Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a633030303a3a2f33342d3334203d3e20323633353138.roa
File:                     323830343a313332343a633030303a3a2f33342d3334203d3e20323633353138.roa (raw, json)
Hash identifier:          YZUOPlPBPN/2cS46w7fSYJFnLAJzM/pIQ2igs7ySWRw=
Subject key identifier:   7D:30:DB:6B:AF:DE:E9:47:2C:E9:F2:C9:F1:14:3E:06:92:D2:5D:FA
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       74E50D12E6B8DF4E0192E4189DC5AEF11FA2037F
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a633030303a3a2f33342d3334203d3e20323633353138.roa
Signing time:             Fri 26 Sep 2025 13:29:23 +0000
ROA not before:           Fri 26 Sep 2025 13:24:23 +0000
ROA not after:            Fri 25 Sep 2026 13:29:23 +0000
asID:                     263518
IP address blocks:        2804:1324:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e5:0d:12:e6:b8:df:4e:01:92:e4:18:9d:c5:ae:f1:1f:a2:03:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Sep 26 13:24:23 2025 GMT
            Not After : Sep 25 13:29:23 2026 GMT
        Subject: CN=7D30DB6BAFDEE9472CE9F2C9F1143E0692D25DFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:12:64:84:17:28:58:e6:6a:61:e2:08:09:07:
                    0d:6b:35:18:4d:04:0c:2b:66:cc:0b:42:6f:31:08:
                    f5:5c:cc:f8:cb:19:8c:ec:77:1b:c0:b5:f5:b9:f9:
                    11:12:36:9d:0c:6e:6d:b2:ec:64:00:36:e0:22:40:
                    e8:6a:1a:1b:d9:78:08:8f:ae:c5:cc:4e:05:9c:3e:
                    e2:33:e8:27:46:95:f5:b4:fc:27:02:53:c7:ff:cf:
                    77:90:cb:8f:18:4b:0a:5a:74:15:5d:02:28:87:35:
                    b8:69:5e:25:c7:4c:c6:a3:21:bb:ed:c9:55:d6:35:
                    dd:69:15:c6:bf:15:c4:c0:cd:ad:8e:de:24:b3:d8:
                    37:20:18:51:29:3a:38:47:ba:de:bc:7d:1f:89:cb:
                    51:66:16:c1:3b:bd:a3:99:60:73:a2:a3:19:2a:35:
                    79:de:90:52:b0:7f:4e:63:6c:3b:bf:18:b6:24:53:
                    4f:05:3b:39:b3:f8:f6:5b:8f:c5:bc:4c:7f:1d:f7:
                    ad:8b:c6:0a:07:7d:97:0b:7c:ba:44:66:0c:5b:31:
                    9f:d0:1a:fe:6a:f8:a5:20:d7:93:ba:6e:9f:60:0d:
                    16:0a:10:b6:60:6b:fb:b1:e5:83:89:be:c2:61:30:
                    60:9e:71:27:b1:9f:0a:9e:4f:b8:57:96:d4:ad:3f:
                    dd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:30:DB:6B:AF:DE:E9:47:2C:E9:F2:C9:F1:14:3E:06:92:D2:5D:FA
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a633030303a3a2f33342d3334203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1324:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         87:69:e8:b6:f7:3f:7b:93:42:66:90:cb:4b:20:34:4d:19:4b:
         ef:c6:08:63:a3:4b:86:ea:49:83:df:58:44:80:74:0d:82:34:
         dd:9c:bc:1a:25:7f:27:e6:b0:b8:2f:4a:f6:0f:cf:7d:28:14:
         c1:74:8d:d5:47:fb:5c:43:40:7a:4a:b6:cc:c8:8d:17:24:1f:
         38:fd:b0:62:6d:41:0a:b5:dc:6f:99:f9:3a:f0:6b:39:e3:b5:
         6f:f9:0f:29:ba:a7:48:6b:47:d4:9e:75:ce:d9:02:d2:44:71:
         03:02:84:39:00:11:87:a9:9d:0d:5b:0f:2e:a0:4a:c5:21:6e:
         74:22:07:a8:04:d4:f1:a1:1e:58:90:df:8a:4f:d6:33:13:22:
         ff:94:57:0f:37:d9:a7:1c:17:f3:16:b2:cc:c0:86:fa:bc:80:
         14:33:ad:e2:24:8e:0e:b8:35:fa:67:32:9b:17:6f:e2:61:e4:
         cc:aa:f2:9b:92:77:6a:a2:be:5c:a8:fa:59:ee:33:75:f1:12:
         5e:b2:e2:30:60:bc:7b:f0:7e:c8:bc:8b:1f:69:5b:ce:1c:8d:
         39:af:98:59:75:73:f9:40:3d:e1:bc:3f:bd:d5:c4:e7:fa:fa:
         9b:7e:e5:29:2d:b7:d2:46:11:72:bd:e6:73:06:1b:fa:8b:43:
         ba:08:4a:71
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUdOUNEua4304BkuQYncWu8R+iA38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz
ODc3NUUyNzAeFw0yNTA5MjYxMzI0MjNaFw0yNjA5MjUxMzI5MjNaMDMxMTAvBgNV
BAMTKDdEMzBEQjZCQUZERUU5NDcyQ0U5RjJDOUYxMTQzRTA2OTJEMjVERkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEmSEFyhY5mph4ggJBw1rNRhN
BAwrZswLQm8xCPVczPjLGYzsdxvAtfW5+RESNp0Mbm2y7GQANuAiQOhqGhvZeAiP
rsXMTgWcPuIz6CdGlfW0/CcCU8f/z3eQy48YSwpadBVdAiiHNbhpXiXHTMajIbvt
yVXWNd1pFca/FcTAza2O3iSz2DcgGFEpOjhHut68fR+Jy1FmFsE7vaOZYHOioxkq
NXnekFKwf05jbDu/GLYkU08FOzmz+PZbj8W8TH8d962LxgoHfZcLfLpEZgxbMZ/Q
Gv5q+KUg15O6bp9gDRYKELZga/ux5YOJvsJhMGCecSexnwqeT7hXltStP93lAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUfTDba6/e6Ucs6fLJ8RQ+BpLSXfowHwYDVR0j
BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp
VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG
RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv
MzIzODMwMzQzYTMxMzMzMjM0M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzMzM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEEyTAMA0GCSqGSIb3DQEBCwUA
A4IBAQCHaei29z97k0JmkMtLIDRNGUvvxghjo0uG6kmD31hEgHQNgjTdnLwaJX8n
5rC4L0r2D899KBTBdI3VR/tcQ0B6SrbMyI0XJB84/bBibUEKtdxvmfk68Gs547Vv
+Q8puqdIa0fUnnXO2QLSRHEDAoQ5ABGHqZ0NWw8uoErFIW50IgeoBNTxoR5YkN+K
T9YzEyL/lFcPN9mnHBfzFrLMwIb6vIAUM63iJI4OuDX6ZzKbF2/iYeTMqvKbkndq
or5cqPpZ7jN18RJesuIwYLx78H7IvIsfaVvOHI05r5hZdXP5QD3hvD+91cTn+vqb
fuUpLbfSRhFyveZzBhv6i0O6CEpx
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:02:45 2025 by rpki-client