Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/323830343a386130343a3a2f33322d313238203d3e203532353934.roa
File:                     323830343a386130343a3a2f33322d313238203d3e203532353934.roa (raw, json)
Hash identifier:          8LXV6APBdpeKnYA2dAD6HWbDy2XW27U9dn9qZkLb0OA=
Subject key identifier:   1F:D1:DB:C3:76:AD:FD:BE:56:8A:F1:9B:81:3B:99:98:65:5B:55:5E
Certificate issuer:       /CN=AF30B745AAAF3F76FC8935B2EB95380C4EE824E7
Certificate serial:       1278DD7E0CDEE28AF3CAA2BC53A062E2EE1E8503
Authority key identifier: AF:30:B7:45:AA:AF:3F:76:FC:89:35:B2:EB:95:38:0C:4E:E8:24:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/323830343a386130343a3a2f33322d313238203d3e203532353934.roa
Signing time:             Tue 30 Sep 2025 20:52:11 +0000
ROA not before:           Tue 30 Sep 2025 20:47:11 +0000
ROA not after:            Tue 29 Sep 2026 20:52:11 +0000
asID:                     52594
IP address blocks:        2804:8a04::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.crl
                          rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:78:dd:7e:0c:de:e2:8a:f3:ca:a2:bc:53:a0:62:e2:ee:1e:85:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF30B745AAAF3F76FC8935B2EB95380C4EE824E7
        Validity
            Not Before: Sep 30 20:47:11 2025 GMT
            Not After : Sep 29 20:52:11 2026 GMT
        Subject: CN=1FD1DBC376ADFDBE568AF19B813B9998655B555E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:74:b0:44:a1:db:ff:55:d5:8c:3e:7e:87:
                    44:35:fe:4b:3e:03:d7:58:82:3b:d7:d9:9f:ee:e8:
                    0f:02:74:12:30:d3:61:89:81:99:a2:fc:8e:de:13:
                    12:0a:a5:cd:ee:10:d9:08:7a:3f:c3:85:ad:fd:c0:
                    cd:ef:25:2a:da:6d:b5:d2:b2:6d:68:7a:e9:94:5b:
                    a7:23:f0:5d:bb:39:88:71:36:9c:5a:35:96:26:82:
                    ae:99:d8:39:88:4e:3c:ac:1a:64:2f:78:ac:b3:08:
                    28:1d:00:67:33:71:1d:7c:1d:7c:52:e5:67:46:79:
                    61:7c:26:de:51:6e:90:6b:db:cc:01:b1:93:61:93:
                    f6:f2:84:15:f8:b2:82:cd:5d:d4:92:cb:1f:fb:79:
                    ae:34:db:a9:85:1c:39:cc:d3:5a:93:e8:24:a1:c0:
                    0e:56:d6:e8:d5:48:14:bc:fe:ed:9e:49:50:e5:3c:
                    c2:97:ae:4c:c3:62:b3:e0:74:ee:33:b7:38:31:34:
                    8c:39:f3:88:e8:80:dd:31:78:0f:1c:3e:cc:68:43:
                    fd:7f:14:2b:5d:3c:bd:68:cf:6a:72:67:0b:de:e4:
                    d1:c4:3e:97:d8:81:04:3c:bf:4a:6d:b4:a1:75:57:
                    5c:91:ac:ce:87:4a:ca:e5:83:1b:13:ba:02:de:84:
                    80:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D1:DB:C3:76:AD:FD:BE:56:8A:F1:9B:81:3B:99:98:65:5B:55:5E
            X509v3 Authority Key Identifier:
                keyid:AF:30:B7:45:AA:AF:3F:76:FC:89:35:B2:EB:95:38:0C:4E:E8:24:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF30B745AAAF3F76FC8935B2EB95380C4EE824E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/323830343a386130343a3a2f33322d313238203d3e203532353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a04::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:71:6a:81:6d:af:76:40:96:af:52:70:6b:59:b4:75:26:5e:
         fc:49:b7:d5:5b:20:65:a6:2b:68:19:da:f8:59:c6:9d:78:5a:
         f5:ab:d5:b8:16:e3:49:cd:d1:0b:ef:36:9d:4f:53:6d:df:55:
         f9:2a:62:a4:cb:82:14:2d:5e:68:d7:db:5b:ec:55:f1:b8:b9:
         de:c0:2f:51:3d:d9:90:43:e4:fe:ed:58:3f:62:c4:ff:c8:1e:
         38:2e:6a:7d:5a:b9:f1:30:28:a0:40:2f:c8:90:1b:69:f2:17:
         1b:6c:f3:a5:8a:22:ae:f5:de:29:c3:19:3d:b6:92:98:ef:9d:
         05:32:80:c9:9c:e3:14:33:b1:9e:c1:2f:e7:dd:85:94:ea:dc:
         b9:1b:7e:d2:46:bb:08:3a:ee:20:99:b2:46:5b:95:8d:3b:da:
         1e:73:2e:d9:78:1e:73:cb:87:f2:cd:2b:9f:7b:22:66:9a:8f:
         48:d5:5b:1b:d1:d1:78:7b:b6:8b:45:7e:e5:b2:d9:a7:56:27:
         9d:91:f5:09:01:4d:db:27:3a:33:1b:ba:42:f3:d0:4f:b2:06:
         ef:64:9a:af:b7:84:32:09:aa:69:a9:3e:46:88:74:a6:0d:84:
         29:6e:73:05:1f:19:78:fe:9e:3b:72:66:2e:5a:c8:11:28:85:
         d3:91:f3:46
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEnjdfgze4orzyqK8U6Bi4u4ehQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzMEI3NDVBQUFGM0Y3NkZDODkzNUIyRUI5NTM4MEM0
RUU4MjRFNzAeFw0yNTA5MzAyMDQ3MTFaFw0yNjA5MjkyMDUyMTFaMDMxMTAvBgNV
BAMTKDFGRDFEQkMzNzZBREZEQkU1NjhBRjE5QjgxM0I5OTk4NjU1QjU1NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoA3SwRKHb/1XVjD5+h0Q1/ks+
A9dYgjvX2Z/u6A8CdBIw02GJgZmi/I7eExIKpc3uENkIej/Dha39wM3vJSrabbXS
sm1oeumUW6cj8F27OYhxNpxaNZYmgq6Z2DmITjysGmQveKyzCCgdAGczcR18HXxS
5WdGeWF8Jt5RbpBr28wBsZNhk/byhBX4soLNXdSSyx/7ea4026mFHDnM01qT6CSh
wA5W1ujVSBS8/u2eSVDlPMKXrkzDYrPgdO4ztzgxNIw584jogN0xeA8cPsxoQ/1/
FCtdPL1oz2pyZwve5NHEPpfYgQQ8v0pttKF1V1yRrM6HSsrlgxsTugLehIDJAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUH9Hbw3at/b5WivGbgTuZmGVbVV4wHwYDVR0j
BBgwFoAUrzC3RaqvP3b8iTWy65U4DE7oJOcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW1KVEtVMTRyZURNZjdlWTl4Q1dHVkt3WVlBYnJUTVp6WjdRemVlMnVo
ZHAvMC9BRjMwQjc0NUFBQUYzRjc2RkM4OTM1QjJFQjk1MzgwQzRFRTgyNEU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGMzBCNzQ1QUFBRjNGNzZG
Qzg5MzVCMkVCOTUzODBDNEVFODI0RTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FtSlRLVTE0cmVETWY3ZVk5eENXR1ZLd1lZQWJyVE1aelo3UXplZTJ1aGRwLzAv
MzIzODMwMzQzYTM4NjEzMDM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNTMy
MzUzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASKBDANBgkqhkiG9w0BAQsFAAOCAQEAiXFqgW2v
dkCWr1Jwa1m0dSZe/Em31VsgZaYraBna+FnGnXha9avVuBbjSc3RC+82nU9Tbd9V
+SpipMuCFC1eaNfbW+xV8bi53sAvUT3ZkEPk/u1YP2LE/8geOC5qfVq58TAooEAv
yJAbafIXG2zzpYoirvXeKcMZPbaSmO+dBTKAyZzjFDOxnsEv592FlOrcuRt+0ka7
CDruIJmyRluVjTvaHnMu2Xgec8uH8s0rn3siZpqPSNVbG9HReHu2i0V+5bLZp1Yn
nZH1CQFN2yc6Mxu6QvPQT7IG72Sar7eEMgmqaak+Roh0pg2EKW5zBR8ZeP6eO3Jm
LlrIESiF05HzRg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:28:14 2025 by rpki-client