Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a3a2f33322d3332203d3e20323634393438.roa
File:                     323830343a333036343a3a2f33322d3332203d3e20323634393438.roa (raw, json)
Hash identifier:          5vpOFOEsRoS2ozGkhDGryk4jSAfAY10S72uq26TV8mg=
Subject key identifier:   A6:12:EF:75:58:96:4A:57:B5:3E:74:DC:F8:32:4D:11:32:C6:EA:A0
Certificate issuer:       /CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
Certificate serial:       7A22AA32466BAF6A27D8F391EC95C82F72484761
Authority key identifier: 2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a3a2f33322d3332203d3e20323634393438.roa
Signing time:             Thu 18 Sep 2025 18:14:07 +0000
ROA not before:           Thu 18 Sep 2025 18:09:07 +0000
ROA not after:            Thu 17 Sep 2026 18:14:07 +0000
asID:                     264948
IP address blocks:        2804:3064::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl
                          rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:22:aa:32:46:6b:af:6a:27:d8:f3:91:ec:95:c8:2f:72:48:47:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
        Validity
            Not Before: Sep 18 18:09:07 2025 GMT
            Not After : Sep 17 18:14:07 2026 GMT
        Subject: CN=A612EF7558964A57B53E74DCF8324D1132C6EAA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:e2:a9:87:eb:3f:16:ff:9f:ee:db:90:39:
                    c6:f9:13:c2:d9:7c:f0:6f:bf:c1:87:fc:e7:11:e0:
                    77:4a:80:39:ac:9a:5c:ef:92:0d:c4:8d:05:73:eb:
                    a7:de:13:44:e8:05:90:30:d7:54:5e:40:20:af:27:
                    8c:28:cc:61:e9:cc:51:e9:8b:7b:cd:b5:e2:0d:60:
                    ff:bf:ab:11:2b:18:54:12:83:8d:f1:2f:82:23:e9:
                    9f:c4:ec:40:31:5d:da:55:af:ae:d5:24:42:28:3c:
                    37:1b:33:26:3a:91:da:1a:42:1f:fd:08:6a:ee:a4:
                    e4:19:5b:e8:bb:43:61:d9:aa:2e:d2:9f:d8:29:9c:
                    a1:3b:12:95:6d:7a:14:a4:a3:e8:82:58:6d:48:cc:
                    de:c7:7a:fc:eb:eb:18:53:d7:f7:37:15:83:74:05:
                    c2:a4:46:6f:1e:50:f8:c8:af:55:6e:74:69:4e:db:
                    3f:6c:0d:85:3e:04:1f:c6:ba:f7:4c:82:17:bc:fe:
                    c1:51:39:c0:bf:c0:41:98:fa:f1:8f:07:8d:64:1e:
                    a4:3d:88:38:1e:dd:68:86:ed:25:3d:1a:3f:e0:51:
                    00:ac:7d:9f:eb:69:ca:c0:a5:2c:ec:1e:1e:9c:a0:
                    dd:45:8f:51:06:40:41:5e:25:bc:50:9c:fa:19:6d:
                    7d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:12:EF:75:58:96:4A:57:B5:3E:74:DC:F8:32:4D:11:32:C6:EA:A0
            X509v3 Authority Key Identifier:
                keyid:2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/323830343a333036343a3a2f33322d3332203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3064::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:ec:01:34:8c:77:da:a3:54:3d:70:59:c1:28:e9:6d:e9:42:
         c5:5e:02:2f:03:a7:42:ad:78:1a:47:aa:96:7c:0a:b3:e6:16:
         c7:55:30:80:ff:99:dd:19:7d:de:29:6f:f6:ee:39:f7:fa:fd:
         db:26:92:09:03:f3:c9:42:73:4d:69:85:0d:ab:dd:88:c6:b9:
         3b:c2:21:73:52:b0:d7:1f:b6:3f:c3:5f:6b:e6:f7:c9:ba:9d:
         00:4d:0c:a5:01:6a:86:92:ea:c1:ef:9e:ef:b7:cf:d7:46:40:
         51:1e:b2:31:01:58:a6:8a:0a:0f:41:2a:0f:e0:40:b1:6a:48:
         2d:eb:67:e0:23:fd:f9:a2:90:ee:92:cd:45:c5:55:00:8b:ac:
         e5:3d:05:df:0e:e1:53:97:72:2e:4d:fb:f9:a9:09:e1:0b:9d:
         d5:33:6e:ca:9f:8e:de:62:2e:f9:25:66:f9:8d:e9:06:a5:9e:
         1d:8e:4d:98:fe:da:7b:3d:79:6e:85:c3:35:e1:97:46:22:d5:
         28:5c:3a:12:8f:8b:e9:ff:be:b0:ff:b8:55:b1:82:a3:0e:bb:
         95:de:a4:40:33:86:6a:fe:4c:1d:e7:ca:d3:84:de:61:3e:09:
         fb:ca:d6:a3:36:f0:a4:83:b1:25:d1:00:db:e1:d4:63:86:17:
         1a:99:59:de
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUeiKqMkZrr2on2POR7JXIL3JIR2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY5Rjg0MjdCQjIyMTJDMjhFMDM3RjVGMzg2OThBMzkx
MkRCN0QyMDAeFw0yNTA5MTgxODA5MDdaFw0yNjA5MTcxODE0MDdaMDMxMTAvBgNV
BAMTKEE2MTJFRjc1NTg5NjRBNTdCNTNFNzREQ0Y4MzI0RDExMzJDNkVBQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1y+Kph+s/Fv+f7tuQOcb5E8LZ
fPBvv8GH/OcR4HdKgDmsmlzvkg3EjQVz66feE0ToBZAw11ReQCCvJ4wozGHpzFHp
i3vNteINYP+/qxErGFQSg43xL4Ij6Z/E7EAxXdpVr67VJEIoPDcbMyY6kdoaQh/9
CGrupOQZW+i7Q2HZqi7Sn9gpnKE7EpVtehSko+iCWG1IzN7Hevzr6xhT1/c3FYN0
BcKkRm8eUPjIr1VudGlO2z9sDYU+BB/GuvdMghe8/sFROcC/wEGY+vGPB41kHqQ9
iDge3WiG7SU9Gj/gUQCsfZ/racrApSzsHh6coN1Fj1EGQEFeJbxQnPoZbX1fAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUphLvdViWSle1PnTc+DJNETLG6qAwHwYDVR0j
BBgwFoAUL5+EJ7siEsKOA39fOGmKORLbfSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUJlbk02QkhhVTJteG5qeHdhSGFwYk5NZlJhWXJOS3VNakR0Uml2bjRq
Y1gvMC8yRjlGODQyN0JCMjIxMkMyOEUwMzdGNUYzODY5OEEzOTEyREI3RDIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGOUY4NDI3QkIyMjEyQzI4
RTAzN0Y1RjM4Njk4QTM5MTJEQjdEMjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FCZW5NNkJIYVUybXhuanh3YUhhcGJOTWZSYVlyTkt1TWpEdFJpdm40amNYLzAv
MzIzODMwMzQzYTMzMzAzNjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzkzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQwZDANBgkqhkiG9w0BAQsFAAOCAQEAX+wBNIx3
2qNUPXBZwSjpbelCxV4CLwOnQq14GkeqlnwKs+YWx1UwgP+Z3Rl93ilv9u459/r9
2yaSCQPzyUJzTWmFDavdiMa5O8Ihc1Kw1x+2P8Nfa+b3ybqdAE0MpQFqhpLqwe+e
77fP10ZAUR6yMQFYpooKD0EqD+BAsWpILetn4CP9+aKQ7pLNRcVVAIus5T0F3w7h
U5dyLk37+akJ4Qud1TNuyp+O3mIu+SVm+Y3pBqWeHY5NmP7aez15boXDNeGXRiLV
KFw6Eo+L6f++sP+4VbGCow67ld6kQDOGav5MHefK04TeYT4J+8rWozbwpIOxJdEA
2+HUY4YXGplZ3g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:27:35 2025 by rpki-client