Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/323830343a353461383a3a2f33322d3438203d3e20323638363633.roa
File:                     323830343a353461383a3a2f33322d3438203d3e20323638363633.roa (raw, json)
Hash identifier:          m7+hgmJslk8ghgjHVc6HPco/IHPiW92CG2MNjN+UFQs=
Subject key identifier:   BD:50:15:F8:EB:CE:79:BF:DC:14:E9:1C:C6:1F:AB:22:89:F6:D7:B6
Certificate issuer:       /CN=8DC5D5EDAAF33C7066244D28E534CFD5D6691353
Certificate serial:       2779D800BEB72F077F5A0D25A9B740A77BB30F20
Authority key identifier: 8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/323830343a353461383a3a2f33322d3438203d3e20323638363633.roa
Signing time:             Fri 10 Oct 2025 15:47:31 +0000
ROA not before:           Fri 10 Oct 2025 15:42:31 +0000
ROA not after:            Fri 09 Oct 2026 15:47:31 +0000
asID:                     268663
IP address blocks:        2804:54a8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl
                          rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:79:d8:00:be:b7:2f:07:7f:5a:0d:25:a9:b7:40:a7:7b:b3:0f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DC5D5EDAAF33C7066244D28E534CFD5D6691353
        Validity
            Not Before: Oct 10 15:42:31 2025 GMT
            Not After : Oct  9 15:47:31 2026 GMT
        Subject: CN=BD5015F8EBCE79BFDC14E91CC61FAB2289F6D7B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:71:ee:1a:46:fe:db:a0:64:b5:ce:2a:36:d1:
                    7b:3c:94:6d:ad:0c:56:5b:1c:e1:b3:e3:54:3f:31:
                    69:73:56:0a:1e:f1:a9:be:53:8c:fc:97:61:d6:1b:
                    34:c4:44:40:bf:c9:bd:b6:be:9c:29:13:71:b0:98:
                    66:1f:71:f9:c4:30:aa:e0:3f:77:c5:cc:6f:94:7d:
                    07:c1:9a:0b:f0:c0:97:85:07:43:5f:f5:62:89:5e:
                    2b:cc:f5:e9:14:01:68:93:d8:4e:c1:fd:bf:bd:9c:
                    23:5a:80:ae:17:2a:b5:3d:6d:b5:6e:73:71:59:39:
                    23:c0:bf:ee:9c:ae:b5:96:d0:bf:86:98:30:42:db:
                    7f:d4:29:2a:14:1b:3d:a7:e9:18:0f:c3:e2:ec:48:
                    d5:e5:9f:c1:10:33:2e:c6:1c:8e:33:1f:ae:a9:a0:
                    5c:27:4f:56:77:4b:d1:1a:cf:93:31:52:dd:14:58:
                    c1:5f:97:e8:3a:88:63:26:91:49:43:56:73:9c:7a:
                    57:1d:03:8b:6a:15:f8:37:7c:0f:ea:f3:9d:81:11:
                    8e:36:07:e2:ed:f5:fe:71:ff:49:b4:37:8a:05:b4:
                    1d:de:b4:03:51:fd:03:4d:ff:2a:45:71:f3:8c:1a:
                    5e:22:c7:18:26:33:9e:39:fa:7b:47:46:04:7f:4c:
                    5d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:50:15:F8:EB:CE:79:BF:DC:14:E9:1C:C6:1F:AB:22:89:F6:D7:B6
            X509v3 Authority Key Identifier:
                keyid:8D:C5:D5:ED:AA:F3:3C:70:66:24:4D:28:E5:34:CF:D5:D6:69:13:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC5D5EDAAF33C7066244D28E534CFD5D6691353.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tGhri9GmpWnWwokiSEKmwkRMdaHCk8zMxtDjLcGkPfZ/0/323830343a353461383a3a2f33322d3438203d3e20323638363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:f2:bc:b4:2f:6a:e6:92:43:20:fd:a0:07:79:c4:0a:91:13:
         76:ab:2b:42:9e:c3:65:ef:49:a7:fe:f9:68:42:6d:67:b9:87:
         31:b6:e5:fc:3f:65:d7:0e:26:70:e4:bf:3b:10:13:5c:7f:50:
         61:15:c2:c2:ae:03:ff:6d:de:ec:3a:da:be:6d:b2:7d:2e:e7:
         ea:46:03:cf:c5:32:3c:3e:b1:f9:18:f9:fa:af:a3:5b:de:fc:
         1d:c8:2b:49:a1:a8:f9:b1:0a:0a:d6:4e:bd:78:d5:94:ef:7c:
         0a:8a:27:0b:3e:99:87:b1:08:b9:d2:03:be:fa:b7:03:44:89:
         35:4b:36:ce:39:b1:a3:8d:06:26:9b:13:4c:7d:5c:4f:b7:cb:
         50:2d:23:82:07:82:a7:b0:d5:bc:ae:fb:7f:43:09:cf:69:6a:
         60:bc:fb:65:46:ab:bb:ec:20:bb:24:7b:56:0e:d1:76:4b:1f:
         44:9f:b4:9a:be:7f:94:a3:9b:6c:ec:bc:e9:a8:73:ea:87:7b:
         5d:67:92:bc:3f:49:92:e4:27:59:55:4e:75:83:74:e3:24:1a:
         16:c0:02:de:b0:67:88:6b:c2:84:10:84:93:12:ff:70:06:00:
         32:96:2a:46:fb:c9:7d:ff:27:1d:31:f8:5e:8d:48:1c:ed:68:
         41:0e:88:1e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJ3nYAL63Lwd/Wg0lqbdAp3uzDyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERDNUQ1RURBQUYzM0M3MDY2MjQ0RDI4RTUzNENGRDVE
NjY5MTM1MzAeFw0yNTEwMTAxNTQyMzFaFw0yNjEwMDkxNTQ3MzFaMDMxMTAvBgNV
BAMTKEJENTAxNUY4RUJDRTc5QkZEQzE0RTkxQ0M2MUZBQjIyODlGNkQ3QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZce4aRv7boGS1zio20Xs8lG2t
DFZbHOGz41Q/MWlzVgoe8am+U4z8l2HWGzTEREC/yb22vpwpE3GwmGYfcfnEMKrg
P3fFzG+UfQfBmgvwwJeFB0Nf9WKJXivM9ekUAWiT2E7B/b+9nCNagK4XKrU9bbVu
c3FZOSPAv+6crrWW0L+GmDBC23/UKSoUGz2n6RgPw+LsSNXln8EQMy7GHI4zH66p
oFwnT1Z3S9Eaz5MxUt0UWMFfl+g6iGMmkUlDVnOcelcdA4tqFfg3fA/q852BEY42
B+Lt9f5x/0m0N4oFtB3etANR/QNN/ypFcfOMGl4ixxgmM545+ntHRgR/TF2jAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUvVAV+OvOeb/cFOkcxh+rIon217YwHwYDVR0j
BBgwFoAUjcXV7arzPHBmJE0o5TTP1dZpE1MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRHaHJpOUdtcFduV3dva2lTRUttd2tSTWRhSENrOHpNeHREakxjR2tQ
ZlovMC84REM1RDVFREFBRjMzQzcwNjYyNDREMjhFNTM0Q0ZENUQ2NjkxMzUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEQzVENUVEQUFGMzNDNzA2
NjI0NEQyOEU1MzRDRkQ1RDY2OTEzNTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0R2hyaTlHbXBXbld3b2tpU0VLbXdrUk1kYUhDazh6TXh0RGpMY0drUGZaLzAv
MzIzODMwMzQzYTM1MzQ2MTM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzYzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARUqDANBgkqhkiG9w0BAQsFAAOCAQEAY/K8tC9q
5pJDIP2gB3nECpETdqsrQp7DZe9Jp/75aEJtZ7mHMbbl/D9l1w4mcOS/OxATXH9Q
YRXCwq4D/23e7Dravm2yfS7n6kYDz8UyPD6x+Rj5+q+jW978HcgrSaGo+bEKCtZO
vXjVlO98CoonCz6Zh7EIudIDvvq3A0SJNUs2zjmxo40GJpsTTH1cT7fLUC0jggeC
p7DVvK77f0MJz2lqYLz7ZUaru+wguyR7Vg7RdksfRJ+0mr5/lKObbOy86ahz6od7
XWeSvD9JkuQnWVVOdYN04yQaFsAC3rBniGvChBCEkxL/cAYAMpYqRvvJff8nHTH4
Xo1IHO1oQQ6IHg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:53:01 2025 by rpki-client