Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3130313a3a2f34382d313238203d3e20323636353332.roa
File:                     323830343a336437343a3130313a3a2f34382d313238203d3e20323636353332.roa (raw, json)
Hash identifier:          HpNxeqVwHu+L9vMBuFNRH62MOdFSsngKjYq1T5wh3ko=
Subject key identifier:   83:C3:68:1B:3B:9A:5A:DA:F1:8B:87:48:BF:EE:B4:27:34:38:B7:B9
Certificate issuer:       /CN=2DC0F242ADDA7136D95141422051D1361143E486
Certificate serial:       1F204E4C943B7C39CA9525183BF354A9BC9FE36A
Authority key identifier: 2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3130313a3a2f34382d313238203d3e20323636353332.roa
Signing time:             Wed 24 Sep 2025 20:28:44 +0000
ROA not before:           Wed 24 Sep 2025 20:23:44 +0000
ROA not after:            Wed 23 Sep 2026 20:28:44 +0000
asID:                     266532
IP address blocks:        2804:3d74:101::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:20:4e:4c:94:3b:7c:39:ca:95:25:18:3b:f3:54:a9:bc:9f:e3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DC0F242ADDA7136D95141422051D1361143E486
        Validity
            Not Before: Sep 24 20:23:44 2025 GMT
            Not After : Sep 23 20:28:44 2026 GMT
        Subject: CN=83C3681B3B9A5ADAF18B8748BFEEB4273438B7B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:77:e8:19:b3:d8:0e:3d:19:bb:b2:cc:62:
                    10:87:dc:f1:11:9b:c6:2a:37:d1:81:39:fb:78:f1:
                    31:56:68:80:2f:7a:ce:10:1e:d9:74:51:d5:f4:a9:
                    0d:94:2c:f2:b0:de:fe:31:f7:95:0b:57:8d:66:31:
                    05:4f:40:ca:e4:9b:6e:3f:a8:bf:5d:cf:5a:0a:36:
                    92:81:b8:91:b7:4f:d5:5e:88:27:d2:6a:41:64:cd:
                    fa:6b:38:94:75:45:80:07:df:f4:75:e4:05:82:33:
                    83:71:37:82:9f:e7:7e:06:7e:58:d9:21:b4:37:79:
                    a3:d2:67:d5:89:33:55:81:b4:d2:7f:2d:74:f5:27:
                    3a:6c:b8:d2:d2:db:36:ce:9b:65:56:00:28:40:f0:
                    37:54:fe:27:80:23:5b:14:9e:5c:98:f9:0d:1e:71:
                    29:04:7a:9f:eb:35:ab:d0:76:f2:b7:40:15:4f:a4:
                    5d:ab:cd:69:1b:f0:8c:28:2f:2a:89:4b:e4:9c:03:
                    e7:e3:40:b4:c3:7e:37:b1:ce:48:da:02:98:00:bb:
                    53:eb:ea:50:7d:3d:bd:85:05:36:83:dc:8f:b4:5c:
                    6d:0c:ba:e8:1d:e6:d0:ac:df:a5:03:1f:74:54:91:
                    73:b7:3e:36:4b:d8:99:bb:b3:06:46:93:10:b7:fd:
                    6e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C3:68:1B:3B:9A:5A:DA:F1:8B:87:48:BF:EE:B4:27:34:38:B7:B9
            X509v3 Authority Key Identifier:
                keyid:2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3130313a3a2f34382d313238203d3e20323636353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:ec:75:36:ca:63:63:76:62:8a:88:e0:41:f1:6c:e4:7d:18:
         0c:c2:c2:c7:29:15:66:44:7a:e3:71:31:46:bb:18:55:78:80:
         b5:6e:06:3a:4c:54:b1:00:e3:16:f6:ec:68:07:ca:e9:2e:5c:
         fe:d6:0a:3b:34:16:32:69:96:86:dd:01:17:0c:4c:bc:fa:25:
         cd:f8:d8:30:b8:3c:26:51:d7:24:da:f3:a7:0d:73:fa:74:c3:
         f2:80:13:3d:df:5a:b6:19:c6:79:49:dd:64:21:7b:9a:4e:9d:
         46:3f:c4:2e:5c:92:3e:c1:56:28:cb:67:a1:12:ae:a4:ab:63:
         ef:b0:22:4e:8f:fe:ce:02:bc:4d:d1:a6:87:3c:29:61:f9:1b:
         72:3f:a0:ec:fe:69:e1:20:79:a5:f8:94:e2:7f:ae:14:ae:c1:
         37:6a:fb:75:46:3a:79:1e:12:bb:e8:5c:f7:46:d6:11:37:9a:
         ca:1f:a7:0c:53:82:a3:8a:af:fe:e3:7e:86:a4:94:3a:9c:29:
         c2:48:f0:fa:c0:c4:75:e7:4a:d9:54:5a:51:f2:91:5c:90:a1:
         9b:db:86:1b:8a:c2:18:ac:98:f7:f0:f9:6a:f5:e2:d8:14:08:
         9e:d4:9a:65:31:15:18:aa:f9:2b:73:9b:80:a9:d0:51:eb:0b:
         72:70:75:f8
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUHyBOTJQ7fDnKlSUYO/NUqbyf42owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRDMEYyNDJBRERBNzEzNkQ5NTE0MTQyMjA1MUQxMzYx
MTQzRTQ4NjAeFw0yNTA5MjQyMDIzNDRaFw0yNjA5MjMyMDI4NDRaMDMxMTAvBgNV
BAMTKDgzQzM2ODFCM0I5QTVBREFGMThCODc0OEJGRUVCNDI3MzQzOEI3QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2WnfoGbPYDj0Zu7LMYhCH3PER
m8YqN9GBOft48TFWaIAves4QHtl0UdX0qQ2ULPKw3v4x95ULV41mMQVPQMrkm24/
qL9dz1oKNpKBuJG3T9VeiCfSakFkzfprOJR1RYAH3/R15AWCM4NxN4Kf534GfljZ
IbQ3eaPSZ9WJM1WBtNJ/LXT1JzpsuNLS2zbOm2VWAChA8DdU/ieAI1sUnlyY+Q0e
cSkEep/rNavQdvK3QBVPpF2rzWkb8IwoLyqJS+ScA+fjQLTDfjexzkjaApgAu1Pr
6lB9Pb2FBTaD3I+0XG0Muugd5tCs36UDH3RUkXO3PjZL2Jm7swZGkxC3/W69AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUg8NoGzuaWtrxi4dIv+60JzQ4t7kwHwYDVR0j
BBgwFoAULcDyQq3acTbZUUFCIFHRNhFD5IYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJodzNGSzNXUlJZTUF6cW56S2ZZUnNQY2pBWXI1dTNtalA0TnpuNkp2
dEwvMC8yREMwRjI0MkFEREE3MTM2RDk1MTQxNDIyMDUxRDEzNjExNDNFNDg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEQzBGMjQyQUREQTcxMzZE
OTUxNDE0MjIwNTFEMTM2MTE0M0U0ODYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliaHczRkszV1JSWU1BenFuektmWVJzUGNqQVlyNXUzbWpQNE56bjZKdnRMLzAv
MzIzODMwMzQzYTMzNjQzNzM0M2EzMTMwMzEzYTNhMmYzNDM4MmQzMTMyMzgyMDNk
M2UyMDMyMzYzNjM1MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEPXQBATANBgkqhkiG9w0BAQsF
AAOCAQEAyux1NspjY3ZiiojgQfFs5H0YDMLCxykVZkR643ExRrsYVXiAtW4GOkxU
sQDjFvbsaAfK6S5c/tYKOzQWMmmWht0BFwxMvPolzfjYMLg8JlHXJNrzpw1z+nTD
8oATPd9athnGeUndZCF7mk6dRj/ELlySPsFWKMtnoRKupKtj77AiTo/+zgK8TdGm
hzwpYfkbcj+g7P5p4SB5pfiU4n+uFK7BN2r7dUY6eR4Su+hc90bWETeayh+nDFOC
o4qv/uN+hqSUOpwpwkjw+sDEdedK2VRaUfKRXJChm9uGG4rCGKyY9/D5avXi2BQI
ntSaZTEVGKr5K3ObgKnQUesLcnB1+A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:29:21 2025 by rpki-client