Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a383030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a383030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          v2UHTYRDT2OrDw9CJXgGhoN6kM7fdjkFr7yya3dtRx0=
Subject key identifier:   9C:BF:26:03:D9:BD:1D:C0:92:3D:9D:56:4D:80:01:69:10:00:BE:6D
Certificate issuer:       /CN=199E6A493967FE55BA0140061BC6435DD8779FD9
Certificate serial:       613BC832CDA0995D799F0E2DE7690D87B11840D1
Authority key identifier: 19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a383030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Fri 17 Oct 2025 12:00:21 +0000
ROA not before:           Fri 17 Oct 2025 11:55:21 +0000
ROA not after:            Fri 16 Oct 2026 12:00:21 +0000
asID:                     267991
IP address blocks:        2804:5654:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3b:c8:32:cd:a0:99:5d:79:9f:0e:2d:e7:69:0d:87:b1:18:40:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199E6A493967FE55BA0140061BC6435DD8779FD9
        Validity
            Not Before: Oct 17 11:55:21 2025 GMT
            Not After : Oct 16 12:00:21 2026 GMT
        Subject: CN=9CBF2603D9BD1DC0923D9D564D8001691000BE6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:26:03:0e:a1:4a:18:da:a1:19:2f:b3:74:83:
                    46:d9:f0:90:81:b7:af:d9:1c:88:29:ca:84:0a:ab:
                    00:69:2e:e9:d3:e8:15:e0:5b:12:fe:dc:a0:8a:3d:
                    d2:23:39:e2:fc:16:7e:00:61:ed:83:c1:ae:0a:8c:
                    a9:54:7a:f6:36:df:83:a2:1d:53:ac:8f:73:19:7b:
                    ab:70:a4:08:ed:0e:0d:e0:0f:29:3a:89:2c:82:e9:
                    fd:6d:6b:cf:e0:25:0c:54:ad:5f:8b:dd:9d:92:a5:
                    a6:bd:aa:d6:b2:6b:27:b4:a1:50:8f:fd:d5:f0:6f:
                    c7:5c:3f:58:9f:dd:82:f7:dc:d3:c3:1a:85:23:18:
                    3c:d9:61:af:c5:f7:c5:e6:04:60:af:c8:62:b1:27:
                    7b:e5:51:76:60:23:14:91:90:4c:6a:31:e9:79:f6:
                    ca:0a:7e:31:97:6b:77:16:f1:f6:62:85:3d:e3:a1:
                    c8:25:29:5b:9f:19:9e:12:45:5d:b6:cd:06:f4:5f:
                    f5:54:44:65:cd:fc:d0:61:bb:6d:88:66:8f:73:3b:
                    30:1a:db:1b:80:75:72:00:63:5b:fa:1f:ba:a9:ea:
                    8a:90:5e:1c:82:49:dd:6a:fb:ab:e6:5e:c1:e9:70:
                    9c:19:3e:0c:c1:72:ff:d0:8a:f7:a6:42:a3:f5:09:
                    09:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BF:26:03:D9:BD:1D:C0:92:3D:9D:56:4D:80:01:69:10:00:BE:6D
            X509v3 Authority Key Identifier:
                keyid:19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a383030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         90:55:c3:61:a8:b7:21:e1:95:05:5b:50:f6:58:1d:15:72:7f:
         bc:84:65:d0:0e:2a:a2:c8:83:b1:7a:83:f9:70:9b:4b:bf:0a:
         bd:e2:76:91:72:1a:ae:b0:d8:72:7e:6d:4f:d5:3c:84:46:03:
         5b:8b:bf:41:68:49:66:4b:44:67:fd:a8:9c:5a:b6:96:31:4e:
         25:02:a3:f0:9c:49:13:ee:48:f3:d9:17:f6:aa:a8:80:1b:49:
         a1:61:38:57:d5:f8:bc:5a:a7:42:aa:ca:fb:49:ce:fb:8d:40:
         b8:4a:6f:c0:be:c6:78:bc:98:c4:e7:c7:af:ab:ff:28:04:1d:
         10:e2:76:4c:1d:e6:d9:4c:e0:24:b7:f9:eb:13:f7:5a:a2:9a:
         e9:96:75:16:dc:f2:e1:89:bb:af:12:ac:b4:08:05:65:37:e7:
         76:c3:c2:52:0c:1b:85:fc:87:5f:e6:eb:5e:02:a1:39:48:84:
         5f:4e:53:37:27:e1:db:8d:05:81:83:11:3e:49:65:1c:2d:b5:
         c0:f3:4f:8d:41:ea:39:58:70:db:cb:5f:46:ea:7c:46:5f:3c:
         56:7e:3e:23:20:10:96:71:e9:78:55:20:87:ff:a3:49:c7:c2:
         e1:e4:a2:03:c3:22:c7:0d:75:f3:8e:89:81:64:06:67:b8:05:
         da:7c:0c:f6
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYTvIMs2gmV15nw4t52kNh7EYQNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk5RTZBNDkzOTY3RkU1NUJBMDE0MDA2MUJDNjQzNURE
ODc3OUZEOTAeFw0yNTEwMTcxMTU1MjFaFw0yNjEwMTYxMjAwMjFaMDMxMTAvBgNV
BAMTKDlDQkYyNjAzRDlCRDFEQzA5MjNEOUQ1NjREODAwMTY5MTAwMEJFNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYJgMOoUoY2qEZL7N0g0bZ8JCB
t6/ZHIgpyoQKqwBpLunT6BXgWxL+3KCKPdIjOeL8Fn4AYe2Dwa4KjKlUevY234Oi
HVOsj3MZe6twpAjtDg3gDyk6iSyC6f1ta8/gJQxUrV+L3Z2Spaa9qtayaye0oVCP
/dXwb8dcP1if3YL33NPDGoUjGDzZYa/F98XmBGCvyGKxJ3vlUXZgIxSRkExqMel5
9soKfjGXa3cW8fZihT3jocglKVufGZ4SRV22zQb0X/VURGXN/NBhu22IZo9zOzAa
2xuAdXIAY1v6H7qp6oqQXhyCSd1q+6vmXsHpcJwZPgzBcv/QivemQqP1CQkLAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUnL8mA9m9HcCSPZ1WTYABaRAAvm0wHwYDVR0j
BBgwFoAUGZ5qSTln/lW6AUAGG8ZDXdh3n9kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5
Mk4vMC8xOTlFNkE0OTM5NjdGRTU1QkEwMTQwMDYxQkM2NDM1REQ4Nzc5RkQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5OUU2QTQ5Mzk2N0ZFNTVC
QTAxNDAwNjFCQzY0MzVERDg3NzlGRDkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv
MzIzODMwMzQzYTM1MzYzNTM0M2EzODMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM5MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVlSAMA0GCSqGSIb3DQEBCwUA
A4IBAQCQVcNhqLch4ZUFW1D2WB0Vcn+8hGXQDiqiyIOxeoP5cJtLvwq94naRchqu
sNhyfm1P1TyERgNbi79BaElmS0Rn/aicWraWMU4lAqPwnEkT7kjz2Rf2qqiAG0mh
YThX1fi8WqdCqsr7Sc77jUC4Sm/AvsZ4vJjE58evq/8oBB0Q4nZMHebZTOAkt/nr
E/daoprplnUW3PLhibuvEqy0CAVlN+d2w8JSDBuF/Idf5uteAqE5SIRfTlM3J+Hb
jQWBgxE+SWUcLbXA80+NQeo5WHDby19G6nxGXzxWfj4jIBCWcel4VSCH/6NJx8Lh
5KIDwyLHDXXzjomBZAZnuAXafAz2
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:39:51 2025 by rpki-client