Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a663030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a663030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          8jEPF3XcCrza9vP1qGgIW+3sVoMe20ET22RCC7IntGg=
Subject key identifier:   4A:48:D6:9C:10:F5:E9:28:72:87:D5:79:28:16:E6:A6:49:78:B2:9D
Certificate issuer:       /CN=199E6A493967FE55BA0140061BC6435DD8779FD9
Certificate serial:       266C336C0A0047DE09ABB5999C1688C07E5F97FF
Authority key identifier: 19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a663030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Fri 17 Oct 2025 12:00:19 +0000
ROA not before:           Fri 17 Oct 2025 11:55:19 +0000
ROA not after:            Fri 16 Oct 2026 12:00:19 +0000
asID:                     267991
IP address blocks:        2804:5654:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6c:33:6c:0a:00:47:de:09:ab:b5:99:9c:16:88:c0:7e:5f:97:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199E6A493967FE55BA0140061BC6435DD8779FD9
        Validity
            Not Before: Oct 17 11:55:19 2025 GMT
            Not After : Oct 16 12:00:19 2026 GMT
        Subject: CN=4A48D69C10F5E9287287D5792816E6A64978B29D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8e:f4:f2:fa:70:25:c5:eb:dd:a5:a9:a7:02:
                    1c:e9:25:95:91:c3:21:2e:9f:b9:8a:0a:c3:f5:37:
                    56:15:49:13:f8:85:52:83:5e:fa:24:21:86:41:9f:
                    51:20:a4:b4:b9:27:94:af:43:db:0d:51:4f:23:47:
                    a8:6c:32:77:0f:67:92:a9:77:18:e2:3b:0b:60:e2:
                    2a:37:34:2f:10:ab:25:50:59:6e:45:65:c7:ac:33:
                    ac:5b:07:23:02:aa:4f:b2:ce:e2:ea:44:29:95:5c:
                    8f:89:8d:98:71:f2:90:5f:89:51:1c:56:8d:a6:e0:
                    5a:cb:60:7c:0e:29:68:a1:b0:d6:9c:b5:8f:f1:92:
                    53:03:de:f8:5d:a0:53:ce:3f:56:a2:01:78:57:2f:
                    3e:0c:38:f1:0b:49:ea:2e:bb:15:84:ab:3f:b2:bd:
                    ae:3e:ec:f0:ee:b8:b4:27:6f:ce:18:12:8f:71:27:
                    12:11:a3:11:ed:5a:ec:e7:53:d3:8e:9a:d8:66:ec:
                    16:f2:b9:3b:e6:77:6b:af:53:1a:8f:88:9b:fc:41:
                    20:e0:01:ae:fb:d4:d0:d2:aa:90:3f:32:ea:8e:d7:
                    b2:4a:35:63:c2:bc:19:ef:3e:e0:7f:4c:91:4b:2e:
                    c2:33:05:52:f4:51:0c:78:4b:18:1b:02:3d:a1:f2:
                    d6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:48:D6:9C:10:F5:E9:28:72:87:D5:79:28:16:E6:A6:49:78:B2:9D
            X509v3 Authority Key Identifier:
                keyid:19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a663030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0c:64:ca:f9:29:41:79:ce:00:ec:a3:cc:09:bd:16:2f:58:6c:
         84:2d:f8:82:75:49:87:89:c1:8a:35:19:ce:dc:5f:bf:7c:f3:
         a6:55:5f:d0:18:f4:d4:76:c0:9c:1f:60:b6:17:7f:1a:02:85:
         28:eb:00:1f:39:04:43:fb:51:5c:aa:56:67:00:72:80:eb:4d:
         57:12:ed:f5:b8:90:c5:b4:1c:85:76:cb:80:2b:d2:ed:9d:cd:
         33:b1:e8:d3:79:c6:0d:10:9e:7e:91:7c:fb:03:a1:70:d4:a3:
         2f:95:2a:b3:bf:46:b3:4f:15:e9:0e:df:74:ac:90:5e:f7:d3:
         f0:06:1e:52:48:de:1a:83:44:1d:06:ba:46:c4:5e:65:7b:21:
         2b:2a:35:9b:63:54:3f:63:40:c4:c0:14:4f:12:fa:67:3b:77:
         40:cf:2d:0a:88:47:ba:49:31:c5:1c:7a:b6:59:8a:ed:b0:ca:
         f7:bd:2b:f0:01:ad:e9:2c:49:7c:dd:17:5d:d8:14:a9:88:ce:
         7c:7a:31:13:59:c9:4b:be:b9:93:b7:7d:0c:97:04:c1:45:7b:
         22:f9:00:d4:ef:fa:d0:7a:ed:2f:4d:bd:e3:eb:1c:3d:3a:50:
         1b:20:58:6b:5c:5e:79:04:4a:d0:c8:27:d3:0b:5b:b2:e5:05:
         96:39:d0:2f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUJmwzbAoAR94Jq7WZnBaIwH5fl/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk5RTZBNDkzOTY3RkU1NUJBMDE0MDA2MUJDNjQzNURE
ODc3OUZEOTAeFw0yNTEwMTcxMTU1MTlaFw0yNjEwMTYxMjAwMTlaMDMxMTAvBgNV
BAMTKDRBNDhENjlDMTBGNUU5Mjg3Mjg3RDU3OTI4MTZFNkE2NDk3OEIyOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDljvTy+nAlxevdpamnAhzpJZWR
wyEun7mKCsP1N1YVSRP4hVKDXvokIYZBn1EgpLS5J5SvQ9sNUU8jR6hsMncPZ5Kp
dxjiOwtg4io3NC8QqyVQWW5FZcesM6xbByMCqk+yzuLqRCmVXI+JjZhx8pBfiVEc
Vo2m4FrLYHwOKWihsNactY/xklMD3vhdoFPOP1aiAXhXLz4MOPELSeouuxWEqz+y
va4+7PDuuLQnb84YEo9xJxIRoxHtWuznU9OOmthm7BbyuTvmd2uvUxqPiJv8QSDg
Aa771NDSqpA/MuqO17JKNWPCvBnvPuB/TJFLLsIzBVL0UQx4SxgbAj2h8tZlAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUSkjWnBD16Shyh9V5KBbmpkl4sp0wHwYDVR0j
BBgwFoAUGZ5qSTln/lW6AUAGG8ZDXdh3n9kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5
Mk4vMC8xOTlFNkE0OTM5NjdGRTU1QkEwMTQwMDYxQkM2NDM1REQ4Nzc5RkQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5OUU2QTQ5Mzk2N0ZFNTVC
QTAxNDAwNjFCQzY0MzVERDg3NzlGRDkuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv
MzIzODMwMzQzYTM1MzYzNTM0M2E2NjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNzM5MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEVlTwMA0GCSqGSIb3DQEBCwUA
A4IBAQAMZMr5KUF5zgDso8wJvRYvWGyELfiCdUmHicGKNRnO3F+/fPOmVV/QGPTU
dsCcH2C2F38aAoUo6wAfOQRD+1FcqlZnAHKA601XEu31uJDFtByFdsuAK9Ltnc0z
sejTecYNEJ5+kXz7A6Fw1KMvlSqzv0azTxXpDt90rJBe99PwBh5SSN4ag0QdBrpG
xF5leyErKjWbY1Q/Y0DEwBRPEvpnO3dAzy0KiEe6STHFHHq2WYrtsMr3vSvwAa3p
LEl83Rdd2BSpiM58ejETWclLvrmTt30MlwTBRXsi+QDU7/rQeu0vTb3j6xw9OlAb
IFhrXF55BErQyCfTC1uy5QWWOdAv
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:39:54 2025 by rpki-client