Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/323830343a376230303a3a2f33322d3438203d3e20323731343035.roa
File:                     323830343a376230303a3a2f33322d3438203d3e20323731343035.roa (raw, json)
Hash identifier:          hM/YFnEsuBwr+mO8uMeGduG/8Lxb6GshqYsUHLXYjak=
Subject key identifier:   39:05:35:4A:C0:DF:55:31:4A:2F:32:7A:CF:9A:35:61:B7:5A:08:47
Certificate issuer:       /CN=CDFEB6D9C1260E03DCF13C463D3B957509643F51
Certificate serial:       6975A6D2E371A742011FFFDCFF7B271EC97BDF78
Authority key identifier: CD:FE:B6:D9:C1:26:0E:03:DC:F1:3C:46:3D:3B:95:75:09:64:3F:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/323830343a376230303a3a2f33322d3438203d3e20323731343035.roa
Signing time:             Mon 13 Oct 2025 17:01:29 +0000
ROA not before:           Mon 13 Oct 2025 16:56:29 +0000
ROA not after:            Mon 12 Oct 2026 17:01:29 +0000
asID:                     271405
IP address blocks:        2804:7b00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.crl
                          rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:75:a6:d2:e3:71:a7:42:01:1f:ff:dc:ff:7b:27:1e:c9:7b:df:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDFEB6D9C1260E03DCF13C463D3B957509643F51
        Validity
            Not Before: Oct 13 16:56:29 2025 GMT
            Not After : Oct 12 17:01:29 2026 GMT
        Subject: CN=3905354AC0DF55314A2F327ACF9A3561B75A0847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5b:ee:95:78:67:4f:e7:35:69:c7:e0:fa:06:
                    ca:90:7f:80:69:06:d9:6d:09:84:7d:ea:f0:fc:9d:
                    ef:01:25:b5:50:cc:8d:e7:a2:87:57:45:c3:1f:34:
                    f7:3c:5f:e2:dd:be:95:81:ca:38:01:53:57:0f:5b:
                    09:b1:d4:c8:8b:8b:94:8b:79:a5:8a:11:b6:b3:9d:
                    4a:98:3b:5c:48:70:e5:4d:14:af:55:13:40:06:da:
                    6d:3e:c8:70:b1:3d:60:6a:b3:b0:0d:a9:4d:2c:61:
                    6b:4b:8c:47:31:eb:5c:9a:21:82:dd:b8:a0:83:55:
                    ef:9c:30:14:ba:be:88:61:ef:e9:84:4e:7d:a0:8f:
                    c7:39:19:19:9d:83:73:0d:af:6c:87:85:f8:58:f1:
                    f1:bc:55:e5:76:0e:fb:fd:3c:0f:7d:04:54:86:36:
                    a8:66:44:10:f1:30:fc:db:11:44:a3:03:2c:a6:2c:
                    e9:4f:90:92:f5:32:f7:00:9b:8e:71:05:4a:0a:b1:
                    81:53:0d:ec:66:c3:5e:ac:4d:58:e6:7a:ee:a3:94:
                    59:ab:f0:cb:23:48:5e:d0:06:84:a6:d1:b9:2a:34:
                    31:b5:17:f8:70:75:43:94:97:cd:82:cf:c7:bc:7d:
                    0a:21:fd:ea:f1:92:b1:3c:e3:02:c2:0f:88:60:9c:
                    a5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:05:35:4A:C0:DF:55:31:4A:2F:32:7A:CF:9A:35:61:B7:5A:08:47
            X509v3 Authority Key Identifier:
                keyid:CD:FE:B6:D9:C1:26:0E:03:DC:F1:3C:46:3D:3B:95:75:09:64:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/323830343a376230303a3a2f33322d3438203d3e20323731343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:84:9d:27:20:6c:e1:99:18:61:0d:95:d7:3e:9f:fd:a5:f2:
         66:8e:6d:c5:77:63:b4:fb:a3:99:64:6b:07:62:03:dd:58:f2:
         ea:4c:7c:e5:35:c7:2c:7d:d2:12:df:63:29:69:4a:ad:cf:fa:
         1c:9b:83:93:4d:11:6a:3b:46:a3:9d:4f:de:26:49:59:ff:cb:
         d9:b6:f9:9c:53:2d:78:c8:b7:58:c9:a9:2a:a5:1c:36:ab:dc:
         bf:27:b1:05:f6:fa:76:06:db:63:d3:83:f7:58:de:65:1f:b7:
         ae:fb:e9:43:88:eb:70:43:52:a9:80:66:ce:5a:65:4d:da:e9:
         59:db:aa:04:c1:21:66:7c:92:b6:a1:8a:d3:65:ec:65:8c:12:
         2c:4a:1e:90:bf:22:93:08:e9:d1:d5:83:7b:bc:60:a2:67:84:
         11:68:c8:4c:56:25:59:9a:da:47:a2:ef:9f:dd:a5:13:8b:d4:
         62:d8:5a:64:90:ec:9b:e3:4b:16:72:85:f2:d1:81:d3:c5:ff:
         71:b6:d7:d4:dc:70:78:5e:ae:1e:a2:8a:37:4d:9f:38:48:38:
         0f:d6:21:04:74:9d:12:37:55:53:7b:e3:7e:f8:4d:10:6b:ea:
         02:64:51:16:01:99:d6:75:73:ff:aa:52:0a:3d:a1:23:72:b2:
         1f:48:98:76
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUaXWm0uNxp0IBH//c/3snHsl733gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RGRUI2RDlDMTI2MEUwM0RDRjEzQzQ2M0QzQjk1NzUw
OTY0M0Y1MTAeFw0yNTEwMTMxNjU2MjlaFw0yNjEwMTIxNzAxMjlaMDMxMTAvBgNV
BAMTKDM5MDUzNTRBQzBERjU1MzE0QTJGMzI3QUNGOUEzNTYxQjc1QTA4NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcW+6VeGdP5zVpx+D6BsqQf4Bp
BtltCYR96vD8ne8BJbVQzI3noodXRcMfNPc8X+LdvpWByjgBU1cPWwmx1MiLi5SL
eaWKEbaznUqYO1xIcOVNFK9VE0AG2m0+yHCxPWBqs7ANqU0sYWtLjEcx61yaIYLd
uKCDVe+cMBS6vohh7+mETn2gj8c5GRmdg3MNr2yHhfhY8fG8VeV2Dvv9PA99BFSG
NqhmRBDxMPzbEUSjAyymLOlPkJL1MvcAm45xBUoKsYFTDexmw16sTVjmeu6jlFmr
8MsjSF7QBoSm0bkqNDG1F/hwdUOUl82Cz8e8fQoh/erxkrE84wLCD4hgnKVdAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUOQU1SsDfVTFKLzJ6z5o1YbdaCEcwHwYDVR0j
BBgwFoAUzf622cEmDgPc8TxGPTuVdQlkP1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGhNUHFnaWhnSG9neURhV01mZDV5RXZieFhvTkZRSFdMZkg1S2NpZ3dG
TmMvMC9DREZFQjZEOUMxMjYwRTAzRENGMTNDNDYzRDNCOTU3NTA5NjQzRjUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NERkVCNkQ5QzEyNjBFMDNE
Q0YxM0M0NjNEM0I5NTc1MDk2NDNGNTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoTVBxZ2loZ0hvZ3lEYVdNZmQ1eUV2YnhYb05GUUhXTGZINUtjaWd3Rk5jLzAv
MzIzODMwMzQzYTM3NjIzMDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzQzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR7ADANBgkqhkiG9w0BAQsFAAOCAQEAHoSdJyBs
4ZkYYQ2V1z6f/aXyZo5txXdjtPujmWRrB2ID3Vjy6kx85TXHLH3SEt9jKWlKrc/6
HJuDk00RajtGo51P3iZJWf/L2bb5nFMteMi3WMmpKqUcNqvcvyexBfb6dgbbY9OD
91jeZR+3rvvpQ4jrcENSqYBmzlplTdrpWduqBMEhZnyStqGK02XsZYwSLEoekL8i
kwjp0dWDe7xgomeEEWjITFYlWZraR6Lvn92lE4vUYthaZJDsm+NLFnKF8tGB08X/
cbbX1NxweF6uHqKKN02fOEg4D9YhBHSdEjdVU3vjfvhNEGvqAmRRFgGZ1nVz/6pS
Cj2hI3KyH0iYdg==
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:56:13 2025 by rpki-client