Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/323830343a366162633a3a2f33322d3438203d3e20323730333536.roa
File:                     323830343a366162633a3a2f33322d3438203d3e20323730333536.roa (raw, json)
Hash identifier:          6fnXok5lx2mFsu6fTCPPGEyBKCRFr8WF8tYOyj45vQU=
Subject key identifier:   B7:03:F5:28:F2:49:A5:44:C9:D9:A1:4B:55:77:C1:22:13:78:0B:27
Certificate issuer:       /CN=DCEDD606E5DF583760013C3A374BF806DB1E2D84
Certificate serial:       547B7BD993908AE59D008C487726625F2CF442A0
Authority key identifier: DC:ED:D6:06:E5:DF:58:37:60:01:3C:3A:37:4B:F8:06:DB:1E:2D:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCEDD606E5DF583760013C3A374BF806DB1E2D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/323830343a366162633a3a2f33322d3438203d3e20323730333536.roa
Signing time:             Tue 30 Sep 2025 18:02:34 +0000
ROA not before:           Tue 30 Sep 2025 17:57:34 +0000
ROA not after:            Tue 29 Sep 2026 18:02:34 +0000
asID:                     270356
IP address blocks:        2804:6abc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.crl
                          rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCEDD606E5DF583760013C3A374BF806DB1E2D84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7b:7b:d9:93:90:8a:e5:9d:00:8c:48:77:26:62:5f:2c:f4:42:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCEDD606E5DF583760013C3A374BF806DB1E2D84
        Validity
            Not Before: Sep 30 17:57:34 2025 GMT
            Not After : Sep 29 18:02:34 2026 GMT
        Subject: CN=B703F528F249A544C9D9A14B5577C12213780B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4b:9c:ee:e0:0b:d7:a3:3e:e7:a7:aa:23:60:
                    82:cb:38:ee:c4:f6:9e:63:e4:1b:cb:87:f2:8b:ca:
                    aa:23:6b:13:50:60:3b:2b:cf:92:b2:d1:c0:1f:a6:
                    43:89:35:0c:34:3d:a9:fb:38:03:7f:11:31:0d:ae:
                    c7:11:82:72:fc:e6:69:cc:69:23:66:cc:2f:47:26:
                    52:a0:50:9c:d3:6b:16:44:1d:2e:f1:2b:16:6a:ee:
                    c7:83:68:f2:d2:bd:86:3d:be:66:a5:c7:cf:dc:09:
                    82:48:41:c6:14:f5:52:21:24:9f:f9:ad:d0:cb:9f:
                    4b:6c:c4:ea:45:9a:92:9a:81:2f:00:07:9f:87:b2:
                    d4:a6:61:15:d1:69:ad:6f:9d:ec:2e:98:e7:0a:9b:
                    99:f4:6e:e7:5e:b4:d2:31:77:28:67:fe:9e:65:45:
                    a8:6e:54:41:f3:a0:30:fa:93:95:06:a4:69:c7:c9:
                    cc:a2:bd:ef:ac:5c:88:57:02:cc:1b:b1:ec:65:6f:
                    3a:84:7f:64:91:a4:64:4a:d5:c2:f3:bc:32:3f:52:
                    9d:de:fd:e3:38:d4:53:47:38:39:4f:97:3f:e0:e0:
                    71:af:fc:5c:57:38:b4:18:01:53:c3:2b:3b:f0:65:
                    b2:0b:f1:0d:ee:f7:79:d2:78:fa:88:9e:fc:f9:18:
                    53:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:03:F5:28:F2:49:A5:44:C9:D9:A1:4B:55:77:C1:22:13:78:0B:27
            X509v3 Authority Key Identifier:
                keyid:DC:ED:D6:06:E5:DF:58:37:60:01:3C:3A:37:4B:F8:06:DB:1E:2D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCEDD606E5DF583760013C3A374BF806DB1E2D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/323830343a366162633a3a2f33322d3438203d3e20323730333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6abc::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:b6:29:a6:67:f4:5f:20:ee:21:26:15:ca:b8:6c:c7:2b:d0:
         21:26:d4:a2:70:b1:f1:23:e0:3f:93:95:dd:a2:52:d5:cb:94:
         0b:de:cc:af:bc:8d:40:c8:fa:6a:80:4e:c1:0f:89:38:10:c1:
         13:9d:a4:a3:0c:e1:92:14:95:18:3a:9d:6e:96:81:dc:db:a3:
         d8:2b:d0:2c:72:ce:67:fd:51:47:23:63:9a:f3:99:90:b0:c6:
         c8:52:1b:57:da:4a:39:a6:47:ad:da:05:4c:ea:76:1b:93:81:
         d0:bf:9f:c8:1d:7c:46:b9:ca:19:d8:83:37:bc:95:5b:bb:7a:
         64:c1:d9:1d:70:54:b8:89:d8:5c:e4:93:09:37:4c:57:a1:15:
         ad:1f:02:ab:c6:03:6b:12:2b:ea:fa:49:35:7d:2a:8c:06:f4:
         af:10:66:d5:2d:5c:81:ca:80:58:12:d6:fa:e8:50:98:61:9a:
         97:8a:20:f6:d2:e7:39:fd:a3:12:a2:4c:98:fc:c3:ab:fe:0f:
         a6:7f:15:8f:58:b9:6a:09:23:88:cf:7e:d2:15:9e:36:86:5c:
         39:0d:c4:93:57:b7:e7:fd:e7:ab:02:ec:ae:c6:58:8d:31:d1:
         55:0d:9e:15:de:da:39:6a:1c:51:fc:46:08:e0:cb:f8:44:f4:
         99:43:58:29
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVHt72ZOQiuWdAIxIdyZiXyz0QqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENFREQ2MDZFNURGNTgzNzYwMDEzQzNBMzc0QkY4MDZE
QjFFMkQ4NDAeFw0yNTA5MzAxNzU3MzRaFw0yNjA5MjkxODAyMzRaMDMxMTAvBgNV
BAMTKEI3MDNGNTI4RjI0OUE1NDRDOUQ5QTE0QjU1NzdDMTIyMTM3ODBCMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLS5zu4AvXoz7np6ojYILLOO7E
9p5j5BvLh/KLyqojaxNQYDsrz5Ky0cAfpkOJNQw0Pan7OAN/ETENrscRgnL85mnM
aSNmzC9HJlKgUJzTaxZEHS7xKxZq7seDaPLSvYY9vmalx8/cCYJIQcYU9VIhJJ/5
rdDLn0tsxOpFmpKagS8AB5+HstSmYRXRaa1vnewumOcKm5n0budetNIxdyhn/p5l
RahuVEHzoDD6k5UGpGnHycyive+sXIhXAswbsexlbzqEf2SRpGRK1cLzvDI/Up3e
/eM41FNHODlPlz/g4HGv/FxXOLQYAVPDKzvwZbIL8Q3u93nSePqInvz5GFMxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUtwP1KPJJpUTJ2aFLVXfBIhN4CycwHwYDVR0j
BBgwFoAU3O3WBuXfWDdgATw6N0v4BtseLYQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFR2OEUxV2RSZG10VTVjaGdMZ2JDNE4yaW5SMkJtVWpkNEFvQ241UDJw
UTkvMC9EQ0VERDYwNkU1REY1ODM3NjAwMTNDM0EzNzRCRjgwNkRCMUUyRDg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRURENjA2RTVERjU4Mzc2
MDAxM0MzQTM3NEJGODA2REIxRTJEODQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhUdjhFMVdkUmRtdFU1Y2hnTGdiQzROMmluUjJCbVVqZDRBb0NuNVAycFE5LzAv
MzIzODMwMzQzYTM2NjE2MjYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMw
MzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARqvDANBgkqhkiG9w0BAQsFAAOCAQEAlrYppmf0
XyDuISYVyrhsxyvQISbUonCx8SPgP5OV3aJS1cuUC97Mr7yNQMj6aoBOwQ+JOBDB
E52kowzhkhSVGDqdbpaB3Nuj2CvQLHLOZ/1RRyNjmvOZkLDGyFIbV9pKOaZHrdoF
TOp2G5OB0L+fyB18RrnKGdiDN7yVW7t6ZMHZHXBUuInYXOSTCTdMV6EVrR8Cq8YD
axIr6vpJNX0qjAb0rxBm1S1cgcqAWBLW+uhQmGGal4og9tLnOf2jEqJMmPzDq/4P
pn8Vj1i5agkjiM9+0hWeNoZcOQ3Ek1e35/3nqwLsrsZYjTHRVQ2eFd7aOWocUfxG
CODL+ET0mUNYKQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:25:08 2025 by rpki-client