Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/323830343a346665303a3a2f33332d3333203d3e20323638333535.roa
File:                     323830343a346665303a3a2f33332d3333203d3e20323638333535.roa (raw, json)
Hash identifier:          UJNsPzUGlFh3uo1vK3eQte0VyBK74waL1o+Je1X0+8k=
Subject key identifier:   87:75:B4:43:15:D3:E8:0B:DA:63:31:C1:B3:3B:C0:43:8F:4A:24:77
Certificate issuer:       /CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
Certificate serial:       2E2293D31BCA8C46D9BB86FF9E9967FC3028EE80
Authority key identifier: 28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/323830343a346665303a3a2f33332d3333203d3e20323638333535.roa
Signing time:             Wed 17 Sep 2025 14:36:04 +0000
ROA not before:           Wed 17 Sep 2025 14:31:04 +0000
ROA not after:            Wed 16 Sep 2026 14:36:04 +0000
asID:                     268355
IP address blocks:        2804:4fe0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl
                          rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:22:93:d3:1b:ca:8c:46:d9:bb:86:ff:9e:99:67:fc:30:28:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
        Validity
            Not Before: Sep 17 14:31:04 2025 GMT
            Not After : Sep 16 14:36:04 2026 GMT
        Subject: CN=8775B44315D3E80BDA6331C1B33BC0438F4A2477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:be:b9:68:2c:43:28:55:1b:43:36:12:0e:
                    36:b9:60:96:b3:26:a1:6e:84:33:d5:ab:01:b8:0e:
                    b7:d5:b8:03:2e:52:46:0b:dd:fe:4b:b3:c0:7f:79:
                    21:8f:02:b9:7e:33:88:80:bf:27:13:92:79:0e:2b:
                    da:0d:3e:a9:ae:0c:ba:9f:a1:d0:34:3d:80:07:61:
                    ae:d7:7a:00:0f:1f:6d:4c:ef:40:ca:13:88:b7:26:
                    dd:46:f8:70:68:20:73:97:ec:56:09:30:fd:63:56:
                    53:f7:c6:0e:ab:53:56:1a:74:c2:f8:68:a0:28:71:
                    8e:4a:f8:0e:5e:13:2a:a6:11:8d:03:61:a1:54:3f:
                    46:a2:4d:77:95:a5:7e:45:8c:e5:42:41:e0:8f:c1:
                    5c:17:a7:7a:89:ac:6e:29:1d:8c:ee:31:55:c2:ec:
                    65:a4:0b:2f:13:b1:ff:33:94:0d:b6:95:9e:ab:8f:
                    df:90:10:f6:1a:a1:a0:e4:f1:1e:4f:97:be:81:f8:
                    7f:5f:90:60:bd:f7:26:e3:9c:11:c3:ac:e1:5b:a2:
                    30:61:05:ca:cc:e4:ef:f7:4c:9b:44:c5:6c:d0:d7:
                    8c:e5:2a:80:1f:39:86:05:8c:ca:57:7a:c2:27:01:
                    8d:6c:64:14:f6:46:c3:f1:0c:31:d6:b1:62:c6:58:
                    44:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:75:B4:43:15:D3:E8:0B:DA:63:31:C1:B3:3B:C0:43:8F:4A:24:77
            X509v3 Authority Key Identifier:
                keyid:28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/323830343a346665303a3a2f33332d3333203d3e20323638333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe0::/33

    Signature Algorithm: sha256WithRSAEncryption
         74:a1:8a:01:6e:12:59:b2:a3:85:fe:ac:98:cc:be:5c:2e:2a:
         d5:ff:95:5a:e9:e3:0a:2e:c9:4f:d5:a0:fe:01:68:2f:90:5e:
         45:12:08:59:57:87:12:b1:4f:96:d3:44:c5:18:bf:58:02:9a:
         1b:96:95:1f:b5:aa:0f:ed:ca:73:5a:dd:ba:4b:a1:ab:99:13:
         d9:3e:0b:ce:83:ac:5d:f6:3c:8d:72:bb:26:1a:3e:13:74:93:
         56:6f:c7:5d:ff:37:6f:56:88:83:36:f6:fb:36:67:76:50:15:
         30:f2:d1:03:ac:4d:55:ca:08:36:6d:46:76:2f:f1:ef:70:75:
         9c:01:2a:69:80:b1:9f:0d:23:c4:7e:e3:f6:54:f0:08:44:e6:
         d3:22:2a:2b:c9:2a:52:23:68:e2:8c:04:78:b2:a6:f4:22:c2:
         45:99:11:42:6b:fb:a2:9e:29:c1:d2:05:bf:24:f0:62:68:20:
         33:62:85:a6:ad:cb:a1:dc:a5:b3:c1:58:9d:e1:3f:25:54:71:
         29:19:fd:d0:83:38:29:bc:a6:7f:24:02:f5:09:e2:82:59:ab:
         8f:a5:30:7a:01:2c:09:4a:19:c8:78:4c:40:24:f2:33:49:0a:
         92:5f:14:95:77:f7:69:79:7a:9b:ff:ed:7a:fc:69:6e:c7:5d:
         31:96:6a:7f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULiKT0xvKjEbZu4b/npln/DAo7oAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhGOUY5RkJERjQ4OUU4NkEyQ0I5MjlBNDdFOEJDMEFC
QzJBMUIxQzAeFw0yNTA5MTcxNDMxMDRaFw0yNjA5MTYxNDM2MDRaMDMxMTAvBgNV
BAMTKDg3NzVCNDQzMTVEM0U4MEJEQTYzMzFDMUIzM0JDMDQzOEY0QTI0NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKcL65aCxDKFUbQzYSDja5YJaz
JqFuhDPVqwG4DrfVuAMuUkYL3f5Ls8B/eSGPArl+M4iAvycTknkOK9oNPqmuDLqf
odA0PYAHYa7XegAPH21M70DKE4i3Jt1G+HBoIHOX7FYJMP1jVlP3xg6rU1YadML4
aKAocY5K+A5eEyqmEY0DYaFUP0aiTXeVpX5FjOVCQeCPwVwXp3qJrG4pHYzuMVXC
7GWkCy8Tsf8zlA22lZ6rj9+QEPYaoaDk8R5Pl76B+H9fkGC99ybjnBHDrOFbojBh
BcrM5O/3TJtExWzQ14zlKoAfOYYFjMpXesInAY1sZBT2RsPxDDHWsWLGWERnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUh3W0QxXT6AvaYzHBszvAQ49KJHcwHwYDVR0j
BBgwFoAUKPn5+99Inoaiy5KaR+i8CrwqGxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJOVHdLVmRlblRSSzdkWFZQY0MzMVNwUnJUSFF5aXdFdnlYaFFVQll0
aTkvMC8yOEY5RjlGQkRGNDg5RTg2QTJDQjkyOUE0N0U4QkMwQUJDMkExQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4RjlGOUZCREY0ODlFODZB
MkNCOTI5QTQ3RThCQzBBQkMyQTFCMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyTlR3S1ZkZW5UUks3ZFhWUGNDMzFTcFJyVEhReWl3RXZ5WGhRVUJZdGk5LzAv
MzIzODMwMzQzYTM0NjY2NTMwM2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM4
MzMzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARP4AAwDQYJKoZIhvcNAQELBQADggEBAHShigFu
Elmyo4X+rJjMvlwuKtX/lVrp4wouyU/VoP4BaC+QXkUSCFlXhxKxT5bTRMUYv1gC
mhuWlR+1qg/tynNa3bpLoauZE9k+C86DrF32PI1yuyYaPhN0k1Zvx13/N29WiIM2
9vs2Z3ZQFTDy0QOsTVXKCDZtRnYv8e9wdZwBKmmAsZ8NI8R+4/ZU8AhE5tMiKivJ
KlIjaOKMBHiypvQiwkWZEUJr+6KeKcHSBb8k8GJoIDNihaaty6HcpbPBWJ3hPyVU
cSkZ/dCDOCm8pn8kAvUJ4oJZq4+lMHoBLAlKGch4TEAk8jNJCpJfFJV392l5epv/
7Xr8aW7HXTGWan8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:40:33 2025 by rpki-client