Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a3a2f33332d3333203d3e20323733343637.roa
File:                     323830343a386631383a3a2f33332d3333203d3e20323733343637.roa (raw, json)
Hash identifier:          3sXe0voEuD7fUJi9SAgsIJowqnEqyt1ydIgvRyKk3KQ=
Subject key identifier:   F1:BB:76:A5:5E:CA:DE:FE:1A:C3:4E:25:CC:89:F3:9A:79:11:42:EB
Certificate issuer:       /CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
Certificate serial:       34649DDBEF91CB42E48020ABB679A6679EBD2FA0
Authority key identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a3a2f33332d3333203d3e20323733343637.roa
Signing time:             Tue 14 Oct 2025 14:09:21 +0000
ROA not before:           Tue 14 Oct 2025 14:04:21 +0000
ROA not after:            Tue 13 Oct 2026 14:09:21 +0000
asID:                     273467
IP address blocks:        2804:8f18::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl
                          rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:64:9d:db:ef:91:cb:42:e4:80:20:ab:b6:79:a6:67:9e:bd:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
        Validity
            Not Before: Oct 14 14:04:21 2025 GMT
            Not After : Oct 13 14:09:21 2026 GMT
        Subject: CN=F1BB76A55ECADEFE1AC34E25CC89F39A791142EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:0b:76:ca:4f:f5:af:9f:6d:4e:03:76:57:
                    17:e1:ae:1c:30:11:88:27:6b:a3:f9:3a:ab:c1:78:
                    e5:1b:75:9e:c0:de:fd:73:3d:ae:7d:ba:d0:74:40:
                    d3:15:e2:c4:07:2c:4f:ee:c1:54:a2:03:62:af:b5:
                    c3:85:5e:36:df:ee:68:55:73:e3:34:5a:41:88:a4:
                    64:67:f7:b4:35:31:88:a1:81:00:03:94:54:f1:46:
                    5b:9d:48:50:f6:ca:33:f1:95:dc:7d:04:77:41:ac:
                    18:dc:a6:ad:df:22:6e:22:99:7b:10:24:6d:37:d7:
                    13:ab:08:83:fd:d6:af:e5:8f:1b:9e:42:f4:ea:cf:
                    94:04:29:5a:f9:49:0f:cd:76:73:a1:7f:b3:00:c4:
                    5c:ed:56:20:21:6d:ce:47:d0:68:6f:74:85:d8:f7:
                    dd:42:8f:f3:cb:81:f4:c1:82:cf:70:aa:63:67:61:
                    93:71:13:66:67:a5:e1:1e:6e:13:ae:6d:aa:5b:74:
                    fa:62:05:ce:f2:af:e1:ed:c7:9f:33:e5:1c:45:4d:
                    b2:27:49:39:58:9e:ba:00:7c:01:84:23:af:4b:61:
                    d6:66:58:bd:fe:a3:ca:eb:29:d5:d8:ad:f1:5e:83:
                    b3:60:c0:59:46:35:05:76:10:31:90:19:f2:6d:06:
                    4a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BB:76:A5:5E:CA:DE:FE:1A:C3:4E:25:CC:89:F3:9A:79:11:42:EB
            X509v3 Authority Key Identifier:
                keyid:E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a3a2f33332d3333203d3e20323733343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f18::/33

    Signature Algorithm: sha256WithRSAEncryption
         0b:7c:90:71:75:a4:b3:d9:a8:3c:23:ca:76:d4:27:61:ad:c2:
         1d:72:2b:87:6c:65:75:98:18:fd:14:a1:93:3a:f4:4f:d4:f7:
         9f:57:4c:6d:84:5e:ce:5b:7f:e5:5d:15:aa:e9:80:87:a7:0c:
         0d:eb:50:4a:d8:80:21:e6:a1:bf:4e:6b:1e:12:0f:ad:55:11:
         b2:f9:a5:8c:31:23:a2:f1:e6:40:f4:b3:d3:6d:f3:99:d7:76:
         9e:15:16:79:f8:df:ca:ef:f6:62:ce:a6:67:c3:eb:57:51:6b:
         8a:ec:c2:fa:fc:c9:17:0d:ae:8a:8e:d1:ff:43:29:e3:ab:99:
         71:eb:f6:37:bc:2c:02:c6:eb:8d:61:eb:de:f3:40:64:e3:91:
         49:3b:c8:c8:52:19:37:37:e2:4e:63:13:5b:25:fa:ba:2c:0f:
         e8:b6:09:20:8b:cd:dd:e8:f9:cf:11:b5:84:d9:c9:06:47:99:
         d4:06:5e:79:e4:fc:4c:d1:35:3a:c3:5e:5a:77:38:e7:bc:39:
         d0:00:13:69:08:c1:cd:46:d6:bd:6b:c2:aa:64:9e:8f:fc:90:
         41:4b:26:ab:49:e5:a8:3e:47:c7:6c:bd:e3:86:9f:78:34:5c:
         c2:8d:ca:8d:bf:8d:30:b0:60:42:06:82:07:e4:be:aa:88:23:
         54:86:5d:f4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNGSd2++Ry0LkgCCrtnmmZ569L6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdBQzZCQzhEMTlDRDM1OERBMDdENzA4M0NFNjRCMzdB
RDk1RDI4QzAeFw0yNTEwMTQxNDA0MjFaFw0yNjEwMTMxNDA5MjFaMDMxMTAvBgNV
BAMTKEYxQkI3NkE1NUVDQURFRkUxQUMzNEUyNUNDODlGMzlBNzkxMTQyRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnEAt2yk/1r59tTgN2Vxfhrhww
EYgna6P5OqvBeOUbdZ7A3v1zPa59utB0QNMV4sQHLE/uwVSiA2KvtcOFXjbf7mhV
c+M0WkGIpGRn97Q1MYihgQADlFTxRludSFD2yjPxldx9BHdBrBjcpq3fIm4imXsQ
JG031xOrCIP91q/ljxueQvTqz5QEKVr5SQ/NdnOhf7MAxFztViAhbc5H0GhvdIXY
991Cj/PLgfTBgs9wqmNnYZNxE2ZnpeEebhOubapbdPpiBc7yr+Htx58z5RxFTbIn
STlYnroAfAGEI69LYdZmWL3+o8rrKdXYrfFeg7NgwFlGNQV2EDGQGfJtBkqVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8bt2pV7K3v4aw04lzInzmnkRQuswHwYDVR0j
BBgwFoAU56xryNGc01jaB9cIPOZLN62V0owwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkNFdkVCd05hOHBzNkNhb0hWYmozSGJjdzYyaVFlejJUTnJ1N3M2OHZL
R1AvMC9FN0FDNkJDOEQxOUNEMzU4REEwN0Q3MDgzQ0U2NEIzN0FEOTVEMjhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3QUM2QkM4RDE5Q0QzNThE
QTA3RDcwODNDRTY0QjM3QUQ5NUQyOEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZDRXZFQndOYThwczZDYW9IVmJqM0hiY3c2MmlRZXoyVE5ydTdzNjh2S0dQLzAv
MzIzODMwMzQzYTM4NjYzMTM4M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMz
MzQzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKASPGAAwDQYJKoZIhvcNAQELBQADggEBAAt8kHF1
pLPZqDwjynbUJ2Gtwh1yK4dsZXWYGP0UoZM69E/U959XTG2EXs5bf+VdFarpgIen
DA3rUErYgCHmob9Oax4SD61VEbL5pYwxI6Lx5kD0s9Nt85nXdp4VFnn438rv9mLO
pmfD61dRa4rswvr8yRcNroqO0f9DKeOrmXHr9je8LALG641h697zQGTjkUk7yMhS
GTc34k5jE1sl+rosD+i2CSCLzd3o+c8RtYTZyQZHmdQGXnnk/EzRNTrDXlp3OOe8
OdAAE2kIwc1G1r1rwqpkno/8kEFLJqtJ5ag+R8dsveOGn3g0XMKNyo2/jTCwYEIG
ggfkvqqII1SGXfQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:46:18 2025 by rpki-client