Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a3a2f33322d313238203d3e20323637303738.roa
File:                     323830343a343764303a3a2f33322d313238203d3e20323637303738.roa (raw, json)
Hash identifier:          +gP3s6w113DB3ZyjXxmKKAlbxghpSVPSj8Lqa0WGlnI=
Subject key identifier:   E0:48:1A:ED:E9:41:8A:63:FD:82:9B:2A:6F:41:CD:67:6E:03:9D:CD
Certificate issuer:       /CN=289C0FA8F74E8A496A1CF040353916504C4E789F
Certificate serial:       05B05073A1CD86709F4F0AB6F5E7941063C070EE
Authority key identifier: 28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a3a2f33322d313238203d3e20323637303738.roa
Signing time:             Thu 09 Oct 2025 14:32:41 +0000
ROA not before:           Thu 09 Oct 2025 14:27:41 +0000
ROA not after:            Thu 08 Oct 2026 14:32:41 +0000
asID:                     267078
IP address blocks:        2804:47d0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.crl
                          rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b0:50:73:a1:cd:86:70:9f:4f:0a:b6:f5:e7:94:10:63:c0:70:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=289C0FA8F74E8A496A1CF040353916504C4E789F
        Validity
            Not Before: Oct  9 14:27:41 2025 GMT
            Not After : Oct  8 14:32:41 2026 GMT
        Subject: CN=E0481AEDE9418A63FD829B2A6F41CD676E039DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:14:18:e0:e3:1e:cb:5a:c2:94:24:3d:dd:
                    99:1d:13:61:27:93:ac:8d:12:29:a7:62:5e:78:fe:
                    c8:50:50:b7:f8:b5:46:09:fc:65:9f:10:52:1b:d8:
                    5f:e1:f0:c9:b2:95:3e:09:fe:e6:51:bc:2d:b4:96:
                    ab:c5:fa:d0:8a:19:1e:97:d0:98:28:0b:29:f6:e2:
                    7c:09:2c:44:aa:8a:29:30:70:22:f6:ba:7d:e4:a9:
                    2b:e7:d6:ed:be:a3:4a:3d:e9:81:95:ba:96:31:25:
                    be:91:4a:dd:9a:bd:67:a2:e5:39:ce:60:bc:e7:0f:
                    7f:34:be:21:11:50:0a:30:df:d1:4b:12:99:dc:e6:
                    e9:fd:21:d3:f4:22:19:62:e0:4e:27:91:bd:61:b0:
                    1c:98:88:11:de:63:e1:25:7b:03:50:c3:63:46:f9:
                    18:b3:31:d0:d4:8b:5c:70:ef:a0:c3:87:9a:bd:c4:
                    a2:15:36:94:98:64:81:6f:67:52:26:1d:47:dc:fd:
                    2e:73:c3:73:57:2f:bb:d0:81:e7:43:69:0b:3d:5a:
                    4d:d0:ce:6d:05:f0:e6:96:75:a6:62:8e:00:dc:bb:
                    a8:4e:99:80:13:bf:b2:47:97:0e:b1:c8:fb:76:c8:
                    61:ed:79:35:94:03:9a:7e:1d:50:76:b9:0d:8a:82:
                    65:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:48:1A:ED:E9:41:8A:63:FD:82:9B:2A:6F:41:CD:67:6E:03:9D:CD
            X509v3 Authority Key Identifier:
                keyid:28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a3a2f33322d313238203d3e20323637303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:36:f7:39:78:58:41:a8:1a:0b:7d:cf:df:ba:6a:f2:38:c9:
         7c:e0:dc:d5:85:da:46:50:7b:13:ca:39:5a:0b:42:62:d1:a4:
         f5:bb:16:6b:c8:99:16:e8:84:fe:63:54:1a:32:81:cc:06:cd:
         0c:f3:c8:97:14:ba:c1:29:71:b6:63:1e:43:c1:90:84:6c:4a:
         94:d8:ed:0e:fd:27:28:3b:c6:93:00:f8:d9:9c:86:bd:fc:42:
         f0:63:63:bb:73:e5:12:14:eb:2c:de:61:4f:36:bc:36:45:5d:
         c2:45:34:64:da:22:86:26:2e:fd:2e:ef:d6:fd:1a:d5:5f:ea:
         0c:eb:22:d5:37:c6:a0:6c:05:f1:e3:c5:62:66:c5:4f:86:dc:
         c7:5f:09:1d:62:0c:7b:76:cc:14:f3:96:f5:bc:0c:89:ee:8a:
         2e:9c:41:ab:e1:8c:9c:17:d5:86:d8:ac:4d:0f:d6:50:45:8e:
         6e:90:d1:61:1b:6d:a6:c3:8b:78:85:e3:49:6c:3e:7b:e3:db:
         3e:ce:0e:bf:c8:86:8b:8c:87:af:a4:27:01:c6:e4:2e:9a:2b:
         5a:e2:a2:b7:1c:36:47:06:aa:1d:fa:93:05:6d:c9:92:51:41:
         d7:86:ef:f9:77:49:38:4e:ac:6a:81:a7:88:74:9c:0b:ff:5f:
         8e:fd:89:b1
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUBbBQc6HNhnCfTwq29eeUEGPAcO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg5QzBGQThGNzRFOEE0OTZBMUNGMDQwMzUzOTE2NTA0
QzRFNzg5RjAeFw0yNTEwMDkxNDI3NDFaFw0yNjEwMDgxNDMyNDFaMDMxMTAvBgNV
BAMTKEUwNDgxQUVERTk0MThBNjNGRDgyOUIyQTZGNDFDRDY3NkUwMzlEQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEhQY4OMey1rClCQ93ZkdE2En
k6yNEimnYl54/shQULf4tUYJ/GWfEFIb2F/h8MmylT4J/uZRvC20lqvF+tCKGR6X
0JgoCyn24nwJLESqiikwcCL2un3kqSvn1u2+o0o96YGVupYxJb6RSt2avWei5TnO
YLznD380viERUAow39FLEpnc5un9IdP0Ihli4E4nkb1hsByYiBHeY+ElewNQw2NG
+RizMdDUi1xw76DDh5q9xKIVNpSYZIFvZ1ImHUfc/S5zw3NXL7vQgedDaQs9Wk3Q
zm0F8OaWdaZijgDcu6hOmYATv7JHlw6xyPt2yGHteTWUA5p+HVB2uQ2KgmU3AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU4Ega7elBimP9gpsqb0HNZ24Dnc0wHwYDVR0j
BBgwFoAUKJwPqPdOiklqHPBANTkWUExOeJ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTFwV05zeWkxc3pIbVJ5aDlxRG5leWlZSFBubktIZGpYU2k3MVBSeTJq
YWMvMC8yODlDMEZBOEY3NEU4QTQ5NkExQ0YwNDAzNTM5MTY1MDRDNEU3ODlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4OUMwRkE4Rjc0RThBNDk2
QTFDRjA0MDM1MzkxNjUwNEM0RTc4OUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUxcFdOc3lpMXN6SG1SeWg5cURuZXlpWUhQbm5LSGRqWFNpNzFQUnkyamFjLzAv
MzIzODMwMzQzYTM0Mzc2NDMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczMDM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEfQMA0GCSqGSIb3DQEBCwUAA4IBAQBSNvc5
eFhBqBoLfc/fumryOMl84NzVhdpGUHsTyjlaC0Ji0aT1uxZryJkW6IT+Y1QaMoHM
Bs0M88iXFLrBKXG2Yx5DwZCEbEqU2O0O/ScoO8aTAPjZnIa9/ELwY2O7c+USFOss
3mFPNrw2RV3CRTRk2iKGJi79Lu/W/RrVX+oM6yLVN8agbAXx48ViZsVPhtzHXwkd
Ygx7dswU85b1vAyJ7oounEGr4YycF9WG2KxND9ZQRY5ukNFhG22mw4t4heNJbD57
49s+zg6/yIaLjIevpCcBxuQumita4qK3HDZHBqod+pMFbcmSUUHXhu/5d0k4Tqxq
gaeIdJwL/1+O/Ymx
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:44:07 2025 by rpki-client