Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a316338303a3a2f34312d3431203d3e20323638393134.roa
File:                     323830343a356338383a316338303a3a2f34312d3431203d3e20323638393134.roa (raw, json)
Hash identifier:          7u0qldE7cWc7SbAQJxLLoj0NNZZ8hDPtcf45FucoURA=
Subject key identifier:   43:CC:DF:B2:13:70:BB:B5:E0:02:75:70:0B:DA:E6:80:8A:47:7D:97
Certificate issuer:       /CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
Certificate serial:       136C1CD3EB747D287A1A6277F805CEE546059820
Authority key identifier: 65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a316338303a3a2f34312d3431203d3e20323638393134.roa
Signing time:             Mon 20 Oct 2025 17:29:44 +0000
ROA not before:           Mon 20 Oct 2025 17:24:44 +0000
ROA not after:            Mon 19 Oct 2026 17:29:44 +0000
asID:                     268914
IP address blocks:        2804:5c88:1c80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6c:1c:d3:eb:74:7d:28:7a:1a:62:77:f8:05:ce:e5:46:05:98:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
        Validity
            Not Before: Oct 20 17:24:44 2025 GMT
            Not After : Oct 19 17:29:44 2026 GMT
        Subject: CN=43CCDFB21370BBB5E00275700BDAE6808A477D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d9:e1:bd:c1:46:cb:fd:ae:66:26:9c:c6:03:
                    a6:7f:81:e4:95:53:df:e2:1a:89:ba:db:75:0c:9d:
                    7e:a2:39:81:0b:79:05:7f:76:cf:ec:bc:82:6d:35:
                    03:a7:3b:75:62:fe:72:37:a0:e1:3c:5e:78:6b:cf:
                    ca:03:f4:a8:ca:bf:ed:19:5d:04:de:05:27:25:78:
                    ff:53:f9:ab:19:3f:42:24:39:d8:6a:7c:03:56:93:
                    ad:e3:9c:03:d6:b4:cb:47:67:aa:01:59:30:2e:d8:
                    59:cb:ae:d1:0e:9e:71:d7:40:75:f5:52:1d:55:ce:
                    01:83:aa:ed:41:c5:d8:01:5d:a3:a3:06:ca:d6:12:
                    06:b7:f1:45:3b:f7:47:25:02:87:1e:97:65:6a:28:
                    ff:e3:8b:98:71:cb:c0:44:d0:a6:0d:f1:0a:76:33:
                    71:4b:ed:50:35:7d:b2:3d:d5:b5:8d:08:81:ec:59:
                    d5:a0:80:bc:54:df:74:c1:c3:ba:40:0c:30:93:d7:
                    dc:da:cb:2d:a5:72:e2:18:ff:da:50:31:84:a7:25:
                    95:26:03:b8:d3:d5:94:a2:8f:49:7d:ab:28:26:c8:
                    48:a0:24:99:ff:b8:c1:ac:78:2b:33:dc:9a:23:e5:
                    e8:04:22:4c:33:24:c8:53:32:22:6a:dc:82:60:1a:
                    c3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CC:DF:B2:13:70:BB:B5:E0:02:75:70:0B:DA:E6:80:8A:47:7D:97
            X509v3 Authority Key Identifier:
                keyid:65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a316338303a3a2f34312d3431203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c88:1c80::/41

    Signature Algorithm: sha256WithRSAEncryption
         17:6f:f9:6f:3d:c3:0b:0e:8a:0e:d4:6e:a8:95:02:10:0e:69:
         47:ac:8f:a2:36:14:5a:f1:1e:6c:ec:55:64:73:33:69:c9:fc:
         1d:8b:42:52:a9:8b:5b:58:87:e5:ff:b7:93:2a:e9:8d:92:49:
         1c:2c:0b:32:32:d1:c5:34:19:19:b1:bc:3e:96:55:22:62:53:
         5f:c6:ae:3f:21:21:79:5d:08:62:50:aa:02:41:db:29:f0:70:
         52:95:99:f1:8b:b6:92:af:9a:a3:da:f7:0c:65:b4:e7:1b:bc:
         6e:d0:fa:17:80:a2:18:ab:32:4a:23:3c:59:81:96:06:a1:cb:
         42:46:ef:54:ca:f6:5d:dd:85:89:e1:45:79:8b:c0:c6:5c:73:
         a6:c2:5a:e8:95:f1:8a:80:b4:ee:e2:a8:89:21:eb:f6:cc:55:
         17:c1:74:c7:df:ad:89:69:62:71:42:dd:77:93:37:ec:3d:1b:
         c0:86:27:a0:9f:f6:8b:b1:88:c9:55:24:8c:a9:27:1b:b1:d2:
         4c:72:22:eb:60:57:ba:84:41:7f:4e:1d:69:6f:c5:99:72:34:
         7e:c2:4b:4d:5a:b2:ce:b9:ed:3e:72:74:90:f1:f2:f5:0b:07:
         80:b9:6f:70:ad:8f:bd:d3:f1:39:2b:c0:78:a3:a2:47:44:d5:
         a0:5f:51:c0
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUE2wc0+t0fSh6GmJ3+AXO5UYFmCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU5RTkyRjU5MTRDOTk3Q0M1MkQ4M0REMEYxNjIzNjhE
QUMxOEVBMjAeFw0yNTEwMjAxNzI0NDRaFw0yNjEwMTkxNzI5NDRaMDMxMTAvBgNV
BAMTKDQzQ0NERkIyMTM3MEJCQjVFMDAyNzU3MDBCREFFNjgwOEE0NzdEOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT2eG9wUbL/a5mJpzGA6Z/geSV
U9/iGom623UMnX6iOYELeQV/ds/svIJtNQOnO3Vi/nI3oOE8Xnhrz8oD9KjKv+0Z
XQTeBScleP9T+asZP0IkOdhqfANWk63jnAPWtMtHZ6oBWTAu2FnLrtEOnnHXQHX1
Uh1VzgGDqu1BxdgBXaOjBsrWEga38UU790clAocel2VqKP/ji5hxy8BE0KYN8Qp2
M3FL7VA1fbI91bWNCIHsWdWggLxU33TBw7pADDCT19zayy2lcuIY/9pQMYSnJZUm
A7jT1ZSij0l9qygmyEigJJn/uMGseCsz3Joj5egEIkwzJMhTMiJq3IJgGsMNAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUQ8zfshNwu7XgAnVwC9rmgIpHfZcwHwYDVR0j
BBgwFoAUZZ6S9ZFMmXzFLYPdDxYjaNrBjqIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjJwRVJMN0trZTk2NFdwdldoQjY2R2FzNWJ5MlZOQ0VDOXVBVU5aUXhk
dDkvMC82NTlFOTJGNTkxNEM5OTdDQzUyRDgzREQwRjE2MjM2OERBQzE4RUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1OUU5MkY1OTE0Qzk5N0ND
NTJEODNERDBGMTYyMzY4REFDMThFQTIuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYycEVSTDdLa2U5NjRXcHZXaEI2NkdhczVieTJWTkNFQzl1QVVOWlF4ZHQ5LzAv
MzIzODMwMzQzYTM1NjMzODM4M2EzMTYzMzgzMDNhM2EyZjM0MzEyZDM0MzEyMDNk
M2UyMDMyMzYzODM5MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBygEXIgcgDANBgkqhkiG9w0BAQsF
AAOCAQEAF2/5bz3DCw6KDtRuqJUCEA5pR6yPojYUWvEebOxVZHMzacn8HYtCUqmL
W1iH5f+3kyrpjZJJHCwLMjLRxTQZGbG8PpZVImJTX8auPyEheV0IYlCqAkHbKfBw
UpWZ8Yu2kq+ao9r3DGW05xu8btD6F4CiGKsySiM8WYGWBqHLQkbvVMr2Xd2FieFF
eYvAxlxzpsJa6JXxioC07uKoiSHr9sxVF8F0x9+tiWlicULdd5M37D0bwIYnoJ/2
i7GIyVUkjKknG7HSTHIi62BXuoRBf04daW/FmXI0fsJLTVqyzrntPnJ0kPHy9QsH
gLlvcK2PvdPxOSvAeKOiR0TVoF9RwA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:03:20 2025 by rpki-client