Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a3a2f33332d3333203d3e20323639353032.roa
File:                     323830343a363539383a3a2f33332d3333203d3e20323639353032.roa (raw, json)
Hash identifier:          GRBtY7yiRcaAOsR8JBvfpbHkCvdYu+f2uGojHDSxpQo=
Subject key identifier:   71:03:3D:9A:41:9B:CC:FB:E3:1C:A9:8B:78:4B:31:45:C8:8A:F4:8A
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       7A397696EFECD57436A27B8BCF89E448C81B8234
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a3a2f33332d3333203d3e20323639353032.roa
Signing time:             Sun 28 Sep 2025 23:09:40 +0000
ROA not before:           Sun 28 Sep 2025 23:04:40 +0000
ROA not after:            Sun 27 Sep 2026 23:09:40 +0000
asID:                     269502
IP address blocks:        2804:6598::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:39:76:96:ef:ec:d5:74:36:a2:7b:8b:cf:89:e4:48:c8:1b:82:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: Sep 28 23:04:40 2025 GMT
            Not After : Sep 27 23:09:40 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e1:78:83:cf:24:72:66:e7:12:28:19:34:e7:
                    02:fc:50:71:30:9c:6f:7d:51:3b:19:c9:34:16:82:
                    d9:c1:6e:fb:e1:b6:91:84:00:d4:fb:11:fd:96:eb:
                    0d:6d:81:f0:df:88:51:c1:28:37:f9:4b:eb:72:83:
                    72:5e:c8:9b:21:f4:a5:f0:ec:ee:60:7d:fa:da:54:
                    4f:34:8c:79:e5:4a:52:ed:01:de:fd:11:c4:7e:6d:
                    38:0c:9b:98:45:6f:7d:6b:d8:2a:11:4e:2a:87:1a:
                    41:c6:c9:9a:4a:2f:86:38:cd:c7:34:9b:68:cb:55:
                    c7:61:e8:24:46:ba:43:d8:ed:b9:a1:78:06:4a:ef:
                    73:de:4b:f1:64:bd:3d:72:10:d7:22:30:6d:87:8a:
                    66:a2:e4:51:78:5e:ef:a9:3e:d4:3f:71:16:7e:a2:
                    5f:47:6e:fe:26:32:06:bd:3d:d8:fa:80:2f:59:f1:
                    bc:b9:9b:a8:ba:4e:01:28:ca:dc:56:9f:60:c6:36:
                    d3:7b:a5:7f:50:e6:9b:87:18:c9:23:53:08:bd:ff:
                    dc:4e:82:8a:ae:dd:80:d5:f1:5d:b5:e6:fe:52:41:
                    fc:33:7e:f8:1c:23:d2:92:68:74:e0:9e:79:5e:b6:
                    99:4a:56:96:57:7b:4b:ca:57:2a:e2:7f:cf:8e:f6:
                    e5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:03:3D:9A:41:9B:CC:FB:E3:1C:A9:8B:78:4B:31:45:C8:8A:F4:8A
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a3a2f33332d3333203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598::/33

    Signature Algorithm: sha256WithRSAEncryption
         a0:f5:1d:eb:2b:56:3a:63:57:18:20:40:53:0d:97:74:c4:b8:
         98:43:18:a6:86:60:18:9b:77:69:51:2e:ca:16:f7:8b:3d:4d:
         67:e5:10:ea:ab:fa:34:6c:25:38:ad:18:a9:e0:02:6f:10:28:
         5d:f3:6a:e8:b1:67:75:a3:49:1b:c6:6b:42:8c:8b:8f:33:dc:
         bb:6e:87:f0:a8:70:75:3c:fe:0b:e0:12:52:6e:11:16:99:59:
         14:94:ea:28:0d:5c:af:6b:45:81:8a:93:6b:0e:d2:0e:a8:97:
         3a:bb:40:08:ce:29:47:2f:d2:a8:ff:46:7c:a4:bf:52:4f:dd:
         64:44:61:e9:0f:dd:83:b9:9f:52:6f:fb:9d:bf:95:75:55:85:
         f9:36:f2:e8:95:62:25:9c:54:98:4c:64:7e:66:b4:30:6d:f6:
         e9:9d:44:fe:66:f1:ff:69:34:2b:ab:62:06:f0:bd:3a:fc:ff:
         83:74:ca:c9:0b:8d:80:cb:d3:6f:3e:7c:2b:d2:f1:71:76:6d:
         a3:71:5c:00:b2:7a:21:79:f0:b6:b9:4e:d6:9f:a9:98:42:bd:
         34:06:28:cd:6b:f0:4d:c6:52:47:b9:d3:37:d1:02:3c:6b:dd:
         ff:2f:4b:c8:cf:86:9d:14:29:ce:bd:4c:21:52:1c:b0:bd:48:
         54:44:c6:34
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUejl2lu/s1XQ2onuLz4nkSMgbgjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIxNDE0NDFEMjJBNDk3QTFCRjVBREI1ODBBMjE4NjM3
OTMwRkE5NTAeFw0yNTA5MjgyMzA0NDBaFw0yNjA5MjcyMzA5NDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRENFMTc4ODNDRjI0NzI2NkU3
MTIyODE5MzRFNzAyRkM1MDcxMzA5QzZGN0Q1MTNCMTlDOTM0MTY4MkQ5QzE2RUZC
RTFCNjkxODQwMEQ0RkIxMUZEOTZFQjBENkQ4MUYwREY4ODUxQzEyODM3Rjk0QkVC
NzI4MzcyNUVDODlCMjFGNEE1RjBFQ0VFNjA3REZBREE1NDRGMzQ4Qzc5RTU0QTUy
RUQwMURFRkQxMUM0N0U2RDM4MEM5Qjk4NDU2RjdENkJEODJBMTE0RTJBODcxQTQx
QzZDOTlBNEEyRjg2MzhDREM3MzQ5QjY4Q0I1NUM3NjFFODI0NDZCQTQzRDhFREI5
QTE3ODA2NEFFRjczREU0QkYxNjRCRDNENzIxMEQ3MjIzMDZEODc4QTY2QTJFNDUx
Nzg1RUVGQTkzRUQ0M0Y3MTE2N0VBMjVGNDc2RUZFMjYzMjA2QkQzREQ4RkE4MDJG
NTlGMUJDQjk5QkE4QkE0RTAxMjhDQURDNTY5RjYwQzYzNkQzN0JBNTdGNTBFNjlC
ODcxOEM5MjM1MzA4QkRGRkRDNEU4MjhBQUVERDgwRDVGMTVEQjVFNkZFNTI0MUZD
MzM3RUY4MUMyM0QyOTI2ODc0RTA5RTc5NUVCNjk5NEE1Njk2NTc3QjRCQ0E1NzJB
RTI3RkNGOEVGNkU1MEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3OF4g88kcmbnEigZNOcC/FBxMJxvfVE7Gck0FoLZwW774baRhADU
+xH9lusNbYHw34hRwSg3+UvrcoNyXsibIfSl8OzuYH362lRPNIx55UpS7QHe/RHE
fm04DJuYRW99a9gqEU4qhxpBxsmaSi+GOM3HNJtoy1XHYegkRrpD2O25oXgGSu9z
3kvxZL09chDXIjBth4pmouRReF7vqT7UP3EWfqJfR27+JjIGvT3Y+oAvWfG8uZuo
uk4BKMrcVp9gxjbTe6V/UOabhxjJI1MIvf/cToKKrt2A1fFdteb+UkH8M374HCPS
kmh04J55XraZSlaWV3tLylcq4n/PjvblDQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHEDPZpBm8z74xypi3hLMUXIivSKMB8GA1UdIwQYMBaAFLsUFEHSKkl6G/WttYCi
GGN5MPqVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JScjlIS1Q4RUU5SlRa
TGpSaVVCcVNGRjlnTVdUYWVkQXJuU3lEQXE1YkprLzEvQkIxNDE0NDFEMjJBNDk3
QTFCRjVBREI1ODBBMjE4NjM3OTMwRkE5NS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CQjE0MTQ0MUQyMkE0OTdBMUJGNUFEQjU4MEEyMTg2Mzc5MzBG
QTk1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CUnI5SEtUOEVFOUpUWkxqUmlV
QnFTRkY5Z01XVGFlZEFyblN5REFxNWJKay8xLzMyMzgzMDM0M2EzNjM1MzkzODNh
M2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzOTM1MzAzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygE
ZZgAMA0GCSqGSIb3DQEBCwUAA4IBAQCg9R3rK1Y6Y1cYIEBTDZd0xLiYQximhmAY
m3dpUS7KFveLPU1n5RDqq/o0bCU4rRip4AJvEChd82rosWd1o0kbxmtCjIuPM9y7
bofwqHB1PP4L4BJSbhEWmVkUlOooDVyva0WBipNrDtIOqJc6u0AIzilHL9Ko/0Z8
pL9ST91kRGHpD92DuZ9Sb/udv5V1VYX5NvLolWIlnFSYTGR+ZrQwbfbpnUT+ZvH/
aTQrq2IG8L06/P+DdMrJC42Ay9NvPnwr0vFxdm2jcVwAsnohefC2uU7Wn6mYQr00
BijNa/BNxlJHudM30QI8a93/L0vIz4adFCnOvUwhUhywvUhURMY0
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:07 2025 by rpki-client