Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa
File:                     323830343a313332343a3a2f33322d3332203d3e20323633353138.roa (raw, json)
Hash identifier:          lohV8VfEtfXGzENEpFPsQXkHIbL4OLhrqTiZvAeb03E=
Subject key identifier:   E0:67:9E:27:66:7D:DB:4F:37:CF:B2:ED:E1:50:0F:1A:77:BE:70:C9
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       71BBFE41E9AB6462E34B7AA7E03C1215A1D76017
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa
Signing time:             Fri 26 Sep 2025 13:29:23 +0000
ROA not before:           Fri 26 Sep 2025 13:24:23 +0000
ROA not after:            Fri 25 Sep 2026 13:29:23 +0000
asID:                     263518
IP address blocks:        2804:1324::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:bb:fe:41:e9:ab:64:62:e3:4b:7a:a7:e0:3c:12:15:a1:d7:60:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Sep 26 13:24:23 2025 GMT
            Not After : Sep 25 13:29:23 2026 GMT
        Subject: CN=E0679E27667DDB4F37CFB2EDE1500F1A77BE70C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:ab:02:48:8d:0c:be:87:d2:28:de:53:e0:
                    8f:ab:67:6b:d8:b3:3f:9e:21:fe:29:35:05:ad:43:
                    f3:d2:71:2b:6a:9f:10:ae:a2:1d:ff:82:87:13:20:
                    9c:06:72:82:8a:33:c8:b9:70:7b:d7:72:33:77:e6:
                    35:13:42:df:f4:42:a7:f1:b5:5e:9f:f8:c8:a4:13:
                    6a:8f:7a:d2:b5:66:ce:19:a3:81:2b:02:a6:b2:3d:
                    d2:f4:c1:a9:42:f8:e4:0b:9d:94:e9:3d:d6:fc:1b:
                    f0:ec:df:b8:c5:6a:35:20:ae:de:74:d9:b2:f4:85:
                    40:12:6c:2c:c8:18:04:fd:26:c0:bd:11:d7:9b:6c:
                    4b:cf:b3:5d:6e:68:ac:b6:61:32:67:da:a5:d5:44:
                    b0:f1:04:55:80:c9:dc:0e:87:ae:02:63:10:d3:17:
                    95:4e:76:ad:29:24:68:2f:54:e2:69:e6:de:b6:fa:
                    87:2b:70:bc:cf:91:54:64:db:1f:87:ca:44:7a:41:
                    3a:96:55:e9:66:f6:4b:21:6f:ea:15:7c:6f:1f:c2:
                    9e:8f:9f:6d:8c:62:d0:db:91:b3:28:cc:03:2d:23:
                    4a:ee:6d:04:dd:f4:e8:5d:80:a5:8d:f4:45:b4:34:
                    cc:f2:c8:d4:b6:be:71:23:6a:d3:11:05:60:3b:6f:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:67:9E:27:66:7D:DB:4F:37:CF:B2:ED:E1:50:0F:1A:77:BE:70:C9
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a3a2f33322d3332203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1324::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:8f:9c:07:80:01:f7:84:19:87:2d:65:93:78:15:b9:f6:35:
         74:2c:c3:4e:e3:da:db:1a:1e:97:3c:dd:f1:83:4f:18:e4:64:
         ee:42:d3:b2:92:47:d9:e5:36:e4:47:15:5e:9b:d7:2e:81:ef:
         fe:10:38:b9:85:59:49:41:92:3f:10:4f:fd:78:d9:11:2b:43:
         76:6d:84:9a:13:68:03:80:d7:09:37:42:4a:d4:1d:2d:57:09:
         e3:87:ef:5d:8b:9f:12:ad:c0:ef:ec:01:b2:0e:71:ff:11:91:
         f3:22:e0:3f:ee:96:67:95:1e:57:9e:f5:a5:e3:89:d6:eb:40:
         91:ee:6f:45:42:19:0d:64:c9:60:28:91:75:d6:58:81:00:7f:
         69:b7:0b:4e:36:8a:66:c1:22:c7:22:e6:5b:b9:12:44:af:d0:
         b7:d2:98:5b:b8:76:db:1f:61:03:50:0c:1f:7c:ae:cf:11:dd:
         b1:fd:4f:a7:1e:f0:85:0f:fe:ae:4a:3e:1c:35:7f:eb:29:c1:
         7e:c3:b2:3f:4d:07:57:34:fe:45:80:30:4f:f7:96:dd:f1:7b:
         c6:26:35:b8:0a:37:a9:f8:85:85:cc:2e:80:0e:ad:b4:64:d8:
         5b:9c:64:08:48:79:48:f8:c6:87:37:5b:71:ad:a8:66:92:89:
         95:af:c5:f0
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcbv+QemrZGLjS3qn4DwSFaHXYBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz
ODc3NUUyNzAeFw0yNTA5MjYxMzI0MjNaFw0yNjA5MjUxMzI5MjNaMDMxMTAvBgNV
BAMTKEUwNjc5RTI3NjY3RERCNEYzN0NGQjJFREUxNTAwRjFBNzdCRTcwQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCozasCSI0MvofSKN5T4I+rZ2vY
sz+eIf4pNQWtQ/PScStqnxCuoh3/gocTIJwGcoKKM8i5cHvXcjN35jUTQt/0Qqfx
tV6f+MikE2qPetK1Zs4Zo4ErAqayPdL0walC+OQLnZTpPdb8G/Ds37jFajUgrt50
2bL0hUASbCzIGAT9JsC9EdebbEvPs11uaKy2YTJn2qXVRLDxBFWAydwOh64CYxDT
F5VOdq0pJGgvVOJp5t62+ocrcLzPkVRk2x+HykR6QTqWVelm9kshb+oVfG8fwp6P
n22MYtDbkbMozAMtI0rubQTd9OhdgKWN9EW0NMzyyNS2vnEjatMRBWA7b52rAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU4GeeJ2Z92083z7Lt4VAPGne+cMkwHwYDVR0j
BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp
VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG
RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv
MzIzODMwMzQzYTMxMzMzMjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMz
MzUzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQTJDANBgkqhkiG9w0BAQsFAAOCAQEAGI+cB4AB
94QZhy1lk3gVufY1dCzDTuPa2xoelzzd8YNPGORk7kLTspJH2eU25EcVXpvXLoHv
/hA4uYVZSUGSPxBP/XjZEStDdm2EmhNoA4DXCTdCStQdLVcJ44fvXYufEq3A7+wB
sg5x/xGR8yLgP+6WZ5UeV571peOJ1utAke5vRUIZDWTJYCiRddZYgQB/abcLTjaK
ZsEixyLmW7kSRK/Qt9KYW7h22x9hA1AMH3yuzxHdsf1Ppx7whQ/+rko+HDV/6ynB
fsOyP00HVzT+RYAwT/eW3fF7xiY1uAo3qfiFhcwugA6ttGTYW5xkCEh5SPjGhzdb
ca2oZpKJla/F8A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:03:48 2025 by rpki-client