Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33332d3333203d3e20323632383939.roa
File:                     323830343a353534633a3a2f33332d3333203d3e20323632383939.roa (raw, json)
Hash identifier:          khE8aQWHTcIDGqOdjYdPFu7z4J7oGxZ/WlxcFGZqrP0=
Subject key identifier:   44:F5:D6:DD:EC:6B:9F:CB:55:68:80:15:13:CB:3D:1B:3C:37:47:D5
Certificate issuer:       /CN=9C658C6E5D9BF80C0D505E4AF772FC926FC28C56
Certificate serial:       1C720BFBA10BA247DC55A67BB8F13D1494258BF6
Authority key identifier: 9C:65:8C:6E:5D:9B:F8:0C:0D:50:5E:4A:F7:72:FC:92:6F:C2:8C:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33332d3333203d3e20323632383939.roa
Signing time:             Wed 01 Oct 2025 12:50:27 +0000
ROA not before:           Wed 01 Oct 2025 12:45:27 +0000
ROA not after:            Wed 30 Sep 2026 12:50:27 +0000
asID:                     262899
IP address blocks:        2804:554c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.crl
                          rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 08:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:72:0b:fb:a1:0b:a2:47:dc:55:a6:7b:b8:f1:3d:14:94:25:8b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C658C6E5D9BF80C0D505E4AF772FC926FC28C56
        Validity
            Not Before: Oct  1 12:45:27 2025 GMT
            Not After : Sep 30 12:50:27 2026 GMT
        Subject: CN=44F5D6DDEC6B9FCB5568801513CB3D1B3C3747D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cd:c9:17:a5:91:e0:69:a3:5f:e9:95:cd:3f:
                    f8:e2:33:f3:4e:c5:36:22:f8:88:ec:e0:97:07:e5:
                    2a:c4:97:04:85:e5:3a:87:5a:cf:6d:7a:ec:59:66:
                    ca:44:59:9a:14:5f:8a:5f:f5:2a:46:ee:da:9b:5f:
                    56:2d:d4:b1:9e:06:b2:56:51:ab:c6:6d:fe:45:1e:
                    39:f2:33:ce:cb:8f:08:a4:d4:cf:9a:a7:36:ff:90:
                    67:09:15:21:bb:d9:b3:b3:d4:2d:85:26:fc:96:b4:
                    72:c0:76:9d:d4:23:39:5d:5b:a0:b9:9f:f0:61:95:
                    43:f0:8d:da:96:e1:f5:33:41:68:7d:af:06:3a:0f:
                    28:58:8a:28:24:4f:54:cf:cc:6d:97:f1:61:10:f2:
                    8d:07:3b:25:69:f5:8c:4d:57:e4:f5:95:5e:7e:9c:
                    ae:7e:46:69:90:a1:ad:1c:d9:8c:41:43:a5:32:35:
                    99:6e:f3:f0:82:d7:17:42:2d:71:a3:46:34:22:6c:
                    84:e1:72:c3:e7:60:8d:8c:4b:f1:9b:4f:11:d2:ce:
                    30:3a:b0:89:77:b3:d6:12:45:e1:57:97:92:02:42:
                    d6:1e:45:9f:a7:73:78:70:7f:cb:18:90:7d:75:2a:
                    85:97:03:d7:11:ef:46:44:75:00:6e:05:16:32:c7:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F5:D6:DD:EC:6B:9F:CB:55:68:80:15:13:CB:3D:1B:3C:37:47:D5
            X509v3 Authority Key Identifier:
                keyid:9C:65:8C:6E:5D:9B:F8:0C:0D:50:5E:4A:F7:72:FC:92:6F:C2:8C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33332d3333203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:554c::/33

    Signature Algorithm: sha256WithRSAEncryption
         1b:32:48:60:2c:0f:df:f4:40:17:08:db:33:74:fe:e2:03:21:
         63:84:58:10:bd:50:76:09:5e:9c:2f:e2:be:56:15:ba:c1:91:
         45:b7:02:bc:3e:08:dc:e0:bc:6e:84:b0:3a:05:ff:17:dc:73:
         18:f6:ba:ce:1b:3b:5f:5e:54:2e:c4:cc:85:04:cf:22:14:78:
         7b:af:81:08:64:89:56:7b:95:fe:0a:f1:9f:9d:ff:57:d9:fd:
         d0:79:95:41:74:fd:3d:fa:a9:79:b3:67:d5:9f:61:af:84:2b:
         d6:c2:59:5c:7a:4c:9e:6e:bb:17:91:ff:c7:4f:9f:c7:8c:fa:
         52:b4:1e:eb:a8:96:ac:f2:24:a1:9a:29:e2:cc:c9:7d:a5:fa:
         e4:94:72:d0:35:2b:df:39:04:25:58:38:1b:12:39:1a:fc:af:
         91:a1:ea:3d:6e:bb:c9:df:47:74:01:e7:95:37:5e:72:6d:b0:
         da:95:ab:7b:44:a1:05:24:4f:01:41:2f:d5:46:e7:79:50:4e:
         c6:2f:4f:9c:8a:e8:1e:6e:c0:22:11:ee:8b:a3:f3:51:c7:53:
         d8:40:08:e5:58:83:5c:da:e4:0d:95:00:d5:57:6c:a5:64:c0:
         18:c9:c8:3a:f8:b6:47:ee:e0:99:1d:f4:8b:18:ff:29:b0:37:
         dd:b2:4f:ee
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHHIL+6ELokfcVaZ7uPE9FJQli/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM2NThDNkU1RDlCRjgwQzBENTA1RTRBRjc3MkZDOTI2
RkMyOEM1NjAeFw0yNTEwMDExMjQ1MjdaFw0yNjA5MzAxMjUwMjdaMDMxMTAvBgNV
BAMTKDQ0RjVENkRERUM2QjlGQ0I1NTY4ODAxNTEzQ0IzRDFCM0MzNzQ3RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zckXpZHgaaNf6ZXNP/jiM/NO
xTYi+Ijs4JcH5SrElwSF5TqHWs9teuxZZspEWZoUX4pf9SpG7tqbX1Yt1LGeBrJW
UavGbf5FHjnyM87Ljwik1M+apzb/kGcJFSG72bOz1C2FJvyWtHLAdp3UIzldW6C5
n/BhlUPwjdqW4fUzQWh9rwY6DyhYiigkT1TPzG2X8WEQ8o0HOyVp9YxNV+T1lV5+
nK5+RmmQoa0c2YxBQ6UyNZlu8/CC1xdCLXGjRjQibIThcsPnYI2MS/GbTxHSzjA6
sIl3s9YSReFXl5ICQtYeRZ+nc3hwf8sYkH11KoWXA9cR70ZEdQBuBRYyxxivAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURPXW3exrn8tVaIAVE8s9Gzw3R9UwHwYDVR0j
BBgwFoAUnGWMbl2b+AwNUF5K93L8km/CjFYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGd6ejVUS0tOcG4zNTU0R29nNlVhbWthYllMcmc4UEFwVFc5dWNLaW5k
OFgvMC85QzY1OEM2RTVEOUJGODBDMEQ1MDVFNEFGNzcyRkM5MjZGQzI4QzU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDNjU4QzZFNUQ5QkY4MEMw
RDUwNUU0QUY3NzJGQzkyNkZDMjhDNTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhneno1VEtLTnBuMzU1NEdvZzZVYW1rYWJZTHJnOFBBcFRXOXVjS2luZDhYLzAv
MzIzODMwMzQzYTM1MzUzNDYzM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjMy
MzgzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARVTAAwDQYJKoZIhvcNAQELBQADggEBABsySGAs
D9/0QBcI2zN0/uIDIWOEWBC9UHYJXpwv4r5WFbrBkUW3Arw+CNzgvG6EsDoF/xfc
cxj2us4bO19eVC7EzIUEzyIUeHuvgQhkiVZ7lf4K8Z+d/1fZ/dB5lUF0/T36qXmz
Z9WfYa+EK9bCWVx6TJ5uuxeR/8dPn8eM+lK0HuuolqzyJKGaKeLMyX2l+uSUctA1
K985BCVYOBsSORr8r5Gh6j1uu8nfR3QB55U3XnJtsNqVq3tEoQUkTwFBL9VG53lQ
TsYvT5yK6B5uwCIR7ouj81HHU9hACOVYg1za5A2VANVXbKVkwBjJyDr4tkfu4Jkd
9IsY/ymwN92yT+4=
-----END CERTIFICATE-----
Generated at Tue Oct 21 10:34:37 2025 by rpki-client