Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/323830343a6638633a3a2f33322d3332203d3e20323633353931.roa
File:                     323830343a6638633a3a2f33322d3332203d3e20323633353931.roa (raw, json)
Hash identifier:          touS79UWtBMw+qPDADCzk8s1F5L/2BzKXXy1BQuthgc=
Subject key identifier:   EB:00:83:80:D5:23:A7:4B:A2:B3:6A:B6:5F:6A:3D:3D:3F:0C:39:9B
Certificate issuer:       /CN=7A941BA4F64F422035AA84E46FD14CBABD825B49
Certificate serial:       6100BC8864CE9E2679F487F534FB2F3918C8AE9D
Authority key identifier: 7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/323830343a6638633a3a2f33322d3332203d3e20323633353931.roa
Signing time:             Mon 22 Sep 2025 13:26:25 +0000
ROA not before:           Mon 22 Sep 2025 13:21:25 +0000
ROA not after:            Mon 21 Sep 2026 13:26:25 +0000
asID:                     263591
IP address blocks:        2804:f8c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl
                          rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:00:bc:88:64:ce:9e:26:79:f4:87:f5:34:fb:2f:39:18:c8:ae:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A941BA4F64F422035AA84E46FD14CBABD825B49
        Validity
            Not Before: Sep 22 13:21:25 2025 GMT
            Not After : Sep 21 13:26:25 2026 GMT
        Subject: CN=EB008380D523A74BA2B36AB65F6A3D3D3F0C399B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3c:e1:b8:fa:81:a0:2a:52:35:d2:0d:1e:79:
                    d1:b0:20:19:e8:39:80:16:5e:35:5d:93:df:f8:83:
                    eb:b6:66:54:4a:0e:e2:42:1a:a8:25:c2:cb:e0:77:
                    b6:0c:6e:22:7e:17:c4:de:55:0c:4f:04:d9:48:9c:
                    3b:df:98:bf:67:8f:1e:5f:03:01:a1:77:a1:0e:fd:
                    72:68:c0:b0:b2:48:ce:06:6d:28:f6:ae:27:b0:99:
                    05:6b:d4:d3:7f:10:28:a4:1e:e8:c4:ba:2d:d9:07:
                    6c:f9:44:eb:dc:09:46:bd:ad:9f:50:73:5a:1a:60:
                    3c:4d:44:f6:5b:17:6c:ac:ff:75:36:f8:5e:d1:33:
                    89:de:07:0a:5b:be:7f:fa:a4:76:a0:d2:f7:61:58:
                    2e:0d:fd:e9:a8:0c:ae:a5:a2:88:60:61:ab:0c:70:
                    ad:09:0b:83:98:dd:b8:d4:f0:be:fe:c7:89:9e:a7:
                    0d:ec:b9:47:5a:7c:4d:ca:bc:3d:6a:cc:44:c3:98:
                    ba:75:f7:4e:c6:31:92:9d:eb:9d:85:80:00:6b:1c:
                    a2:0c:87:2c:9f:78:b6:5d:b7:ce:ae:e8:95:75:25:
                    8e:f8:43:9e:ea:58:81:df:22:c5:00:f6:5e:45:eb:
                    d0:fd:63:cb:89:4d:cb:0d:cf:88:8f:6c:ae:69:02:
                    95:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:00:83:80:D5:23:A7:4B:A2:B3:6A:B6:5F:6A:3D:3D:3F:0C:39:9B
            X509v3 Authority Key Identifier:
                keyid:7A:94:1B:A4:F6:4F:42:20:35:AA:84:E4:6F:D1:4C:BA:BD:82:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/7A941BA4F64F422035AA84E46FD14CBABD825B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A941BA4F64F422035AA84E46FD14CBABD825B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQWxkPmFozQez6w1dRqF6rHAjxCJBrhN2UzgcBbWhKsu/0/323830343a6638633a3a2f33322d3332203d3e20323633353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:33:bc:c4:09:7c:7b:01:e1:27:2e:52:20:f7:65:9a:e1:cc:
         b6:0a:4c:df:96:09:f6:6b:13:65:82:81:70:e6:f4:1f:95:55:
         9a:da:13:2a:e3:2a:86:1d:f2:16:47:59:9d:fb:23:f8:95:ff:
         83:8e:d7:23:b8:12:72:1b:b5:5e:2f:8a:d2:a9:92:cb:5d:8f:
         7f:f5:7a:da:58:af:60:53:fd:8c:04:1f:a4:e8:33:d5:9a:8d:
         82:15:59:98:b6:4f:90:9a:1d:5c:ee:cc:1f:f5:d0:01:b9:1c:
         30:d2:b8:ec:f8:82:98:90:6d:96:0d:8b:89:f3:97:66:55:5f:
         d6:8b:10:c4:00:cd:53:c3:e6:a3:4e:87:de:60:2e:c4:e1:36:
         dc:6f:c4:16:cc:0d:a7:d4:36:94:3f:fa:26:64:64:52:6c:80:
         05:43:51:bb:bc:ed:1b:25:17:0c:6b:d1:9e:e7:35:d2:11:a8:
         09:0f:92:6b:bb:6a:cb:cd:2b:4d:bd:93:4b:34:32:9a:e3:b5:
         1f:5f:c0:76:04:37:8e:d5:f9:40:79:f4:f0:76:eb:7e:9c:d9:
         90:44:3d:57:53:05:a3:ad:7f:75:dc:3a:71:da:2a:97:b9:93:
         8d:7c:af:17:2c:ba:63:c6:83:22:bf:95:a3:8d:82:f7:aa:5b:
         53:1b:9f:b1
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUYQC8iGTOniZ59If1NPsvORjIrp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E5NDFCQTRGNjRGNDIyMDM1QUE4NEU0NkZEMTRDQkFC
RDgyNUI0OTAeFw0yNTA5MjIxMzIxMjVaFw0yNjA5MjExMzI2MjVaMDMxMTAvBgNV
BAMTKEVCMDA4MzgwRDUyM0E3NEJBMkIzNkFCNjVGNkEzRDNEM0YwQzM5OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwPOG4+oGgKlI10g0eedGwIBno
OYAWXjVdk9/4g+u2ZlRKDuJCGqglwsvgd7YMbiJ+F8TeVQxPBNlInDvfmL9njx5f
AwGhd6EO/XJowLCySM4GbSj2riewmQVr1NN/ECikHujEui3ZB2z5ROvcCUa9rZ9Q
c1oaYDxNRPZbF2ys/3U2+F7RM4neBwpbvn/6pHag0vdhWC4N/emoDK6loohgYasM
cK0JC4OY3bjU8L7+x4mepw3suUdafE3KvD1qzETDmLp1907GMZKd652FgABrHKIM
hyyfeLZdt86u6JV1JY74Q57qWIHfIsUA9l5F69D9Y8uJTcsNz4iPbK5pApXDAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU6wCDgNUjp0uis2q2X2o9PT8MOZswHwYDVR0j
BBgwFoAUepQbpPZPQiA1qoTkb9FMur2CW0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFFXeGtQbUZvelFlejZ3MWRScUY2ckhBanhDSkJyaE4yVXpnY0JiV2hL
c3UvMC83QTk0MUJBNEY2NEY0MjIwMzVBQTg0RTQ2RkQxNENCQUJEODI1QjQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdBOTQxQkE0RjY0RjQyMjAz
NUFBODRFNDZGRDE0Q0JBQkQ4MjVCNDkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RRV3hrUG1Gb3pRZXo2dzFkUnFGNnJIQWp4Q0pCcmhOMlV6Z2NCYldoS3N1LzAv
MzIzODMwMzQzYTY2Mzg2MzNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM1
MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgED4wwDQYJKoZIhvcNAQELBQADggEBAGEzvMQJfHsB
4ScuUiD3ZZrhzLYKTN+WCfZrE2WCgXDm9B+VVZraEyrjKoYd8hZHWZ37I/iV/4OO
1yO4EnIbtV4vitKpkstdj3/1etpYr2BT/YwEH6ToM9WajYIVWZi2T5CaHVzuzB/1
0AG5HDDSuOz4gpiQbZYNi4nzl2ZVX9aLEMQAzVPD5qNOh95gLsThNtxvxBbMDafU
NpQ/+iZkZFJsgAVDUbu87RslFwxr0Z7nNdIRqAkPkmu7asvNK029k0s0MprjtR9f
wHYEN47V+UB59PB2636c2ZBEPVdTBaOtf3XcOnHaKpe5k418rxcsumPGgyK/laON
gveqW1Mbn7E=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:21:16 2025 by rpki-client