Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/323830343a326639303a3a2f33322d3332203d3e20323634383939.roa
File:                     323830343a326639303a3a2f33322d3332203d3e20323634383939.roa (raw, json)
Hash identifier:          DCxuag5uxR5m9JNd0s9wPTbpAChA2rnAmrDYXGf4iKU=
Subject key identifier:   E8:C8:9A:B0:4F:9A:22:44:D2:CE:9F:3E:F8:12:7B:E2:ED:C2:DF:2B
Certificate issuer:       /CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
Certificate serial:       46A8588619DA25441D78D83003E999B43B16E53B
Authority key identifier: 14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/323830343a326639303a3a2f33322d3332203d3e20323634383939.roa
Signing time:             Thu 16 Oct 2025 18:30:47 +0000
ROA not before:           Thu 16 Oct 2025 18:25:47 +0000
ROA not after:            Thu 15 Oct 2026 18:30:47 +0000
asID:                     264899
IP address blocks:        2804:2f90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl
                          rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 05:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a8:58:86:19:da:25:44:1d:78:d8:30:03:e9:99:b4:3b:16:e5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
        Validity
            Not Before: Oct 16 18:25:47 2025 GMT
            Not After : Oct 15 18:30:47 2026 GMT
        Subject: CN=E8C89AB04F9A2244D2CE9F3EF8127BE2EDC2DF2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2e:09:a5:71:ae:f5:80:f5:72:66:cb:f9:2e:
                    b2:18:a0:dc:dc:e6:82:5c:2d:15:e3:04:a8:e3:01:
                    ef:e5:7e:89:6e:2f:e5:ec:48:a0:4e:69:5a:98:5c:
                    8b:03:4a:5d:75:70:af:d8:c2:39:da:5a:bc:65:9f:
                    a6:82:09:a1:c8:85:36:81:ce:ea:e6:41:54:ae:fa:
                    c7:57:a6:1c:31:ce:67:50:a7:1d:fe:f5:0f:04:4e:
                    b4:64:09:f9:9e:31:41:62:45:6e:fd:2b:fb:92:7f:
                    0e:4c:28:4a:b2:3b:7a:e3:99:33:7a:05:d1:fd:a2:
                    fd:a7:af:06:da:6a:e1:e1:1b:07:82:d9:be:f0:a8:
                    2a:00:8c:0b:72:0e:6e:81:cd:c8:10:6f:6e:13:1a:
                    82:8b:b1:26:34:d3:30:4c:11:29:a5:05:94:0f:ea:
                    fd:ce:e1:5a:45:d5:40:11:4c:41:4b:04:05:22:db:
                    df:58:71:ef:c2:9c:ea:46:9b:95:ab:7c:c0:0f:73:
                    e4:2b:bc:04:a3:92:17:b5:bb:07:e0:76:2e:73:f3:
                    0c:3e:e6:b6:8d:c1:b6:ba:6c:5d:45:d5:b1:4f:a1:
                    25:be:90:a6:24:62:b3:75:40:08:e5:5e:ef:ae:b3:
                    f9:83:43:12:33:50:9a:e8:26:78:b1:6b:c6:dc:2d:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C8:9A:B0:4F:9A:22:44:D2:CE:9F:3E:F8:12:7B:E2:ED:C2:DF:2B
            X509v3 Authority Key Identifier:
                keyid:14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/323830343a326639303a3a2f33322d3332203d3e20323634383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:c4:0c:91:ca:00:61:a3:ff:ca:47:51:b8:d6:f1:9c:38:ea:
         ab:97:a3:78:62:e8:31:a1:41:4b:77:95:61:67:8d:98:ea:f5:
         ad:9d:5c:7d:e0:ab:5a:9e:67:57:37:95:94:46:b8:57:5b:ba:
         52:c9:73:49:4c:8e:c7:ef:8f:7e:04:6e:3b:c9:d6:5d:79:5b:
         46:b5:51:eb:f1:7d:07:43:eb:a6:ec:ea:95:dc:c4:23:f8:c9:
         a3:84:3d:8c:1e:d8:a9:8e:c5:4a:e8:eb:c1:49:a7:84:cd:fc:
         50:50:0e:82:0e:eb:b8:2a:57:4e:8c:e4:79:a4:df:6a:18:93:
         93:de:22:8e:4b:f0:ee:cf:f9:05:ef:df:cd:0a:d4:23:92:9f:
         d3:72:47:b0:8d:df:3b:87:1f:22:13:c3:0e:82:49:a2:8b:74:
         f0:90:6e:8d:e9:40:91:f4:de:20:78:1b:65:d6:3a:4a:c6:d6:
         fc:3f:a3:4e:73:fc:10:1a:88:95:6b:a2:e2:6a:c8:83:b6:b6:
         73:3c:04:7e:60:b2:f7:31:89:ec:b4:b0:14:55:62:e6:1f:ba:
         58:c8:0a:f7:0f:3a:8d:03:9a:61:5e:41:61:c0:68:44:84:30:
         8d:aa:dc:12:da:cd:af:92:3d:9d:22:84:32:83:63:ad:5a:61:
         5a:f6:f4:80
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURqhYhhnaJUQdeNgwA+mZtDsW5TswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQxOTJGODFCRkI4MDYwOUY5RTk1REQ4RDI4OEFFRUNF
N0I1MjkzODAeFw0yNTEwMTYxODI1NDdaFw0yNjEwMTUxODMwNDdaMDMxMTAvBgNV
BAMTKEU4Qzg5QUIwNEY5QTIyNDREMkNFOUYzRUY4MTI3QkUyRURDMkRGMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgLgmlca71gPVyZsv5LrIYoNzc
5oJcLRXjBKjjAe/lfoluL+XsSKBOaVqYXIsDSl11cK/YwjnaWrxln6aCCaHIhTaB
zurmQVSu+sdXphwxzmdQpx3+9Q8ETrRkCfmeMUFiRW79K/uSfw5MKEqyO3rjmTN6
BdH9ov2nrwbaauHhGweC2b7wqCoAjAtyDm6BzcgQb24TGoKLsSY00zBMESmlBZQP
6v3O4VpF1UARTEFLBAUi299Yce/CnOpGm5WrfMAPc+QrvASjkhe1uwfgdi5z8ww+
5raNwba6bF1F1bFPoSW+kKYkYrN1QAjlXu+us/mDQxIzUJroJnixa8bcLaWtAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6MiasE+aIkTSzp8++BJ74u3C3yswHwYDVR0j
BBgwFoAUFBkvgb+4Bgn56V3Y0oiu7Oe1KTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXZhcWFaZlUzRzFOWGdtekJYQjFUUWRLWDhqbW83UU1pZVByQkJVaWNr
aW0vMC8xNDE5MkY4MUJGQjgwNjA5RjlFOTVERDhEMjg4QUVFQ0U3QjUyOTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0MTkyRjgxQkZCODA2MDlG
OUU5NUREOEQyODhBRUVDRTdCNTI5MzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V2YXFhWmZVM0cxTlhnbXpCWEIxVFFkS1g4am1vN1FNaWVQckJCVWlja2ltLzAv
MzIzODMwMzQzYTMyNjYzOTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzgzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQvkDANBgkqhkiG9w0BAQsFAAOCAQEABcQMkcoA
YaP/ykdRuNbxnDjqq5ejeGLoMaFBS3eVYWeNmOr1rZ1cfeCrWp5nVzeVlEa4V1u6
UslzSUyOx++PfgRuO8nWXXlbRrVR6/F9B0PrpuzqldzEI/jJo4Q9jB7YqY7FSujr
wUmnhM38UFAOgg7ruCpXTozkeaTfahiTk94ijkvw7s/5Be/fzQrUI5Kf03JHsI3f
O4cfIhPDDoJJoot08JBujelAkfTeIHgbZdY6SsbW/D+jTnP8EBqIlWui4mrIg7a2
czwEfmCy9zGJ7LSwFFVi5h+6WMgK9w86jQOaYV5BYcBoRIQwjarcEtrNr5I9nSKE
MoNjrVphWvb0gA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:21 2025 by rpki-client