Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a3a2f33332d3333203d3e20323635343633.roa
File:                     323830343a333438343a3a2f33332d3333203d3e20323635343633.roa (raw, json)
Hash identifier:          l+GINlfzzC0+AyQ0Gt/Obebxt8gGDx4aHaCbXp5A4V0=
Subject key identifier:   70:FC:68:06:24:DF:3B:DF:51:13:C2:00:F2:B2:E5:23:6F:41:79:6D
Certificate issuer:       /CN=62B51F20D88182C58CED03A4D282DE24A08CAE6E
Certificate serial:       340D60838FE071A9C780219B6DBD6145EDD7A444
Authority key identifier: 62:B5:1F:20:D8:81:82:C5:8C:ED:03:A4:D2:82:DE:24:A0:8C:AE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B51F20D88182C58CED03A4D282DE24A08CAE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a3a2f33332d3333203d3e20323635343633.roa
Signing time:             Sat 20 Sep 2025 12:50:20 +0000
ROA not before:           Sat 20 Sep 2025 12:45:20 +0000
ROA not after:            Sat 19 Sep 2026 12:50:20 +0000
asID:                     265463
IP address blocks:        2804:3484::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/62B51F20D88182C58CED03A4D282DE24A08CAE6E.crl
                          rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/62B51F20D88182C58CED03A4D282DE24A08CAE6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B51F20D88182C58CED03A4D282DE24A08CAE6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0d:60:83:8f:e0:71:a9:c7:80:21:9b:6d:bd:61:45:ed:d7:a4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62B51F20D88182C58CED03A4D282DE24A08CAE6E
        Validity
            Not Before: Sep 20 12:45:20 2025 GMT
            Not After : Sep 19 12:50:20 2026 GMT
        Subject: CN=70FC680624DF3BDF5113C200F2B2E5236F41796D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:8c:9e:48:2e:4e:15:e9:32:21:4c:17:1b:
                    9c:b3:98:13:fd:79:ab:f5:4c:69:53:a1:1f:d4:cf:
                    cb:45:e1:b3:c8:53:86:0c:7e:23:10:84:fa:e2:ad:
                    04:eb:e8:f3:ae:72:f2:00:3b:a2:a0:43:dc:c9:07:
                    75:8f:14:e0:37:c5:ce:8d:b4:4d:f7:a8:48:a6:8f:
                    66:8f:58:37:29:65:a8:9d:f6:41:e0:67:d5:01:f5:
                    7b:e0:d2:1e:bf:78:0b:50:42:fd:08:bf:cf:9e:ec:
                    d3:9c:13:65:b0:bc:46:43:37:68:13:ab:ae:26:7e:
                    fc:01:fe:15:35:cb:20:52:db:8b:f7:61:6d:70:02:
                    33:e3:30:d1:1e:47:32:6e:3c:60:30:cb:a2:ff:79:
                    c2:bb:2f:5d:73:b8:49:bf:2b:ca:f1:a3:45:9d:c0:
                    f4:6a:d6:a3:59:9c:d8:8c:08:ad:f6:b3:05:47:cf:
                    55:c2:74:37:6b:e3:48:ce:c8:2a:db:01:81:a6:ca:
                    cf:1f:e4:40:2e:a5:f8:be:82:c6:01:a8:50:e6:b7:
                    e8:64:94:b2:37:c8:7c:d7:70:d1:56:ae:82:bb:0d:
                    ec:ed:5a:b6:61:47:0d:90:77:08:26:81:81:34:a8:
                    bc:ac:0a:43:4a:36:b3:67:68:c7:41:8e:4a:a0:ba:
                    be:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FC:68:06:24:DF:3B:DF:51:13:C2:00:F2:B2:E5:23:6F:41:79:6D
            X509v3 Authority Key Identifier:
                keyid:62:B5:1F:20:D8:81:82:C5:8C:ED:03:A4:D2:82:DE:24:A0:8C:AE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/62B51F20D88182C58CED03A4D282DE24A08CAE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B51F20D88182C58CED03A4D282DE24A08CAE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a3a2f33332d3333203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3484::/33

    Signature Algorithm: sha256WithRSAEncryption
         66:ac:2c:28:2f:93:69:e6:a6:db:c5:9b:07:05:b2:c8:9b:27:
         05:72:88:20:60:25:8c:fe:f7:d5:25:38:9a:94:9e:48:99:ca:
         5f:31:5f:33:c4:86:de:cc:d7:f4:7e:ba:cd:99:ac:06:bd:2a:
         9d:47:6e:16:70:ba:6a:10:73:0d:ee:ec:98:2a:7f:40:8a:b3:
         3c:db:95:20:e0:ee:e8:42:d3:a6:5e:a9:6e:6a:76:43:d3:63:
         42:f2:e2:60:da:ab:b6:51:b4:7e:22:00:86:cb:5c:b2:16:82:
         0a:1e:74:b4:e9:c6:35:78:46:29:bd:a9:4e:29:8f:6d:74:d1:
         3a:cb:87:01:1c:a3:dd:20:79:3d:cf:9a:8d:1e:14:9d:9d:46:
         de:40:2c:d7:61:2e:61:dd:96:df:ab:c0:46:a8:05:a7:f2:6e:
         40:cd:92:e6:86:7c:6d:a8:78:aa:8b:ad:57:ac:45:71:cb:54:
         b4:e7:69:30:b0:41:e2:4a:4a:86:14:7b:d7:79:72:fd:1a:f9:
         62:0e:33:ea:e6:ec:37:c0:c7:3c:93:73:df:74:c9:69:b7:64:
         38:24:a2:e4:d9:97:85:66:38:51:8c:1d:34:fb:d6:86:fd:0a:
         60:32:11:39:bb:6e:47:1a:f4:01:49:40:ad:5e:f5:b4:f0:eb:
         4e:5c:c9:2e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNA1gg4/gcanHgCGbbb1hRe3XpEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJCNTFGMjBEODgxODJDNThDRUQwM0E0RDI4MkRFMjRB
MDhDQUU2RTAeFw0yNTA5MjAxMjQ1MjBaFw0yNjA5MTkxMjUwMjBaMDMxMTAvBgNV
BAMTKDcwRkM2ODA2MjRERjNCREY1MTEzQzIwMEYyQjJFNTIzNkY0MTc5NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxN4yeSC5OFekyIUwXG5yzmBP9
eav1TGlToR/Uz8tF4bPIU4YMfiMQhPrirQTr6POucvIAO6KgQ9zJB3WPFOA3xc6N
tE33qEimj2aPWDcpZaid9kHgZ9UB9Xvg0h6/eAtQQv0Iv8+e7NOcE2WwvEZDN2gT
q64mfvwB/hU1yyBS24v3YW1wAjPjMNEeRzJuPGAwy6L/ecK7L11zuEm/K8rxo0Wd
wPRq1qNZnNiMCK32swVHz1XCdDdr40jOyCrbAYGmys8f5EAupfi+gsYBqFDmt+hk
lLI3yHzXcNFWroK7DeztWrZhRw2QdwgmgYE0qLysCkNKNrNnaMdBjkqgur4xAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcPxoBiTfO99RE8IA8rLlI29BeW0wHwYDVR0j
BBgwFoAUYrUfINiBgsWM7QOk0oLeJKCMrm4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDNmNDZTbnFGTDNLZ1Z6VVRGdFBTcmJjVzhMUHFkOVVkUEpRYVRSUjd0
dXAvMC82MkI1MUYyMEQ4ODE4MkM1OENFRDAzQTREMjgyREUyNEEwOENBRTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyQjUxRjIwRDg4MTgyQzU4
Q0VEMDNBNEQyODJERTI0QTA4Q0FFNkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQzZjQ2U25xRkwzS2dWelVURnRQU3JiY1c4TFBxZDlVZFBKUWFUUlI3dHVwLzAv
MzIzODMwMzQzYTMzMzQzODM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM1
MzQzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQ0hAAwDQYJKoZIhvcNAQELBQADggEBAGasLCgv
k2nmptvFmwcFssibJwVyiCBgJYz+99UlOJqUnkiZyl8xXzPEht7M1/R+us2ZrAa9
Kp1HbhZwumoQcw3u7Jgqf0CKszzblSDg7uhC06ZeqW5qdkPTY0Ly4mDaq7ZRtH4i
AIbLXLIWggoedLTpxjV4Rim9qU4pj2100TrLhwEco90geT3Pmo0eFJ2dRt5ALNdh
LmHdlt+rwEaoBafybkDNkuaGfG2oeKqLrVesRXHLVLTnaTCwQeJKSoYUe9d5cv0a
+WIOM+rm7DfAxzyTc990yWm3ZDgkouTZl4VmOFGMHTT71ob9CmAyETm7bkca9AFJ
QK1e9bTw605cyS4=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:37:15 2025 by rpki-client