Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a373030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a373030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          OV6GQCaZ/pbB1E4nERqoyM0R/d88EFkPqED8WJDbmhE=
Subject key identifier:   52:3E:7B:88:A7:D4:06:58:1F:C4:99:75:F3:33:FE:5F:89:A8:B0:36
Certificate issuer:       /CN=199E6A493967FE55BA0140061BC6435DD8779FD9
Certificate serial:       66BE90FDAACC37656A083783A77449B4ACC86001
Authority key identifier: 19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a373030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Fri 17 Oct 2025 12:00:23 +0000
ROA not before:           Fri 17 Oct 2025 11:55:23 +0000
ROA not after:            Fri 16 Oct 2026 12:00:23 +0000
asID:                     267991
IP address blocks:        2804:5654:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:be:90:fd:aa:cc:37:65:6a:08:37:83:a7:74:49:b4:ac:c8:60:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199E6A493967FE55BA0140061BC6435DD8779FD9
        Validity
            Not Before: Oct 17 11:55:23 2025 GMT
            Not After : Oct 16 12:00:23 2026 GMT
        Subject: CN=523E7B88A7D406581FC49975F333FE5F89A8B036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:a1:c8:d1:a9:59:c4:52:f4:02:e9:3f:15:
                    71:40:6b:79:b9:a7:d9:06:b8:d7:93:4a:8c:4a:8f:
                    8e:46:1f:cb:4f:77:3c:e6:3b:fe:7a:a9:43:2e:a6:
                    0d:17:5e:18:34:25:18:0f:eb:00:67:1c:66:6f:05:
                    b9:cf:48:63:21:8f:6a:f8:a2:71:e4:36:39:8c:cf:
                    28:3e:29:7a:2b:91:3f:13:be:ed:a6:f7:04:57:4b:
                    90:07:96:d3:94:cd:0d:6a:36:b3:2c:0c:df:65:95:
                    4a:73:89:bd:8e:45:6b:25:f9:16:71:0b:fe:ec:4a:
                    a9:27:89:3c:8f:b4:8c:41:bb:1c:f1:6e:b5:b2:14:
                    c0:71:fa:21:ef:47:aa:3d:57:7a:13:09:3e:52:82:
                    f5:2a:e5:ef:b8:f9:e2:31:8c:7a:55:6e:15:05:63:
                    93:66:98:00:cd:59:15:95:59:ff:0e:13:04:1e:e6:
                    ae:ca:9e:7f:c0:5e:97:f8:21:2f:5e:d5:4b:00:46:
                    56:70:ba:c4:23:44:40:1d:5e:b0:51:59:3f:e5:0b:
                    c2:0a:d6:01:f7:0a:81:52:ef:e6:35:59:d2:10:21:
                    39:13:d9:1a:1a:a8:7f:fc:0c:d9:45:b1:04:bb:06:
                    32:ce:b9:60:6c:83:fc:b4:7a:d3:1e:2c:d6:4e:4b:
                    47:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3E:7B:88:A7:D4:06:58:1F:C4:99:75:F3:33:FE:5F:89:A8:B0:36
            X509v3 Authority Key Identifier:
                keyid:19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a373030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8d:83:a2:74:ef:41:04:18:c1:29:c4:0c:fc:61:9c:75:eb:47:
         80:b2:79:bd:1c:58:7c:9e:65:f2:84:5b:f4:9b:2e:66:a6:9b:
         0a:bd:99:a3:87:ea:cc:de:66:2b:15:d7:ef:10:5e:aa:56:f5:
         7a:f5:6d:8f:69:88:a1:15:3b:85:4c:25:ab:bd:3c:d0:92:f2:
         82:3c:ee:59:79:86:00:6d:51:a9:81:f4:98:94:d2:d8:ef:2b:
         ca:52:86:76:42:07:92:27:e6:82:8b:37:6f:e5:13:23:f7:60:
         e8:06:4f:3f:95:36:75:66:ba:1e:6a:bf:22:51:63:13:6c:ea:
         fe:6d:e3:11:b8:73:19:a0:aa:f3:e6:6c:a3:d5:4a:98:88:d7:
         25:cf:ba:92:66:3b:9f:d1:b9:96:a1:e3:57:47:3b:77:ef:e1:
         b0:5e:43:b1:6c:6a:d2:e6:78:f0:ad:55:7b:c0:4f:d9:65:b0:
         82:28:5b:6a:7d:15:58:3b:6e:c2:fc:93:2b:2b:02:dc:03:69:
         1c:79:41:c5:0f:af:3e:2d:85:05:4d:28:ed:c4:36:a3:77:55:
         6b:cf:a7:a9:70:d5:02:1a:19:6d:aa:16:8a:0d:8e:98:0c:34:
         ca:85:9e:9c:6e:12:4e:f7:33:7a:e2:7c:48:5f:18:b5:e5:9d:
         09:87:38:a9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZr6Q/arMN2VqCDeDp3RJtKzIYAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk5RTZBNDkzOTY3RkU1NUJBMDE0MDA2MUJDNjQzNURE
ODc3OUZEOTAeFw0yNTEwMTcxMTU1MjNaFw0yNjEwMTYxMjAwMjNaMDMxMTAvBgNV
BAMTKDUyM0U3Qjg4QTdENDA2NTgxRkM0OTk3NUYzMzNGRTVGODlBOEIwMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw5KHI0alZxFL0Auk/FXFAa3m5
p9kGuNeTSoxKj45GH8tPdzzmO/56qUMupg0XXhg0JRgP6wBnHGZvBbnPSGMhj2r4
onHkNjmMzyg+KXorkT8Tvu2m9wRXS5AHltOUzQ1qNrMsDN9llUpzib2ORWsl+RZx
C/7sSqkniTyPtIxBuxzxbrWyFMBx+iHvR6o9V3oTCT5SgvUq5e+4+eIxjHpVbhUF
Y5NmmADNWRWVWf8OEwQe5q7Knn/AXpf4IS9e1UsARlZwusQjREAdXrBRWT/lC8IK
1gH3CoFS7+Y1WdIQITkT2RoaqH/8DNlFsQS7BjLOuWBsg/y0etMeLNZOS0dZAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUUj57iKfUBlgfxJl18zP+X4mosDYwHwYDVR0j
BBgwFoAUGZ5qSTln/lW6AUAGG8ZDXdh3n9kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5
Mk4vMC8xOTlFNkE0OTM5NjdGRTU1QkEwMTQwMDYxQkM2NDM1REQ4Nzc5RkQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5OUU2QTQ5Mzk2N0ZFNTVC
QTAxNDAwNjFCQzY0MzVERDg3NzlGRDkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv
MzIzODMwMzQzYTM1MzYzNTM0M2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM5MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVlRwMA0GCSqGSIb3DQEBCwUA
A4IBAQCNg6J070EEGMEpxAz8YZx160eAsnm9HFh8nmXyhFv0my5mppsKvZmjh+rM
3mYrFdfvEF6qVvV69W2PaYihFTuFTCWrvTzQkvKCPO5ZeYYAbVGpgfSYlNLY7yvK
UoZ2QgeSJ+aCizdv5RMj92DoBk8/lTZ1Zroear8iUWMTbOr+beMRuHMZoKrz5myj
1UqYiNclz7qSZjuf0bmWoeNXRzt37+GwXkOxbGrS5njwrVV7wE/ZZbCCKFtqfRVY
O27C/JMrKwLcA2kceUHFD68+LYUFTSjtxDajd1Vrz6epcNUCGhltqhaKDY6YDDTK
hZ6cbhJO9zN64nxIXxi15Z0Jhzip
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:39:53 2025 by rpki-client