Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3a2f33362d3336203d3e20323638353933.roa
File:                     323830343a353339343a3a2f33362d3336203d3e20323638353933.roa (raw, json)
Hash identifier:          kTx0ZMkuE0pBvMDkwXFFFx+fN1SoWTHTMWpU77Cy2II=
Subject key identifier:   8C:9D:55:6F:15:CE:D2:64:82:F5:84:39:90:06:07:30:23:36:6C:33
Certificate issuer:       /CN=D96D671118BFCD5B1FA9225976AA2DE3A8A52F78
Certificate serial:       63E9A7F8798FA93F1F24ABEFC47B053F37CCD298
Authority key identifier: D9:6D:67:11:18:BF:CD:5B:1F:A9:22:59:76:AA:2D:E3:A8:A5:2F:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3a2f33362d3336203d3e20323638353933.roa
Signing time:             Tue 07 Oct 2025 00:53:25 +0000
ROA not before:           Tue 07 Oct 2025 00:48:25 +0000
ROA not after:            Tue 06 Oct 2026 00:53:25 +0000
asID:                     268593
IP address blocks:        2804:5394::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.crl
                          rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e9:a7:f8:79:8f:a9:3f:1f:24:ab:ef:c4:7b:05:3f:37:cc:d2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D96D671118BFCD5B1FA9225976AA2DE3A8A52F78
        Validity
            Not Before: Oct  7 00:48:25 2025 GMT
            Not After : Oct  6 00:53:25 2026 GMT
        Subject: CN=8C9D556F15CED26482F584399006073023366C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:42:ed:02:e4:83:da:61:5b:5a:db:34:37:
                    47:4a:c6:73:6a:51:d5:50:4b:05:17:5c:95:78:c1:
                    9a:84:fe:97:43:c1:7b:13:2c:18:13:a8:6b:9e:29:
                    12:fd:d4:be:ef:37:66:32:98:35:94:78:1f:da:1c:
                    16:85:00:8d:2b:f7:d3:bb:c7:cc:2f:c7:b4:63:9c:
                    66:b3:71:c6:9e:6e:56:87:3d:45:dd:3a:2c:08:f7:
                    bb:00:91:12:01:9c:86:fc:7d:ee:ce:13:15:34:c5:
                    0f:c9:cb:a7:1b:bb:3c:ad:39:2e:e6:03:09:b1:25:
                    dc:b7:91:ff:ab:5b:d5:dd:ad:69:5c:ae:1c:8a:76:
                    01:29:e5:53:ac:57:8a:b8:66:68:d8:b2:f4:f9:d4:
                    b5:be:75:30:49:27:cb:32:81:dc:d3:32:19:09:ed:
                    ff:7b:da:7d:df:b3:23:b4:94:22:ab:22:04:bc:73:
                    65:05:31:34:07:de:2e:2c:18:fb:6d:a4:ed:e2:99:
                    d9:ca:d6:92:14:e2:a9:7e:47:d5:fe:5f:38:91:78:
                    0d:96:52:fb:1e:5a:98:3f:a5:50:a2:74:97:4e:18:
                    51:95:4e:b0:ca:a9:c3:02:29:4e:2c:ac:0f:50:db:
                    88:9e:7a:32:42:5a:5c:cd:30:d2:80:9d:fd:16:48:
                    39:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9D:55:6F:15:CE:D2:64:82:F5:84:39:90:06:07:30:23:36:6C:33
            X509v3 Authority Key Identifier:
                keyid:D9:6D:67:11:18:BF:CD:5B:1F:A9:22:59:76:AA:2D:E3:A8:A5:2F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3a2f33362d3336203d3e20323638353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5394::/36

    Signature Algorithm: sha256WithRSAEncryption
         78:0d:b1:98:84:cf:e3:01:3d:a4:c6:fe:96:3b:93:d3:d1:2d:
         3d:e2:d1:79:56:83:46:f4:66:f8:93:64:b7:78:85:73:45:8b:
         2d:ea:d0:6e:a7:90:57:c9:9f:60:e1:90:65:90:01:40:82:34:
         c3:cd:e7:82:5c:43:d6:b3:ad:78:37:f2:1d:03:43:2c:a2:5e:
         4f:06:dd:d6:2f:2b:48:6e:37:14:15:3b:28:6a:63:e9:6c:34:
         83:f0:f9:a2:eb:be:b2:d8:13:b1:c5:08:ef:26:07:ff:ae:60:
         f4:ef:99:26:de:7b:d5:aa:c1:21:48:84:b7:01:57:d6:3d:7a:
         54:8b:3b:e5:db:a5:72:f3:d7:3d:b8:e4:ff:a4:0f:92:a0:49:
         5a:c7:50:d2:52:ba:0f:8b:e0:38:d0:d1:e1:37:03:db:40:b1:
         a6:75:8d:2b:a6:27:0a:8c:52:bf:8e:21:ee:81:53:39:e4:24:
         68:fd:6a:9a:0e:cd:dc:2a:54:79:ca:3d:f4:51:53:f2:23:b7:
         8c:6e:bf:50:53:2f:1d:33:34:ff:32:2c:d2:f0:0a:ba:2b:f5:
         8e:97:90:44:c4:46:7d:e0:b8:24:4a:7b:11:33:91:64:44:23:
         cc:67:16:a5:28:bf:6e:c6:25:ed:9b:aa:ec:33:55:62:2b:5e:
         12:b1:23:6c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY+mn+HmPqT8fJKvvxHsFPzfM0pgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk2RDY3MTExOEJGQ0Q1QjFGQTkyMjU5NzZBQTJERTNB
OEE1MkY3ODAeFw0yNTEwMDcwMDQ4MjVaFw0yNjEwMDYwMDUzMjVaMDMxMTAvBgNV
BAMTKDhDOUQ1NTZGMTVDRUQyNjQ4MkY1ODQzOTkwMDYwNzMwMjMzNjZDMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13ULtAuSD2mFbWts0N0dKxnNq
UdVQSwUXXJV4wZqE/pdDwXsTLBgTqGueKRL91L7vN2YymDWUeB/aHBaFAI0r99O7
x8wvx7RjnGazccaeblaHPUXdOiwI97sAkRIBnIb8fe7OExU0xQ/Jy6cbuzytOS7m
AwmxJdy3kf+rW9XdrWlcrhyKdgEp5VOsV4q4ZmjYsvT51LW+dTBJJ8sygdzTMhkJ
7f972n3fsyO0lCKrIgS8c2UFMTQH3i4sGPttpO3imdnK1pIU4ql+R9X+XziReA2W
UvseWpg/pVCidJdOGFGVTrDKqcMCKU4srA9Q24ieejJCWlzNMNKAnf0WSDkxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjJ1VbxXO0mSC9YQ5kAYHMCM2bDMwHwYDVR0j
BBgwFoAU2W1nERi/zVsfqSJZdqot46ilL3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1RQdXJqUERtOEE3RVkxWkxMckppbm0xRVBjajZLdHBOR2dvMVNGNU13
eW4vMC9EOTZENjcxMTE4QkZDRDVCMUZBOTIyNTk3NkFBMkRFM0E4QTUyRjc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NkQ2NzExMThCRkNENUIx
RkE5MjI1OTc2QUEyREUzQThBNTJGNzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNUUHVyalBEbThBN0VZMVpMTHJKaW5tMUVQY2o2S3RwTkdnbzFTRjVNd3luLzAv
MzIzODMwMzQzYTM1MzMzOTM0M2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIzNjM4
MzUzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKARTlAAwDQYJKoZIhvcNAQELBQADggEBAHgNsZiE
z+MBPaTG/pY7k9PRLT3i0XlWg0b0ZviTZLd4hXNFiy3q0G6nkFfJn2DhkGWQAUCC
NMPN54JcQ9azrXg38h0DQyyiXk8G3dYvK0huNxQVOyhqY+lsNIPw+aLrvrLYE7HF
CO8mB/+uYPTvmSbee9WqwSFIhLcBV9Y9elSLO+XbpXLz1z245P+kD5KgSVrHUNJS
ug+L4DjQ0eE3A9tAsaZ1jSumJwqMUr+OIe6BUznkJGj9apoOzdwqVHnKPfRRU/Ij
t4xuv1BTLx0zNP8yLNLwCror9Y6XkETERn3guCRKexEzkWREI8xnFqUov27GJe2b
quwzVWIrXhKxI2w=
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:02:18 2025 by rpki-client