Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a383030303a3a2f33342d3334203d3e20323633353138.roa
File:                     323830343a313332343a383030303a3a2f33342d3334203d3e20323633353138.roa (raw, json)
Hash identifier:          /VWfH2rX6k92DmCFWDK0A+pqqhYvIVaCra0FV/tklWE=
Subject key identifier:   29:8E:06:00:A2:E2:56:77:09:51:99:0E:5B:F3:73:42:21:68:88:2D
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       6405904A39EE1DC4E79A628A08785E54BD825705
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a383030303a3a2f33342d3334203d3e20323633353138.roa
Signing time:             Fri 26 Sep 2025 13:29:26 +0000
ROA not before:           Fri 26 Sep 2025 13:24:26 +0000
ROA not after:            Fri 25 Sep 2026 13:29:26 +0000
asID:                     263518
IP address blocks:        2804:1324:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:05:90:4a:39:ee:1d:c4:e7:9a:62:8a:08:78:5e:54:bd:82:57:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Sep 26 13:24:26 2025 GMT
            Not After : Sep 25 13:29:26 2026 GMT
        Subject: CN=298E0600A2E256770951990E5BF373422168882D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:16:f5:85:46:a1:d4:a9:48:e8:8c:9e:83:
                    ab:64:0e:d7:7e:cf:83:c9:f4:6b:1a:78:b6:ca:41:
                    fc:09:b0:d4:50:54:87:85:7b:b7:0f:d2:25:49:dc:
                    c8:df:56:53:62:b1:23:b1:37:39:21:75:85:19:8e:
                    1f:7a:1f:86:5f:67:95:ec:33:16:df:27:03:c6:f3:
                    16:30:12:51:99:5a:81:1d:c2:13:a4:65:96:e5:ed:
                    83:65:0a:70:cb:9a:3c:22:b1:3f:ce:b1:52:d0:68:
                    47:38:77:04:4b:fb:84:da:4e:3a:f6:5b:a7:60:7b:
                    5a:21:7a:11:4a:86:58:69:b8:30:6d:27:c8:00:0a:
                    f2:11:de:64:6d:37:32:a2:be:89:f9:77:c4:0a:57:
                    34:78:d1:0e:c3:e0:a2:0b:89:04:4c:0d:e2:59:04:
                    22:c5:62:61:be:99:63:2f:d5:64:24:7c:ab:61:5e:
                    d5:89:1c:54:87:1e:2e:ba:15:52:7a:09:2f:89:f1:
                    a4:a4:84:94:30:9f:bb:0d:8e:de:37:e7:28:d0:9a:
                    0a:42:1e:8b:6a:b7:42:7f:f4:f8:3f:a7:35:47:1a:
                    d8:b8:5e:f0:85:40:bb:25:6c:f6:55:58:08:98:a3:
                    a0:ab:d6:a9:ee:e7:3d:b1:fd:06:4a:c6:31:14:80:
                    f1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8E:06:00:A2:E2:56:77:09:51:99:0E:5B:F3:73:42:21:68:88:2D
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a383030303a3a2f33342d3334203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1324:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1c:12:7c:94:91:00:47:b9:b8:7a:cd:23:4c:29:e0:2b:ad:b0:
         29:48:ad:bb:20:e7:80:40:0b:99:99:fa:8f:25:dd:93:71:cc:
         2d:60:d7:10:11:78:0b:fd:aa:25:29:c0:dc:04:b8:52:a1:37:
         31:76:24:c8:b3:87:0f:02:48:84:09:18:2e:bb:de:96:dc:27:
         66:98:43:d8:fe:85:ec:f2:02:ee:03:8a:03:48:08:99:db:20:
         4e:10:1b:73:e4:1f:a4:18:16:d4:db:5a:c7:64:c1:03:b9:2b:
         19:63:38:23:0a:d9:bb:1b:f8:89:2e:56:38:2f:ff:61:8e:7c:
         a4:d6:f6:e4:7e:63:e4:7a:d8:6a:a3:b3:7a:a9:77:e5:55:17:
         b4:60:e7:06:bd:98:6f:b7:97:0b:3c:57:79:cc:4f:b0:50:67:
         42:51:5f:53:9f:be:5b:f4:1c:64:e0:71:7b:f9:65:2a:d5:69:
         38:9f:5a:65:8b:fe:45:ea:41:c6:ea:fc:11:ba:db:3f:7b:f2:
         42:84:df:27:66:70:47:bc:c8:4a:b0:4e:32:01:35:d2:0a:f3:
         57:50:4d:74:b8:c9:ad:78:1b:92:7b:09:aa:2b:bc:d6:4a:30:
         cb:6a:7e:d0:53:3f:c2:2f:74:45:ea:9a:dc:da:c2:ec:27:06:
         98:d9:49:52
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZAWQSjnuHcTnmmKKCHheVL2CVwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz
ODc3NUUyNzAeFw0yNTA5MjYxMzI0MjZaFw0yNjA5MjUxMzI5MjZaMDMxMTAvBgNV
BAMTKDI5OEUwNjAwQTJFMjU2NzcwOTUxOTkwRTVCRjM3MzQyMjE2ODg4MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCaxb1hUah1KlI6Iyeg6tkDtd+
z4PJ9GsaeLbKQfwJsNRQVIeFe7cP0iVJ3MjfVlNisSOxNzkhdYUZjh96H4ZfZ5Xs
MxbfJwPG8xYwElGZWoEdwhOkZZbl7YNlCnDLmjwisT/OsVLQaEc4dwRL+4TaTjr2
W6dge1ohehFKhlhpuDBtJ8gACvIR3mRtNzKivon5d8QKVzR40Q7D4KILiQRMDeJZ
BCLFYmG+mWMv1WQkfKthXtWJHFSHHi66FVJ6CS+J8aSkhJQwn7sNjt435yjQmgpC
Hotqt0J/9Pg/pzVHGti4XvCFQLslbPZVWAiYo6Cr1qnu5z2x/QZKxjEUgPEHAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUKY4GAKLiVncJUZkOW/NzQiFoiC0wHwYDVR0j
BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp
VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG
RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv
MzIzODMwMzQzYTMxMzMzMjM0M2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEEySAMA0GCSqGSIb3DQEBCwUA
A4IBAQAcEnyUkQBHubh6zSNMKeArrbApSK27IOeAQAuZmfqPJd2TccwtYNcQEXgL
/aolKcDcBLhSoTcxdiTIs4cPAkiECRguu96W3CdmmEPY/oXs8gLuA4oDSAiZ2yBO
EBtz5B+kGBbU21rHZMEDuSsZYzgjCtm7G/iJLlY4L/9hjnyk1vbkfmPkethqo7N6
qXflVRe0YOcGvZhvt5cLPFd5zE+wUGdCUV9Tn75b9Bxk4HF7+WUq1Wk4n1pli/5F
6kHG6vwRuts/e/JChN8nZnBHvMhKsE4yATXSCvNXUE10uMmteBuSewmqK7zWSjDL
an7QUz/CL3RF6prc2sLsJwaY2UlS
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:41:33 2025 by rpki-client