Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/323830343a393039343a3a2f33322d3438203d3e20323733353631.roa
File:                     323830343a393039343a3a2f33322d3438203d3e20323733353631.roa (raw, json)
Hash identifier:          fhznv/g2XCRBJU8I8j85eRRimllteLhJNjjHolXs5X8=
Subject key identifier:   63:B3:9A:FD:4B:BF:F9:CF:68:73:65:1E:2F:D7:05:34:B4:61:B2:8B
Certificate issuer:       /CN=FCB3CEA2232856F8B9D8C3C433A20361FA6D8B8D
Certificate serial:       25BC7FF183A0B4E7C18C8B2CD914B2FE290F6A08
Authority key identifier: FC:B3:CE:A2:23:28:56:F8:B9:D8:C3:C4:33:A2:03:61:FA:6D:8B:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCB3CEA2232856F8B9D8C3C433A20361FA6D8B8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/323830343a393039343a3a2f33322d3438203d3e20323733353631.roa
Signing time:             Wed 01 Oct 2025 17:30:57 +0000
ROA not before:           Wed 01 Oct 2025 17:25:57 +0000
ROA not after:            Wed 30 Sep 2026 17:30:57 +0000
asID:                     273561
IP address blocks:        2804:9094::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/FCB3CEA2232856F8B9D8C3C433A20361FA6D8B8D.crl
                          rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/FCB3CEA2232856F8B9D8C3C433A20361FA6D8B8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCB3CEA2232856F8B9D8C3C433A20361FA6D8B8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 23:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:bc:7f:f1:83:a0:b4:e7:c1:8c:8b:2c:d9:14:b2:fe:29:0f:6a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB3CEA2232856F8B9D8C3C433A20361FA6D8B8D
        Validity
            Not Before: Oct  1 17:25:57 2025 GMT
            Not After : Sep 30 17:30:57 2026 GMT
        Subject: CN=63B39AFD4BBFF9CF6873651E2FD70534B461B28B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1e:d6:fa:3e:7f:42:ac:31:fa:ec:9e:c8:90:
                    16:de:e1:6b:88:68:56:57:ef:a0:d2:d4:91:fe:02:
                    2b:f2:d1:62:26:7f:0a:41:96:57:3f:77:f0:ac:17:
                    00:49:7a:44:18:d2:ab:ca:2b:79:35:ca:d7:27:03:
                    3f:4a:82:8d:ad:ca:ee:c4:21:cf:38:d8:0c:24:85:
                    b9:00:a9:d5:23:41:ac:c9:c2:39:1a:f5:bb:a7:97:
                    0f:8a:b3:69:20:84:d5:8e:ec:fb:6c:9b:f9:35:fe:
                    86:3e:d9:1a:e9:21:8f:e4:d2:c1:72:56:3c:71:b6:
                    2d:e2:2f:77:73:dd:f8:17:35:b1:1d:30:ff:34:22:
                    6f:58:0b:c0:31:e1:15:26:f3:bf:cf:06:7b:42:20:
                    ff:c1:30:48:4f:32:58:d7:33:a7:d6:3e:34:21:e2:
                    94:10:79:13:1b:93:bd:5e:f7:1d:11:19:c5:d5:be:
                    3b:7c:b8:e0:95:77:bf:fb:e9:f0:bd:66:6a:6e:a1:
                    05:74:e7:0f:04:a2:af:39:82:0e:97:d5:b4:49:f3:
                    3f:ab:57:2e:ad:1a:f7:4d:70:03:2a:6c:85:ac:9c:
                    c5:35:90:9f:bb:ec:75:70:64:ab:9d:74:7d:04:35:
                    bb:79:99:65:9d:86:f2:fd:7f:0b:5a:82:21:2c:1b:
                    ae:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B3:9A:FD:4B:BF:F9:CF:68:73:65:1E:2F:D7:05:34:B4:61:B2:8B
            X509v3 Authority Key Identifier:
                keyid:FC:B3:CE:A2:23:28:56:F8:B9:D8:C3:C4:33:A2:03:61:FA:6D:8B:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/FCB3CEA2232856F8B9D8C3C433A20361FA6D8B8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCB3CEA2232856F8B9D8C3C433A20361FA6D8B8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Q9fqKqJbdWADRHdup9pFQDYqJAb5yA8ctMCBkZrbMdS/0/323830343a393039343a3a2f33322d3438203d3e20323733353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9094::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:73:57:d0:32:56:70:14:9a:e3:f5:02:9d:91:5b:aa:e0:ea:
         ce:ef:8f:50:a6:53:5e:f7:b1:f1:5f:4e:20:33:43:18:2a:66:
         55:fd:9e:88:d2:de:0a:34:19:53:a6:f4:2a:d6:7a:20:0c:c4:
         56:3d:05:b1:a8:39:2a:b0:89:e0:aa:40:4c:31:2d:c2:04:0a:
         6c:a4:db:75:a7:28:1e:8e:ba:80:4e:2f:fe:b6:7a:60:9a:57:
         b6:f5:61:83:d6:45:49:2f:32:57:bb:39:1f:cd:96:f5:d4:23:
         53:45:1e:15:7a:80:c0:86:a5:42:a0:d3:62:43:5d:8b:3c:1e:
         bf:48:e1:1b:13:6c:2e:7d:c0:69:5c:89:fd:45:74:40:2a:b4:
         e5:df:c7:90:00:b7:61:43:e4:48:2f:7e:1e:80:c3:80:c6:3e:
         c7:a2:28:ba:aa:3c:57:af:22:78:d5:64:b0:0a:2e:71:a2:61:
         49:aa:d0:b6:f1:d5:66:eb:c6:eb:d3:7b:92:ee:ba:61:02:63:
         31:80:e9:09:47:11:dc:36:c1:61:af:4b:a8:6f:22:ff:67:5d:
         5e:84:23:be:03:71:1a:af:65:39:45:61:0c:62:cb:ee:05:60:
         22:16:5a:39:60:76:b0:30:ee:bd:39:d4:d7:43:ae:73:e5:dd:
         75:df:d2:21
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJbx/8YOgtOfBjIss2RSy/ikPaggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNCM0NFQTIyMzI4NTZGOEI5RDhDM0M0MzNBMjAzNjFG
QTZEOEI4RDAeFw0yNTEwMDExNzI1NTdaFw0yNjA5MzAxNzMwNTdaMDMxMTAvBgNV
BAMTKDYzQjM5QUZENEJCRkY5Q0Y2ODczNjUxRTJGRDcwNTM0QjQ2MUIyOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoHtb6Pn9CrDH67J7IkBbe4WuI
aFZX76DS1JH+Aivy0WImfwpBllc/d/CsFwBJekQY0qvKK3k1ytcnAz9Kgo2tyu7E
Ic842AwkhbkAqdUjQazJwjka9bunlw+Ks2kghNWO7Ptsm/k1/oY+2RrpIY/k0sFy
Vjxxti3iL3dz3fgXNbEdMP80Im9YC8Ax4RUm87/PBntCIP/BMEhPMljXM6fWPjQh
4pQQeRMbk71e9x0RGcXVvjt8uOCVd7/76fC9ZmpuoQV05w8Eoq85gg6X1bRJ8z+r
Vy6tGvdNcAMqbIWsnMU1kJ+77HVwZKuddH0ENbt5mWWdhvL9fwtagiEsG66rAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUY7Oa/Uu/+c9oc2UeL9cFNLRhsoswHwYDVR0j
BBgwFoAU/LPOoiMoVvi52MPEM6IDYfpti40wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1E5ZnFLcUpiZFdBRFJIZHVwOXBGUURZcUpBYjV5QThjdE1DQmtacmJN
ZFMvMC9GQ0IzQ0VBMjIzMjg1NkY4QjlEOEMzQzQzM0EyMDM2MUZBNkQ4QjhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDQjNDRUEyMjMyODU2RjhC
OUQ4QzNDNDMzQTIwMzYxRkE2RDhCOEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdROWZxS3FKYmRXQURSSGR1cDlwRlFEWXFKQWI1eUE4Y3RNQ0JrWnJiTWRTLzAv
MzIzODMwMzQzYTM5MzAzOTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMz
MzUzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASQlDANBgkqhkiG9w0BAQsFAAOCAQEAh3NX0DJW
cBSa4/UCnZFbquDqzu+PUKZTXvex8V9OIDNDGCpmVf2eiNLeCjQZU6b0KtZ6IAzE
Vj0Fsag5KrCJ4KpATDEtwgQKbKTbdacoHo66gE4v/rZ6YJpXtvVhg9ZFSS8yV7s5
H82W9dQjU0UeFXqAwIalQqDTYkNdizwev0jhGxNsLn3AaVyJ/UV0QCq05d/HkAC3
YUPkSC9+HoDDgMY+x6Iouqo8V68ieNVksAoucaJhSarQtvHVZuvG69N7ku66YQJj
MYDpCUcR3DbBYa9LqG8i/2ddXoQjvgNxGq9lOUVhDGLL7gVgIhZaOWB2sDDuvTnU
10Ouc+Xddd/SIQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:36 2025 by rpki-client