Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/323830343a353633303a383030303a3a2f33342d3334203d3e20323637393832.roa
File:                     323830343a353633303a383030303a3a2f33342d3334203d3e20323637393832.roa (raw, json)
Hash identifier:          e2Pv5RMrLEWnZedVRmHvF3K76dksCIU3TDeqXumy11A=
Subject key identifier:   A5:D0:61:18:B2:87:DD:8C:A9:7A:FB:E5:7F:62:47:E3:50:1C:E0:FD
Certificate issuer:       /CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
Certificate serial:       665A6716454B1ADB26EEDA27B55F8F989C29F432
Authority key identifier: 29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/323830343a353633303a383030303a3a2f33342d3334203d3e20323637393832.roa
Signing time:             Tue 30 Sep 2025 19:05:38 +0000
ROA not before:           Tue 30 Sep 2025 19:00:38 +0000
ROA not after:            Tue 29 Sep 2026 19:05:38 +0000
asID:                     267982
IP address blocks:        2804:5630:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl
                          rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5a:67:16:45:4b:1a:db:26:ee:da:27:b5:5f:8f:98:9c:29:f4:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296992941BF10D571CBDC8A16F88FF51FAD9B52C
        Validity
            Not Before: Sep 30 19:00:38 2025 GMT
            Not After : Sep 29 19:05:38 2026 GMT
        Subject: CN=A5D06118B287DD8CA97AFBE57F6247E3501CE0FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:16:9c:f0:fa:68:13:c3:eb:be:2d:dd:66:
                    9d:5a:a5:e4:c7:4e:a7:2e:4f:87:2e:04:e6:27:d2:
                    da:0a:89:98:6f:36:8a:6b:af:61:8b:9b:56:e8:a0:
                    53:fc:17:01:23:6e:a2:16:bd:a0:f0:55:b6:ee:6e:
                    2d:19:19:b3:65:7b:62:a3:80:1f:d9:17:91:aa:21:
                    21:d9:61:b7:95:e2:31:95:f2:8e:4e:99:18:81:37:
                    81:2a:f6:82:f7:09:5a:78:15:e7:85:2f:fc:5e:73:
                    0f:e2:72:1a:0e:d5:4f:b8:a1:ad:d0:18:4b:90:52:
                    fe:37:87:36:01:f7:87:ee:81:21:f8:64:a4:ce:2e:
                    ed:66:a0:be:94:05:59:3e:9d:d7:4c:29:9c:fe:b3:
                    9d:f5:8b:e2:b3:50:5a:f8:b5:ca:f9:67:a6:08:c8:
                    3a:2c:d9:60:ba:b9:f7:db:4e:7d:8d:89:8c:ff:fa:
                    fe:5d:e9:5e:67:2a:be:1b:67:fa:1a:cf:09:e6:55:
                    2a:1d:41:8c:93:69:dc:e1:17:70:00:7b:f0:9a:9f:
                    63:94:b4:50:d0:d6:e1:e5:d5:78:fa:73:e9:e7:c8:
                    70:bb:00:04:96:f9:86:39:2e:52:ac:cc:06:45:8c:
                    06:cb:a8:51:96:62:15:b3:4c:74:8d:16:99:d8:fe:
                    17:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D0:61:18:B2:87:DD:8C:A9:7A:FB:E5:7F:62:47:E3:50:1C:E0:FD
            X509v3 Authority Key Identifier:
                keyid:29:69:92:94:1B:F1:0D:57:1C:BD:C8:A1:6F:88:FF:51:FA:D9:B5:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/296992941BF10D571CBDC8A16F88FF51FAD9B52C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296992941BF10D571CBDC8A16F88FF51FAD9B52C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/323830343a353633303a383030303a3a2f33342d3334203d3e20323637393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5630:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         24:16:b1:86:7d:db:16:ab:fc:16:18:cf:ba:a3:47:b5:b6:37:
         47:dc:88:94:40:1d:30:09:a4:db:de:dc:b8:dc:f0:26:ce:f4:
         ed:38:56:d4:4c:74:57:d1:10:19:98:03:60:16:2c:5a:0b:c9:
         94:d4:1a:ad:23:6f:e8:19:23:ae:dd:16:c0:8f:b7:97:c0:d6:
         61:2a:b5:fb:18:3d:89:d5:c1:ed:b5:43:d0:25:3c:b7:15:02:
         17:67:ae:38:ed:6f:97:ea:c0:3e:bc:7a:ee:2b:22:8d:de:a3:
         bb:8a:00:7b:0c:57:c0:12:f7:66:7f:91:d3:a0:fb:35:2d:02:
         18:c4:c4:03:5a:67:1c:14:24:1d:67:0c:13:65:25:93:98:97:
         72:30:8c:55:77:9c:ca:09:46:4e:0f:ab:c6:a3:13:63:18:8f:
         90:23:6a:0a:b8:de:50:54:48:38:3b:91:c5:25:e0:90:41:1e:
         65:5c:60:48:88:e7:26:c1:14:a3:7e:43:18:3c:88:3b:6d:a7:
         c9:8b:ea:5b:94:bd:67:5e:ec:fb:e8:74:cd:86:83:6c:56:d7:
         ad:9c:04:69:cd:5c:11:93:b7:06:2b:d4:a2:4d:a0:ce:c8:65:
         a8:20:ee:fe:d8:56:d3:07:20:71:36:c0:97:91:61:d7:e2:2e:
         09:47:e3:35
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZlpnFkVLGtsm7tontV+PmJwp9DIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk2OTkyOTQxQkYxMEQ1NzFDQkRDOEExNkY4OEZGNTFG
QUQ5QjUyQzAeFw0yNTA5MzAxOTAwMzhaFw0yNjA5MjkxOTA1MzhaMDMxMTAvBgNV
BAMTKEE1RDA2MTE4QjI4N0REOENBOTdBRkJFNTdGNjI0N0UzNTAxQ0UwRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0hac8PpoE8Prvi3dZp1apeTH
TqcuT4cuBOYn0toKiZhvNoprr2GLm1booFP8FwEjbqIWvaDwVbbubi0ZGbNle2Kj
gB/ZF5GqISHZYbeV4jGV8o5OmRiBN4Eq9oL3CVp4FeeFL/xecw/ichoO1U+4oa3Q
GEuQUv43hzYB94fugSH4ZKTOLu1moL6UBVk+nddMKZz+s531i+KzUFr4tcr5Z6YI
yDos2WC6uffbTn2NiYz/+v5d6V5nKr4bZ/oazwnmVSodQYyTadzhF3AAe/Can2OU
tFDQ1uHl1Xj6c+nnyHC7AASW+YY5LlKszAZFjAbLqFGWYhWzTHSNFpnY/hd7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUpdBhGLKH3Yypevvlf2JH41Ac4P0wHwYDVR0j
BBgwFoAUKWmSlBvxDVccvcihb4j/UfrZtSwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2RwRm9lYThrUVlaakpoUnJ2V2syODU3WDhMOFRjWnJmWm9iSGVZYWZa
SzMvMC8yOTY5OTI5NDFCRjEwRDU3MUNCREM4QTE2Rjg4RkY1MUZBRDlCNTJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5Njk5Mjk0MUJGMTBENTcx
Q0JEQzhBMTZGODhGRjUxRkFEOUI1MkMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NkcEZvZWE4a1FZWmpKaFJydldrMjg1N1g4TDhUY1pyZlpvYkhlWWFmWkszLzAv
MzIzODMwMzQzYTM1MzYzMzMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM5MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEVjCAMA0GCSqGSIb3DQEBCwUA
A4IBAQAkFrGGfdsWq/wWGM+6o0e1tjdH3IiUQB0wCaTb3ty43PAmzvTtOFbUTHRX
0RAZmANgFixaC8mU1BqtI2/oGSOu3RbAj7eXwNZhKrX7GD2J1cHttUPQJTy3FQIX
Z6447W+X6sA+vHruKyKN3qO7igB7DFfAEvdmf5HToPs1LQIYxMQDWmccFCQdZwwT
ZSWTmJdyMIxVd5zKCUZOD6vGoxNjGI+QI2oKuN5QVEg4O5HFJeCQQR5lXGBIiOcm
wRSjfkMYPIg7bafJi+pblL1nXuz76HTNhoNsVtetnARpzVwRk7cGK9SiTaDOyGWo
IO7+2FbTByBxNsCXkWHX4i4JR+M1
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:12:39 2025 by rpki-client