Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a3a2f33322d313238203d3e20323733343132.roa
File:                     323830343a386533633a3a2f33322d313238203d3e20323733343132.roa (raw, json)
Hash identifier:          s3JAhMo6AZ1Ar7FNE2ej7uepkEVLzU+tNi6HRcKuoWU=
Subject key identifier:   F8:C4:FD:97:22:33:E9:92:3F:73:D8:93:98:ED:E2:99:76:B0:A1:6B
Certificate issuer:       /CN=88FFBC1DCE1883EA3D495F3FC58416D571724853
Certificate serial:       07D679D4CD5BC3A2B7E1BAE1B5D12C2671678FC5
Authority key identifier: 88:FF:BC:1D:CE:18:83:EA:3D:49:5F:3F:C5:84:16:D5:71:72:48:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88FFBC1DCE1883EA3D495F3FC58416D571724853.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a3a2f33322d313238203d3e20323733343132.roa
Signing time:             Mon 22 Sep 2025 16:53:40 +0000
ROA not before:           Mon 22 Sep 2025 16:48:40 +0000
ROA not after:            Mon 21 Sep 2026 16:53:40 +0000
asID:                     273412
IP address blocks:        2804:8e3c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/88FFBC1DCE1883EA3D495F3FC58416D571724853.crl
                          rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/88FFBC1DCE1883EA3D495F3FC58416D571724853.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88FFBC1DCE1883EA3D495F3FC58416D571724853.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 22:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d6:79:d4:cd:5b:c3:a2:b7:e1:ba:e1:b5:d1:2c:26:71:67:8f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88FFBC1DCE1883EA3D495F3FC58416D571724853
        Validity
            Not Before: Sep 22 16:48:40 2025 GMT
            Not After : Sep 21 16:53:40 2026 GMT
        Subject: CN=F8C4FD972233E9923F73D89398EDE29976B0A16B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ea:92:a2:54:13:e1:87:83:97:b9:ce:8c:4b:
                    d5:59:b7:53:98:08:41:83:d9:ba:47:a1:1f:61:54:
                    b1:f7:8f:ce:b5:d7:df:16:45:16:bf:8d:0c:f1:1c:
                    b7:b6:f0:11:a8:5f:cc:a0:23:2e:ed:5f:a7:e2:84:
                    33:65:74:9a:14:e1:13:e7:80:1a:68:0d:bc:c1:ed:
                    6b:55:97:17:1f:55:17:96:f0:82:ee:15:f4:6e:2e:
                    5b:68:fe:1e:bb:23:1d:05:4b:b9:e0:2e:fb:da:28:
                    8b:19:a0:00:67:7c:4c:da:4e:79:f9:be:af:08:89:
                    f4:63:e2:be:70:11:f9:f7:90:f0:81:8e:ff:1d:70:
                    e8:d6:62:9c:aa:88:f7:cb:8b:34:d3:b2:4c:57:b2:
                    6c:1b:d1:8d:c4:45:2d:02:cb:19:fa:8d:b6:9c:ee:
                    52:f7:7a:c4:9a:95:31:69:01:23:0e:45:d3:21:b1:
                    1d:61:7f:b9:10:47:c3:43:fd:dc:70:25:80:a2:89:
                    20:8d:16:38:14:a6:fa:88:a5:d0:95:98:e1:a9:02:
                    48:ad:e9:53:0d:3e:91:90:e5:0b:74:ed:ab:11:a6:
                    21:26:9b:45:4f:45:66:90:d0:d4:e3:2f:54:0a:a2:
                    f6:4b:10:3f:7a:7a:eb:45:1c:28:1a:ac:77:ab:0c:
                    95:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C4:FD:97:22:33:E9:92:3F:73:D8:93:98:ED:E2:99:76:B0:A1:6B
            X509v3 Authority Key Identifier:
                keyid:88:FF:BC:1D:CE:18:83:EA:3D:49:5F:3F:C5:84:16:D5:71:72:48:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/88FFBC1DCE1883EA3D495F3FC58416D571724853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88FFBC1DCE1883EA3D495F3FC58416D571724853.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/323830343a386533633a3a2f33322d313238203d3e20323733343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:c9:56:1a:9f:c1:e6:78:02:2a:61:07:e0:00:d6:f2:ea:ab:
         7c:9a:ea:32:d8:3b:84:67:9c:43:08:dc:73:ba:32:20:05:bc:
         3b:84:a5:9c:2a:08:e9:40:7f:e0:44:ad:e7:7a:74:01:b9:e5:
         b9:ad:7b:73:a9:8b:8a:1b:3e:fd:a6:7e:a7:73:76:d8:b1:6d:
         fa:68:c4:97:25:df:58:f3:db:ce:ac:9c:e8:64:2f:2c:d2:6f:
         3c:bf:c8:cf:45:88:9d:ef:81:9e:ba:d3:bc:98:84:14:d4:5d:
         c8:d2:96:62:77:a8:bb:9d:61:c0:56:0b:ed:1e:ac:84:c6:e9:
         36:f0:d4:4f:09:7a:99:ea:92:d0:89:58:19:d9:09:52:9a:53:
         16:9d:4b:99:a1:c2:db:9d:eb:00:d1:4a:46:0b:e7:89:6b:16:
         0e:4d:e0:48:46:08:8a:32:13:1a:c8:f5:ba:93:71:bf:ab:0d:
         73:08:3e:69:d7:18:e1:29:60:4b:4a:6d:1b:47:03:a7:be:33:
         37:f3:89:44:fa:3e:b1:25:0e:56:bf:80:7c:8e:3b:ea:14:f5:
         ed:87:9d:e9:01:f1:f9:78:7d:82:b2:ed:f2:69:7a:4b:3b:28:
         b6:48:89:aa:21:8e:5e:30:fd:30:4c:2a:32:9b:2f:18:7b:3b:
         1e:f7:3b:68
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUB9Z51M1bw6K34brhtdEsJnFnj8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhGRkJDMURDRTE4ODNFQTNENDk1RjNGQzU4NDE2RDU3
MTcyNDg1MzAeFw0yNTA5MjIxNjQ4NDBaFw0yNjA5MjExNjUzNDBaMDMxMTAvBgNV
BAMTKEY4QzRGRDk3MjIzM0U5OTIzRjczRDg5Mzk4RURFMjk5NzZCMEExNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN6pKiVBPhh4OXuc6MS9VZt1OY
CEGD2bpHoR9hVLH3j861198WRRa/jQzxHLe28BGoX8ygIy7tX6fihDNldJoU4RPn
gBpoDbzB7WtVlxcfVReW8ILuFfRuLlto/h67Ix0FS7ngLvvaKIsZoABnfEzaTnn5
vq8IifRj4r5wEfn3kPCBjv8dcOjWYpyqiPfLizTTskxXsmwb0Y3ERS0Cyxn6jbac
7lL3esSalTFpASMORdMhsR1hf7kQR8ND/dxwJYCiiSCNFjgUpvqIpdCVmOGpAkit
6VMNPpGQ5Qt07asRpiEmm0VPRWaQ0NTjL1QKovZLED96eutFHCgarHerDJW3AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU+MT9lyIz6ZI/c9iTmO3imXawoWswHwYDVR0j
BBgwFoAUiP+8Hc4Yg+o9SV8/xYQW1XFySFMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkI4Z0puZTd2NXcxQ3Y3dGdUZGhiak5kWUt0UjQ0YzVwcUhRM2NIQ1BW
djEvMC84OEZGQkMxRENFMTg4M0VBM0Q0OTVGM0ZDNTg0MTZENTcxNzI0ODUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4RkZCQzFEQ0UxODgzRUEz
RDQ5NUYzRkM1ODQxNkQ1NzE3MjQ4NTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCOGdKbmU3djV3MUN2N3RnVGRoYmpOZFlLdFI0NGM1cHFIUTNjSENQVnYxLzAv
MzIzODMwMzQzYTM4NjUzMzYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzMzNDMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBI48MA0GCSqGSIb3DQEBCwUAA4IBAQBhyVYa
n8HmeAIqYQfgANby6qt8muoy2DuEZ5xDCNxzujIgBbw7hKWcKgjpQH/gRK3nenQB
ueW5rXtzqYuKGz79pn6nc3bYsW36aMSXJd9Y89vOrJzoZC8s0m88v8jPRYid74Ge
utO8mIQU1F3I0pZid6i7nWHAVgvtHqyExuk28NRPCXqZ6pLQiVgZ2QlSmlMWnUuZ
ocLbnesA0UpGC+eJaxYOTeBIRgiKMhMayPW6k3G/qw1zCD5p1xjhKWBLSm0bRwOn
vjM384lE+j6xJQ5Wv4B8jjvqFPXth53pAfH5eH2Csu3yaXpLOyi2SImqIY5eMP0w
TCoymy8Yezse9zto
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:28:25 2025 by rpki-client