Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/323830343a323064633a3a2f33322d3438203d3e20323634353137.roa
File:                     323830343a323064633a3a2f33322d3438203d3e20323634353137.roa (raw, json)
Hash identifier:          zktTgNIrnpj2jMbA9QGdo43g7zA2iuXC/N7Q9tS3gmM=
Subject key identifier:   6C:16:3E:EC:58:46:FA:42:96:CE:9F:A0:A8:7A:EB:3B:30:B0:15:90
Certificate issuer:       /CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
Certificate serial:       68836EE1CB4AD8D74A9CE4F441D71DE494142854
Authority key identifier: 06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/323830343a323064633a3a2f33322d3438203d3e20323634353137.roa
Signing time:             Thu 18 Sep 2025 20:31:01 +0000
ROA not before:           Thu 18 Sep 2025 20:26:01 +0000
ROA not after:            Thu 17 Sep 2026 20:31:01 +0000
asID:                     264517
IP address blocks:        2804:20dc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl
                          rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 23:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:83:6e:e1:cb:4a:d8:d7:4a:9c:e4:f4:41:d7:1d:e4:94:14:28:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
        Validity
            Not Before: Sep 18 20:26:01 2025 GMT
            Not After : Sep 17 20:31:01 2026 GMT
        Subject: CN=6C163EEC5846FA4296CE9FA0A87AEB3B30B01590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:6b:e2:a4:4f:3b:db:60:c1:4f:83:4c:a0:
                    ed:70:e4:b5:ec:50:f6:51:ab:b9:ef:7d:80:d4:2c:
                    5a:84:0d:29:84:b5:92:52:52:50:fb:28:34:b8:ad:
                    3e:35:81:86:a5:cc:66:76:ed:79:8f:ee:53:bc:67:
                    85:e3:2a:66:72:e4:6b:33:6b:44:2f:a9:4a:15:c4:
                    6e:7d:81:0c:90:5b:c7:b0:d8:d4:82:5b:8f:30:d5:
                    15:50:e8:ea:fd:b1:0d:1f:52:e3:48:80:00:49:f6:
                    57:14:7f:92:24:7e:df:fa:57:75:eb:0c:d4:88:5b:
                    34:9e:b1:46:90:a9:12:fe:03:fe:67:81:b9:43:74:
                    38:79:11:34:6f:f5:b7:a8:ca:9d:27:ca:65:d8:0a:
                    07:27:d3:46:ea:40:6d:6c:b8:67:41:ca:a8:5c:a3:
                    f9:1e:ea:1f:9c:0b:27:8b:b4:38:e8:fa:42:00:90:
                    97:38:0e:76:b0:3b:b0:5a:1b:36:33:6d:6e:ba:9f:
                    0f:98:70:ee:92:79:36:62:45:09:a8:5d:d3:c1:17:
                    10:27:f8:6d:93:0e:a2:5d:df:e4:bc:0f:e8:d7:76:
                    30:8f:a4:52:4e:b8:fa:c5:be:0d:2d:df:45:86:c5:
                    84:e2:f7:10:9e:c0:97:22:92:dd:42:10:54:87:96:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:16:3E:EC:58:46:FA:42:96:CE:9F:A0:A8:7A:EB:3B:30:B0:15:90
            X509v3 Authority Key Identifier:
                keyid:06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/323830343a323064633a3a2f33322d3438203d3e20323634353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:3c:77:17:57:71:21:b1:33:1c:b0:37:c3:b6:34:e6:e2:f2:
         8e:cd:22:04:2d:35:c7:62:90:b4:50:d0:99:94:4e:fe:32:db:
         b2:8a:65:87:fa:48:cf:23:12:d2:a9:21:72:80:3b:66:ff:f4:
         e4:7c:e2:b7:f9:b6:60:b1:ee:a3:55:44:a9:9a:99:74:a4:0c:
         ec:18:42:67:57:cc:58:7f:3a:65:cb:02:6c:4a:83:1c:45:d1:
         f4:58:78:ce:e3:0f:5d:c6:8c:4d:ca:b9:0c:c1:0a:70:e9:eb:
         00:aa:59:cd:d8:ae:47:52:67:bd:5d:ba:af:46:cd:5e:75:d9:
         69:89:2b:16:a7:61:83:fb:dc:30:dd:78:a9:54:df:7f:63:14:
         60:71:79:83:d5:4e:84:ae:13:12:fb:b9:e9:1f:35:04:c4:38:
         00:9a:6b:12:68:d4:a2:a5:ea:7b:cf:cd:ff:82:7d:ac:c8:96:
         e4:72:61:1f:a4:b3:f1:23:8d:40:7e:76:30:59:7c:93:fc:23:
         e9:06:ba:f5:2e:1c:fd:0a:8f:02:e6:ec:65:e0:1e:9e:e8:1a:
         36:3e:98:32:41:48:d7:d0:f8:5f:6b:ec:73:25:20:15:58:40:
         26:ba:55:eb:ec:a3:5e:59:00:fa:51:33:45:c9:a7:7e:0a:36:
         08:fb:9e:90
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUaINu4ctK2NdKnOT0Qdcd5JQUKFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZEQkQzMkU4NjVEOUQwOEZBNUM5ODJBQjdDQkRBNEZD
QjIyNjJFODAeFw0yNTA5MTgyMDI2MDFaFw0yNjA5MTcyMDMxMDFaMDMxMTAvBgNV
BAMTKDZDMTYzRUVDNTg0NkZBNDI5NkNFOUZBMEE4N0FFQjNCMzBCMDE1OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1DmvipE8722DBT4NMoO1w5LXs
UPZRq7nvfYDULFqEDSmEtZJSUlD7KDS4rT41gYalzGZ27XmP7lO8Z4XjKmZy5Gsz
a0QvqUoVxG59gQyQW8ew2NSCW48w1RVQ6Or9sQ0fUuNIgABJ9lcUf5Ikft/6V3Xr
DNSIWzSesUaQqRL+A/5ngblDdDh5ETRv9beoyp0nymXYCgcn00bqQG1suGdByqhc
o/ke6h+cCyeLtDjo+kIAkJc4DnawO7BaGzYzbW66nw+YcO6SeTZiRQmoXdPBFxAn
+G2TDqJd3+S8D+jXdjCPpFJOuPrFvg0t30WGxYTi9xCewJcikt1CEFSHlvfxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUbBY+7FhG+kKWzp+gqHrrOzCwFZAwHwYDVR0j
BBgwFoAUBtvTLoZdnQj6XJgqt8vaT8siYugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdud1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhl
UkwvMC8wNkRCRDMyRTg2NUQ5RDA4RkE1Qzk4MkFCN0NCREE0RkNCMjI2MkU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2REJEMzJFODY1RDlEMDhG
QTVDOTgyQUI3Q0JEQTRGQ0IyMjYyRTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHbndYMm1BZ3RZWTNZb3JhZHNGbW9TVlg0bmpmem81ZFRxaG84bWc4ZVJMLzAv
MzIzODMwMzQzYTMyMzA2NDYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM0
MzUzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQg3DANBgkqhkiG9w0BAQsFAAOCAQEAQTx3F1dx
IbEzHLA3w7Y05uLyjs0iBC01x2KQtFDQmZRO/jLbsoplh/pIzyMS0qkhcoA7Zv/0
5Hzit/m2YLHuo1VEqZqZdKQM7BhCZ1fMWH86ZcsCbEqDHEXR9Fh4zuMPXcaMTcq5
DMEKcOnrAKpZzdiuR1JnvV26r0bNXnXZaYkrFqdhg/vcMN14qVTff2MUYHF5g9VO
hK4TEvu56R81BMQ4AJprEmjUoqXqe8/N/4J9rMiW5HJhH6Sz8SONQH52MFl8k/wj
6Qa69S4c/QqPAubsZeAenugaNj6YMkFI19D4X2vscyUgFVhAJrpV6+yjXlkA+lEz
Rcmnfgo2CPuekA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 10:59:54 2025 by rpki-client