Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33322d3332203d3e20323732353138.roa
File:                     323830343a383236383a3a2f33322d3332203d3e20323732353138.roa (raw, json)
Hash identifier:          q7R7XejhMA0V5vkWZy0ZIvhEZuHvs9Cr/UvYs4FlnAM=
Subject key identifier:   65:32:CE:DA:DA:DC:00:2D:C5:75:3E:21:4C:91:B1:69:1E:35:A5:81
Certificate issuer:       /CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
Certificate serial:       3D797483897557E134CBF7B24B63AA1A2475FC0A
Authority key identifier: 31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33322d3332203d3e20323732353138.roa
Signing time:             Wed 01 Oct 2025 02:16:53 +0000
ROA not before:           Wed 01 Oct 2025 02:11:53 +0000
ROA not after:            Wed 30 Sep 2026 02:16:53 +0000
asID:                     272518
IP address blocks:        2804:8268::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl
                          rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:79:74:83:89:75:57:e1:34:cb:f7:b2:4b:63:aa:1a:24:75:fc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
        Validity
            Not Before: Oct  1 02:11:53 2025 GMT
            Not After : Sep 30 02:16:53 2026 GMT
        Subject: CN=6532CEDADADC002DC5753E214C91B1691E35A581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:31:5e:37:55:14:63:20:13:f0:9b:cd:32:
                    c7:fa:f3:b5:70:45:00:3d:5e:83:c7:cc:40:af:4e:
                    7e:13:f0:7e:5f:f7:b4:25:47:40:00:4c:0a:f2:be:
                    5a:ab:35:f5:41:8b:cb:cb:ba:28:fe:26:7b:97:a4:
                    27:be:34:6f:4b:77:5a:51:d5:e3:28:d0:d4:f7:8a:
                    d9:18:80:51:2b:e0:9c:26:ea:96:0a:9d:90:ee:b1:
                    27:9d:07:64:d6:03:23:3f:a2:18:89:33:af:74:73:
                    22:3c:40:09:df:70:d0:db:1f:74:1c:9a:f1:c2:34:
                    ef:a7:2b:61:f5:39:14:54:fc:8e:b1:74:73:05:9e:
                    a1:7b:08:16:34:65:6c:ed:52:07:34:c7:34:ef:9f:
                    bb:89:8c:87:9b:83:e1:6a:56:f6:8f:f2:c4:1a:32:
                    e1:2c:dc:3b:df:fb:9b:8c:02:7c:46:ec:84:56:57:
                    27:7b:f0:81:64:e5:63:30:60:c6:16:2a:63:dd:b1:
                    b7:32:da:6b:82:fb:87:28:03:ed:28:2b:2f:65:a8:
                    38:ff:6e:99:b7:9a:de:55:2b:2f:6b:4b:2f:e0:7e:
                    ff:b8:9f:4c:73:65:92:ef:e9:08:9e:3e:dc:52:8f:
                    2d:b6:cd:7d:b0:62:97:16:29:3d:f6:d8:9f:9b:aa:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:32:CE:DA:DA:DC:00:2D:C5:75:3E:21:4C:91:B1:69:1E:35:A5:81
            X509v3 Authority Key Identifier:
                keyid:31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33322d3332203d3e20323732353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8268::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:2d:19:f7:07:d3:57:f2:aa:70:5a:66:77:b3:0d:66:c7:42:
         b8:53:58:03:24:28:2e:b9:f4:63:0a:cb:d8:4f:ef:37:6e:36:
         ed:bd:a3:c0:52:b1:d7:17:2a:d7:25:c3:a7:f8:30:cb:07:cb:
         d5:45:35:d2:d8:3e:b1:b0:ba:77:93:0e:83:4d:6e:ed:b0:e2:
         41:0c:6c:92:86:21:56:e1:6e:0c:e2:7d:e2:f5:28:22:c8:a9:
         63:bc:74:66:c2:2a:1b:c3:ad:f4:c0:1b:aa:f0:af:c8:56:18:
         11:0c:94:a3:94:4b:28:c5:12:52:79:2a:46:3a:05:d5:53:3e:
         09:4f:96:1c:92:1d:a6:3b:65:3d:49:31:e2:87:e7:61:81:9e:
         d8:1e:4f:8e:e9:3d:8b:95:f9:60:0c:e1:d2:5c:47:ae:34:da:
         53:d0:96:c9:68:3c:a7:40:af:b3:4f:f6:0b:28:4e:b1:04:53:
         bb:76:2c:c2:62:5b:0d:77:bb:70:33:42:83:2e:9c:84:ef:20:
         43:28:cd:b1:b6:1d:de:a1:fd:99:99:57:f5:be:76:c9:1b:96:
         e4:67:75:1c:5a:2f:30:cb:d4:c8:4e:66:6d:80:55:61:f7:d6:
         84:e6:c2:b3:3f:2e:53:37:b2:76:b6:aa:e6:68:50:e4:1c:60:
         e2:83:7f:d4
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPXl0g4l1V+E0y/eyS2OqGiR1/AowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE3MEU1OUY2NDdEMTJGMkMwMTM4MUY3ODlGRUExOUI5
NEE3RUE5NDAeFw0yNTEwMDEwMjExNTNaFw0yNjA5MzAwMjE2NTNaMDMxMTAvBgNV
BAMTKDY1MzJDRURBREFEQzAwMkRDNTc1M0UyMTRDOTFCMTY5MUUzNUE1ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCDFeN1UUYyAT8JvNMsf687Vw
RQA9XoPHzECvTn4T8H5f97QlR0AATAryvlqrNfVBi8vLuij+JnuXpCe+NG9Ld1pR
1eMo0NT3itkYgFEr4Jwm6pYKnZDusSedB2TWAyM/ohiJM690cyI8QAnfcNDbH3Qc
mvHCNO+nK2H1ORRU/I6xdHMFnqF7CBY0ZWztUgc0xzTvn7uJjIebg+FqVvaP8sQa
MuEs3Dvf+5uMAnxG7IRWVyd78IFk5WMwYMYWKmPdsbcy2muC+4coA+0oKy9lqDj/
bpm3mt5VKy9rSy/gfv+4n0xzZZLv6QiePtxSjy22zX2wYpcWKT322J+bqtD9AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUZTLO2trcAC3FdT4hTJGxaR41pYEwHwYDVR0j
BBgwFoAUMXDln2R9EvLAE4H3if6hm5Sn6pQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUIyR1RpN3BZakVmR1d4WURhNkZqYUx0SmVzaFFGWEpzVTlTc1pnVkY2
eHQvMC8zMTcwRTU5RjY0N0QxMkYyQzAxMzgxRjc4OUZFQTE5Qjk0QTdFQTk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxNzBFNTlGNjQ3RDEyRjJD
MDEzODFGNzg5RkVBMTlCOTRBN0VBOTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlCMkdUaTdwWWpFZkdXeFlEYTZGamFMdEplc2hRRlhKc1U5U3NaZ1ZGNnh0LzAv
MzIzODMwMzQzYTM4MzIzNjM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNzMy
MzUzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASCaDANBgkqhkiG9w0BAQsFAAOCAQEAKS0Z9wfT
V/KqcFpmd7MNZsdCuFNYAyQoLrn0YwrL2E/vN2427b2jwFKx1xcq1yXDp/gwywfL
1UU10tg+sbC6d5MOg01u7bDiQQxskoYhVuFuDOJ94vUoIsipY7x0ZsIqG8Ot9MAb
qvCvyFYYEQyUo5RLKMUSUnkqRjoF1VM+CU+WHJIdpjtlPUkx4ofnYYGe2B5Pjuk9
i5X5YAzh0lxHrjTaU9CWyWg8p0Cvs0/2CyhOsQRTu3YswmJbDXe7cDNCgy6chO8g
QyjNsbYd3qH9mZlX9b52yRuW5Gd1HFovMMvUyE5mbYBVYffWhObCsz8uUzeydraq
5mhQ5Bxg4oN/1A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:46:42 2025 by rpki-client