Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3a2f33322d313238203d3e20323637323831.roa
File:                     323830343a346231303a3a2f33322d313238203d3e20323637323831.roa (raw, json)
Hash identifier:          tCOFJPWp962RlOBLCO22Q0JeyHBfBK1s2u+rVzjRj9M=
Subject key identifier:   F1:CC:A0:A9:63:FB:D5:73:1D:84:EF:E5:22:E5:BD:99:91:82:EB:14
Certificate issuer:       /CN=0FF30EC686201018DE081110542623BAED2ADF49
Certificate serial:       70423BCA012C398B69927E5370199F2432D3EC63
Authority key identifier: 0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3a2f33322d313238203d3e20323637323831.roa
Signing time:             Tue 14 Oct 2025 18:49:12 +0000
ROA not before:           Tue 14 Oct 2025 18:44:12 +0000
ROA not after:            Tue 13 Oct 2026 18:49:12 +0000
asID:                     267281
IP address blocks:        2804:4b10::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl
                          rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:42:3b:ca:01:2c:39:8b:69:92:7e:53:70:19:9f:24:32:d3:ec:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF30EC686201018DE081110542623BAED2ADF49
        Validity
            Not Before: Oct 14 18:44:12 2025 GMT
            Not After : Oct 13 18:49:12 2026 GMT
        Subject: CN=F1CCA0A963FBD5731D84EFE522E5BD999182EB14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:4c:27:c0:18:70:bc:75:63:8a:01:18:bd:
                    aa:8e:85:83:18:f0:02:9e:68:37:bc:b4:6e:78:09:
                    28:80:9a:55:98:81:52:30:9e:04:f8:0c:11:3f:87:
                    4c:a0:ca:a4:e0:cd:60:bf:e7:82:03:40:f9:ed:b1:
                    a8:fa:99:e0:2d:fb:93:71:ca:59:42:ac:e9:83:b8:
                    f8:5f:a8:4b:2c:94:f1:0f:24:63:5f:80:41:21:66:
                    53:89:c4:23:cd:dd:42:6f:78:74:ff:d2:41:b8:14:
                    f1:3f:10:9d:03:56:ce:ba:70:22:98:ad:96:1c:db:
                    ce:ca:ce:67:01:90:6f:ba:95:ae:cb:69:8f:89:ad:
                    b5:af:d0:e6:c9:f5:7c:a6:f3:0e:00:39:e4:4c:0d:
                    f5:c1:cd:9b:d5:b3:a1:ea:28:0a:b5:fb:fd:c0:e6:
                    a4:1b:bc:c2:61:4d:94:8b:6e:f8:70:09:01:b9:bd:
                    6f:90:47:1b:7b:7c:81:ae:13:64:d8:fb:37:23:ef:
                    1a:66:3b:ac:bf:9e:25:34:82:fb:53:63:a5:10:10:
                    5c:9b:c3:52:1d:35:40:f5:cb:c4:b6:fe:1b:7b:03:
                    9b:80:ce:f3:f1:42:50:07:72:26:dd:71:40:70:a4:
                    84:0e:16:54:58:cf:d3:b5:4f:0b:53:28:6a:bb:b6:
                    c5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CC:A0:A9:63:FB:D5:73:1D:84:EF:E5:22:E5:BD:99:91:82:EB:14
            X509v3 Authority Key Identifier:
                keyid:0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3a2f33322d313238203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:ea:db:65:f5:7b:15:80:0f:9b:d7:90:10:8c:90:47:60:ac:
         94:9a:ff:81:b4:66:e7:c4:30:fa:78:5b:13:3c:15:4a:a9:74:
         a2:9f:88:01:89:27:f2:f0:d8:f0:c2:2d:46:59:ff:b3:f8:b3:
         3a:1c:5d:51:99:13:88:8f:9a:c2:85:b2:ca:e2:6e:98:08:fc:
         d0:36:e3:a0:d3:9d:b1:1b:3a:18:bb:3b:b8:a9:b8:30:94:18:
         f5:a9:90:fe:09:b4:e9:a0:b6:48:4e:31:1f:9d:71:d6:aa:30:
         16:1e:ff:62:9f:9f:3d:bb:18:37:56:52:5e:cb:29:b8:80:4f:
         c2:a1:7b:db:e3:19:4f:29:f5:4f:8c:92:e5:22:ab:f4:7b:0a:
         e3:7c:54:b9:e3:01:b4:83:d3:9f:ee:5d:59:95:c1:b0:21:d7:
         bd:0d:f2:77:b9:fa:5e:0c:fa:88:3c:1c:fa:74:84:0a:b9:96:
         29:be:8d:0c:70:08:02:eb:b4:be:9f:a7:ee:f4:e2:1e:a2:12:
         06:65:2f:58:c5:28:02:e1:bc:b3:ab:29:b2:35:d4:dd:7e:24:
         25:eb:d0:b5:58:db:44:2a:6f:07:ef:1b:5d:c2:bd:2e:27:33:
         2a:0f:c7:74:65:e5:56:27:9b:2b:34:95:36:97:27:66:c7:f6:
         1f:4b:ec:80
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUcEI7ygEsOYtpkn5TcBmfJDLT7GMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZGMzBFQzY4NjIwMTAxOERFMDgxMTEwNTQyNjIzQkFF
RDJBREY0OTAeFw0yNTEwMTQxODQ0MTJaFw0yNjEwMTMxODQ5MTJaMDMxMTAvBgNV
BAMTKEYxQ0NBMEE5NjNGQkQ1NzMxRDg0RUZFNTIyRTVCRDk5OTE4MkVCMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51kwnwBhwvHVjigEYvaqOhYMY
8AKeaDe8tG54CSiAmlWYgVIwngT4DBE/h0ygyqTgzWC/54IDQPntsaj6meAt+5Nx
yllCrOmDuPhfqEsslPEPJGNfgEEhZlOJxCPN3UJveHT/0kG4FPE/EJ0DVs66cCKY
rZYc287KzmcBkG+6la7LaY+JrbWv0ObJ9Xym8w4AOeRMDfXBzZvVs6HqKAq1+/3A
5qQbvMJhTZSLbvhwCQG5vW+QRxt7fIGuE2TY+zcj7xpmO6y/niU0gvtTY6UQEFyb
w1IdNUD1y8S2/ht7A5uAzvPxQlAHcibdcUBwpIQOFlRYz9O1TwtTKGq7tsV5AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU8cygqWP71XMdhO/lIuW9mZGC6xQwHwYDVR0j
BBgwFoAUD/MOxoYgEBjeCBEQVCYjuu0q30kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3ZuZHh2NUs3TUR1R3lZS3NyRUJWa0xram9nNkx0a1VxV255NFlVTWY0
WnYvMC8wRkYzMEVDNjg2MjAxMDE4REUwODExMTA1NDI2MjNCQUVEMkFERjQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGRjMwRUM2ODYyMDEwMThE
RTA4MTExMDU0MjYyM0JBRUQyQURGNDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN2bmR4djVLN01EdUd5WUtzckVCVmtMa2pvZzZMdGtVcVdueTRZVU1mNFp2LzAv
MzIzODMwMzQzYTM0NjIzMTMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMjM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEsQMA0GCSqGSIb3DQEBCwUAA4IBAQBa6ttl
9XsVgA+b15AQjJBHYKyUmv+BtGbnxDD6eFsTPBVKqXSin4gBiSfy8Njwwi1GWf+z
+LM6HF1RmROIj5rChbLK4m6YCPzQNuOg052xGzoYuzu4qbgwlBj1qZD+CbTpoLZI
TjEfnXHWqjAWHv9in589uxg3VlJeyym4gE/CoXvb4xlPKfVPjJLlIqv0ewrjfFS5
4wG0g9Of7l1ZlcGwIde9DfJ3ufpeDPqIPBz6dIQKuZYpvo0McAgC67S+n6fu9OIe
ohIGZS9YxSgC4byzqymyNdTdfiQl69C1WNtEKm8H7xtdwr0uJzMqD8d0ZeVWJ5sr
NJU2lydmx/YfS+yA
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:58:01 2025 by rpki-client