Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33332d3333203d3e20323638343633.roa
File:                     323830343a353139343a3a2f33332d3333203d3e20323638343633.roa (raw, json)
Hash identifier:          bFLfDQkAJYawZoez9NIdmneW0aWmgGEdm5t/6VEMmiw=
Subject key identifier:   01:1C:EA:60:35:E4:E7:80:1F:35:DE:C0:10:1D:43:8E:03:D5:36:BB
Certificate issuer:       /CN=A0E5732D5CB2354F7128E1B6A750407464415454
Certificate serial:       429CD868CEDAC551B90D985FB8DD02124A29F7BB
Authority key identifier: A0:E5:73:2D:5C:B2:35:4F:71:28:E1:B6:A7:50:40:74:64:41:54:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E5732D5CB2354F7128E1B6A750407464415454.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33332d3333203d3e20323638343633.roa
Signing time:             Thu 25 Sep 2025 13:25:21 +0000
ROA not before:           Thu 25 Sep 2025 13:20:21 +0000
ROA not after:            Thu 24 Sep 2026 13:25:21 +0000
asID:                     268463
IP address blocks:        2804:5194::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/A0E5732D5CB2354F7128E1B6A750407464415454.crl
                          rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/A0E5732D5CB2354F7128E1B6A750407464415454.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E5732D5CB2354F7128E1B6A750407464415454.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9c:d8:68:ce:da:c5:51:b9:0d:98:5f:b8:dd:02:12:4a:29:f7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0E5732D5CB2354F7128E1B6A750407464415454
        Validity
            Not Before: Sep 25 13:20:21 2025 GMT
            Not After : Sep 24 13:25:21 2026 GMT
        Subject: CN=011CEA6035E4E7801F35DEC0101D438E03D536BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:27:1f:76:d2:6c:12:43:31:93:17:a6:95:
                    7d:87:97:f2:12:6c:cc:f7:2e:ad:20:6b:b9:aa:f0:
                    52:38:c2:08:91:26:84:84:b6:8e:4e:3c:5f:7f:c0:
                    5d:8b:17:b4:37:c5:cf:40:e0:1a:82:8f:9b:85:34:
                    81:76:36:29:f6:cc:9c:dd:14:21:19:d8:26:b4:29:
                    2e:0a:e0:e6:40:75:4e:80:7f:e1:5f:e0:6c:de:b6:
                    a6:9a:c7:09:5b:8e:32:1c:f3:d1:97:9a:56:18:21:
                    e0:2a:96:a2:37:95:93:4c:99:41:47:b2:6e:4b:ab:
                    95:c7:54:23:d4:6e:f7:55:d2:8f:75:86:f7:94:b4:
                    96:9e:09:1c:82:69:a2:63:21:e6:ed:fd:3e:8b:9f:
                    4a:81:c2:9c:d7:1f:e6:c7:a9:31:cb:cf:ef:93:a4:
                    cb:84:65:8f:90:0b:a7:49:60:f8:ff:65:ba:6f:10:
                    3a:c5:23:52:90:17:38:9b:ae:9f:b1:d9:90:77:02:
                    77:ee:f1:e8:a2:e3:b7:43:49:46:7c:f5:9f:84:d5:
                    1d:38:84:34:8f:37:0b:6a:37:80:84:c9:d8:c7:37:
                    a9:2a:7e:ba:c6:ed:db:1b:e3:49:8b:51:f1:67:30:
                    1e:c0:d7:b3:ac:1e:d9:3b:76:ad:1a:81:31:40:eb:
                    4b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1C:EA:60:35:E4:E7:80:1F:35:DE:C0:10:1D:43:8E:03:D5:36:BB
            X509v3 Authority Key Identifier:
                keyid:A0:E5:73:2D:5C:B2:35:4F:71:28:E1:B6:A7:50:40:74:64:41:54:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/A0E5732D5CB2354F7128E1B6A750407464415454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E5732D5CB2354F7128E1B6A750407464415454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33332d3333203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5194::/33

    Signature Algorithm: sha256WithRSAEncryption
         01:aa:2f:d3:ad:00:9a:84:de:f4:ba:43:81:6c:aa:68:fb:12:
         5a:24:1c:1f:f0:f2:fe:2e:54:9b:9f:91:0c:5d:ab:5c:fc:d1:
         4c:6d:f3:00:16:76:75:de:30:3d:92:50:7f:39:14:3e:30:04:
         4d:5e:fc:22:72:7d:05:cb:09:fe:2e:c7:20:86:fd:67:4c:09:
         29:0d:4b:ec:45:af:06:0f:58:8c:70:a6:2a:60:0a:b8:64:93:
         f6:6a:d4:a5:25:87:6c:93:24:93:dd:74:6e:07:2b:d3:b5:a9:
         79:2f:f2:e0:39:2a:d1:9e:2a:53:fb:34:10:c8:4b:fd:5c:28:
         31:65:ae:16:49:a5:ab:a4:54:fd:8b:f7:68:08:64:12:58:b7:
         97:f6:a7:a0:e3:e5:4b:de:4f:b4:e0:2b:68:16:64:13:f3:28:
         b7:1e:87:37:37:15:37:0a:4c:b4:f9:fc:df:34:28:68:5f:7c:
         14:13:d9:aa:87:60:ae:a3:78:d2:f5:93:f0:e4:f7:d9:e1:42:
         7c:28:43:08:93:11:ff:34:37:6c:c9:47:2f:fb:79:d7:9c:05:
         fe:b4:0f:12:82:05:bc:74:ac:1b:7f:26:a4:37:b4:4e:df:80:
         18:36:b1:28:f6:3e:98:d6:5b:e9:0f:bf:7c:02:0d:c0:e9:5e:
         76:5f:4a:a5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQpzYaM7axVG5DZhfuN0CEkop97swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBFNTczMkQ1Q0IyMzU0RjcxMjhFMUI2QTc1MDQwNzQ2
NDQxNTQ1NDAeFw0yNTA5MjUxMzIwMjFaFw0yNjA5MjQxMzI1MjFaMDMxMTAvBgNV
BAMTKDAxMUNFQTYwMzVFNEU3ODAxRjM1REVDMDEwMUQ0MzhFMDNENTM2QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQycfdtJsEkMxkxemlX2Hl/IS
bMz3Lq0ga7mq8FI4wgiRJoSEto5OPF9/wF2LF7Q3xc9A4BqCj5uFNIF2Nin2zJzd
FCEZ2Ca0KS4K4OZAdU6Af+Ff4GzetqaaxwlbjjIc89GXmlYYIeAqlqI3lZNMmUFH
sm5Lq5XHVCPUbvdV0o91hveUtJaeCRyCaaJjIebt/T6Ln0qBwpzXH+bHqTHLz++T
pMuEZY+QC6dJYPj/ZbpvEDrFI1KQFzibrp+x2ZB3Anfu8eii47dDSUZ89Z+E1R04
hDSPNwtqN4CEydjHN6kqfrrG7dsb40mLUfFnMB7A17OsHtk7dq0agTFA60sPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUARzqYDXk54AfNd7AEB1DjgPVNrswHwYDVR0j
BBgwFoAUoOVzLVyyNU9xKOG2p1BAdGRBVFQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnNNd3BvV1FERTlRMlE0YVRGR0hxdjZqZGcybTdZRmNENjlOcUs2ZTJm
S3MvMC9BMEU1NzMyRDVDQjIzNTRGNzEyOEUxQjZBNzUwNDA3NDY0NDE1NDU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwRTU3MzJENUNCMjM1NEY3
MTI4RTFCNkE3NTA0MDc0NjQ0MTU0NTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZzTXdwb1dRREU5UTJRNGFURkdIcXY2amRnMm03WUZjRDY5TnFLNmUyZktzLzAv
MzIzODMwMzQzYTM1MzEzOTM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzQzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARRlAAwDQYJKoZIhvcNAQELBQADggEBAAGqL9Ot
AJqE3vS6Q4Fsqmj7ElokHB/w8v4uVJufkQxdq1z80Uxt8wAWdnXeMD2SUH85FD4w
BE1e/CJyfQXLCf4uxyCG/WdMCSkNS+xFrwYPWIxwpipgCrhkk/Zq1KUlh2yTJJPd
dG4HK9O1qXkv8uA5KtGeKlP7NBDIS/1cKDFlrhZJpaukVP2L92gIZBJYt5f2p6Dj
5UveT7TgK2gWZBPzKLcehzc3FTcKTLT5/N80KGhffBQT2aqHYK6jeNL1k/Dk99nh
QnwoQwiTEf80N2zJRy/7edecBf60DxKCBbx0rBt/JqQ3tE7fgBg2sSj2PpjWW+kP
v3wCDcDpXnZfSqU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:37:21 2025 by rpki-client