Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a343030303a3a2f33342d3334203d3e20323639353332.roa
File:                     323830343a363631343a343030303a3a2f33342d3334203d3e20323639353332.roa (raw, json)
Hash identifier:          9cUU04YPVzsao4JayHVwmyVMJLReFzEl6rjgN9Yv+bU=
Subject key identifier:   E8:87:96:80:CF:A8:22:98:C4:AB:75:C4:CC:7B:D1:5C:19:C2:F6:00
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       468BA26A72C6B5F8B5D88E6ABC34DF38A22CB73A
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a343030303a3a2f33342d3334203d3e20323639353332.roa
Signing time:             Fri 19 Sep 2025 17:24:52 +0000
ROA not before:           Fri 19 Sep 2025 17:19:52 +0000
ROA not after:            Fri 18 Sep 2026 17:24:52 +0000
asID:                     269532
IP address blocks:        2804:6614:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl
                          rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8b:a2:6a:72:c6:b5:f8:b5:d8:8e:6a:bc:34:df:38:a2:2c:b7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Sep 19 17:19:52 2025 GMT
            Not After : Sep 18 17:24:52 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2f:76:b7:e6:28:c1:be:c0:4e:87:df:13:10:
                    75:27:a9:9d:8c:5d:f5:30:df:6d:38:c0:3e:c5:ee:
                    11:4f:35:11:20:20:81:64:8b:39:9a:05:a4:73:43:
                    6a:d1:29:fb:e8:ef:66:15:4a:2a:f7:5b:a1:c5:d3:
                    21:0d:31:1a:33:e0:27:9d:f7:cb:18:46:f4:ff:5d:
                    05:ac:1f:a8:eb:be:03:3b:e5:a7:b7:10:4c:93:a4:
                    73:6a:27:f2:87:ab:9b:c5:f2:52:d8:3d:28:b9:01:
                    02:9a:a5:d5:11:8d:19:b0:2d:40:a7:5c:03:66:5a:
                    a6:64:89:74:e5:56:d3:64:3d:09:07:68:55:00:d9:
                    3d:93:0f:96:19:af:1f:db:39:c4:13:dd:66:15:67:
                    dc:04:fc:1b:5d:a7:83:7c:fa:9f:00:14:8b:98:7b:
                    56:43:bf:3d:9f:e7:46:aa:92:e8:63:54:05:07:7d:
                    f1:44:f6:9f:b5:8b:09:91:41:0b:24:39:10:dc:5d:
                    a8:5a:5f:1e:5e:95:d2:67:20:38:17:ee:5c:f4:3f:
                    a6:b5:04:54:21:95:48:fe:5a:ad:97:91:25:81:e9:
                    2b:ce:a7:95:c2:4d:62:c0:16:b2:d5:6e:46:cc:7a:
                    b1:47:9b:8c:36:09:0d:a7:84:69:76:27:58:2f:28:
                    1b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:87:96:80:CF:A8:22:98:C4:AB:75:C4:CC:7B:D1:5C:19:C2:F6:00
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a343030303a3a2f33342d3334203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6614:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         70:df:49:2a:c9:3a:03:59:20:f9:b7:8f:29:10:06:93:9f:fc:
         f2:a3:5c:3c:0a:de:6a:9b:53:40:8e:67:66:6e:05:2a:b7:4a:
         b7:ad:a6:7a:d0:f8:57:59:4f:46:c3:20:24:6f:df:bb:97:7d:
         9e:be:43:3a:86:e4:da:b0:a8:28:12:47:9b:ce:99:ab:f3:2d:
         87:cc:3d:7c:20:e9:d6:9a:f8:08:6d:2b:41:28:7f:7f:ef:76:
         20:a7:50:59:8c:56:b7:54:6e:eb:3d:ba:60:7c:57:12:55:59:
         9a:8f:e9:ca:ca:b1:b9:68:6c:b0:1c:79:d5:2e:a6:c4:e7:89:
         01:d9:e6:aa:66:f5:c0:a7:55:81:2e:5b:91:e5:80:21:c1:bf:
         c1:93:4b:e8:5e:61:3a:f3:ff:51:e9:0b:94:de:51:5a:e6:e9:
         38:11:e4:cd:4b:11:e4:ff:94:01:df:df:cb:ea:a1:7c:4d:d7:
         37:dc:0b:6d:84:57:00:37:ae:10:fc:95:6a:7f:3a:88:4d:90:
         5b:4a:82:74:6d:aa:24:1a:b2:4c:81:31:74:38:96:55:81:d0:
         a3:e1:15:bb:24:ee:37:45:2b:14:59:60:9c:30:2d:c6:c0:ec:
         d7:ce:67:50:fd:f0:52:65:16:c6:14:f0:51:72:73:b5:f0:cd:
         38:33:bd:f9
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIURouianLGtfi12I5qvDTfOKIstzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM5NzZCRkMwOThFMDREOTNBNTUwN0JCQjA0NkMzNjA4
Qjg4OTY3MDAeFw0yNTA5MTkxNzE5NTJaFw0yNjA5MTgxNzI0NTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDQyRjc2QjdFNjI4QzFCRUMw
NEU4N0RGMTMxMDc1MjdBOTlEOEM1REY1MzBERjZEMzhDMDNFQzVFRTExNEYzNTEx
MjAyMDgxNjQ4QjM5OUEwNUE0NzM0MzZBRDEyOUZCRThFRjY2MTU0QTJBRjc1QkEx
QzVEMzIxMEQzMTFBMzNFMDI3OURGN0NCMTg0NkY0RkY1RDA1QUMxRkE4RUJCRTAz
M0JFNUE3QjcxMDRDOTNBNDczNkEyN0YyODdBQjlCQzVGMjUyRDgzRDI4QjkwMTAy
OUFBNUQ1MTE4RDE5QjAyRDQwQTc1QzAzNjY1QUE2NjQ4OTc0RTU1NkQzNjQzRDA5
MDc2ODU1MDBEOTNEOTMwRjk2MTlBRjFGREIzOUM0MTNERDY2MTU2N0RDMDRGQzFC
NURBNzgzN0NGQTlGMDAxNDhCOTg3QjU2NDNCRjNEOUZFNzQ2QUE5MkU4NjM1NDA1
MDc3REYxNDRGNjlGQjU4QjA5OTE0MTBCMjQzOTEwREM1REE4NUE1RjFFNUU5NUQy
NjcyMDM4MTdFRTVDRjQzRkE2QjUwNDU0MjE5NTQ4RkU1QUFEOTc5MTI1ODFFOTJC
Q0VBNzk1QzI0RDYyQzAxNkIyRDU2RTQ2Q0M3QUIxNDc5QjhDMzYwOTBEQTc4NDY5
NzYyNzU4MkYyODFCOUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1C92t+Yowb7AToffExB1J6mdjF31MN9tOMA+xe4RTzURICCBZIs5
mgWkc0Nq0Sn76O9mFUoq91uhxdMhDTEaM+AnnffLGEb0/10FrB+o674DO+WntxBM
k6Rzaifyh6ubxfJS2D0ouQECmqXVEY0ZsC1Ap1wDZlqmZIl05VbTZD0JB2hVANk9
kw+WGa8f2znEE91mFWfcBPwbXaeDfPqfABSLmHtWQ789n+dGqpLoY1QFB33xRPaf
tYsJkUELJDkQ3F2oWl8eXpXSZyA4F+5c9D+mtQRUIZVI/lqtl5ElgekrzqeVwk1i
wBay1W5GzHqxR5uMNgkNp4RpdidYLygbmwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FOiHloDPqCKYxKt1xMx70VwZwvYAMB8GA1UdIwQYMBaAFMOXa/wJjgTZOlUHu7BG
w2CLiJZwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FLVmJiMU1OU0w4UkFy
ZWdBYzNNa1dzZ01rdzdmSzJGYkV6a0RmU3drOE4yLzEvQzM5NzZCRkMwOThFMDRE
OTNBNTUwN0JCQjA0NkMzNjA4Qjg4OTY3MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DMzk3NkJGQzA5OEUwNEQ5M0E1NTA3QkJCMDQ2QzM2MDhCODg5
NjcwLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BS1ZiYjFNTlNMOFJBcmVnQWMz
TWtXc2dNa3c3ZksyRmJFemtEZlN3azhOMi8xLzMyMzgzMDM0M2EzNjM2MzEzNDNh
MzQzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzkzNTMzMzIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBGYUQDANBgkqhkiG9w0BAQsFAAOCAQEAcN9JKsk6A1kg+bePKRAG
k5/88qNcPAreaptTQI5nZm4FKrdKt62metD4V1lPRsMgJG/fu5d9nr5DOobk2rCo
KBJHm86Zq/Mth8w9fCDp1pr4CG0rQSh/f+92IKdQWYxWt1Ru6z26YHxXElVZmo/p
ysqxuWhssBx51S6mxOeJAdnmqmb1wKdVgS5bkeWAIcG/wZNL6F5hOvP/UekLlN5R
WubpOBHkzUsR5P+UAd/fy+qhfE3XN9wLbYRXADeuEPyVan86iE2QW0qCdG2qJBqy
TIExdDiWVYHQo+EVuyTuN0UrFFlgnDAtxsDs185nUP3wUmUWxhTwUXJztfDNODO9
+Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:11 2025 by rpki-client