Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EX6uUPDPboqLbsZNxd7pnrsd4QXjjMTHcURMqtjvGaPZ/0/323830313a38303a333431303a3a2f34382d3438203d3e20323638373434.roa
File:                     323830313a38303a333431303a3a2f34382d3438203d3e20323638373434.roa (raw, json)
Hash identifier:          S2rCMUCcsvjXVzBQ7hYYEHcrWWs3TAAsMldrS4F9j+8=
Subject key identifier:   82:A9:A0:ED:1F:04:72:C5:E5:58:2C:66:F2:96:B4:88:8C:98:9A:AE
Certificate issuer:       /CN=9D3C0781953986EE7D81A95463A85608A458DC6F
Certificate serial:       579DCE8EC92C755060233B61B84E09070F7BF774
Authority key identifier: 9D:3C:07:81:95:39:86:EE:7D:81:A9:54:63:A8:56:08:A4:58:DC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D3C0781953986EE7D81A95463A85608A458DC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EX6uUPDPboqLbsZNxd7pnrsd4QXjjMTHcURMqtjvGaPZ/0/323830313a38303a333431303a3a2f34382d3438203d3e20323638373434.roa
Signing time:             Thu 09 Oct 2025 10:55:55 +0000
ROA not before:           Thu 09 Oct 2025 10:50:55 +0000
ROA not after:            Thu 08 Oct 2026 10:55:55 +0000
asID:                     268744
IP address blocks:        2801:80:3410::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EX6uUPDPboqLbsZNxd7pnrsd4QXjjMTHcURMqtjvGaPZ/0/9D3C0781953986EE7D81A95463A85608A458DC6F.crl
                          rsync://rpki-repo.registro.br/repo/EX6uUPDPboqLbsZNxd7pnrsd4QXjjMTHcURMqtjvGaPZ/0/9D3C0781953986EE7D81A95463A85608A458DC6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D3C0781953986EE7D81A95463A85608A458DC6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9d:ce:8e:c9:2c:75:50:60:23:3b:61:b8:4e:09:07:0f:7b:f7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D3C0781953986EE7D81A95463A85608A458DC6F
        Validity
            Not Before: Oct  9 10:50:55 2025 GMT
            Not After : Oct  8 10:55:55 2026 GMT
        Subject: CN=82A9A0ED1F0472C5E5582C66F296B4888C989AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:89:2f:09:86:e8:69:d2:ed:84:9c:89:b6:
                    e0:db:7f:eb:7b:73:1a:6b:61:fc:f6:a4:51:29:9e:
                    6d:18:bb:1d:9e:c5:0f:60:ea:0f:0d:25:16:1a:3e:
                    f7:66:76:55:d3:5a:d9:dc:96:98:7c:72:40:8a:bc:
                    55:4c:9e:5e:53:d8:54:f3:0a:e9:0e:e4:9c:c1:d3:
                    b2:89:0f:45:f3:15:e1:6b:a7:d2:ee:33:88:15:2d:
                    cf:4b:92:a4:7d:c9:ef:f5:64:2e:47:76:38:51:4e:
                    75:b0:47:eb:75:41:9f:05:5a:62:d7:98:b9:40:4e:
                    2a:15:50:a1:5f:51:ec:d9:71:66:6a:cb:07:d9:b4:
                    64:01:92:bc:2c:ad:62:c5:53:1c:93:45:36:ce:ea:
                    43:7f:a5:9a:ea:14:2d:45:2a:3c:00:4a:39:29:32:
                    59:3a:8a:5d:de:18:b4:a6:83:6f:ac:b7:49:ea:87:
                    36:50:36:39:f0:4f:41:a7:9b:37:0f:a5:37:da:ff:
                    cd:59:0c:bf:d6:cf:f8:70:6d:7b:09:de:a2:7b:99:
                    a9:63:bb:f2:e3:fd:82:36:b6:3d:c4:89:8e:1b:dd:
                    72:f2:c3:7c:32:34:38:8b:24:f3:85:01:b5:74:bb:
                    cb:26:62:21:72:a7:97:51:a7:08:ff:d9:b6:98:6d:
                    67:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A9:A0:ED:1F:04:72:C5:E5:58:2C:66:F2:96:B4:88:8C:98:9A:AE
            X509v3 Authority Key Identifier:
                keyid:9D:3C:07:81:95:39:86:EE:7D:81:A9:54:63:A8:56:08:A4:58:DC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EX6uUPDPboqLbsZNxd7pnrsd4QXjjMTHcURMqtjvGaPZ/0/9D3C0781953986EE7D81A95463A85608A458DC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D3C0781953986EE7D81A95463A85608A458DC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EX6uUPDPboqLbsZNxd7pnrsd4QXjjMTHcURMqtjvGaPZ/0/323830313a38303a333431303a3a2f34382d3438203d3e20323638373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:3410::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:9a:bc:85:fa:3e:b0:a7:be:c2:de:34:b8:e4:fb:76:13:dd:
         b9:75:89:93:ea:89:c5:74:26:22:ce:99:c4:d6:26:90:1a:f5:
         cc:9f:54:6b:ae:0b:dc:70:98:8f:ba:e1:5f:96:9c:78:fe:c4:
         98:58:fc:f6:3a:67:85:c5:80:88:d8:99:52:32:97:23:4c:2f:
         9f:ed:f3:60:c7:33:e7:10:8f:3d:d5:bc:e6:bf:f8:21:a7:80:
         7c:b6:f7:17:6c:2f:29:f4:16:ed:a3:4d:aa:e1:1f:9a:9d:77:
         ed:ea:5b:c3:c1:7b:5d:4a:54:8c:dc:f5:be:2c:01:ff:f7:38:
         66:02:c8:83:e1:b2:fc:1b:df:30:66:35:6c:a7:ec:12:00:e3:
         d0:e6:a7:da:89:9f:08:7b:be:95:ad:76:c1:8d:a0:e2:cb:21:
         86:2a:39:a9:9c:86:4a:f4:ef:03:35:ce:09:fb:d0:be:83:ed:
         0c:4a:d6:57:7d:aa:6e:ee:20:f6:ff:f3:51:a5:53:47:dc:17:
         02:b7:c8:a4:e1:90:ac:a5:6f:e1:59:82:06:de:fc:ec:9e:64:
         d5:81:b7:e7:40:5e:bc:07:90:9e:8a:e7:dd:8e:d5:5f:51:03:
         2a:c8:94:29:55:26:06:29:ab:86:9e:0c:d3:12:79:d6:85:63:
         23:3d:fd:f0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUV53OjsksdVBgIzthuE4JBw9793QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQzQzA3ODE5NTM5ODZFRTdEODFBOTU0NjNBODU2MDhB
NDU4REM2RjAeFw0yNTEwMDkxMDUwNTVaFw0yNjEwMDgxMDU1NTVaMDMxMTAvBgNV
BAMTKDgyQTlBMEVEMUYwNDcyQzVFNTU4MkM2NkYyOTZCNDg4OEM5ODlBQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrqokvCYboadLthJyJtuDbf+t7
cxprYfz2pFEpnm0Yux2exQ9g6g8NJRYaPvdmdlXTWtnclph8ckCKvFVMnl5T2FTz
CukO5JzB07KJD0XzFeFrp9LuM4gVLc9LkqR9ye/1ZC5HdjhRTnWwR+t1QZ8FWmLX
mLlATioVUKFfUezZcWZqywfZtGQBkrwsrWLFUxyTRTbO6kN/pZrqFC1FKjwASjkp
Mlk6il3eGLSmg2+st0nqhzZQNjnwT0GnmzcPpTfa/81ZDL/Wz/hwbXsJ3qJ7malj
u/Lj/YI2tj3EiY4b3XLyw3wyNDiLJPOFAbV0u8smYiFyp5dRpwj/2baYbWdfAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUgqmg7R8EcsXlWCxm8pa0iIyYmq4wHwYDVR0j
BBgwFoAUnTwHgZU5hu59galUY6hWCKRY3G8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVg2dVVQRFBib3FMYnNaTnhkN3BucnNkNFFYampNVEhjVVJNcXRqdkdh
UFovMC85RDNDMDc4MTk1Mzk4NkVFN0Q4MUE5NTQ2M0E4NTYwOEE0NThEQzZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEM0MwNzgxOTUzOTg2RUU3
RDgxQTk1NDYzQTg1NjA4QTQ1OERDNkYuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VYNnVVUERQYm9xTGJzWk54ZDdwbnJzZDRRWGpqTVRIY1VSTXF0anZHYVBaLzAv
MzIzODMwMzEzYTM4MzAzYTMzMzQzMTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzNjM4MzczNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEAgDQQMA0GCSqGSIb3DQEBCwUAA4IB
AQCEmryF+j6wp77C3jS45Pt2E925dYmT6onFdCYizpnE1iaQGvXMn1RrrgvccJiP
uuFflpx4/sSYWPz2OmeFxYCI2JlSMpcjTC+f7fNgxzPnEI891bzmv/ghp4B8tvcX
bC8p9Bbto02q4R+anXft6lvDwXtdSlSM3PW+LAH/9zhmAsiD4bL8G98wZjVsp+wS
AOPQ5qfaiZ8Ie76VrXbBjaDiyyGGKjmpnIZK9O8DNc4J+9C+g+0MStZXfapu7iD2
//NRpVNH3BcCt8ik4ZCspW/hWYIG3vzsnmTVgbfnQF68B5CeiufdjtVfUQMqyJQp
VSYGKauGngzTEnnWhWMjPf3w
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:38 2025 by rpki-client