Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a3a2f33332d3333203d3e20323733373133.roa
File:                     323830343a386232303a3a2f33332d3333203d3e20323733373133.roa (raw, json)
Hash identifier:          AdQceL1sIsQRHrPaxMkgoBnpARJbb09pnBGiKnX8JUM=
Subject key identifier:   6C:B2:E2:8A:A1:02:B1:D1:AB:B4:07:92:30:13:D3:64:1B:75:88:CD
Certificate issuer:       /CN=D46C2BE32C6EE35D255355DA5ADF257982E486F8
Certificate serial:       2E3186614850C1FD39FBA1B14111790BAE7C515E
Authority key identifier: D4:6C:2B:E3:2C:6E:E3:5D:25:53:55:DA:5A:DF:25:79:82:E4:86:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D46C2BE32C6EE35D255355DA5ADF257982E486F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a3a2f33332d3333203d3e20323733373133.roa
Signing time:             Thu 28 Aug 2025 19:48:33 +0000
ROA not before:           Thu 28 Aug 2025 19:43:33 +0000
ROA not after:            Thu 27 Aug 2026 19:48:33 +0000
asID:                     273713
IP address blocks:        2804:8b20::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/D46C2BE32C6EE35D255355DA5ADF257982E486F8.crl
                          rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/D46C2BE32C6EE35D255355DA5ADF257982E486F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D46C2BE32C6EE35D255355DA5ADF257982E486F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:31:86:61:48:50:c1:fd:39:fb:a1:b1:41:11:79:0b:ae:7c:51:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D46C2BE32C6EE35D255355DA5ADF257982E486F8
        Validity
            Not Before: Aug 28 19:43:33 2025 GMT
            Not After : Aug 27 19:48:33 2026 GMT
        Subject: CN=6CB2E28AA102B1D1ABB407923013D3641B7588CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:35:cf:c7:a5:5a:ec:3a:74:1d:03:15:a5:
                    8c:65:e7:e8:62:ed:17:7e:a3:aa:f8:73:e8:6b:e2:
                    04:46:98:32:59:93:08:ba:4a:d5:21:ac:18:4e:78:
                    98:5f:ac:93:86:92:21:e3:27:17:05:70:26:10:e1:
                    eb:4d:8e:33:06:dd:e4:45:44:46:04:9c:70:35:b9:
                    b4:0b:3f:23:25:62:67:11:8f:b9:2b:3a:84:7c:34:
                    bb:f6:b0:4d:08:ba:20:23:74:cf:2f:be:a0:9a:3f:
                    03:99:1b:ed:d9:01:88:38:bb:02:e8:af:18:8a:69:
                    b2:d0:02:1b:78:df:6a:57:24:19:f7:07:c6:e4:2e:
                    22:50:fd:5d:6b:9e:69:86:e0:d0:af:71:5c:0e:4a:
                    56:1b:77:4b:fa:ff:79:71:49:f6:61:90:b0:5a:fb:
                    79:18:36:99:c5:e7:68:c3:27:03:8a:14:9a:66:5c:
                    a8:ab:2a:da:0d:c8:97:f1:a0:32:5f:3a:2b:20:cd:
                    6e:37:2b:89:90:dd:e1:7d:19:50:af:1b:7d:a7:5e:
                    71:80:cf:8c:c6:37:ae:2c:66:4c:53:af:f3:3f:30:
                    db:33:be:48:08:7c:77:b1:1d:8e:a1:18:76:12:29:
                    1f:b6:61:a3:22:be:b8:f7:d7:c6:5b:ad:1f:5d:ac:
                    91:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B2:E2:8A:A1:02:B1:D1:AB:B4:07:92:30:13:D3:64:1B:75:88:CD
            X509v3 Authority Key Identifier:
                keyid:D4:6C:2B:E3:2C:6E:E3:5D:25:53:55:DA:5A:DF:25:79:82:E4:86:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/D46C2BE32C6EE35D255355DA5ADF257982E486F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D46C2BE32C6EE35D255355DA5ADF257982E486F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a3a2f33332d3333203d3e20323733373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b20::/33

    Signature Algorithm: sha256WithRSAEncryption
         60:05:74:6f:6c:09:81:58:77:3c:ba:6e:d3:19:6f:6c:9e:e7:
         22:b0:26:6a:61:e3:f9:57:c1:e6:8d:6f:f4:22:ce:24:e8:65:
         78:f9:68:11:84:4c:ab:30:da:86:8e:e4:21:af:03:ea:b7:2f:
         18:8b:a6:6b:14:62:cb:4b:06:f9:0a:c6:cc:3c:30:22:dd:5a:
         12:fc:d3:35:5a:6a:d0:0c:11:07:00:47:be:0c:cb:a8:08:d9:
         25:75:70:71:42:aa:5f:d4:51:ed:c5:6b:1b:51:0c:83:bf:fe:
         19:a3:05:ec:4e:53:3b:49:d0:28:0c:d1:ae:1e:3b:e8:32:c6:
         b2:56:75:95:e1:b2:0f:2a:5d:39:62:52:40:c0:e8:41:bb:47:
         93:26:67:80:34:c8:b5:81:f3:20:46:63:9c:1d:2f:de:77:e6:
         f9:8a:20:a8:18:7d:ee:30:69:ba:4b:bb:56:31:ab:34:61:01:
         6b:30:4c:0d:8f:c1:12:ae:a4:33:e0:0b:d1:07:f2:20:25:aa:
         27:5b:60:41:1a:89:3f:3e:5f:0f:a4:bf:93:dd:cd:4c:de:eb:
         ca:c2:80:fb:17:7c:e9:9b:04:62:40:1b:81:06:fe:0e:c6:9c:
         2f:74:57:36:9d:e4:1a:7b:ed:f6:c7:45:83:54:6c:4d:90:36:
         35:8a:62:62
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULjGGYUhQwf05+6GxQRF5C658UV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ2QzJCRTMyQzZFRTM1RDI1NTM1NURBNUFERjI1Nzk4
MkU0ODZGODAeFw0yNTA4MjgxOTQzMzNaFw0yNjA4MjcxOTQ4MzNaMDMxMTAvBgNV
BAMTKDZDQjJFMjhBQTEwMkIxRDFBQkI0MDc5MjMwMTNEMzY0MUI3NTg4Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJYjXPx6Va7Dp0HQMVpYxl5+hi
7Rd+o6r4c+hr4gRGmDJZkwi6StUhrBhOeJhfrJOGkiHjJxcFcCYQ4etNjjMG3eRF
REYEnHA1ubQLPyMlYmcRj7krOoR8NLv2sE0IuiAjdM8vvqCaPwOZG+3ZAYg4uwLo
rxiKabLQAht432pXJBn3B8bkLiJQ/V1rnmmG4NCvcVwOSlYbd0v6/3lxSfZhkLBa
+3kYNpnF52jDJwOKFJpmXKirKtoNyJfxoDJfOisgzW43K4mQ3eF9GVCvG32nXnGA
z4zGN64sZkxTr/M/MNszvkgIfHexHY6hGHYSKR+2YaMivrj318ZbrR9drJFTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbLLiiqECsdGrtAeSMBPTZBt1iM0wHwYDVR0j
BBgwFoAU1Gwr4yxu410lU1XaWt8leYLkhvgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGNtVFMxSGN1WVJCY2R2aUpieDdZYURyRHFEQThVQVBGandQSzVGdVV1
NlovMC9ENDZDMkJFMzJDNkVFMzVEMjU1MzU1REE1QURGMjU3OTgyRTQ4NkY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NkMyQkUzMkM2RUUzNUQy
NTUzNTVEQTVBREYyNTc5ODJFNDg2RjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRjbVRTMUhjdVlSQmNkdmlKYng3WWFEckRxREE4VUFQRmp3UEs1RnVVdTZaLzAv
MzIzODMwMzQzYTM4NjIzMjMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMz
MzczMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASLIAAwDQYJKoZIhvcNAQELBQADggEBAGAFdG9s
CYFYdzy6btMZb2ye5yKwJmph4/lXweaNb/QiziToZXj5aBGETKsw2oaO5CGvA+q3
LxiLpmsUYstLBvkKxsw8MCLdWhL80zVaatAMEQcAR74My6gI2SV1cHFCql/UUe3F
axtRDIO//hmjBexOUztJ0CgM0a4eO+gyxrJWdZXhsg8qXTliUkDA6EG7R5MmZ4A0
yLWB8yBGY5wdL9535vmKIKgYfe4wabpLu1YxqzRhAWswTA2PwRKupDPgC9EH8iAl
qidbYEEaiT8+Xw+kv5PdzUze68rCgPsXfOmbBGJAG4EG/g7GnC90Vzad5Bp77fbH
RYNUbE2QNjWKYmI=
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:03:46 2025 by rpki-client