Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/323830343a373563383a3a2f33322d3438203d3e20323731303639.roa
File:                     323830343a373563383a3a2f33322d3438203d3e20323731303639.roa (raw, json)
Hash identifier:          Ig27mVAb3aVxQ66gI8O0Lpe1NsLZLftq67ycMTA1Oto=
Subject key identifier:   98:E6:0E:EA:FA:E9:84:36:C2:25:9A:9B:32:71:D4:11:91:7E:89:B3
Certificate issuer:       /CN=F93F3D20BD13BC9C3A76829F4CD19CF5BE1A2237
Certificate serial:       3E1473904BBBAE92A7D08EE7E29689F19E4845FD
Authority key identifier: F9:3F:3D:20:BD:13:BC:9C:3A:76:82:9F:4C:D1:9C:F5:BE:1A:22:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F93F3D20BD13BC9C3A76829F4CD19CF5BE1A2237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/323830343a373563383a3a2f33322d3438203d3e20323731303639.roa
Signing time:             Mon 13 Oct 2025 12:21:51 +0000
ROA not before:           Mon 13 Oct 2025 12:16:51 +0000
ROA not after:            Mon 12 Oct 2026 12:21:51 +0000
asID:                     271069
IP address blocks:        2804:75c8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/F93F3D20BD13BC9C3A76829F4CD19CF5BE1A2237.crl
                          rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/F93F3D20BD13BC9C3A76829F4CD19CF5BE1A2237.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F93F3D20BD13BC9C3A76829F4CD19CF5BE1A2237.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:14:73:90:4b:bb:ae:92:a7:d0:8e:e7:e2:96:89:f1:9e:48:45:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F93F3D20BD13BC9C3A76829F4CD19CF5BE1A2237
        Validity
            Not Before: Oct 13 12:16:51 2025 GMT
            Not After : Oct 12 12:21:51 2026 GMT
        Subject: CN=98E60EEAFAE98436C2259A9B3271D411917E89B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:26:84:4f:cb:a3:e0:86:57:63:17:ab:6f:
                    dc:90:ea:7c:90:05:37:e5:9d:c3:cf:d1:11:a1:71:
                    57:f3:b3:11:79:89:bd:69:b1:60:c3:9d:68:69:79:
                    73:c0:41:30:98:8f:0b:87:a3:a4:0d:35:73:04:c8:
                    c1:74:c9:b8:61:34:1f:f4:e6:68:de:49:5d:fe:d7:
                    c7:1e:b2:4f:ae:4d:05:c0:af:a6:c0:23:da:d6:7c:
                    95:57:f7:ce:2e:c6:2c:df:e7:8a:6f:17:3e:f1:ea:
                    7e:26:94:55:8a:2b:10:2a:08:0e:c7:7d:0d:30:c0:
                    13:0e:00:2c:09:43:6c:3d:b4:aa:b7:b1:c3:1a:99:
                    ee:fe:98:c4:6b:4f:46:0c:b7:c7:3f:ed:6a:cc:7b:
                    b1:bc:f8:82:11:f5:3c:d8:b5:7f:fa:0c:61:ba:7f:
                    b5:a2:b8:d7:08:83:f1:6d:2b:d7:2c:2d:d9:14:3a:
                    09:d3:e3:de:05:ba:29:08:62:e6:5b:08:8d:17:7b:
                    b3:2a:4a:dc:7f:96:b0:29:74:3a:c9:77:e4:71:09:
                    65:b2:46:b6:d1:b8:67:6f:aa:33:e1:d2:09:77:06:
                    74:1d:84:f3:b4:12:4c:40:4e:60:b2:04:60:cd:15:
                    10:1d:3d:03:87:f7:47:36:ab:07:98:e9:b0:d5:2c:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E6:0E:EA:FA:E9:84:36:C2:25:9A:9B:32:71:D4:11:91:7E:89:B3
            X509v3 Authority Key Identifier:
                keyid:F9:3F:3D:20:BD:13:BC:9C:3A:76:82:9F:4C:D1:9C:F5:BE:1A:22:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/F93F3D20BD13BC9C3A76829F4CD19CF5BE1A2237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F93F3D20BD13BC9C3A76829F4CD19CF5BE1A2237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNFHc1ceHLydoLmVHqcfEBBB4whXw9v7xZkZ7fq9Vi56/0/323830343a373563383a3a2f33322d3438203d3e20323731303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:0a:8e:68:e3:f5:98:4f:b5:f0:83:3f:f6:d6:06:e5:ca:9b:
         b5:86:6e:58:b9:ed:f1:76:2c:e9:07:43:e9:60:14:c4:2a:60:
         de:6e:24:81:a6:a5:c7:8c:5e:36:d1:36:c3:68:08:6b:c6:e8:
         3c:ec:f2:f5:75:1d:dd:ae:68:c1:42:47:eb:42:59:dc:e6:88:
         40:3c:f9:b8:fd:0c:4e:b8:ea:52:45:1b:6a:b0:21:ed:ba:c7:
         fc:77:31:ed:fa:0c:fc:18:0d:97:70:bb:aa:64:f8:ae:e2:e9:
         3b:3e:2c:a6:83:e5:f7:01:f2:6c:7c:b1:2f:e6:fc:40:0d:38:
         9a:03:ee:71:9a:cd:bc:f4:ed:7e:f6:18:ec:00:44:72:07:77:
         87:a5:d9:6b:84:a4:0f:2b:30:c4:0e:19:80:89:67:b6:f1:4c:
         c5:e4:5d:6b:1e:b6:ff:3d:b0:b0:32:04:e7:f3:d0:8b:07:c9:
         cf:59:dc:80:3d:e1:01:7a:82:6a:0f:f8:89:2e:8a:ff:f3:38:
         99:c2:00:59:0a:ba:eb:98:f7:6a:9f:e0:e9:f6:f0:26:45:7c:
         af:8b:ac:75:f1:e1:9b:61:a6:46:f6:9b:8e:32:39:7d:6b:e1:
         1b:c0:17:7d:a2:cf:61:a1:d0:c3:96:dc:74:70:16:3c:9f:29:
         7c:b9:21:66
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUPhRzkEu7rpKn0I7n4paJ8Z5IRf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkzRjNEMjBCRDEzQkM5QzNBNzY4MjlGNENEMTlDRjVC
RTFBMjIzNzAeFw0yNTEwMTMxMjE2NTFaFw0yNjEwMTIxMjIxNTFaMDMxMTAvBgNV
BAMTKDk4RTYwRUVBRkFFOTg0MzZDMjI1OUE5QjMyNzFENDExOTE3RTg5QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0niaET8uj4IZXYxerb9yQ6nyQ
BTflncPP0RGhcVfzsxF5ib1psWDDnWhpeXPAQTCYjwuHo6QNNXMEyMF0ybhhNB/0
5mjeSV3+18cesk+uTQXAr6bAI9rWfJVX984uxizf54pvFz7x6n4mlFWKKxAqCA7H
fQ0wwBMOACwJQ2w9tKq3scMame7+mMRrT0YMt8c/7WrMe7G8+IIR9TzYtX/6DGG6
f7WiuNcIg/FtK9csLdkUOgnT494FuikIYuZbCI0Xe7MqStx/lrApdDrJd+RxCWWy
RrbRuGdvqjPh0gl3BnQdhPO0EkxATmCyBGDNFRAdPQOH90c2qweY6bDVLDrrAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmOYO6vrphDbCJZqbMnHUEZF+ibMwHwYDVR0j
BBgwFoAU+T89IL0TvJw6doKfTNGc9b4aIjcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk5GSGMxY2VITHlkb0xtVkhxY2ZFQkJCNHdoWHc5djd4WmtaN2ZxOVZp
NTYvMC9GOTNGM0QyMEJEMTNCQzlDM0E3NjgyOUY0Q0QxOUNGNUJFMUEyMjM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5M0YzRDIwQkQxM0JDOUMz
QTc2ODI5RjRDRDE5Q0Y1QkUxQTIyMzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JORkhjMWNlSEx5ZG9MbVZIcWNmRUJCQjR3aFh3OXY3eFprWjdmcTlWaTU2LzAv
MzIzODMwMzQzYTM3MzU2MzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzAzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR1yDANBgkqhkiG9w0BAQsFAAOCAQEANwqOaOP1
mE+18IM/9tYG5cqbtYZuWLnt8XYs6QdD6WAUxCpg3m4kgaalx4xeNtE2w2gIa8bo
POzy9XUd3a5owUJH60JZ3OaIQDz5uP0MTrjqUkUbarAh7brH/Hcx7foM/BgNl3C7
qmT4ruLpOz4spoPl9wHybHyxL+b8QA04mgPucZrNvPTtfvYY7ABEcgd3h6XZa4Sk
DyswxA4ZgIlntvFMxeRdax62/z2wsDIE5/PQiwfJz1ncgD3hAXqCag/4iS6K//M4
mcIAWQq665j3ap/g6fbwJkV8r4usdfHhm2GmRvabjjI5fWvhG8AXfaLPYaHQw5bc
dHAWPJ8pfLkhZg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:36 2025 by rpki-client