Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/1/323830343a373464303a3a2f33322d3438203d3e20323731303035.roa
File:                     323830343a373464303a3a2f33322d3438203d3e20323731303035.roa (raw, json)
Hash identifier:          xDxyDwCGxpYJHde0MTK2cRfehKBS+1Fw2XqkPA4zzcA=
Subject key identifier:   4B:F0:B5:56:83:73:B9:F2:E7:CF:DB:98:E2:29:30:21:62:4F:8E:E4
Certificate issuer:       /CN=6285623AAD031B7ABCCB850757F270EE67BCC5F6
Certificate serial:       0A03D8FCD4018DF59C976B4FA25388CD929DAB60
Authority key identifier: 62:85:62:3A:AD:03:1B:7A:BC:CB:85:07:57:F2:70:EE:67:BC:C5:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6285623AAD031B7ABCCB850757F270EE67BCC5F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/1/323830343a373464303a3a2f33322d3438203d3e20323731303035.roa
Signing time:             Fri 10 Oct 2025 19:05:09 +0000
ROA not before:           Fri 10 Oct 2025 19:00:09 +0000
ROA not after:            Fri 09 Oct 2026 19:05:09 +0000
asID:                     271005
IP address blocks:        2804:74d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/1/6285623AAD031B7ABCCB850757F270EE67BCC5F6.crl
                          rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/1/6285623AAD031B7ABCCB850757F270EE67BCC5F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6285623AAD031B7ABCCB850757F270EE67BCC5F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:03:d8:fc:d4:01:8d:f5:9c:97:6b:4f:a2:53:88:cd:92:9d:ab:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6285623AAD031B7ABCCB850757F270EE67BCC5F6
        Validity
            Not Before: Oct 10 19:00:09 2025 GMT
            Not After : Oct  9 19:05:09 2026 GMT
        Subject: CN=4BF0B5568373B9F2E7CFDB98E2293021624F8EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:fc:ec:8c:b7:ae:be:d1:b7:ed:61:5e:f7:
                    dc:23:e1:57:c0:3f:a5:db:e1:28:48:d1:27:c7:d5:
                    23:90:ff:13:1f:33:cc:2b:51:54:58:a6:ed:52:9c:
                    f2:92:2c:9d:cf:a5:1c:6e:47:d8:3a:40:4c:a5:68:
                    0e:20:9b:5f:ef:8d:ed:18:b5:5f:d3:4b:a2:a1:62:
                    d3:04:17:d4:6e:c7:a3:0b:ad:9a:69:ff:83:fd:60:
                    a6:7e:79:09:84:d5:c5:3d:0d:39:ff:b0:30:f4:26:
                    a6:76:a5:3f:33:31:36:bf:91:07:74:98:4a:85:cb:
                    e8:c3:6e:44:61:bf:0e:bb:4a:4c:fc:78:36:38:d6:
                    cb:ad:dc:bc:c6:ed:3c:d0:c7:96:8f:40:fd:a2:8c:
                    f6:35:88:b3:d2:f4:a4:1c:8f:33:62:f1:d8:6a:b2:
                    06:1e:17:5d:05:ef:33:14:ec:2e:72:f0:3a:27:da:
                    25:d2:7d:c9:dc:43:39:c0:cd:68:53:d8:6e:f9:56:
                    c5:1c:59:34:db:36:be:03:52:c6:f3:72:ee:1a:d9:
                    67:40:90:2d:b8:9f:6a:5a:be:02:7e:5d:30:27:81:
                    e9:b5:0a:31:11:1c:6c:e3:79:e1:e2:61:94:03:04:
                    0a:f8:ed:9c:6d:a7:b9:0a:a3:5a:4b:82:48:d2:fe:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F0:B5:56:83:73:B9:F2:E7:CF:DB:98:E2:29:30:21:62:4F:8E:E4
            X509v3 Authority Key Identifier:
                keyid:62:85:62:3A:AD:03:1B:7A:BC:CB:85:07:57:F2:70:EE:67:BC:C5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/1/6285623AAD031B7ABCCB850757F270EE67BCC5F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6285623AAD031B7ABCCB850757F270EE67BCC5F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/1/323830343a373464303a3a2f33322d3438203d3e20323731303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:a0:83:88:41:c6:2b:69:99:19:b6:ad:30:bc:6b:2d:28:c3:
         e2:55:ca:d2:dd:ea:94:99:f7:ea:f7:36:22:59:d2:c6:d7:42:
         01:e0:a2:85:d3:9a:30:bf:ba:92:eb:5f:39:28:ec:58:53:11:
         6d:e4:7c:0b:21:8d:2f:d9:60:41:8a:c5:21:8a:1c:a2:95:7b:
         ce:9d:39:af:01:9e:6b:42:14:ea:a1:2f:e2:e5:94:7b:39:24:
         9a:94:31:c5:db:ca:77:06:6f:22:49:5f:e6:ea:80:83:e1:7b:
         a1:c5:b7:30:51:aa:de:b0:a4:47:94:ae:06:65:6c:49:ca:12:
         85:52:03:97:4a:d6:9d:e1:2e:76:0d:f8:72:d4:a0:04:1d:44:
         88:65:a2:3e:6d:52:10:34:ab:2b:35:82:76:1e:cf:71:e7:ad:
         c4:19:e0:96:cd:59:68:07:52:25:51:7a:bf:f6:20:89:06:d7:
         21:f6:1f:61:55:93:d5:55:fd:c0:dc:c6:6e:16:df:3a:ab:1e:
         f6:cc:e3:5a:ab:c7:ae:a9:f0:e3:9e:46:4d:de:8e:dd:6c:53:
         d1:85:93:dd:82:49:59:23:94:35:63:e5:d1:47:54:1f:b5:7a:
         44:b8:69:3e:f2:15:8d:3e:0e:84:ca:58:6a:b8:8c:4e:ab:37:
         db:6a:a6:ad
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCgPY/NQBjfWcl2tPolOIzZKdq2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI4NTYyM0FBRDAzMUI3QUJDQ0I4NTA3NTdGMjcwRUU2
N0JDQzVGNjAeFw0yNTEwMTAxOTAwMDlaFw0yNjEwMDkxOTA1MDlaMDMxMTAvBgNV
BAMTKDRCRjBCNTU2ODM3M0I5RjJFN0NGREI5OEUyMjkzMDIxNjI0RjhFRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwq/zsjLeuvtG37WFe99wj4VfA
P6Xb4ShI0SfH1SOQ/xMfM8wrUVRYpu1SnPKSLJ3PpRxuR9g6QEylaA4gm1/vje0Y
tV/TS6KhYtMEF9Rux6MLrZpp/4P9YKZ+eQmE1cU9DTn/sDD0JqZ2pT8zMTa/kQd0
mEqFy+jDbkRhvw67Skz8eDY41sut3LzG7TzQx5aPQP2ijPY1iLPS9KQcjzNi8dhq
sgYeF10F7zMU7C5y8Don2iXSfcncQznAzWhT2G75VsUcWTTbNr4DUsbzcu4a2WdA
kC24n2pavgJ+XTAngem1CjERHGzjeeHiYZQDBAr47Zxtp7kKo1pLgkjS/iklAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUS/C1VoNzufLnz9uY4ikwIWJPjuQwHwYDVR0j
BBgwFoAUYoViOq0DG3q8y4UHV/Jw7me8xfYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlRrWVViZGcyTm5EY3o3VW5KM3hMUDU5TGVtY0ZSTEhxZDF6TXNtRFBT
Q0QvMS82Mjg1NjIzQUFEMDMxQjdBQkNDQjg1MDc1N0YyNzBFRTY3QkNDNUY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyODU2MjNBQUQwMzFCN0FC
Q0NCODUwNzU3RjI3MEVFNjdCQ0M1RjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZUa1lVYmRnMk5uRGN6N1VuSjN4TFA1OUxlbWNGUkxIcWQxek1zbURQU0NELzEv
MzIzODMwMzQzYTM3MzQ2NDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMx
MzAzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAR00DANBgkqhkiG9w0BAQsFAAOCAQEAn6CDiEHG
K2mZGbatMLxrLSjD4lXK0t3qlJn36vc2IlnSxtdCAeCihdOaML+6kutfOSjsWFMR
beR8CyGNL9lgQYrFIYocopV7zp05rwGea0IU6qEv4uWUezkkmpQxxdvKdwZvIklf
5uqAg+F7ocW3MFGq3rCkR5SuBmVsScoShVIDl0rWneEudg34ctSgBB1EiGWiPm1S
EDSrKzWCdh7PceetxBngls1ZaAdSJVF6v/YgiQbXIfYfYVWT1VX9wNzGbhbfOqse
9szjWqvHrqnw455GTd6O3WxT0YWT3YJJWSOUNWPl0UdUH7V6RLhpPvIVjT4OhMpY
ariMTqs322qmrQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:03:56 2025 by rpki-client