Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/323830343a3263383a3a2f33322d3438203d3e20323632383337.roa
File:                     323830343a3263383a3a2f33322d3438203d3e20323632383337.roa (raw, json)
Hash identifier:          aeR/pM7ntyXbPYs+rb7j2m/EVHV+ZbZoIaIwwWiMGCA=
Subject key identifier:   CE:B9:F9:04:FC:7B:F1:F0:72:12:1D:55:6F:DC:5C:E7:C3:06:25:FC
Certificate issuer:       /CN=8141E7C75D3371F4891856DDE87486ECDF37AC3B
Certificate serial:       2743F71BC05FDD1FEFA227D85F15D6DF543C7431
Authority key identifier: 81:41:E7:C7:5D:33:71:F4:89:18:56:DD:E8:74:86:EC:DF:37:AC:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8141E7C75D3371F4891856DDE87486ECDF37AC3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/323830343a3263383a3a2f33322d3438203d3e20323632383337.roa
Signing time:             Wed 01 Oct 2025 17:29:24 +0000
ROA not before:           Wed 01 Oct 2025 17:24:24 +0000
ROA not after:            Wed 30 Sep 2026 17:29:24 +0000
asID:                     262837
IP address blocks:        2804:2c8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/8141E7C75D3371F4891856DDE87486ECDF37AC3B.crl
                          rsync://rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/8141E7C75D3371F4891856DDE87486ECDF37AC3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8141E7C75D3371F4891856DDE87486ECDF37AC3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:43:f7:1b:c0:5f:dd:1f:ef:a2:27:d8:5f:15:d6:df:54:3c:74:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8141E7C75D3371F4891856DDE87486ECDF37AC3B
        Validity
            Not Before: Oct  1 17:24:24 2025 GMT
            Not After : Sep 30 17:29:24 2026 GMT
        Subject: CN=CEB9F904FC7BF1F072121D556FDC5CE7C30625FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:ce:07:38:73:0b:27:7f:a8:8c:64:36:b2:
                    93:fd:ee:d0:9d:28:7a:d5:0a:dc:4e:88:de:9c:42:
                    b0:d0:42:9e:6b:9f:5e:70:3d:98:d5:53:03:b5:74:
                    f6:1f:e5:6e:4f:b1:04:df:d4:93:99:bd:fb:b7:47:
                    0e:03:47:0f:d9:2d:32:dd:e8:4c:d8:48:67:f8:74:
                    e0:d2:26:64:b9:2e:00:e8:18:45:ce:4b:02:c0:18:
                    ef:2b:8d:a0:a2:6e:90:26:42:c0:89:f4:fc:4b:65:
                    d7:54:b8:d4:83:02:02:69:c2:59:f9:38:66:cd:5d:
                    02:d3:86:d3:2f:95:31:9e:05:74:2f:55:c4:51:71:
                    91:50:88:01:2b:08:6e:06:e6:87:11:43:e0:9a:f4:
                    48:3c:35:3a:ea:d8:62:77:a5:e5:86:01:28:33:27:
                    ed:7c:2e:eb:78:ba:c3:48:6b:30:27:95:6d:c6:22:
                    6f:ac:db:37:c5:87:e8:78:fa:13:ca:59:35:25:8a:
                    83:1d:6d:5d:10:62:c4:77:ce:76:d2:b0:fa:af:c9:
                    dd:86:ce:d8:a8:37:b3:5a:22:7d:4f:79:e4:9f:76:
                    79:b7:e6:31:3e:f9:87:bf:26:62:a0:6f:d8:94:40:
                    05:06:4f:6f:7e:26:46:63:f6:52:e8:bf:4e:e4:03:
                    23:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B9:F9:04:FC:7B:F1:F0:72:12:1D:55:6F:DC:5C:E7:C3:06:25:FC
            X509v3 Authority Key Identifier:
                keyid:81:41:E7:C7:5D:33:71:F4:89:18:56:DD:E8:74:86:EC:DF:37:AC:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/8141E7C75D3371F4891856DDE87486ECDF37AC3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8141E7C75D3371F4891856DDE87486ECDF37AC3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/323830343a3263383a3a2f33322d3438203d3e20323632383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:3c:61:e3:81:5e:81:80:e8:17:e0:79:ef:1b:4a:48:0a:90:
         4d:1e:d9:eb:e8:88:b9:8d:ae:01:70:e0:84:75:44:b4:8e:92:
         0e:9f:4d:25:39:95:8b:8c:52:cf:b6:bf:b8:f2:fb:98:09:87:
         36:c5:b6:1a:0b:29:0e:d9:b0:14:00:8f:d8:39:f2:e3:5d:b6:
         2a:d5:fd:1d:3e:8a:20:f2:6b:6f:95:a3:6e:61:8c:b4:c5:98:
         ad:03:03:56:32:cc:b9:73:4f:27:90:33:9e:23:ca:b3:fa:90:
         17:16:1a:17:ba:fb:36:0a:17:fd:7b:5b:20:88:d7:1b:33:a4:
         c9:ed:b9:9a:5c:8f:22:f6:7b:49:1f:ec:f9:2c:4b:44:d5:67:
         6e:e5:f5:28:c6:ef:46:e5:cb:13:2e:05:29:99:ea:e3:18:e0:
         e2:1c:ef:29:a8:f0:2b:84:d5:37:e6:2d:de:51:77:67:c2:e2:
         36:e9:bb:5a:e3:15:26:d4:75:cf:50:a5:a5:b9:15:47:95:e7:
         10:5a:82:16:c0:c6:9d:f7:75:35:a6:33:9e:41:bb:e3:87:41:
         4d:24:6d:61:8b:8c:7f:a2:1d:7c:13:65:f8:86:c1:97:80:cf:
         ae:3d:89:43:6a:35:68:bd:a7:c1:e1:65:8b:d5:b3:4b:0b:61:
         b7:fa:1f:b3
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJ0P3G8Bf3R/voifYXxXW31Q8dDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE0MUU3Qzc1RDMzNzFGNDg5MTg1NkRERTg3NDg2RUNE
RjM3QUMzQjAeFw0yNTEwMDExNzI0MjRaFw0yNjA5MzAxNzI5MjRaMDMxMTAvBgNV
BAMTKENFQjlGOTA0RkM3QkYxRjA3MjEyMUQ1NTZGREM1Q0U3QzMwNjI1RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLE84HOHMLJ3+ojGQ2spP97tCd
KHrVCtxOiN6cQrDQQp5rn15wPZjVUwO1dPYf5W5PsQTf1JOZvfu3Rw4DRw/ZLTLd
6EzYSGf4dODSJmS5LgDoGEXOSwLAGO8rjaCibpAmQsCJ9PxLZddUuNSDAgJpwln5
OGbNXQLThtMvlTGeBXQvVcRRcZFQiAErCG4G5ocRQ+Ca9Eg8NTrq2GJ3peWGASgz
J+18Lut4usNIazAnlW3GIm+s2zfFh+h4+hPKWTUlioMdbV0QYsR3znbSsPqvyd2G
ztioN7NaIn1PeeSfdnm35jE++Ye/JmKgb9iUQAUGT29+JkZj9lLov07kAyNlAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUzrn5BPx78fByEh1Vb9xc58MGJfwwHwYDVR0j
BBgwFoAUgUHnx10zcfSJGFbd6HSG7N83rDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW51alpNdjZ1MXpvVFhnVTVtUEVnVUJLRVpxSHBkVlVnU0NjbkNHN05U
S00vMC84MTQxRTdDNzVEMzM3MUY0ODkxODU2RERFODc0ODZFQ0RGMzdBQzNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxNDFFN0M3NUQzMzcxRjQ4
OTE4NTZEREU4NzQ4NkVDREYzN0FDM0IuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FudWpaTXY2dTF6b1RYZ1U1bVBFZ1VCS0VacUhwZFZVZ1NDY25DRzdOVEtNLzAv
MzIzODMwMzQzYTMyNjMzODNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjM4
MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEAsgwDQYJKoZIhvcNAQELBQADggEBAI08YeOBXoGA
6Bfgee8bSkgKkE0e2evoiLmNrgFw4IR1RLSOkg6fTSU5lYuMUs+2v7jy+5gJhzbF
thoLKQ7ZsBQAj9g58uNdtirV/R0+iiDya2+Vo25hjLTFmK0DA1YyzLlzTyeQM54j
yrP6kBcWGhe6+zYKF/17WyCI1xszpMntuZpcjyL2e0kf7PksS0TVZ27l9SjG70bl
yxMuBSmZ6uMY4OIc7ymo8CuE1TfmLd5Rd2fC4jbpu1rjFSbUdc9QpaW5FUeV5xBa
ghbAxp33dTWmM55Bu+OHQU0kbWGLjH+iHXwTZfiGwZeAz649iUNqNWi9p8HhZYvV
s0sLYbf6H7M=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:30:59 2025 by rpki-client