Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/323830343a373962383a323030303a3a2f33362d3336203d3e20323731333233.roa
File:                     323830343a373962383a323030303a3a2f33362d3336203d3e20323731333233.roa (raw, json)
Hash identifier:          NQxr3uDTniPxvQkIfIR6dXkCXEEI2Ykkl3b8ySRc/90=
Subject key identifier:   A9:B6:EB:DD:8F:98:06:0E:43:50:28:1C:63:C9:F7:FE:5D:4B:13:80
Certificate issuer:       /CN=922B9B809E9734E02F711EB097B94EB6316A606D
Certificate serial:       358FA627BA9C6B76D670649E58D25C82C9AE4373
Authority key identifier: 92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/323830343a373962383a323030303a3a2f33362d3336203d3e20323731333233.roa
Signing time:             Fri 03 Oct 2025 13:00:38 +0000
ROA not before:           Fri 03 Oct 2025 12:55:38 +0000
ROA not after:            Fri 02 Oct 2026 13:00:38 +0000
asID:                     271323
IP address blocks:        2804:79b8:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.crl
                          rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 23:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8f:a6:27:ba:9c:6b:76:d6:70:64:9e:58:d2:5c:82:c9:ae:43:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922B9B809E9734E02F711EB097B94EB6316A606D
        Validity
            Not Before: Oct  3 12:55:38 2025 GMT
            Not After : Oct  2 13:00:38 2026 GMT
        Subject: CN=A9B6EBDD8F98060E4350281C63C9F7FE5D4B1380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:45:5a:fe:12:8f:e0:32:5e:d2:35:32:b8:
                    32:9d:b9:f4:f9:b0:07:2a:88:0b:5f:9c:5d:a8:b9:
                    2e:e6:34:a3:5e:78:04:bb:5d:bd:ec:3d:0b:d8:aa:
                    01:e6:a8:bd:ed:d4:55:7c:09:47:93:61:19:d5:08:
                    45:63:d8:f5:5d:b3:67:06:cf:6b:19:c1:c4:39:5e:
                    78:16:e3:56:d4:17:48:ba:f2:d9:66:81:27:a8:4c:
                    de:3c:f4:f0:1d:37:2f:46:e8:85:f2:eb:04:99:e4:
                    c4:22:1b:f2:e3:97:1d:49:bf:f3:2b:9b:8c:2e:6a:
                    86:a7:93:a7:fd:7e:d5:92:c7:8b:b3:9f:d1:4f:20:
                    83:2b:eb:16:11:4c:31:8f:5c:89:7c:fc:c4:78:d9:
                    5e:cb:6e:bc:33:6e:a1:b3:98:0e:59:06:3c:aa:5e:
                    e2:a2:5b:37:53:ac:06:81:e0:d7:a4:70:22:00:a6:
                    35:35:29:45:cb:11:f7:ff:e8:b0:35:14:fb:db:62:
                    db:1f:cc:ce:af:2d:ac:7f:f5:23:80:23:95:06:84:
                    9e:be:e8:99:38:9a:cc:98:a9:7c:99:a8:fe:e8:ee:
                    69:83:0c:3a:e3:05:02:8f:7a:ed:7a:04:ad:3d:95:
                    c1:e7:67:3f:cb:92:40:5c:85:8a:54:83:60:a1:ed:
                    24:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B6:EB:DD:8F:98:06:0E:43:50:28:1C:63:C9:F7:FE:5D:4B:13:80
            X509v3 Authority Key Identifier:
                keyid:92:2B:9B:80:9E:97:34:E0:2F:71:1E:B0:97:B9:4E:B6:31:6A:60:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/922B9B809E9734E02F711EB097B94EB6316A606D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/922B9B809E9734E02F711EB097B94EB6316A606D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/323830343a373962383a323030303a3a2f33362d3336203d3e20323731333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79b8:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:e4:74:cf:31:18:66:fa:96:4e:e3:fe:c1:7d:fb:ba:7d:4d:
         99:9c:07:38:0a:a2:9f:46:0a:43:ef:68:7f:f0:b1:42:6b:68:
         1a:0c:e8:4e:14:f5:cc:63:5c:b9:97:6b:35:79:f7:6b:92:f6:
         4a:34:03:38:26:60:51:1b:94:25:ff:fa:10:a1:bc:02:5e:70:
         d8:e8:74:98:f6:19:6e:2b:be:74:87:4e:67:49:45:4c:58:98:
         99:72:13:93:5f:58:63:5b:ef:be:50:2a:63:dd:f3:16:d8:7b:
         c8:17:81:a4:c5:1a:e6:9f:fa:bc:3c:74:d1:1c:c6:4f:cd:25:
         87:6a:d0:67:94:6c:6e:ff:53:8c:4f:4f:6d:37:23:76:08:52:
         d1:62:b9:62:dd:73:50:8a:da:20:d5:40:46:d0:e7:d9:67:0b:
         d9:83:ff:9b:38:37:a1:6b:89:82:ab:09:75:89:ec:68:03:56:
         7d:5f:81:b7:fe:d8:1a:39:4e:d1:95:8d:b0:75:97:92:fa:ba:
         07:2c:bd:44:3b:bc:2f:35:45:d7:6e:75:b2:d6:82:ef:64:b8:
         0b:b9:87:74:86:b5:41:3f:2a:87:4d:4a:8f:67:be:07:c8:18:
         52:4f:c8:d0:9a:89:82:cb:32:ba:05:1e:fb:51:06:2d:8a:4a:
         ad:39:5d:b1
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUNY+mJ7qca3bWcGSeWNJcgsmuQ3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIyQjlCODA5RTk3MzRFMDJGNzExRUIwOTdCOTRFQjYz
MTZBNjA2RDAeFw0yNTEwMDMxMjU1MzhaFw0yNjEwMDIxMzAwMzhaMDMxMTAvBgNV
BAMTKEE5QjZFQkREOEY5ODA2MEU0MzUwMjgxQzYzQzlGN0ZFNUQ0QjEzODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOW0Va/hKP4DJe0jUyuDKdufT5
sAcqiAtfnF2ouS7mNKNeeAS7Xb3sPQvYqgHmqL3t1FV8CUeTYRnVCEVj2PVds2cG
z2sZwcQ5XngW41bUF0i68tlmgSeoTN489PAdNy9G6IXy6wSZ5MQiG/Ljlx1Jv/Mr
m4wuaoank6f9ftWSx4uzn9FPIIMr6xYRTDGPXIl8/MR42V7LbrwzbqGzmA5ZBjyq
XuKiWzdTrAaB4NekcCIApjU1KUXLEff/6LA1FPvbYtsfzM6vLax/9SOAI5UGhJ6+
6Jk4msyYqXyZqP7o7mmDDDrjBQKPeu16BK09lcHnZz/LkkBchYpUg2Ch7SStAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUqbbr3Y+YBg5DUCgcY8n3/l1LE4AwHwYDVR0j
BBgwFoAUkiubgJ6XNOAvcR6wl7lOtjFqYG0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTNWNXBETEIzbWF6Wmp3eXJtNVRQUzFHUlJFNUdINktrTXBIRmhUb1R6
Q1EvMC85MjJCOUI4MDlFOTczNEUwMkY3MTFFQjA5N0I5NEVCNjMxNkE2MDZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyMkI5QjgwOUU5NzM0RTAy
RjcxMUVCMDk3Qjk0RUI2MzE2QTYwNkQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkzVjVwRExCM21helpqd3lybTVUUFMxR1JSRTVHSDZLa01wSEZoVG9UekNRLzAv
MzIzODMwMzQzYTM3Mzk2MjM4M2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMTMzMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEebggMA0GCSqGSIb3DQEBCwUA
A4IBAQCc5HTPMRhm+pZO4/7Bffu6fU2ZnAc4CqKfRgpD72h/8LFCa2gaDOhOFPXM
Y1y5l2s1efdrkvZKNAM4JmBRG5Ql//oQobwCXnDY6HSY9hluK750h05nSUVMWJiZ
chOTX1hjW+++UCpj3fMW2HvIF4GkxRrmn/q8PHTRHMZPzSWHatBnlGxu/1OMT09t
NyN2CFLRYrli3XNQitog1UBG0OfZZwvZg/+bODeha4mCqwl1iexoA1Z9X4G3/tga
OU7RlY2wdZeS+roHLL1EO7wvNUXXbnWy1oLvZLgLuYd0hrVBPyqHTUqPZ74HyBhS
T8jQmomCyzK6BR77UQYtikqtOV2x
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:57 2025 by rpki-client