luLzAv
MzIzODMwMzQzYTM1MzMzOTM0M2EzYTJmMzMzNTJkMzMzNTIwM2QzZTIwMzIzNjM4
MzUzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYFKARTlAAwDQYJKoZIhvcNAQELBQADggEBAOOKdfND
ieUmW10Vqa4t/fMfU/kw8sKnkQgHLW7pstg3SjxmrH4s3pk/efvs32QbHlfLiw/r
c1ZR7LKSvQ9hBqTgUPCTU5Nlzo0iq16YqTrBUGby/GqucHa9x02Y9B9Yo8+ev6ws
s/54hZ7VkxyChLBYfzjZUR8qFkwaLNxRLlgMbYfRHb7qcGNQk35hqw5s1XZxdZc3
WwZ2GIfB74SiswOnU170YSiiExgYuKMxp/9A5ES7P1vdeZ62AE3GFCllER1u6iSt
cSaXEK/Dcng0pFlPZYzrsvgmK/7hyWTEUZbQhUv4ExQoDonsBv/4XUf6nZldW8cj
5sB8bdgK4Vf7M7Y=
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:02:19 2025 by rpki-client