Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/323830343a363366303a3a2f33322d3438203d3e20323639333933.roa
File:                     323830343a363366303a3a2f33322d3438203d3e20323639333933.roa (raw, json)
Hash identifier:          SUWoKw+mJ7WJQfqdPYJn34EVb+TexAZ71AeIxIidlhU=
Subject key identifier:   82:1D:E0:E6:90:3E:7A:2B:45:22:82:21:6B:B1:23:27:C4:C0:2C:78
Certificate issuer:       /CN=E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0
Certificate serial:       1486F32745B943D10652967B1658D6934B8D9FC1
Authority key identifier: E7:3B:2E:95:58:99:0A:AF:0B:7C:79:48:6A:B6:D0:CD:62:57:D0:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/323830343a363366303a3a2f33322d3438203d3e20323639333933.roa
Signing time:             Sat 04 Oct 2025 01:20:58 +0000
ROA not before:           Sat 04 Oct 2025 01:15:58 +0000
ROA not after:            Sat 03 Oct 2026 01:20:58 +0000
asID:                     269393
IP address blocks:        2804:63f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.crl
                          rsync://rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:86:f3:27:45:b9:43:d1:06:52:96:7b:16:58:d6:93:4b:8d:9f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0
        Validity
            Not Before: Oct  4 01:15:58 2025 GMT
            Not After : Oct  3 01:20:58 2026 GMT
        Subject: CN=821DE0E6903E7A2B452282216BB12327C4C02C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:78:15:73:a0:30:a1:db:57:16:02:52:52:53:
                    ce:04:5c:e0:aa:1c:23:05:2f:94:38:ac:3c:89:be:
                    27:52:08:81:a7:d2:b3:90:60:d7:67:20:a3:b4:88:
                    c7:a0:22:32:22:d9:b7:85:e8:c2:02:bd:e6:7e:49:
                    05:c7:34:8f:74:1e:e1:41:ff:0b:1a:a3:73:bd:ff:
                    f0:3f:50:2c:10:e6:97:46:87:50:2a:3d:96:25:f3:
                    12:00:71:b5:d3:de:56:45:6e:eb:6d:96:48:4c:46:
                    87:5b:9e:1f:89:d5:32:b6:62:45:38:2a:e1:2d:a5:
                    09:f7:38:f8:f5:34:c7:18:fe:1b:ba:5f:22:5a:58:
                    c7:c3:81:e2:1c:03:a8:84:97:c0:0d:d6:2c:ae:5f:
                    7b:ba:2e:b8:26:9c:4c:12:2f:a3:03:e2:38:ae:2e:
                    a0:08:4d:6a:54:07:06:02:6e:26:bc:b4:98:91:46:
                    62:67:f0:68:98:c5:71:94:75:f8:48:5f:56:6c:ef:
                    7f:85:57:60:42:60:7d:2f:dd:ab:f3:cf:a9:95:fc:
                    29:ea:95:c4:2b:67:3f:9a:1e:86:68:43:a9:60:89:
                    4f:3f:de:ed:8d:0d:ba:30:3d:30:92:10:21:dc:de:
                    88:38:fc:3a:af:fe:33:1f:5a:97:c8:ec:16:e2:58:
                    3e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1D:E0:E6:90:3E:7A:2B:45:22:82:21:6B:B1:23:27:C4:C0:2C:78
            X509v3 Authority Key Identifier:
                keyid:E7:3B:2E:95:58:99:0A:AF:0B:7C:79:48:6A:B6:D0:CD:62:57:D0:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E73B2E9558990AAF0B7C79486AB6D0CD6257D0E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EncnEMvEVX2BLxjEXywsKcaBFZTpMgB7fVZBs59A1HWt/0/323830343a363366303a3a2f33322d3438203d3e20323639333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:8a:c7:df:e2:5d:a6:9d:a2:01:95:71:a6:ec:5c:e6:a4:34:
         83:c2:78:75:7e:32:32:0b:56:4f:aa:eb:96:da:fa:8a:cd:49:
         45:fa:83:b4:22:f6:96:61:ed:42:78:c3:bb:c1:da:9b:34:03:
         ef:d3:16:e8:85:fa:1e:16:85:b6:16:ea:17:2f:5b:53:28:3c:
         12:d0:f6:24:55:7d:3d:e4:d8:7a:52:41:1d:3d:a8:46:78:b5:
         9a:6c:1d:97:9e:ac:26:78:36:51:3a:09:0a:db:26:5b:7b:5e:
         4e:4a:12:62:96:df:2c:fe:29:d4:16:8a:b2:a6:00:8a:ce:b4:
         6d:20:f9:cc:2e:5c:c2:a4:62:44:08:eb:33:a1:bf:e5:3e:3f:
         34:8c:91:6b:ed:fd:79:5b:59:0b:35:90:11:17:74:15:a8:79:
         2f:71:e4:28:d3:bb:35:cc:e8:01:6e:c2:0c:96:f2:06:50:12:
         ce:95:36:bc:46:29:57:44:41:2a:81:33:56:54:b2:d6:0f:18:
         c3:e5:ba:ad:2d:70:42:cc:1f:fb:f1:f8:76:c5:5e:54:ce:14:
         37:f8:f3:66:75:e5:60:6d:6e:be:96:84:86:26:30:5d:17:df:
         30:d0:82:9c:eb:01:ef:bf:61:0e:b6:eb:07:a4:de:ea:63:de:
         8c:60:1e:fa
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUFIbzJ0W5Q9EGUpZ7FljWk0uNn8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTczQjJFOTU1ODk5MEFBRjBCN0M3OTQ4NkFCNkQwQ0Q2
MjU3RDBFMDAeFw0yNTEwMDQwMTE1NThaFw0yNjEwMDMwMTIwNThaMDMxMTAvBgNV
BAMTKDgyMURFMEU2OTAzRTdBMkI0NTIyODIyMTZCQjEyMzI3QzRDMDJDNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyeBVzoDCh21cWAlJSU84EXOCq
HCMFL5Q4rDyJvidSCIGn0rOQYNdnIKO0iMegIjIi2beF6MICveZ+SQXHNI90HuFB
/wsao3O9//A/UCwQ5pdGh1AqPZYl8xIAcbXT3lZFbuttlkhMRodbnh+J1TK2YkU4
KuEtpQn3OPj1NMcY/hu6XyJaWMfDgeIcA6iEl8AN1iyuX3u6LrgmnEwSL6MD4jiu
LqAITWpUBwYCbia8tJiRRmJn8GiYxXGUdfhIX1Zs73+FV2BCYH0v3avzz6mV/Cnq
lcQrZz+aHoZoQ6lgiU8/3u2NDbowPTCSECHc3og4/Dqv/jMfWpfI7BbiWD6fAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUgh3g5pA+eitFIoIha7EjJ8TALHgwHwYDVR0j
BBgwFoAU5zsulViZCq8LfHlIarbQzWJX0OAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW5jbkVNdkVWWDJCTHhqRVh5d3NLY2FCRlpUcE1nQjdmVlpCczU5QTFI
V3QvMC9FNzNCMkU5NTU4OTkwQUFGMEI3Qzc5NDg2QUI2RDBDRDYyNTdEMEUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3M0IyRTk1NTg5OTBBQUYw
QjdDNzk0ODZBQjZEMENENjI1N0QwRTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VuY25FTXZFVlgyQkx4akVYeXdzS2NhQkZaVHBNZ0I3ZlZaQnM1OUExSFd0LzAv
MzIzODMwMzQzYTM2MzM2NjMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5
MzMzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARj8DANBgkqhkiG9w0BAQsFAAOCAQEANYrH3+Jd
pp2iAZVxpuxc5qQ0g8J4dX4yMgtWT6rrltr6is1JRfqDtCL2lmHtQnjDu8HamzQD
79MW6IX6HhaFthbqFy9bUyg8EtD2JFV9PeTYelJBHT2oRni1mmwdl56sJng2UToJ
CtsmW3teTkoSYpbfLP4p1BaKsqYAis60bSD5zC5cwqRiRAjrM6G/5T4/NIyRa+39
eVtZCzWQERd0Fah5L3HkKNO7NczoAW7CDJbyBlASzpU2vEYpV0RBKoEzVlSy1g8Y
w+W6rS1wQswf+/H4dsVeVM4UN/jzZnXlYG1uvpaEhiYwXRffMNCCnOsB779hDrbr
B6Te6mPejGAe+g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:26:53 2025 by rpki-client