Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/323830343a343338633a3a2f33322d3334203d3e20323632393131.roa
File:                     323830343a343338633a3a2f33322d3334203d3e20323632393131.roa (raw, json)
Hash identifier:          hr2vSCAo1DLx1efSTHM11UTxakYKd3HuebsLGwEcXzM=
Subject key identifier:   62:EB:EC:03:F4:BD:B1:49:23:95:E0:44:58:8A:B8:FB:78:91:CB:FF
Certificate issuer:       /CN=0A7CDC9F83E24FEB6F64619251F842424F5CD0B3
Certificate serial:       0C3137C83765E78857EA4FE88EB2EF9F0A86FEF8
Authority key identifier: 0A:7C:DC:9F:83:E2:4F:EB:6F:64:61:92:51:F8:42:42:4F:5C:D0:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/323830343a343338633a3a2f33322d3334203d3e20323632393131.roa
Signing time:             Thu 18 Sep 2025 20:29:00 +0000
ROA not before:           Thu 18 Sep 2025 20:24:00 +0000
ROA not after:            Thu 17 Sep 2026 20:29:00 +0000
asID:                     262911
IP address blocks:        2804:438c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.crl
                          rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:31:37:c8:37:65:e7:88:57:ea:4f:e8:8e:b2:ef:9f:0a:86:fe:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A7CDC9F83E24FEB6F64619251F842424F5CD0B3
        Validity
            Not Before: Sep 18 20:24:00 2025 GMT
            Not After : Sep 17 20:29:00 2026 GMT
        Subject: CN=62EBEC03F4BDB1492395E044588AB8FB7891CBFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ad:ab:e5:69:c6:94:9a:65:a2:7d:41:d3:78:
                    96:4d:8a:6f:d4:60:c1:eb:f2:14:fe:aa:69:ac:83:
                    9e:db:e9:1a:f4:79:32:ac:a1:30:ab:1e:eb:9a:9d:
                    4f:b1:27:cd:75:b8:fa:d1:0b:da:79:f9:b8:9c:b5:
                    66:dc:be:67:c7:f4:29:08:1f:ad:39:34:b1:9a:5d:
                    85:b7:91:35:47:52:6b:fe:07:c6:9d:a9:21:f4:39:
                    ca:a4:ad:6a:b5:35:1c:5b:0d:c6:77:31:07:ba:7c:
                    ae:8f:51:fd:92:34:21:fe:03:87:05:38:39:52:a2:
                    3f:17:fb:3c:70:b0:7a:c2:37:e4:26:80:68:5e:f9:
                    9c:9a:9d:fc:8b:e4:c3:7f:d6:94:b0:ef:b9:78:52:
                    28:77:1c:8a:bf:4c:ae:b0:bf:e1:5a:25:67:fc:e9:
                    c8:6d:64:06:1d:cc:31:e3:9a:08:18:70:ad:24:6c:
                    92:83:80:ad:c4:f5:8a:5e:10:af:b7:61:b7:f0:a2:
                    f6:74:cd:1c:c9:ef:63:ca:15:ea:a0:2d:6e:72:02:
                    e2:a9:e0:19:49:08:f4:cc:cc:5f:2f:07:db:ee:81:
                    63:eb:04:c2:27:41:f6:1b:5e:fb:74:fd:f7:73:76:
                    8b:cb:25:b4:7a:1b:a4:4c:06:a9:00:b6:58:fb:05:
                    85:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EB:EC:03:F4:BD:B1:49:23:95:E0:44:58:8A:B8:FB:78:91:CB:FF
            X509v3 Authority Key Identifier:
                keyid:0A:7C:DC:9F:83:E2:4F:EB:6F:64:61:92:51:F8:42:42:4F:5C:D0:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7CDC9F83E24FEB6F64619251F842424F5CD0B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxZoCo639qFnFjuZwfT3tNttBoYB9fXC1MxrfNxMn5g/0/323830343a343338633a3a2f33322d3334203d3e20323632393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:438c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:42:7f:75:23:45:05:40:81:58:82:67:d7:2e:da:d3:b0:b0:
         47:74:e3:ff:01:9b:21:39:4e:52:e2:65:34:4f:54:b9:07:76:
         b9:05:a8:3e:63:aa:69:d2:dc:d2:c7:ec:e6:f9:69:2e:d6:9f:
         41:73:d8:37:d0:ed:f6:f1:4a:83:e5:bf:d8:f7:b6:c8:31:d8:
         7e:47:14:dc:e0:16:76:73:26:1b:2c:8d:9e:05:87:41:f7:0b:
         b8:9f:79:3a:ab:d6:ad:06:72:10:d1:c0:14:8f:65:c9:15:b6:
         a0:43:18:db:e5:f8:82:d4:05:16:9c:ff:94:c9:26:d9:22:cc:
         95:27:38:c2:12:f7:9e:10:4b:0e:55:16:60:e9:bd:4b:3e:17:
         14:f0:76:8f:ac:1c:22:84:75:46:45:a9:44:c9:bf:6b:7b:d1:
         99:25:22:3a:63:8f:8e:a0:fb:2d:c6:e2:85:2a:62:03:1c:d5:
         8a:6e:25:92:d2:b0:56:ab:24:e1:c2:31:c2:1a:98:bb:8c:b5:
         aa:3e:38:ca:80:6f:5c:a7:8a:51:73:b9:ab:5b:41:60:de:c9:
         70:17:37:b3:15:04:6c:60:43:3e:e9:09:4c:48:ec:20:4b:40:
         66:24:f6:2c:79:21:a1:b6:43:26:7a:5e:10:e9:28:bc:96:9b:
         9c:42:0a:9f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDDE3yDdl54hX6k/ojrLvnwqG/vgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE3Q0RDOUY4M0UyNEZFQjZGNjQ2MTkyNTFGODQyNDI0
RjVDRDBCMzAeFw0yNTA5MTgyMDI0MDBaFw0yNjA5MTcyMDI5MDBaMDMxMTAvBgNV
BAMTKDYyRUJFQzAzRjRCREIxNDkyMzk1RTA0NDU4OEFCOEZCNzg5MUNCRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdravlacaUmmWifUHTeJZNim/U
YMHr8hT+qmmsg57b6Rr0eTKsoTCrHuuanU+xJ811uPrRC9p5+bictWbcvmfH9CkI
H605NLGaXYW3kTVHUmv+B8adqSH0OcqkrWq1NRxbDcZ3MQe6fK6PUf2SNCH+A4cF
ODlSoj8X+zxwsHrCN+QmgGhe+ZyanfyL5MN/1pSw77l4Uih3HIq/TK6wv+FaJWf8
6chtZAYdzDHjmggYcK0kbJKDgK3E9YpeEK+3YbfwovZ0zRzJ72PKFeqgLW5yAuKp
4BlJCPTMzF8vB9vugWPrBMInQfYbXvt0/fdzdovLJbR6G6RMBqkAtlj7BYX7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUYuvsA/S9sUkjleBEWIq4+3iRy/8wHwYDVR0j
BBgwFoAUCnzcn4PiT+tvZGGSUfhCQk9c0LMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVp4Wm9DbzYzOXFGbkZqdVp3ZlQzdE50dEJvWUI5ZlhDMU14cmZOeE1u
NWcvMC8wQTdDREM5RjgzRTI0RkVCNkY2NDYxOTI1MUY4NDI0MjRGNUNEMEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBN0NEQzlGODNFMjRGRUI2
RjY0NjE5MjUxRjg0MjQyNEY1Q0QwQjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VaeFpvQ282MzlxRm5GanVad2ZUM3ROdHRCb1lCOWZYQzFNeHJmTnhNbjVnLzAv
MzIzODMwMzQzYTM0MzMzODYzM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjMy
MzkzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARDjDANBgkqhkiG9w0BAQsFAAOCAQEATkJ/dSNF
BUCBWIJn1y7a07CwR3Tj/wGbITlOUuJlNE9UuQd2uQWoPmOqadLc0sfs5vlpLtaf
QXPYN9Dt9vFKg+W/2Pe2yDHYfkcU3OAWdnMmGyyNngWHQfcLuJ95OqvWrQZyENHA
FI9lyRW2oEMY2+X4gtQFFpz/lMkm2SLMlSc4whL3nhBLDlUWYOm9Sz4XFPB2j6wc
IoR1RkWpRMm/a3vRmSUiOmOPjqD7LcbihSpiAxzVim4lktKwVqsk4cIxwhqYu4y1
qj44yoBvXKeKUXO5q1tBYN7JcBc3sxUEbGBDPukJTEjsIEtAZiT2LHkhobZDJnpe
EOkovJabnEIKnw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:59:22 2025 by rpki-client