Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/323830343a313164303a3a2f33322d313238203d3e20323633343431.roa
File:                     323830343a313164303a3a2f33322d313238203d3e20323633343431.roa (raw, json)
Hash identifier:          WQgnIVl+RFjP1r2hrdSEMpI0izEozDyz4++NdOXecRc=
Subject key identifier:   5C:C5:07:91:18:E2:7B:AC:27:EB:50:5E:CC:2C:9E:32:4E:61:86:6B
Certificate issuer:       /CN=26E3D1B009E7A8557F73668315C1AA6376A4A0C1
Certificate serial:       209F40AF1E7ED3DF7D7024EE7F503E65C3C4BE5F
Authority key identifier: 26:E3:D1:B0:09:E7:A8:55:7F:73:66:83:15:C1:AA:63:76:A4:A0:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/323830343a313164303a3a2f33322d313238203d3e20323633343431.roa
Signing time:             Sat 11 Oct 2025 15:06:00 +0000
ROA not before:           Sat 11 Oct 2025 15:01:00 +0000
ROA not after:            Sat 10 Oct 2026 15:06:00 +0000
asID:                     263441
IP address blocks:        2804:11d0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.crl
                          rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9f:40:af:1e:7e:d3:df:7d:70:24:ee:7f:50:3e:65:c3:c4:be:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26E3D1B009E7A8557F73668315C1AA6376A4A0C1
        Validity
            Not Before: Oct 11 15:01:00 2025 GMT
            Not After : Oct 10 15:06:00 2026 GMT
        Subject: CN=5CC5079118E27BAC27EB505ECC2C9E324E61866B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:4e:63:2a:28:3e:4e:46:25:b8:2f:b0:29:
                    5e:e0:a9:bc:ec:81:76:84:bf:27:48:35:7d:c2:8d:
                    25:49:86:a3:35:ec:f4:2c:c6:c6:e0:d9:9c:4f:bb:
                    a2:30:c4:f6:7b:2c:70:de:dd:e6:c6:7a:a8:fa:34:
                    3e:ef:de:1b:12:1a:e2:e1:58:e0:f1:df:88:b1:05:
                    80:15:ff:ac:90:01:3e:e8:09:40:a5:a6:82:84:28:
                    68:48:8b:1c:fc:65:f5:77:93:ea:3f:5d:59:dc:c5:
                    4a:66:8e:81:d1:9c:83:c0:71:04:79:e4:37:8e:4b:
                    c4:19:f3:9b:47:1b:e3:18:a5:b2:11:07:b0:a7:8c:
                    3e:63:03:ea:17:3e:75:a4:55:f9:01:44:95:ac:1e:
                    72:12:99:11:64:ab:63:f5:b7:fe:e9:a4:4d:16:ef:
                    f5:aa:60:2a:23:2d:34:23:d0:c2:10:6c:ca:4e:db:
                    df:f5:3d:8a:cb:64:03:86:15:35:f0:ed:b2:75:0f:
                    a4:56:69:d4:ef:3d:9f:ab:6a:e2:33:f3:5b:81:24:
                    fb:39:bc:c5:1b:b5:b9:8a:9d:b4:30:a7:64:cb:54:
                    82:e2:ed:02:23:79:73:78:61:97:bf:ca:a7:61:4e:
                    33:2a:1f:41:d2:59:b6:75:bd:de:aa:25:09:92:59:
                    c3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C5:07:91:18:E2:7B:AC:27:EB:50:5E:CC:2C:9E:32:4E:61:86:6B
            X509v3 Authority Key Identifier:
                keyid:26:E3:D1:B0:09:E7:A8:55:7F:73:66:83:15:C1:AA:63:76:A4:A0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/323830343a313164303a3a2f33322d313238203d3e20323633343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:e7:34:38:74:d8:83:4c:84:e1:1e:b3:ca:27:a9:f9:34:ea:
         33:e7:72:a2:1c:9a:cc:80:15:d4:e7:96:c7:28:62:6c:43:ef:
         db:f5:76:fc:ce:e1:ab:d8:d7:68:d8:e4:6c:76:e3:47:28:ad:
         bf:e6:a3:2f:a8:82:f5:7b:52:77:6e:0e:c4:55:db:99:6a:67:
         b9:0c:01:15:77:4d:fc:77:cc:ed:02:cd:e6:04:fd:ee:2f:87:
         58:77:0b:51:d0:fd:c5:bd:f6:f0:89:92:45:9b:fb:31:45:2f:
         d9:8b:31:5c:82:b8:af:ea:9a:8e:57:d4:d0:a3:df:ec:9e:7d:
         25:63:50:f2:57:26:4b:c2:ca:fc:84:49:ca:1d:a9:e3:8d:53:
         1b:40:42:a6:0b:0e:91:ed:ea:e6:8e:82:ca:1c:48:cb:f9:8f:
         7c:7c:8d:67:b5:20:ee:1b:01:6b:9b:0f:33:58:b2:59:33:2d:
         b4:13:7c:91:45:ac:d1:b8:a8:08:ff:50:8c:af:59:39:97:8b:
         d4:fe:65:80:54:70:9d:4c:f6:6d:f1:0e:9d:93:d1:23:39:72:
         c1:f7:80:81:85:11:25:53:1a:76:ce:11:a9:25:2d:6a:94:02:
         a7:f6:28:d0:82:a8:6e:5d:9f:19:31:1b:59:62:b0:38:ff:5f:
         e6:64:ec:dc
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUIJ9Arx5+0999cCTuf1A+ZcPEvl8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZFM0QxQjAwOUU3QTg1NTdGNzM2NjgzMTVDMUFBNjM3
NkE0QTBDMTAeFw0yNTEwMTExNTAxMDBaFw0yNjEwMTAxNTA2MDBaMDMxMTAvBgNV
BAMTKDVDQzUwNzkxMThFMjdCQUMyN0VCNTA1RUNDMkM5RTMyNEU2MTg2NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/hU5jKig+TkYluC+wKV7gqbzs
gXaEvydINX3CjSVJhqM17PQsxsbg2ZxPu6IwxPZ7LHDe3ebGeqj6ND7v3hsSGuLh
WODx34ixBYAV/6yQAT7oCUClpoKEKGhIixz8ZfV3k+o/XVncxUpmjoHRnIPAcQR5
5DeOS8QZ85tHG+MYpbIRB7CnjD5jA+oXPnWkVfkBRJWsHnISmRFkq2P1t/7ppE0W
7/WqYCojLTQj0MIQbMpO29/1PYrLZAOGFTXw7bJ1D6RWadTvPZ+rauIz81uBJPs5
vMUbtbmKnbQwp2TLVILi7QIjeXN4YZe/yqdhTjMqH0HSWbZ1vd6qJQmSWcMlAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUXMUHkRjie6wn61BezCyeMk5hhmswHwYDVR0j
BBgwFoAUJuPRsAnnqFV/c2aDFcGqY3akoMEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmNyaXpZVjlQNlRMd1RyaG45TDhaV1JrendNWHE3UFVlZkFXTk1iM3c1
emQvMC8yNkUzRDFCMDA5RTdBODU1N0Y3MzY2ODMxNUMxQUE2Mzc2QTRBMEMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2RTNEMUIwMDlFN0E4NTU3
RjczNjY4MzE1QzFBQTYzNzZBNEEwQzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Zjcml6WVY5UDZUTHdUcmhuOUw4WldSa3p3TVhxN1BVZWZBV05NYjN3NXpkLzAv
MzIzODMwMzQzYTMxMzE2NDMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzNDM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBBHQMA0GCSqGSIb3DQEBCwUAA4IBAQAE5zQ4
dNiDTIThHrPKJ6n5NOoz53KiHJrMgBXU55bHKGJsQ+/b9Xb8zuGr2Ndo2ORsduNH
KK2/5qMvqIL1e1J3bg7EVduZame5DAEVd038d8ztAs3mBP3uL4dYdwtR0P3Fvfbw
iZJFm/sxRS/ZizFcgriv6pqOV9TQo9/snn0lY1DyVyZLwsr8hEnKHanjjVMbQEKm
Cw6R7ermjoLKHEjL+Y98fI1ntSDuGwFrmw8zWLJZMy20E3yRRazRuKgI/1CMr1k5
l4vU/mWAVHCdTPZt8Q6dk9EjOXLB94CBhRElUxp2zhGpJS1qlAKn9ijQgqhuXZ8Z
MRtZYrA4/1/mZOzc
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:02:49 2025 by rpki-client