Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a3a2f33322d313238203d3e20323634333539.roa
File:                     323830343a316434633a3a2f33322d313238203d3e20323634333539.roa (raw, json)
Hash identifier:          LJc9F/rdI0A/fWPLthU3fQtKuqKNZPen5dAAJ4C7zoI=
Subject key identifier:   66:43:BB:C4:4D:BE:49:EB:94:46:C9:5B:2D:F0:EB:5C:1D:D0:CE:E0
Certificate issuer:       /CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
Certificate serial:       3B280C08288537849A6E21899D2536AC9DEE7CAA
Authority key identifier: 5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a3a2f33322d313238203d3e20323634333539.roa
Signing time:             Mon 25 Aug 2025 18:53:08 +0000
ROA not before:           Mon 25 Aug 2025 18:48:08 +0000
ROA not after:            Mon 24 Aug 2026 18:53:08 +0000
asID:                     264359
IP address blocks:        2804:1d4c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl
                          rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 20:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:28:0c:08:28:85:37:84:9a:6e:21:89:9d:25:36:ac:9d:ee:7c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
        Validity
            Not Before: Aug 25 18:48:08 2025 GMT
            Not After : Aug 24 18:53:08 2026 GMT
        Subject: CN=6643BBC44DBE49EB9446C95B2DF0EB5C1DD0CEE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:71:29:8e:0d:81:e4:09:3d:74:88:99:20:77:
                    b5:48:19:9a:8f:b7:0f:98:67:a1:db:5b:b1:d7:24:
                    15:27:8e:c3:91:95:68:5f:76:b9:01:6b:d8:ed:64:
                    00:f3:21:df:68:18:b2:08:a0:f1:6d:21:64:ab:3f:
                    87:bc:1a:3c:2d:57:01:b1:7a:2c:38:78:27:a2:dd:
                    9f:33:b4:a0:de:d6:60:0b:d3:d3:ba:fc:69:7e:40:
                    29:95:3b:19:d3:1b:9e:ed:55:04:31:60:a0:51:b8:
                    a0:ca:36:11:44:c9:5f:4c:74:f0:72:91:1f:78:8d:
                    e3:36:47:8f:5e:d1:8d:ba:48:f9:8a:95:76:bb:02:
                    71:d5:82:e1:68:10:4e:cf:f8:3a:21:37:2b:5d:19:
                    c5:df:fc:ff:5f:66:d3:f0:cc:20:ae:75:92:88:46:
                    df:5c:97:06:df:97:0e:c9:ff:47:19:44:ec:d6:ed:
                    a0:19:0d:84:e2:c7:d2:8e:ba:2a:62:33:7e:91:23:
                    01:ae:fa:12:8a:48:7a:30:e7:7d:2c:39:40:ca:6b:
                    63:c9:03:90:26:a2:69:d8:aa:ec:54:22:50:34:c0:
                    68:41:7d:df:a3:99:2a:9f:72:a4:a4:30:8f:ff:fd:
                    68:e0:47:bc:0d:48:61:b7:d6:fa:5d:97:d5:fa:19:
                    5e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:43:BB:C4:4D:BE:49:EB:94:46:C9:5B:2D:F0:EB:5C:1D:D0:CE:E0
            X509v3 Authority Key Identifier:
                keyid:5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a3a2f33322d313238203d3e20323634333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:b5:66:6c:40:8d:f7:3a:67:dc:5f:66:82:cc:af:bb:2e:a5:
         b3:19:77:aa:3a:58:0a:84:eb:48:92:21:9c:5f:aa:e4:5f:07:
         06:59:65:26:f0:5c:ed:f2:d4:92:c6:91:ec:2b:76:cf:01:2f:
         22:5b:27:a9:93:01:03:e2:64:72:25:c2:a6:67:e9:f7:36:72:
         9a:d0:03:ef:17:f2:ba:87:28:76:5e:0e:59:ab:67:62:55:cc:
         cc:2f:3c:98:30:cb:17:11:42:e4:77:a0:fe:59:c1:45:dd:98:
         3f:0a:c5:ff:a2:fd:16:76:0d:4f:d7:15:21:d2:74:dc:b6:70:
         1a:96:db:78:5b:5f:5a:9f:7a:32:58:c2:c9:f5:2c:6a:dc:1f:
         c5:fb:cc:f4:86:8d:49:db:0b:7d:18:55:3f:0f:0f:d8:6f:e6:
         3d:cf:94:03:e9:4e:70:6c:c0:88:ae:3f:59:c4:9b:68:08:c2:
         d8:ae:ec:1f:15:4a:16:6c:3e:0d:43:9f:2c:42:81:c0:05:82:
         cd:8d:68:53:17:7e:de:c6:45:22:db:09:63:e9:14:4a:3b:97:
         8f:97:4d:65:ab:b6:d7:14:1b:e2:16:24:6c:b3:02:76:d9:1e:
         40:c0:fc:9c:1c:d0:3a:d5:d2:96:25:8e:0c:4f:6f:7d:d3:45:
         8a:bb:9a:60
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUOygMCCiFN4SabiGJnSU2rJ3ufKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUUwQjM2NjFCMTJGOUUxQkU4QjZFNEM2MjhDMjE0QUM2
OTQzN0M1RDAeFw0yNTA4MjUxODQ4MDhaFw0yNjA4MjQxODUzMDhaMDMxMTAvBgNV
BAMTKDY2NDNCQkM0NERCRTQ5RUI5NDQ2Qzk1QjJERjBFQjVDMUREMENFRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDecSmODYHkCT10iJkgd7VIGZqP
tw+YZ6HbW7HXJBUnjsORlWhfdrkBa9jtZADzId9oGLIIoPFtIWSrP4e8GjwtVwGx
eiw4eCei3Z8ztKDe1mAL09O6/Gl+QCmVOxnTG57tVQQxYKBRuKDKNhFEyV9MdPBy
kR94jeM2R49e0Y26SPmKlXa7AnHVguFoEE7P+DohNytdGcXf/P9fZtPwzCCudZKI
Rt9clwbflw7J/0cZROzW7aAZDYTix9KOuipiM36RIwGu+hKKSHow530sOUDKa2PJ
A5AmomnYquxUIlA0wGhBfd+jmSqfcqSkMI///WjgR7wNSGG31vpdl9X6GV5lAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUZkO7xE2+SeuURslbLfDrXB3QzuAwHwYDVR0j
BBgwFoAUXgs2YbEvnhvotuTGKMIUrGlDfF0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0RtWDE1QnhiWnoyNEduN1VvTkJ5cmdaUndkcXFMak40cU1VczRjTnNn
UGEvMC81RTBCMzY2MUIxMkY5RTFCRThCNkU0QzYyOEMyMTRBQzY5NDM3QzVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFMEIzNjYxQjEyRjlFMUJF
OEI2RTRDNjI4QzIxNEFDNjk0MzdDNUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NEbVgxNUJ4Ylp6MjRHbjdVb05CeXJnWlJ3ZHFxTGpONHFNVXM0Y05zZ1BhLzAv
MzIzODMwMzQzYTMxNjQzNDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzMzM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBB1MMA0GCSqGSIb3DQEBCwUAA4IBAQArtWZs
QI33OmfcX2aCzK+7LqWzGXeqOlgKhOtIkiGcX6rkXwcGWWUm8Fzt8tSSxpHsK3bP
AS8iWyepkwED4mRyJcKmZ+n3NnKa0APvF/K6hyh2Xg5Zq2diVczMLzyYMMsXEULk
d6D+WcFF3Zg/CsX/ov0Wdg1P1xUh0nTctnAaltt4W19an3oyWMLJ9Sxq3B/F+8z0
ho1J2wt9GFU/Dw/Yb+Y9z5QD6U5wbMCIrj9ZxJtoCMLYruwfFUoWbD4NQ58sQoHA
BYLNjWhTF37exkUi2wlj6RRKO5ePl01lq7bXFBviFiRsswJ22R5AwPycHNA61dKW
JY4MT29900WKu5pg
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:34:36 2025 by rpki-client