Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a3a2f33342d3334203d3e20323639353332.roa
File:                     323830343a363631343a3a2f33342d3334203d3e20323639353332.roa (raw, json)
Hash identifier:          HFlOZm984PuFo36fJ4/lztGrlEDSS41K1HmB+ElsbOg=
Subject key identifier:   31:10:E6:06:0C:AE:77:FA:7B:F6:B2:41:8A:D3:85:28:14:CC:2F:2E
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       10E154B790B6E8219B65271752968707ECA43DF3
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a3a2f33342d3334203d3e20323639353332.roa
Signing time:             Sat 20 Sep 2025 16:07:34 +0000
ROA not before:           Sat 20 Sep 2025 16:02:34 +0000
ROA not after:            Sat 19 Sep 2026 16:07:34 +0000
asID:                     269532
IP address blocks:        2804:6614::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl
                          rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e1:54:b7:90:b6:e8:21:9b:65:27:17:52:96:87:07:ec:a4:3d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Sep 20 16:02:34 2025 GMT
            Not After : Sep 19 16:07:34 2026 GMT
        Subject: CN=3082010A0282010100D4AD9EF922A13D5ED2ECBAE0F4143A18333D77B8135ACF6C39503568BC6BCB8667440FBE3643C4D0D7672F8DE1DF9A58D62D5FBC9385F203CCFDAE3B2562E18E5F31FEA67A2F4454C12AF5B322178E35E35863CCF266C4EEDEA95972771CA2DFDC5FCAD8CAA9AD22834DCF8B8B13EA45E7F876CD361E4D80D1BFD0CCBF876D2CD2D64B2DC7E2C8B4DCA018244284AAD12AD8AAC1857D46C8C5BF680DBC268520A50ACC6FE77E5C5E8DF4C2FBC71C756C1EB8544F87E49FE490F344E793508A870F535A0444532C02505AAEFF3FBEFF55F70CCCEB8F0366133F30340477B11CA55AEF3717DCE941C7B2151957E24C01550E3D682D716798F278879B4077AB68AB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ad:9e:f9:22:a1:3d:5e:d2:ec:ba:e0:f4:14:
                    3a:18:33:3d:77:b8:13:5a:cf:6c:39:50:35:68:bc:
                    6b:cb:86:67:44:0f:be:36:43:c4:d0:d7:67:2f:8d:
                    e1:df:9a:58:d6:2d:5f:bc:93:85:f2:03:cc:fd:ae:
                    3b:25:62:e1:8e:5f:31:fe:a6:7a:2f:44:54:c1:2a:
                    f5:b3:22:17:8e:35:e3:58:63:cc:f2:66:c4:ee:de:
                    a9:59:72:77:1c:a2:df:dc:5f:ca:d8:ca:a9:ad:22:
                    83:4d:cf:8b:8b:13:ea:45:e7:f8:76:cd:36:1e:4d:
                    80:d1:bf:d0:cc:bf:87:6d:2c:d2:d6:4b:2d:c7:e2:
                    c8:b4:dc:a0:18:24:42:84:aa:d1:2a:d8:aa:c1:85:
                    7d:46:c8:c5:bf:68:0d:bc:26:85:20:a5:0a:cc:6f:
                    e7:7e:5c:5e:8d:f4:c2:fb:c7:1c:75:6c:1e:b8:54:
                    4f:87:e4:9f:e4:90:f3:44:e7:93:50:8a:87:0f:53:
                    5a:04:44:53:2c:02:50:5a:ae:ff:3f:be:ff:55:f7:
                    0c:cc:eb:8f:03:66:13:3f:30:34:04:77:b1:1c:a5:
                    5a:ef:37:17:dc:e9:41:c7:b2:15:19:57:e2:4c:01:
                    55:0e:3d:68:2d:71:67:98:f2:78:87:9b:40:77:ab:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:10:E6:06:0C:AE:77:FA:7B:F6:B2:41:8A:D3:85:28:14:CC:2F:2E
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a3a2f33342d3334203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6614::/34

    Signature Algorithm: sha256WithRSAEncryption
         2c:8a:3d:23:ea:72:d0:0a:54:9c:df:04:8f:40:7d:c8:62:c4:
         f2:b2:af:ce:ae:b9:e8:94:41:10:c3:d0:e0:dd:ea:7e:7b:cb:
         52:c0:63:54:f3:8e:9e:0e:12:d6:be:e8:e7:ef:dd:91:bc:6a:
         cf:70:9a:dc:7a:07:05:7c:0c:b5:c6:8c:84:dc:d5:ca:27:aa:
         e0:17:2f:6c:25:07:b1:da:42:7d:e1:b3:b0:9a:41:16:26:40:
         e5:f4:c3:e6:1c:b5:b8:d4:14:d3:09:54:3a:47:71:35:2d:9a:
         31:ad:e4:45:b9:5e:c6:27:2a:d0:b7:4e:ef:39:20:8f:d3:27:
         c8:6f:15:75:84:30:be:b9:0c:1b:55:5b:26:df:a3:47:6f:83:
         08:7b:b6:ba:65:ea:31:2c:93:84:97:c5:f0:c8:f0:1f:ec:1a:
         28:68:05:ef:3e:b6:d8:26:52:c9:bb:4a:a0:64:70:e1:a9:e6:
         05:d1:61:10:0f:f6:4d:86:e9:c1:8a:12:e6:fa:2a:ad:3c:0d:
         49:ac:8e:54:6f:f0:14:4f:2c:e0:ae:0f:8b:31:e1:69:ea:0b:
         71:51:ad:fc:18:99:68:08:92:3d:36:5b:dc:7d:6c:3a:c0:50:
         14:7a:a8:11:f2:6a:da:11:ec:af:fa:7a:c3:8e:0d:86:e9:20:
         b3:d3:0a:4f
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUEOFUt5C26CGbZScXUpaHB+ykPfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM5NzZCRkMwOThFMDREOTNBNTUwN0JCQjA0NkMzNjA4
Qjg4OTY3MDAeFw0yNTA5MjAxNjAyMzRaFw0yNjA5MTkxNjA3MzRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDRBRDlFRjkyMkExM0Q1RUQy
RUNCQUUwRjQxNDNBMTgzMzNENzdCODEzNUFDRjZDMzk1MDM1NjhCQzZCQ0I4NjY3
NDQwRkJFMzY0M0M0RDBENzY3MkY4REUxREY5QTU4RDYyRDVGQkM5Mzg1RjIwM0ND
RkRBRTNCMjU2MkUxOEU1RjMxRkVBNjdBMkY0NDU0QzEyQUY1QjMyMjE3OEUzNUUz
NTg2M0NDRjI2NkM0RUVERUE5NTk3Mjc3MUNBMkRGREM1RkNBRDhDQUE5QUQyMjgz
NERDRjhCOEIxM0VBNDVFN0Y4NzZDRDM2MUU0RDgwRDFCRkQwQ0NCRjg3NkQyQ0Qy
RDY0QjJEQzdFMkM4QjREQ0EwMTgyNDQyODRBQUQxMkFEOEFBQzE4NTdENDZDOEM1
QkY2ODBEQkMyNjg1MjBBNTBBQ0M2RkU3N0U1QzVFOERGNEMyRkJDNzFDNzU2QzFF
Qjg1NDRGODdFNDlGRTQ5MEYzNDRFNzkzNTA4QTg3MEY1MzVBMDQ0NDUzMkMwMjUw
NUFBRUZGM0ZCRUZGNTVGNzBDQ0NFQjhGMDM2NjEzM0YzMDM0MDQ3N0IxMUNBNTVB
RUYzNzE3RENFOTQxQzdCMjE1MTk1N0UyNEMwMTU1MEUzRDY4MkQ3MTY3OThGMjc4
ODc5QjQwNzdBQjY4QUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1K2e+SKhPV7S7Lrg9BQ6GDM9d7gTWs9sOVA1aLxry4ZnRA++NkPE
0NdnL43h35pY1i1fvJOF8gPM/a47JWLhjl8x/qZ6L0RUwSr1syIXjjXjWGPM8mbE
7t6pWXJ3HKLf3F/K2MqprSKDTc+LixPqRef4ds02Hk2A0b/QzL+HbSzS1kstx+LI
tNygGCRChKrRKtiqwYV9RsjFv2gNvCaFIKUKzG/nflxejfTC+8ccdWweuFRPh+Sf
5JDzROeTUIqHD1NaBERTLAJQWq7/P77/VfcMzOuPA2YTPzA0BHexHKVa7zcX3OlB
x7IVGVfiTAFVDj1oLXFnmPJ4h5tAd6toqwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDEQ5gYMrnf6e/ayQYrThSgUzC8uMB8GA1UdIwQYMBaAFMOXa/wJjgTZOlUHu7BG
w2CLiJZwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FLVmJiMU1OU0w4UkFy
ZWdBYzNNa1dzZ01rdzdmSzJGYkV6a0RmU3drOE4yLzEvQzM5NzZCRkMwOThFMDRE
OTNBNTUwN0JCQjA0NkMzNjA4Qjg4OTY3MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DMzk3NkJGQzA5OEUwNEQ5M0E1NTA3QkJCMDQ2QzM2MDhCODg5
NjcwLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BS1ZiYjFNTlNMOFJBcmVnQWMz
TWtXc2dNa3c3ZksyRmJFemtEZlN3azhOMi8xLzMyMzgzMDM0M2EzNjM2MzEzNDNh
M2EyZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzYzOTM1MzMzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigE
ZhQAMA0GCSqGSIb3DQEBCwUAA4IBAQAsij0j6nLQClSc3wSPQH3IYsTysq/Orrno
lEEQw9Dg3ep+e8tSwGNU846eDhLWvujn792RvGrPcJrcegcFfAy1xoyE3NXKJ6rg
Fy9sJQex2kJ94bOwmkEWJkDl9MPmHLW41BTTCVQ6R3E1LZoxreRFuV7GJyrQt07v
OSCP0yfIbxV1hDC+uQwbVVsm36NHb4MIe7a6ZeoxLJOEl8XwyPAf7BooaAXvPrbY
JlLJu0qgZHDhqeYF0WEQD/ZNhunBihLm+iqtPA1JrI5Ub/AUTyzgrg+LMeFp6gtx
Ua38GJloCJI9NlvcfWw6wFAUeqgR8mraEeyv+nrDjg2G6SCz0wpP
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:33:40 2025 by rpki-client