Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/323830343a343230303a3a2f33322d3333203d3e20323637343731.roa
File:                     323830343a343230303a3a2f33322d3333203d3e20323637343731.roa (raw, json)
Hash identifier:          ENOTPp+Zx/+E9r3MsBtUJ8AK0ZmsIRTEgOgOR3Mab9k=
Subject key identifier:   5F:98:5D:FC:F7:8D:91:57:D0:CB:5D:3C:D5:A4:DD:72:6C:41:0B:6F
Certificate issuer:       /CN=D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02
Certificate serial:       12039B6EEA8D49398EA2F1F16623426DF5641BD5
Authority key identifier: D4:5D:43:F1:B6:0A:DF:D2:FE:33:99:6A:90:BB:B6:2E:F5:5A:1D:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/323830343a343230303a3a2f33322d3333203d3e20323637343731.roa
Signing time:             Sun 28 Sep 2025 12:00:19 +0000
ROA not before:           Sun 28 Sep 2025 11:55:19 +0000
ROA not after:            Sun 27 Sep 2026 12:00:19 +0000
asID:                     267471
IP address blocks:        2804:4200::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.crl
                          rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:03:9b:6e:ea:8d:49:39:8e:a2:f1:f1:66:23:42:6d:f5:64:1b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02
        Validity
            Not Before: Sep 28 11:55:19 2025 GMT
            Not After : Sep 27 12:00:19 2026 GMT
        Subject: CN=5F985DFCF78D9157D0CB5D3CD5A4DD726C410B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:d4:ab:5a:5c:8e:11:27:60:6d:78:a7:3b:
                    c3:cc:e4:77:7b:02:28:f4:0a:d8:a4:65:d2:72:59:
                    cf:10:b7:86:6a:92:bd:b7:7e:38:0f:97:f8:ec:43:
                    b3:e8:d2:f4:1e:94:a5:7b:7c:d2:06:b3:2d:6f:87:
                    b2:48:10:a0:a0:df:e1:41:02:f6:32:ae:86:bc:8e:
                    12:3d:d9:18:37:57:8b:ce:4e:28:1c:99:fc:f1:db:
                    f0:6a:01:26:e1:b5:1b:16:df:e0:ff:ea:19:6d:d2:
                    07:36:4b:9f:db:75:4e:35:ad:69:b1:84:af:f4:4a:
                    61:cf:68:df:14:ef:1e:42:a4:b4:c8:b9:0d:64:d7:
                    f5:c6:1f:47:1a:27:db:83:31:3b:0d:48:29:86:e6:
                    73:c7:0c:1b:c1:8e:37:06:15:73:b6:0a:d7:b3:c7:
                    38:c1:d7:fd:b6:2e:59:33:0b:0e:30:3a:8b:ee:ad:
                    87:d9:d4:6b:3d:42:20:b8:34:43:94:f8:06:bb:8a:
                    6c:6e:db:8e:1e:b6:b2:a9:15:88:0c:00:59:e6:db:
                    71:d8:7b:3a:b3:95:20:88:b3:eb:66:2b:b5:79:ba:
                    c1:02:9c:c1:90:fa:53:4f:bf:27:19:cb:d8:22:b2:
                    35:2c:7f:df:31:3a:e6:e3:e7:d1:b3:0b:73:de:61:
                    dd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:98:5D:FC:F7:8D:91:57:D0:CB:5D:3C:D5:A4:DD:72:6C:41:0B:6F
            X509v3 Authority Key Identifier:
                keyid:D4:5D:43:F1:B6:0A:DF:D2:FE:33:99:6A:90:BB:B6:2E:F5:5A:1D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D43F1B60ADFD2FE33996A90BBB62EF55A1D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/323830343a343230303a3a2f33322d3333203d3e20323637343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4200::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:78:f3:1b:4f:81:9e:c9:7b:21:e2:21:b1:7b:46:76:df:28:
         21:45:53:ac:37:cc:7d:47:84:f1:b7:25:8c:4a:26:d6:d0:b8:
         6a:21:bb:db:73:f2:50:86:29:22:2f:34:37:ec:0e:9b:39:47:
         ea:97:2e:aa:ff:55:03:71:28:52:ac:47:d6:89:d6:39:15:cf:
         c9:ae:86:66:d7:48:c9:49:ec:04:40:2a:8a:6c:3c:4b:97:d8:
         2f:14:a3:12:6c:48:d5:98:2b:97:81:60:64:9f:f3:79:a0:c5:
         4a:35:64:f9:25:da:60:04:9f:a9:1b:1b:a0:4f:ca:a3:03:7c:
         d2:31:cf:83:d0:07:d2:ce:8a:f3:c3:03:a0:53:eb:74:44:fb:
         1d:69:95:f2:c8:b8:e2:29:20:b2:ae:9b:62:69:b9:ad:15:85:
         87:fe:90:99:b8:a2:3c:03:5d:f8:cd:f1:57:bf:c9:e0:1d:c0:
         6a:65:37:5d:4e:e2:a4:22:45:6b:67:92:c0:53:75:aa:03:f4:
         20:cd:40:92:61:b4:67:c3:38:87:f9:20:d7:42:e3:51:e5:5c:
         93:fb:30:fb:43:66:a9:54:c7:c2:a5:c4:e5:5e:48:0a:b9:f1:
         f8:80:e6:f4:94:47:3e:da:fa:e8:11:92:ad:27:77:ec:4b:26:
         7f:c2:d0:5d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEgObbuqNSTmOovHxZiNCbfVkG9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1RDQzRjFCNjBBREZEMkZFMzM5OTZBOTBCQkI2MkVG
NTVBMUQwMjAeFw0yNTA5MjgxMTU1MTlaFw0yNjA5MjcxMjAwMTlaMDMxMTAvBgNV
BAMTKDVGOTg1REZDRjc4RDkxNTdEMENCNUQzQ0Q1QTRERDcyNkM0MTBCNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtiNSrWlyOESdgbXinO8PM5Hd7
Aij0CtikZdJyWc8Qt4Zqkr23fjgPl/jsQ7Po0vQelKV7fNIGsy1vh7JIEKCg3+FB
AvYyroa8jhI92Rg3V4vOTigcmfzx2/BqASbhtRsW3+D/6hlt0gc2S5/bdU41rWmx
hK/0SmHPaN8U7x5CpLTIuQ1k1/XGH0caJ9uDMTsNSCmG5nPHDBvBjjcGFXO2Ctez
xzjB1/22LlkzCw4wOovurYfZ1Gs9QiC4NEOU+Aa7imxu244etrKpFYgMAFnm23HY
ezqzlSCIs+tmK7V5usECnMGQ+lNPvycZy9gisjUsf98xOubj59GzC3PeYd1HAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUX5hd/PeNkVfQy1081aTdcmxBC28wHwYDVR0j
BBgwFoAU1F1D8bYK39L+M5lqkLu2LvVaHQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1lTYmRnMmRmVTl6S3FmbnN4U3BpYzhuRHB5RmJBN3R6N2VVRDhmUzV4
RHAvMC9ENDVENDNGMUI2MEFERkQyRkUzMzk5NkE5MEJCQjYyRUY1NUExRDAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NUQ0M0YxQjYwQURGRDJG
RTMzOTk2QTkwQkJCNjJFRjU1QTFEMDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdZU2JkZzJkZlU5ektxZm5zeFNwaWM4bkRweUZiQTd0ejdlVUQ4ZlM1eERwLzAv
MzIzODMwMzQzYTM0MzIzMDMwM2EzYTJmMzMzMjJkMzMzMzIwM2QzZTIwMzIzNjM3
MzQzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARCADANBgkqhkiG9w0BAQsFAAOCAQEAG3jzG0+B
nsl7IeIhsXtGdt8oIUVTrDfMfUeE8bcljEom1tC4aiG723PyUIYpIi80N+wOmzlH
6pcuqv9VA3EoUqxH1onWORXPya6GZtdIyUnsBEAqimw8S5fYLxSjEmxI1Zgrl4Fg
ZJ/zeaDFSjVk+SXaYASfqRsboE/KowN80jHPg9AH0s6K88MDoFPrdET7HWmV8si4
4ikgsq6bYmm5rRWFh/6QmbiiPANd+M3xV7/J4B3AamU3XU7ipCJFa2eSwFN1qgP0
IM1AkmG0Z8M4h/kg10LjUeVck/sw+0NmqVTHwqXE5V5ICrnx+IDm9JRHPtr66BGS
rSd37Esmf8LQXQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:58:42 2025 by rpki-client