Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/323830343a343564343a3a2f33322d3334203d3e20323636393532.roa
File:                     323830343a343564343a3a2f33322d3334203d3e20323636393532.roa (raw, json)
Hash identifier:          CXzNb4G2GphJ1TIFeCdVumYJctK0+mEXyMAVo+V69Ek=
Subject key identifier:   94:1C:8E:7A:43:15:04:97:87:51:B6:B6:CB:B3:6F:8A:DF:15:70:C2
Certificate issuer:       /CN=0F44F5750AB24A7D6E844281A724F470994C316E
Certificate serial:       2FE0786EAB0385D433C38A63F68F4BA948E36A22
Authority key identifier: 0F:44:F5:75:0A:B2:4A:7D:6E:84:42:81:A7:24:F4:70:99:4C:31:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/323830343a343564343a3a2f33322d3334203d3e20323636393532.roa
Signing time:             Tue 14 Oct 2025 15:50:56 +0000
ROA not before:           Tue 14 Oct 2025 15:45:56 +0000
ROA not after:            Tue 13 Oct 2026 15:50:56 +0000
asID:                     266952
IP address blocks:        2804:45d4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.crl
                          rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e0:78:6e:ab:03:85:d4:33:c3:8a:63:f6:8f:4b:a9:48:e3:6a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F44F5750AB24A7D6E844281A724F470994C316E
        Validity
            Not Before: Oct 14 15:45:56 2025 GMT
            Not After : Oct 13 15:50:56 2026 GMT
        Subject: CN=941C8E7A431504978751B6B6CBB36F8ADF1570C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:b8:ed:d4:a1:6f:5d:00:ed:42:4b:85:15:
                    8b:98:03:88:16:27:ed:54:71:94:6a:55:fd:6c:ec:
                    20:f3:e3:e1:f7:8e:3f:51:d2:aa:83:7d:b1:b6:03:
                    85:5e:3f:c2:ab:ae:87:1c:70:6a:cd:c3:a8:c9:27:
                    a0:5e:ce:07:f0:29:87:f2:96:2c:5f:f5:50:fb:17:
                    a6:1c:3a:56:03:60:2c:f6:27:3b:5d:5f:99:df:2a:
                    e3:08:b1:d9:6d:2e:96:1d:55:88:60:5f:6b:d8:97:
                    c7:64:b1:69:6e:85:48:03:35:d2:a5:96:38:e1:4c:
                    42:c0:16:16:7a:51:66:ca:88:d7:d2:33:3d:ca:6c:
                    af:67:87:a3:e8:db:81:70:11:ee:d9:b3:95:63:6f:
                    8e:e2:63:55:27:aa:25:cd:05:3a:02:57:9e:32:86:
                    8e:03:8a:76:49:e1:b1:78:dd:d6:b6:80:01:6e:bd:
                    c0:e8:33:42:8e:88:2c:e1:de:28:34:d6:ff:38:1c:
                    d0:c7:05:96:68:57:5e:60:ba:9b:96:98:fd:16:87:
                    3e:1b:b4:c6:ef:72:54:35:cc:7b:5c:66:a6:d4:17:
                    36:c7:21:f7:1c:06:23:0e:7a:28:04:35:bd:00:5f:
                    b5:46:81:18:32:a5:3e:9e:fe:f0:0f:76:2b:e4:5b:
                    6a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1C:8E:7A:43:15:04:97:87:51:B6:B6:CB:B3:6F:8A:DF:15:70:C2
            X509v3 Authority Key Identifier:
                keyid:0F:44:F5:75:0A:B2:4A:7D:6E:84:42:81:A7:24:F4:70:99:4C:31:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/0F44F5750AB24A7D6E844281A724F470994C316E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F44F5750AB24A7D6E844281A724F470994C316E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/323830343a343564343a3a2f33322d3334203d3e20323636393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:5a:6b:4b:dc:50:e1:76:e6:54:1c:b6:5d:18:d9:bd:d0:cb:
         f9:66:31:ed:64:ae:df:68:b2:4c:07:d8:59:61:a7:83:ab:7f:
         56:fd:f2:65:5c:8a:14:ad:eb:8d:4c:3a:a9:a2:77:66:ae:c1:
         4e:4d:ad:7c:45:8c:da:ec:d8:6a:8c:57:00:a9:78:bd:f1:c3:
         98:5d:8c:87:cd:15:d9:7a:00:03:b8:56:d8:06:0b:69:6e:b9:
         0f:f5:86:97:1c:0a:44:77:29:a7:8f:0e:f6:60:ef:8f:03:8f:
         c2:8a:22:6b:03:40:40:62:75:10:04:75:f3:10:c9:6e:b7:8b:
         cb:92:b8:4a:07:06:e5:f4:0e:a8:13:14:f3:04:75:09:71:95:
         74:b9:35:3d:7d:27:52:07:96:32:c2:3e:12:8d:f7:de:9b:1a:
         ca:68:1e:f6:18:82:c0:d7:1b:5a:13:05:40:fe:93:67:d3:ac:
         d8:4d:b1:54:5b:04:f3:71:19:6a:94:36:fb:df:d6:ea:5d:ea:
         1a:98:a2:a3:02:88:75:58:bd:cc:eb:81:9c:1d:ec:77:b8:de:
         cb:6b:f6:36:3a:ed:76:1b:51:e2:9b:82:30:5a:72:c5:04:c7:
         b6:97:be:92:d0:f7:83:bd:74:72:b7:f7:9e:ae:3c:0a:e5:6c:
         7a:a9:e2:b2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUL+B4bqsDhdQzw4pj9o9LqUjjaiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY0NEY1NzUwQUIyNEE3RDZFODQ0MjgxQTcyNEY0NzA5
OTRDMzE2RTAeFw0yNTEwMTQxNTQ1NTZaFw0yNjEwMTMxNTUwNTZaMDMxMTAvBgNV
BAMTKDk0MUM4RTdBNDMxNTA0OTc4NzUxQjZCNkNCQjM2RjhBREYxNTcwQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJn7jt1KFvXQDtQkuFFYuYA4gW
J+1UcZRqVf1s7CDz4+H3jj9R0qqDfbG2A4VeP8KrrocccGrNw6jJJ6BezgfwKYfy
lixf9VD7F6YcOlYDYCz2JztdX5nfKuMIsdltLpYdVYhgX2vYl8dksWluhUgDNdKl
ljjhTELAFhZ6UWbKiNfSMz3KbK9nh6Po24FwEe7Zs5Vjb47iY1UnqiXNBToCV54y
ho4DinZJ4bF43da2gAFuvcDoM0KOiCzh3ig01v84HNDHBZZoV15gupuWmP0Whz4b
tMbvclQ1zHtcZqbUFzbHIfccBiMOeigENb0AX7VGgRgypT6e/vAPdivkW2q3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUlByOekMVBJeHUba2y7Nvit8VcMIwHwYDVR0j
BBgwFoAUD0T1dQqySn1uhEKBpyT0cJlMMW4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGcyVFN3dFRuNGdpQ2ZzUThKWldGU0RkNE1ac3E1NjRyVkZDZnRtUEI0
Y1QvMC8wRjQ0RjU3NTBBQjI0QTdENkU4NDQyODFBNzI0RjQ3MDk5NEMzMTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGNDRGNTc1MEFCMjRBN0Q2
RTg0NDI4MUE3MjRGNDcwOTk0QzMxNkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RnMlRTd3RUbjRnaUNmc1E4SlpXRlNEZDRNWnNxNTY0clZGQ2Z0bVBCNGNULzAv
MzIzODMwMzQzYTM0MzU2NDM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM2
MzkzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARF1DANBgkqhkiG9w0BAQsFAAOCAQEAQFprS9xQ
4XbmVBy2XRjZvdDL+WYx7WSu32iyTAfYWWGng6t/Vv3yZVyKFK3rjUw6qaJ3Zq7B
Tk2tfEWM2uzYaoxXAKl4vfHDmF2Mh80V2XoAA7hW2AYLaW65D/WGlxwKRHcpp48O
9mDvjwOPwooiawNAQGJ1EAR18xDJbreLy5K4SgcG5fQOqBMU8wR1CXGVdLk1PX0n
UgeWMsI+Eo333psaymge9hiCwNcbWhMFQP6TZ9Os2E2xVFsE83EZapQ2+9/W6l3q
GpiiowKIdVi9zOuBnB3sd7jey2v2NjrtdhtR4puCMFpyxQTHtpe+ktD3g710crf3
nq48CuVseqnisg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:09:24 2025 by rpki-client