Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/323830343a356166383a3a2f33322d3438203d3e20323638383130.roa
File:                     323830343a356166383a3a2f33322d3438203d3e20323638383130.roa (raw, json)
Hash identifier:          fR4fkJl4CJQMVPeEauqR9o6fzMkVd/k8kCgcKRQQicA=
Subject key identifier:   03:8F:89:FC:B9:08:9D:5A:CF:12:E4:2D:F3:D6:6B:3C:7E:9F:80:BB
Certificate issuer:       /CN=0093DCC4ABF95A11856E09FE64511AC171C60991
Certificate serial:       3456A67C238C04B265DE2FCFC0A55CBB92F11242
Authority key identifier: 00:93:DC:C4:AB:F9:5A:11:85:6E:09:FE:64:51:1A:C1:71:C6:09:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0093DCC4ABF95A11856E09FE64511AC171C60991.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/323830343a356166383a3a2f33322d3438203d3e20323638383130.roa
Signing time:             Thu 02 Oct 2025 13:12:43 +0000
ROA not before:           Thu 02 Oct 2025 13:07:43 +0000
ROA not after:            Thu 01 Oct 2026 13:12:43 +0000
asID:                     268810
IP address blocks:        2804:5af8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/0093DCC4ABF95A11856E09FE64511AC171C60991.crl
                          rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/0093DCC4ABF95A11856E09FE64511AC171C60991.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0093DCC4ABF95A11856E09FE64511AC171C60991.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:56:a6:7c:23:8c:04:b2:65:de:2f:cf:c0:a5:5c:bb:92:f1:12:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0093DCC4ABF95A11856E09FE64511AC171C60991
        Validity
            Not Before: Oct  2 13:07:43 2025 GMT
            Not After : Oct  1 13:12:43 2026 GMT
        Subject: CN=038F89FCB9089D5ACF12E42DF3D66B3C7E9F80BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dc:81:dd:2d:0d:10:77:d7:6e:de:7e:48:14:
                    56:3d:34:04:10:13:ab:1e:9c:51:39:76:8c:20:fa:
                    33:42:1c:20:48:4f:02:80:1a:e4:63:78:47:6a:1f:
                    5a:0a:6e:d0:e1:c5:5e:44:ed:1f:c7:7b:00:0d:cb:
                    37:f4:19:c7:36:52:da:6d:db:95:cf:6c:69:d2:9b:
                    48:9b:7a:2c:78:fa:60:e6:46:af:d0:1c:94:24:4a:
                    d7:17:28:d8:5e:65:7b:df:6c:74:c7:d5:a6:ef:69:
                    ce:43:31:85:f1:db:57:a2:76:3a:eb:b4:67:eb:d6:
                    7b:3e:20:91:43:aa:62:30:4c:a7:12:76:5d:7a:fc:
                    ed:dd:2f:71:e8:c4:c6:56:b4:dc:bf:e3:1b:5e:da:
                    8f:df:d8:93:f3:24:dd:d7:73:31:99:2e:ce:d1:83:
                    7b:1e:0e:ab:06:a5:b3:ae:b7:7b:3c:63:85:bf:13:
                    4b:c8:62:f7:e1:c7:93:9f:b8:78:14:08:36:73:94:
                    00:84:4f:87:8d:a1:5d:6e:0b:7a:1f:ae:3f:85:11:
                    56:84:31:fd:61:3e:e9:2d:21:4e:ee:48:37:e9:dc:
                    b3:32:6e:94:30:37:a9:58:9d:64:40:f6:b8:32:aa:
                    74:f6:26:91:0e:28:bf:7f:fd:46:38:cc:b0:3f:d3:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8F:89:FC:B9:08:9D:5A:CF:12:E4:2D:F3:D6:6B:3C:7E:9F:80:BB
            X509v3 Authority Key Identifier:
                keyid:00:93:DC:C4:AB:F9:5A:11:85:6E:09:FE:64:51:1A:C1:71:C6:09:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/0093DCC4ABF95A11856E09FE64511AC171C60991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0093DCC4ABF95A11856E09FE64511AC171C60991.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/323830343a356166383a3a2f33322d3438203d3e20323638383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5af8::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:ff:13:fb:12:66:7f:99:5a:ad:6f:6f:36:4a:76:a9:9b:f8:
         5e:4e:d8:54:d6:c7:70:49:7e:45:d7:f3:d4:b1:81:20:a8:ef:
         22:6f:11:53:02:bd:83:e0:d9:dd:a2:0e:02:b9:92:aa:a4:f2:
         4b:20:2c:93:6e:dc:7f:4b:2f:ed:fe:5d:27:bb:35:b8:ee:fb:
         47:61:06:15:75:3d:84:02:3b:f5:50:1c:b9:16:8e:c4:10:9b:
         75:02:d1:e1:cd:db:e0:ac:9a:c2:5d:75:b0:1b:16:e6:f2:ef:
         c0:77:01:c4:d4:77:1c:68:c4:7d:ee:a3:27:a1:7e:78:d4:2e:
         65:50:a6:be:4f:44:14:9d:7b:8b:86:e3:ae:fd:f1:11:6a:db:
         2e:48:bc:d0:fd:16:db:de:f8:46:11:e9:6f:bd:cc:89:73:03:
         fb:f3:80:34:b7:b9:1f:fe:0a:15:a5:24:30:f1:3b:b6:ae:f4:
         de:a4:44:4e:02:ff:ff:2a:1b:c9:af:48:47:69:ac:dd:58:e9:
         f2:b2:a7:86:69:aa:07:87:10:e3:54:3c:ea:b7:5a:30:7a:1a:
         7e:3d:d6:75:e6:65:5e:71:1f:f9:2d:c5:ee:13:9b:cd:60:04:
         8b:9c:b5:b4:d4:a1:51:48:5b:11:b4:40:8c:b8:e7:59:f5:34:
         c6:fc:09:d2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUNFamfCOMBLJl3i/PwKVcu5LxEkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA5M0RDQzRBQkY5NUExMTg1NkUwOUZFNjQ1MTFBQzE3
MUM2MDk5MTAeFw0yNTEwMDIxMzA3NDNaFw0yNjEwMDExMzEyNDNaMDMxMTAvBgNV
BAMTKDAzOEY4OUZDQjkwODlENUFDRjEyRTQyREYzRDY2QjNDN0U5RjgwQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR3IHdLQ0Qd9du3n5IFFY9NAQQ
E6senFE5dowg+jNCHCBITwKAGuRjeEdqH1oKbtDhxV5E7R/HewANyzf0Gcc2Utpt
25XPbGnSm0ibeix4+mDmRq/QHJQkStcXKNheZXvfbHTH1abvac5DMYXx21eidjrr
tGfr1ns+IJFDqmIwTKcSdl16/O3dL3HoxMZWtNy/4xte2o/f2JPzJN3XczGZLs7R
g3seDqsGpbOut3s8Y4W/E0vIYvfhx5OfuHgUCDZzlACET4eNoV1uC3ofrj+FEVaE
Mf1hPuktIU7uSDfp3LMybpQwN6lYnWRA9rgyqnT2JpEOKL9//UY4zLA/0+Y3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUA4+J/LkInVrPEuQt89ZrPH6fgLswHwYDVR0j
BBgwFoAUAJPcxKv5WhGFbgn+ZFEawXHGCZEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFQ2N1Z3YzRTVnpCWEVHdlh3ZmJ6QVdZUFdxcjJIeE40UnpCZTdvN1o5
dDIvMC8wMDkzRENDNEFCRjk1QTExODU2RTA5RkU2NDUxMUFDMTcxQzYwOTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwOTNEQ0M0QUJGOTVBMTE4
NTZFMDlGRTY0NTExQUMxNzFDNjA5OTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUNjdWd2M0U1Z6QlhFR3ZYd2ZiekFXWVBXcXIySHhONFJ6QmU3bzdaOXQyLzAv
MzIzODMwMzQzYTM1NjE2NjM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzgzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARa+DANBgkqhkiG9w0BAQsFAAOCAQEAZ/8T+xJm
f5larW9vNkp2qZv4Xk7YVNbHcEl+Rdfz1LGBIKjvIm8RUwK9g+DZ3aIOArmSqqTy
SyAsk27cf0sv7f5dJ7s1uO77R2EGFXU9hAI79VAcuRaOxBCbdQLR4c3b4Kyawl11
sBsW5vLvwHcBxNR3HGjEfe6jJ6F+eNQuZVCmvk9EFJ17i4bjrv3xEWrbLki80P0W
2974RhHpb73MiXMD+/OANLe5H/4KFaUkMPE7tq703qRETgL//yobya9IR2ms3Vjp
8rKnhmmqB4cQ41Q86rdaMHoafj3WdeZlXnEf+S3F7hObzWAEi5y1tNShUUhbEbRA
jLjnWfU0xvwJ0g==
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:14:19 2025 by rpki-client