Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/323830343a386431303a3a2f33322d3332203d3e20323733333332.roa
File:                     323830343a386431303a3a2f33322d3332203d3e20323733333332.roa (raw, json)
Hash identifier:          tCFfZQU7pTELSE9DaLwJFNcYdEDP3QVERPinbHl2iao=
Subject key identifier:   71:F0:1C:BA:18:50:7D:BB:4C:C5:0C:33:CC:B8:65:6D:E7:5A:4C:97
Certificate issuer:       /CN=702838DD0B14B4FF3D09CE89247C34EBD427D264
Certificate serial:       0D0BD5611C726FD8C20554462F0198BB45D1BA7D
Authority key identifier: 70:28:38:DD:0B:14:B4:FF:3D:09:CE:89:24:7C:34:EB:D4:27:D2:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/702838DD0B14B4FF3D09CE89247C34EBD427D264.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/323830343a386431303a3a2f33322d3332203d3e20323733333332.roa
Signing time:             Fri 17 Oct 2025 14:15:01 +0000
ROA not before:           Fri 17 Oct 2025 14:10:01 +0000
ROA not after:            Fri 16 Oct 2026 14:15:01 +0000
asID:                     273332
IP address blocks:        2804:8d10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/702838DD0B14B4FF3D09CE89247C34EBD427D264.crl
                          rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/702838DD0B14B4FF3D09CE89247C34EBD427D264.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/702838DD0B14B4FF3D09CE89247C34EBD427D264.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 20:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0b:d5:61:1c:72:6f:d8:c2:05:54:46:2f:01:98:bb:45:d1:ba:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702838DD0B14B4FF3D09CE89247C34EBD427D264
        Validity
            Not Before: Oct 17 14:10:01 2025 GMT
            Not After : Oct 16 14:15:01 2026 GMT
        Subject: CN=71F01CBA18507DBB4CC50C33CCB8656DE75A4C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:aa:14:53:3f:ac:41:87:1a:f5:2f:ff:9a:
                    8c:4c:5b:72:d9:c1:fd:15:85:be:62:cf:f9:f4:12:
                    ee:b5:50:d7:6a:26:ad:71:10:45:6c:99:0b:87:98:
                    b5:5d:fb:76:56:79:53:af:16:aa:e9:34:59:af:86:
                    07:c0:91:70:bb:dc:02:55:85:fe:93:80:69:bb:76:
                    1a:b0:74:36:71:99:e0:9d:f8:e8:f0:61:91:51:20:
                    33:66:99:3f:8b:f9:11:38:14:c7:ae:14:f2:2b:fb:
                    9d:ba:18:0a:54:0e:f8:28:e3:1c:e5:34:e9:01:9c:
                    58:cb:15:ec:c9:73:6f:0e:d9:b8:2a:c4:4b:a8:f4:
                    b2:51:e2:9a:30:a8:fe:e8:bf:b8:59:5f:3c:4c:2c:
                    89:38:29:5e:dd:64:ad:30:37:f1:97:f3:90:66:90:
                    ac:d3:31:15:91:62:cd:02:18:0e:ed:bd:ea:66:ba:
                    af:44:f1:1b:48:ca:58:51:52:02:ab:0d:3c:f0:5e:
                    1f:3a:6a:f0:0e:e2:ce:5d:fc:04:ff:f7:cf:8b:c9:
                    e7:26:f5:54:28:31:aa:43:2e:93:a8:22:87:03:e4:
                    23:e0:eb:0e:b8:1d:44:cf:5a:37:74:7d:ad:74:a8:
                    e8:dd:fe:ea:f1:be:a9:4e:3b:ed:81:4c:1f:f1:8b:
                    b1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F0:1C:BA:18:50:7D:BB:4C:C5:0C:33:CC:B8:65:6D:E7:5A:4C:97
            X509v3 Authority Key Identifier:
                keyid:70:28:38:DD:0B:14:B4:FF:3D:09:CE:89:24:7C:34:EB:D4:27:D2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/702838DD0B14B4FF3D09CE89247C34EBD427D264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/702838DD0B14B4FF3D09CE89247C34EBD427D264.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eN2YtHWU2Nad3AbJdY6PMnjVr7UidxrFqiDTHpoYyo3/0/323830343a386431303a3a2f33322d3332203d3e20323733333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:19:4c:37:e9:3b:27:c6:e7:8c:66:40:ad:92:9d:df:4d:47:
         37:8a:92:17:4e:f5:69:49:55:13:a6:39:62:f1:89:ad:e4:3a:
         1e:ca:69:3e:b2:de:6b:96:4d:f5:1d:47:ff:f1:a5:79:5b:de:
         a7:e7:4c:49:b4:33:15:e4:10:91:35:79:54:5a:4a:19:59:5b:
         c9:36:93:7e:ae:ba:69:da:26:35:af:25:71:7e:b0:e1:e8:41:
         8b:1a:52:5e:13:b7:35:c3:6e:cd:41:57:3f:56:d7:17:68:d7:
         43:7a:9b:bb:d1:82:62:2a:3f:41:8d:ad:12:fd:98:a0:29:25:
         0d:3b:a8:9a:74:59:45:5d:69:03:7a:7c:17:04:5c:5a:55:f2:
         09:b5:75:44:09:af:4a:cf:28:5a:df:d6:f8:bc:f0:f3:17:3e:
         7d:31:f5:08:35:ba:d6:9d:30:53:71:6a:14:25:43:f5:5b:e8:
         2b:03:69:0a:93:11:61:5c:cd:95:93:d4:c8:8a:30:2b:6b:8f:
         d1:31:28:86:d4:14:4c:9d:e0:08:59:09:e3:1b:79:b2:4a:9a:
         2d:bf:99:40:6c:08:e8:a0:9f:4c:19:44:c4:5e:f6:4b:79:20:
         a3:f3:fd:ef:1c:3e:8f:4f:76:f5:e0:b6:dd:1d:6e:a7:26:c9:
         ef:ea:fb:36
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDQvVYRxyb9jCBVRGLwGYu0XRun0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzAyODM4REQwQjE0QjRGRjNEMDlDRTg5MjQ3QzM0RUJE
NDI3RDI2NDAeFw0yNTEwMTcxNDEwMDFaFw0yNjEwMTYxNDE1MDFaMDMxMTAvBgNV
BAMTKDcxRjAxQ0JBMTg1MDdEQkI0Q0M1MEMzM0NDQjg2NTZERTc1QTRDOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCikqoUUz+sQYca9S//moxMW3LZ
wf0Vhb5iz/n0Eu61UNdqJq1xEEVsmQuHmLVd+3ZWeVOvFqrpNFmvhgfAkXC73AJV
hf6TgGm7dhqwdDZxmeCd+OjwYZFRIDNmmT+L+RE4FMeuFPIr+526GApUDvgo4xzl
NOkBnFjLFezJc28O2bgqxEuo9LJR4powqP7ov7hZXzxMLIk4KV7dZK0wN/GX85Bm
kKzTMRWRYs0CGA7tvepmuq9E8RtIylhRUgKrDTzwXh86avAO4s5d/AT/98+Lyecm
9VQoMapDLpOoIocD5CPg6w64HUTPWjd0fa10qOjd/urxvqlOO+2BTB/xi7FTAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUcfAcuhhQfbtMxQwzzLhlbedaTJcwHwYDVR0j
BBgwFoAUcCg43QsUtP89Cc6JJHw069Qn0mQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGVOMll0SFdVMk5hZDNBYkpkWTZQTW5qVnI3VWlkeHJGcWlEVEhwb1l5
bzMvMC83MDI4MzhERDBCMTRCNEZGM0QwOUNFODkyNDdDMzRFQkQ0MjdEMjY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwMjgzOEREMEIxNEI0RkYz
RDA5Q0U4OTI0N0MzNEVCRDQyN0QyNjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhlTjJZdEhXVTJOYWQzQWJKZFk2UE1ualZyN1VpZHhyRnFpRFRIcG9ZeW8zLzAv
MzIzODMwMzQzYTM4NjQzMTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMz
MzMzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASNEDANBgkqhkiG9w0BAQsFAAOCAQEAvBlMN+k7
J8bnjGZArZKd301HN4qSF071aUlVE6Y5YvGJreQ6HsppPrLea5ZN9R1H//GleVve
p+dMSbQzFeQQkTV5VFpKGVlbyTaTfq66adomNa8lcX6w4ehBixpSXhO3NcNuzUFX
P1bXF2jXQ3qbu9GCYio/QY2tEv2YoCklDTuomnRZRV1pA3p8FwRcWlXyCbV1RAmv
Ss8oWt/W+Lzw8xc+fTH1CDW61p0wU3FqFCVD9VvoKwNpCpMRYVzNlZPUyIowK2uP
0TEohtQUTJ3gCFkJ4xt5skqaLb+ZQGwI6KCfTBlExF72S3kgo/P97xw+j0929eC2
3R1upybJ7+r7Ng==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:25:06 2025 by rpki-client