Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/323830343a313361343a3a2f33322d313238203d3e20323633353433.roa
File:                     323830343a313361343a3a2f33322d313238203d3e20323633353433.roa (raw, json)
Hash identifier:          NgViZU+smtrX5KI+pgc12is3Dat/7tdY4dskSSJlbWk=
Subject key identifier:   F9:59:85:AC:F7:CF:1A:6F:A4:F7:09:CE:DF:51:82:D2:F4:4D:CD:AD
Certificate issuer:       /CN=B3C0ECC43363690F72F949D611EE62DCF8942568
Certificate serial:       295A702D02A60D79B9651DE43977284BDE640841
Authority key identifier: B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/323830343a313361343a3a2f33322d313238203d3e20323633353433.roa
Signing time:             Wed 01 Oct 2025 13:55:20 +0000
ROA not before:           Wed 01 Oct 2025 13:50:20 +0000
ROA not after:            Wed 30 Sep 2026 13:55:20 +0000
asID:                     263543
IP address blocks:        2804:13a4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl
                          rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5a:70:2d:02:a6:0d:79:b9:65:1d:e4:39:77:28:4b:de:64:08:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C0ECC43363690F72F949D611EE62DCF8942568
        Validity
            Not Before: Oct  1 13:50:20 2025 GMT
            Not After : Sep 30 13:55:20 2026 GMT
        Subject: CN=F95985ACF7CF1A6FA4F709CEDF5182D2F44DCDAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c0:a8:7c:aa:b9:a8:a7:51:5c:03:19:22:10:
                    3f:e0:1a:0f:39:d0:0a:1d:d8:9c:5e:00:94:c9:a3:
                    99:32:c1:51:74:69:10:c2:6b:b6:7d:99:7f:dc:fc:
                    67:c4:e0:6b:af:07:4f:64:f1:c7:78:a4:9f:a8:33:
                    d2:4f:d5:41:62:15:2d:3c:8e:dc:8a:88:7a:ce:2b:
                    21:c3:e5:a7:b2:23:fe:5d:dd:9f:2a:65:13:5f:12:
                    b2:c6:2a:db:38:e3:8e:1d:59:0b:e2:83:af:36:6a:
                    2b:37:69:4f:e2:0d:4c:c5:4f:eb:fd:10:fb:93:35:
                    6d:c3:54:a8:84:08:d5:15:1b:0b:04:65:b3:74:f1:
                    a8:51:fe:16:94:0e:90:e4:f1:91:e4:b4:34:2a:e3:
                    34:08:27:9d:be:8c:cb:54:cc:15:94:a2:99:e9:1e:
                    13:47:fb:b4:91:7d:db:ca:6c:12:e8:f1:de:a4:91:
                    e5:ba:1c:02:1f:9b:06:3c:0a:13:a1:3e:a5:85:0e:
                    6f:99:aa:34:96:ca:29:bd:88:58:b1:a8:89:9d:59:
                    aa:73:60:6d:78:e0:6e:73:7c:c6:d1:b5:fe:79:44:
                    53:16:15:e4:88:70:1a:b0:ec:cf:a6:b1:db:78:60:
                    a5:7c:2a:87:6f:e3:6c:b9:89:73:74:2b:7b:0c:fb:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:59:85:AC:F7:CF:1A:6F:A4:F7:09:CE:DF:51:82:D2:F4:4D:CD:AD
            X509v3 Authority Key Identifier:
                keyid:B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/323830343a313361343a3a2f33322d313238203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:81:f1:77:f0:5b:a0:d5:49:e1:f4:ec:c6:cd:e8:79:a7:9e:
         9b:c2:27:58:63:47:8b:79:f4:cf:b9:67:16:78:82:8a:f7:41:
         42:31:7a:14:e4:34:a0:33:d5:91:35:fd:2c:a2:46:70:4b:9e:
         e5:c1:27:45:9f:a5:19:db:d8:b7:61:fd:06:c2:c2:0d:b6:1c:
         3a:50:12:b5:ba:35:7e:97:26:ee:70:a6:32:16:ef:6d:ae:55:
         6a:42:fe:19:c8:63:73:9f:23:6e:d1:4d:e6:9a:dd:19:d7:3e:
         48:a7:f4:98:ae:4b:25:c6:80:23:75:a4:26:4d:fa:28:96:62:
         63:97:5d:c8:e7:f5:3e:fe:a1:88:e3:c5:19:f0:02:19:6d:50:
         2c:2a:91:f2:fa:e8:39:ba:c2:a3:a8:ca:f2:d4:90:5a:d8:09:
         88:c1:73:16:85:bb:b0:86:89:91:97:2e:6e:ad:4b:e2:c2:e5:
         f5:27:4e:24:28:8c:d2:ca:47:f9:c0:fe:91:ec:66:38:47:2d:
         75:aa:e0:18:92:1e:0e:e3:e9:f7:d1:8c:ee:b6:df:67:ce:77:
         d6:b3:48:e4:d9:54:f3:86:5e:18:65:40:66:62:16:fc:29:a0:
         6f:60:6f:92:e0:77:74:0a:77:32:d9:fe:eb:1c:36:32:82:71:
         d8:23:8d:cd
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUKVpwLQKmDXm5ZR3kOXcoS95kCEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDMEVDQzQzMzYzNjkwRjcyRjk0OUQ2MTFFRTYyRENG
ODk0MjU2ODAeFw0yNTEwMDExMzUwMjBaFw0yNjA5MzAxMzU1MjBaMDMxMTAvBgNV
BAMTKEY5NTk4NUFDRjdDRjFBNkZBNEY3MDlDRURGNTE4MkQyRjQ0RENEQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkwKh8qrmop1FcAxkiED/gGg85
0Aod2JxeAJTJo5kywVF0aRDCa7Z9mX/c/GfE4GuvB09k8cd4pJ+oM9JP1UFiFS08
jtyKiHrOKyHD5aeyI/5d3Z8qZRNfErLGKts4444dWQvig682ais3aU/iDUzFT+v9
EPuTNW3DVKiECNUVGwsEZbN08ahR/haUDpDk8ZHktDQq4zQIJ52+jMtUzBWUopnp
HhNH+7SRfdvKbBLo8d6kkeW6HAIfmwY8ChOhPqWFDm+ZqjSWyim9iFixqImdWapz
YG144G5zfMbRtf55RFMWFeSIcBqw7M+msdt4YKV8Kodv42y5iXN0K3sM+/AzAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU+VmFrPfPGm+k9wnO31GC0vRNza0wHwYDVR0j
BBgwFoAUs8DsxDNjaQ9y+UnWEe5i3PiUJWgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0pjVXNhRUZrenR5TnF1YUVUbnQ2a3k0TnNGVGloZ0w1NTM5cVZjR3Jt
V3kvMC9CM0MwRUNDNDMzNjM2OTBGNzJGOTQ5RDYxMUVFNjJEQ0Y4OTQyNTY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzBFQ0M0MzM2MzY5MEY3
MkY5NDlENjExRUU2MkRDRjg5NDI1NjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdKY1VzYUVGa3p0eU5xdWFFVG50Nmt5NE5zRlRpaGdMNTUzOXFWY0dybVd5LzAv
MzIzODMwMzQzYTMxMzM2MTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzNTM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBBOkMA0GCSqGSIb3DQEBCwUAA4IBAQA3gfF3
8Fug1Unh9OzGzeh5p56bwidYY0eLefTPuWcWeIKK90FCMXoU5DSgM9WRNf0sokZw
S57lwSdFn6UZ29i3Yf0GwsINthw6UBK1ujV+lybucKYyFu9trlVqQv4ZyGNznyNu
0U3mmt0Z1z5Ip/SYrkslxoAjdaQmTfoolmJjl13I5/U+/qGI48UZ8AIZbVAsKpHy
+ug5usKjqMry1JBa2AmIwXMWhbuwhomRly5urUviwuX1J04kKIzSykf5wP6R7GY4
Ry11quAYkh4O4+n30Yzutt9nznfWs0jk2VTzhl4YZUBmYhb8KaBvYG+S4Hd0Cncy
2f7rHDYygnHYI43N
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:43:25 2025 by rpki-client