Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/323830343a353939633a3a2f33322d3334203d3e20323638373133.roa
File:                     323830343a353939633a3a2f33322d3334203d3e20323638373133.roa (raw, json)
Hash identifier:          aSvQ8aMZAU3axI5LUJJL4kfMlM8q3L2yBCzc7DZyg54=
Subject key identifier:   F0:5B:5E:42:E7:28:FF:03:4B:26:99:2B:7E:5A:3A:47:CE:6C:65:83
Certificate issuer:       /CN=03D890B77B1AF14678B0086207AFAF22FA681661
Certificate serial:       2BBBC3416021FCADFA1AA4F83ADBFF0162F278AB
Authority key identifier: 03:D8:90:B7:7B:1A:F1:46:78:B0:08:62:07:AF:AF:22:FA:68:16:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D890B77B1AF14678B0086207AFAF22FA681661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/323830343a353939633a3a2f33322d3334203d3e20323638373133.roa
Signing time:             Sun 28 Sep 2025 19:02:16 +0000
ROA not before:           Sun 28 Sep 2025 18:57:16 +0000
ROA not after:            Sun 27 Sep 2026 19:02:16 +0000
asID:                     268713
IP address blocks:        2804:599c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/03D890B77B1AF14678B0086207AFAF22FA681661.crl
                          rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/03D890B77B1AF14678B0086207AFAF22FA681661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D890B77B1AF14678B0086207AFAF22FA681661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:bb:c3:41:60:21:fc:ad:fa:1a:a4:f8:3a:db:ff:01:62:f2:78:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03D890B77B1AF14678B0086207AFAF22FA681661
        Validity
            Not Before: Sep 28 18:57:16 2025 GMT
            Not After : Sep 27 19:02:16 2026 GMT
        Subject: CN=F05B5E42E728FF034B26992B7E5A3A47CE6C6583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5b:6a:b9:29:be:80:23:d2:79:53:8e:5e:8d:
                    26:e4:30:20:c4:d7:53:78:c4:2f:ca:25:c5:cf:f8:
                    a2:bf:05:80:1e:37:1a:37:f0:e1:9a:70:5e:98:ac:
                    f4:ea:83:b4:3f:04:55:3e:d5:c0:4f:ca:6e:97:62:
                    ef:8f:6e:cb:6f:5b:51:ad:04:57:55:eb:d4:0c:88:
                    7d:13:61:b7:07:25:e7:95:93:ad:7e:ed:cd:22:19:
                    8f:50:b8:cf:fe:78:32:a6:bc:28:92:65:db:99:e0:
                    c0:19:f4:d9:f3:1b:50:ee:76:40:70:3d:fb:25:ce:
                    ca:f9:ef:fd:f8:ed:9a:dc:0d:50:48:4c:e9:ec:03:
                    d9:8b:83:f4:23:fb:c4:12:89:bb:91:44:ba:b6:3a:
                    cc:65:7a:48:d2:3b:7f:54:f9:ea:f6:5f:30:af:dd:
                    84:34:86:33:e8:ba:4d:59:be:f3:16:b0:a9:ed:83:
                    9e:f9:a0:ed:36:1e:00:5b:a5:5c:b5:92:25:1a:04:
                    b9:22:ef:ff:17:1e:3a:c6:e3:f0:2b:b7:47:0f:b0:
                    e4:a2:6a:fb:cc:7d:20:3f:4f:0c:eb:d8:16:bc:64:
                    64:e2:3e:f9:18:fe:14:9e:24:71:3a:98:c2:45:34:
                    34:1d:05:97:a5:20:8e:15:19:f6:cf:57:6e:7e:20:
                    cb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5B:5E:42:E7:28:FF:03:4B:26:99:2B:7E:5A:3A:47:CE:6C:65:83
            X509v3 Authority Key Identifier:
                keyid:03:D8:90:B7:7B:1A:F1:46:78:B0:08:62:07:AF:AF:22:FA:68:16:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/03D890B77B1AF14678B0086207AFAF22FA681661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D890B77B1AF14678B0086207AFAF22FA681661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SNm13BFtvt3DZdKrpoVLEy3QVpuw5gfD7H7HwqpaXH7/0/323830343a353939633a3a2f33322d3334203d3e20323638373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:599c::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:f8:d3:79:40:87:f0:dd:c9:86:0b:d3:d0:e2:68:8e:64:9b:
         8d:c3:f9:85:75:70:b6:9e:d9:8a:9f:d7:39:3c:51:ff:03:1e:
         01:2b:57:47:a8:d6:d7:43:aa:d4:13:ae:ad:2b:b5:45:bc:8e:
         88:93:8b:70:70:55:73:e6:7e:3d:33:95:b6:81:b8:25:1f:2c:
         69:e4:6e:dd:4e:5d:bf:1c:a4:a9:e1:ac:40:cc:0d:b0:40:44:
         aa:f2:0a:c1:de:53:2a:16:2f:a5:c6:86:8e:f5:06:c4:f3:b0:
         dc:d5:b0:d2:92:88:93:9c:bc:b0:d6:04:a5:39:8e:16:67:3b:
         54:d9:0c:14:97:a0:c4:66:01:b6:02:2b:0e:49:f9:de:9c:4d:
         89:d4:f4:da:bf:98:45:f5:3a:26:e4:62:fa:dd:6b:29:c4:39:
         22:f8:a6:69:4b:cf:11:70:4d:51:33:b3:82:6e:55:21:5d:30:
         79:39:08:ae:9e:24:b5:33:15:b7:a3:da:5d:56:1a:16:b7:2f:
         52:27:b9:a2:29:ff:a0:8f:6b:c5:de:77:ed:b9:c4:3c:61:63:
         8f:cf:ef:46:7b:04:af:3b:33:af:5b:3e:98:60:30:c8:44:56:
         70:8e:02:d2:f3:59:cb:08:b9:1e:40:bd:5e:64:1e:56:82:22:
         76:74:42:6b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUK7vDQWAh/K36GqT4Otv/AWLyeKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNEODkwQjc3QjFBRjE0Njc4QjAwODYyMDdBRkFGMjJG
QTY4MTY2MTAeFw0yNTA5MjgxODU3MTZaFw0yNjA5MjcxOTAyMTZaMDMxMTAvBgNV
BAMTKEYwNUI1RTQyRTcyOEZGMDM0QjI2OTkyQjdFNUEzQTQ3Q0U2QzY1ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNW2q5Kb6AI9J5U45ejSbkMCDE
11N4xC/KJcXP+KK/BYAeNxo38OGacF6YrPTqg7Q/BFU+1cBPym6XYu+PbstvW1Gt
BFdV69QMiH0TYbcHJeeVk61+7c0iGY9QuM/+eDKmvCiSZduZ4MAZ9NnzG1DudkBw
Pfslzsr57/347ZrcDVBITOnsA9mLg/Qj+8QSibuRRLq2OsxlekjSO39U+er2XzCv
3YQ0hjPouk1ZvvMWsKntg575oO02HgBbpVy1kiUaBLki7/8XHjrG4/Art0cPsOSi
avvMfSA/Twzr2Ba8ZGTiPvkY/hSeJHE6mMJFNDQdBZelII4VGfbPV25+IMvDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU8FteQuco/wNLJpkrflo6R85sZYMwHwYDVR0j
BBgwFoAUA9iQt3sa8UZ4sAhiB6+vIvpoFmEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1NObTEzQkZ0dnQzRFpkS3Jwb1ZMRXkzUVZwdXc1Z2ZEN0g3SHdxcGFY
SDcvMC8wM0Q4OTBCNzdCMUFGMTQ2NzhCMDA4NjIwN0FGQUYyMkZBNjgxNjYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzRDg5MEI3N0IxQUYxNDY3
OEIwMDg2MjA3QUZBRjIyRkE2ODE2NjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdTTm0xM0JGdHZ0M0RaZEtycG9WTEV5M1FWcHV3NWdmRDdIN0h3cXBhWEg3LzAv
MzIzODMwMzQzYTM1MzkzOTYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM4
MzczMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARZnDANBgkqhkiG9w0BAQsFAAOCAQEAv/jTeUCH
8N3JhgvT0OJojmSbjcP5hXVwtp7Zip/XOTxR/wMeAStXR6jW10Oq1BOurSu1RbyO
iJOLcHBVc+Z+PTOVtoG4JR8saeRu3U5dvxykqeGsQMwNsEBEqvIKwd5TKhYvpcaG
jvUGxPOw3NWw0pKIk5y8sNYEpTmOFmc7VNkMFJegxGYBtgIrDkn53pxNidT02r+Y
RfU6JuRi+t1rKcQ5IvimaUvPEXBNUTOzgm5VIV0weTkIrp4ktTMVt6PaXVYaFrcv
Uie5oin/oI9rxd537bnEPGFjj8/vRnsErzszr1s+mGAwyERWcI4C0vNZywi5HkC9
XmQeVoIidnRCaw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:35:47 2025 by rpki-client