Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/323830343a346661383a383030303a3a2f34302d3430203d3e20323638333431.roa
File:                     323830343a346661383a383030303a3a2f34302d3430203d3e20323638333431.roa (raw, json)
Hash identifier:          tYLDAuzP0SrCgHhWJRva3gm6bsBdQQRY+awe7OVM+7A=
Subject key identifier:   E0:51:DC:B4:00:8D:44:07:12:EA:12:60:F0:2C:EF:5B:93:FD:63:2D
Certificate issuer:       /CN=EF9FE7422108F8FDF6AD86D74818535B1738C9BA
Certificate serial:       36C6A771288467574B25BF27CC60B20054C5E31B
Authority key identifier: EF:9F:E7:42:21:08:F8:FD:F6:AD:86:D7:48:18:53:5B:17:38:C9:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/323830343a346661383a383030303a3a2f34302d3430203d3e20323638333431.roa
Signing time:             Mon 22 Sep 2025 18:40:51 +0000
ROA not before:           Mon 22 Sep 2025 18:35:51 +0000
ROA not after:            Mon 21 Sep 2026 18:40:51 +0000
asID:                     268341
IP address blocks:        2804:4fa8:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.crl
                          rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c6:a7:71:28:84:67:57:4b:25:bf:27:cc:60:b2:00:54:c5:e3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF9FE7422108F8FDF6AD86D74818535B1738C9BA
        Validity
            Not Before: Sep 22 18:35:51 2025 GMT
            Not After : Sep 21 18:40:51 2026 GMT
        Subject: CN=E051DCB4008D440712EA1260F02CEF5B93FD632D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:28:b4:b7:f5:98:c7:dc:22:64:ae:67:dc:
                    67:7c:66:fb:ac:a2:c4:8e:8a:bd:3e:1a:34:a2:a2:
                    6d:0b:f4:38:07:06:d2:a4:c8:fa:2e:4c:37:f5:bb:
                    4a:66:78:13:dd:bc:a2:54:82:db:83:d8:d6:e3:28:
                    c6:b1:c2:f3:05:8b:46:82:4c:0b:0e:7a:27:f7:7b:
                    1f:26:fb:b9:24:e7:07:08:e6:e4:1c:78:28:80:cd:
                    cc:0c:a6:3d:c5:4c:1d:4e:42:0e:ce:27:28:79:3a:
                    d6:aa:47:b5:19:96:81:e1:68:cc:f9:70:e7:51:c4:
                    f1:bc:52:35:2c:4a:fe:ce:a5:04:e3:80:1a:38:86:
                    a3:fe:d9:f7:d1:ac:eb:a2:6e:c3:da:0d:61:73:29:
                    49:fa:12:85:66:56:41:8b:c3:cb:80:fd:36:16:44:
                    34:8b:d4:ac:3b:cd:ea:36:5b:e7:e0:05:aa:5a:6d:
                    25:51:5c:b5:2c:a6:85:e2:a9:bf:05:02:da:73:96:
                    cb:45:fa:ae:96:34:59:24:d1:3a:5d:5f:e7:db:66:
                    a8:82:63:53:a7:e9:01:94:05:24:35:e3:fe:9e:55:
                    00:1c:a2:52:52:b3:ae:3c:84:0c:f4:19:dc:59:4d:
                    ca:da:77:9d:f1:18:6b:0d:25:a9:f0:2f:b8:bc:48:
                    4a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:51:DC:B4:00:8D:44:07:12:EA:12:60:F0:2C:EF:5B:93:FD:63:2D
            X509v3 Authority Key Identifier:
                keyid:EF:9F:E7:42:21:08:F8:FD:F6:AD:86:D7:48:18:53:5B:17:38:C9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9FE7422108F8FDF6AD86D74818535B1738C9BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jxecmmMQMpeMGwZ3aFbKPghaFKe4r6YSQyAqAFKNiPU/0/323830343a346661383a383030303a3a2f34302d3430203d3e20323638333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fa8:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:c6:00:bd:87:30:1d:b4:70:4f:fc:0d:da:30:ec:ca:bb:4c:
         e5:d1:fb:5d:82:6e:ce:8f:1a:3d:09:8c:7b:d5:42:7c:fc:d8:
         80:55:d8:48:92:8f:2c:0b:dc:53:a2:35:77:ea:d3:8b:9f:52:
         2e:2c:aa:ea:ee:8a:52:2b:a8:08:28:49:cc:d2:c6:f8:37:1e:
         78:31:de:a0:8c:82:52:83:e4:f5:ae:47:04:d6:72:ec:8f:c3:
         fc:0c:a2:41:5b:9a:b6:dc:0e:c5:22:4a:20:3c:24:1d:59:7c:
         d7:3b:76:ff:95:2f:60:14:d3:25:35:a1:a7:a3:94:d9:07:c4:
         c5:73:6a:e4:3b:15:71:09:9c:11:fd:4a:7c:af:a1:b6:ef:c8:
         bb:e9:3b:85:25:f8:c0:11:e0:d6:9d:c7:a5:ab:8a:08:e9:ff:
         d1:37:d3:1c:f9:7f:5c:25:59:39:ff:c9:10:6a:77:0f:b9:a9:
         3c:39:2d:aa:30:10:55:79:24:33:1a:db:4d:d6:20:c3:8b:2c:
         b7:2b:b8:5d:02:43:4e:40:c4:fb:42:54:20:13:28:5a:ad:f7:
         d4:f6:0c:0f:2b:9d:be:37:21:e2:92:29:c0:7a:cf:4e:5f:8a:
         8a:ad:e7:31:f0:40:e1:3b:1d:50:8f:50:1b:b0:70:fb:f4:63:
         33:da:53:fa
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUNsancSiEZ1dLJb8nzGCyAFTF4xswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY5RkU3NDIyMTA4RjhGREY2QUQ4NkQ3NDgxODUzNUIx
NzM4QzlCQTAeFw0yNTA5MjIxODM1NTFaFw0yNjA5MjExODQwNTFaMDMxMTAvBgNV
BAMTKEUwNTFEQ0I0MDA4RDQ0MDcxMkVBMTI2MEYwMkNFRjVCOTNGRDYzMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwgyi0t/WYx9wiZK5n3Gd8Zvus
osSOir0+GjSiom0L9DgHBtKkyPouTDf1u0pmeBPdvKJUgtuD2NbjKMaxwvMFi0aC
TAsOeif3ex8m+7kk5wcI5uQceCiAzcwMpj3FTB1OQg7OJyh5OtaqR7UZloHhaMz5
cOdRxPG8UjUsSv7OpQTjgBo4hqP+2ffRrOuibsPaDWFzKUn6EoVmVkGLw8uA/TYW
RDSL1Kw7zeo2W+fgBapabSVRXLUspoXiqb8FAtpzlstF+q6WNFkk0TpdX+fbZqiC
Y1On6QGUBSQ14/6eVQAcolJSs648hAz0GdxZTcrad53xGGsNJanwL7i8SEqfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU4FHctACNRAcS6hJg8CzvW5P9Yy0wHwYDVR0j
BBgwFoAU75/nQiEI+P32rYbXSBhTWxc4ybowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWp4ZWNtbU1RTXBlTUd3WjNhRmJLUGdoYUZLZTRyNllTUXlBcUFGS05p
UFUvMC9FRjlGRTc0MjIxMDhGOEZERjZBRDg2RDc0ODE4NTM1QjE3MzhDOUJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOUZFNzQyMjEwOEY4RkRG
NkFEODZENzQ4MTg1MzVCMTczOEM5QkEuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqeGVjbW1NUU1wZU1Hd1ozYUZiS1BnaGFGS2U0cjZZU1F5QXFBRktOaVBVLzAv
MzIzODMwMzQzYTM0NjY2MTM4M2EzODMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzODMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgET6iAMA0GCSqGSIb3DQEBCwUA
A4IBAQBzxgC9hzAdtHBP/A3aMOzKu0zl0ftdgm7Ojxo9CYx71UJ8/NiAVdhIko8s
C9xTojV36tOLn1IuLKrq7opSK6gIKEnM0sb4Nx54Md6gjIJSg+T1rkcE1nLsj8P8
DKJBW5q23A7FIkogPCQdWXzXO3b/lS9gFNMlNaGno5TZB8TFc2rkOxVxCZwR/Up8
r6G278i76TuFJfjAEeDWncelq4oI6f/RN9Mc+X9cJVk5/8kQancPuak8OS2qMBBV
eSQzGttN1iDDiyy3K7hdAkNOQMT7QlQgEyharffU9gwPK52+NyHikinAes9OX4qK
recx8EDhOx1Qj1AbsHD79GMz2lP6
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:37:58 2025 by rpki-client