Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3a2f33322d3332203d3e20323633383636.roa
File:                     323830343a323666343a3a2f33322d3332203d3e20323633383636.roa (raw, json)
Hash identifier:          PEqOm/ImcML6U7hmZ0W7IWzYDQH1LCGA/PhEoi4xoRY=
Subject key identifier:   C1:88:67:56:83:AC:16:DC:FA:BC:04:10:C1:23:D7:56:7C:F4:50:DD
Certificate issuer:       /CN=EF854F36A2B85F7CA74543A1F5518487D375E292
Certificate serial:       37C5E8C602F35D5DC92535F740EB08DD83E80622
Authority key identifier: EF:85:4F:36:A2:B8:5F:7C:A7:45:43:A1:F5:51:84:87:D3:75:E2:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF854F36A2B85F7CA74543A1F5518487D375E292.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3a2f33322d3332203d3e20323633383636.roa
Signing time:             Wed 08 Oct 2025 13:40:07 +0000
ROA not before:           Wed 08 Oct 2025 13:35:07 +0000
ROA not after:            Wed 07 Oct 2026 13:40:07 +0000
asID:                     263866
IP address blocks:        2804:26f4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/EF854F36A2B85F7CA74543A1F5518487D375E292.crl
                          rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/EF854F36A2B85F7CA74543A1F5518487D375E292.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF854F36A2B85F7CA74543A1F5518487D375E292.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 21:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c5:e8:c6:02:f3:5d:5d:c9:25:35:f7:40:eb:08:dd:83:e8:06:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF854F36A2B85F7CA74543A1F5518487D375E292
        Validity
            Not Before: Oct  8 13:35:07 2025 GMT
            Not After : Oct  7 13:40:07 2026 GMT
        Subject: CN=C188675683AC16DCFABC0410C123D7567CF450DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:70:92:db:39:c1:40:e9:7b:c7:a2:97:da:d8:
                    3c:fb:cb:ac:e7:1a:2f:1c:00:32:c4:5f:05:01:88:
                    1d:60:67:d0:b0:c5:9e:77:fc:bc:c2:da:d1:d7:fe:
                    9e:29:c8:b3:2a:66:cb:82:ad:59:c1:5b:b8:3e:a2:
                    4a:6e:89:c9:af:bd:8f:69:f8:3d:22:22:a5:b7:a5:
                    89:6d:08:79:38:3d:00:57:c1:e3:13:1e:93:8e:16:
                    4d:47:17:bf:0c:25:3a:6d:4c:7b:2b:e2:a8:dd:5f:
                    88:06:fa:00:d3:50:33:8a:f1:ea:c2:52:99:0c:9b:
                    d2:db:67:53:f3:4e:35:b7:3f:28:08:5b:e2:a7:e8:
                    2b:47:42:33:47:e4:b0:a9:53:9e:c4:80:db:46:02:
                    47:e4:45:bd:c1:24:a6:a0:91:30:a6:0c:3a:e9:2c:
                    72:b6:fa:88:5b:46:50:39:ba:ac:3c:7e:7a:31:e6:
                    cb:32:9a:3c:fe:99:f3:1b:4c:08:c5:02:b5:49:81:
                    1e:58:74:56:4d:ef:78:99:48:e4:01:dc:27:b8:2e:
                    89:ad:61:96:1b:7d:34:93:dc:c7:93:14:2d:d5:1a:
                    93:88:95:12:b0:1a:ce:5a:86:01:88:3e:49:f9:a3:
                    1a:67:aa:9a:6e:a6:a4:61:aa:ea:08:81:22:88:7d:
                    49:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:88:67:56:83:AC:16:DC:FA:BC:04:10:C1:23:D7:56:7C:F4:50:DD
            X509v3 Authority Key Identifier:
                keyid:EF:85:4F:36:A2:B8:5F:7C:A7:45:43:A1:F5:51:84:87:D3:75:E2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/EF854F36A2B85F7CA74543A1F5518487D375E292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF854F36A2B85F7CA74543A1F5518487D375E292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3a2f33322d3332203d3e20323633383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:c3:09:13:20:25:74:e5:69:7e:d2:ee:be:f0:ef:f0:13:9d:
         b5:47:bc:7d:a5:92:ee:79:99:a4:5a:8d:50:6c:b1:98:df:5f:
         d0:e7:59:5a:99:87:f8:66:c0:81:9e:25:40:ab:a5:7e:9f:a8:
         be:be:ae:de:6b:46:aa:7c:2d:ed:3e:ff:c7:56:bb:d8:d3:74:
         8e:ab:ef:18:16:b7:25:d7:90:5d:57:87:e0:6f:b0:62:32:9d:
         25:87:a8:b2:c1:4a:a9:6a:dd:21:53:b3:42:fe:c2:75:a0:5d:
         66:58:d0:4c:97:c2:04:f6:f4:9f:0f:71:82:c3:14:45:29:66:
         42:46:8c:ef:07:69:cf:21:8f:6d:27:9d:7d:79:f1:e7:4c:04:
         86:13:4e:e6:c8:18:1f:86:c2:a3:bc:78:47:a4:ac:60:b1:fa:
         95:96:47:c7:01:ac:c2:91:ab:d6:18:3a:f4:75:1e:a6:5e:f4:
         08:d1:4f:f9:44:8d:a7:4b:6e:b0:0d:47:8b:5e:08:17:ea:44:
         45:ad:8a:98:63:6b:69:49:35:8b:37:6a:79:43:2b:45:cd:c6:
         1b:c1:a1:c3:fd:dc:84:f2:18:c9:19:c4:9e:a0:6e:4c:6b:27:
         6c:bc:44:a0:44:de:98:d3:22:e1:e2:2c:d0:83:9a:7b:50:b2:
         4f:86:80:d1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUN8XoxgLzXV3JJTX3QOsI3YPoBiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY4NTRGMzZBMkI4NUY3Q0E3NDU0M0ExRjU1MTg0ODdE
Mzc1RTI5MjAeFw0yNTEwMDgxMzM1MDdaFw0yNjEwMDcxMzQwMDdaMDMxMTAvBgNV
BAMTKEMxODg2NzU2ODNBQzE2RENGQUJDMDQxMEMxMjNENzU2N0NGNDUwREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLcJLbOcFA6XvHopfa2Dz7y6zn
Gi8cADLEXwUBiB1gZ9CwxZ53/LzC2tHX/p4pyLMqZsuCrVnBW7g+okpuicmvvY9p
+D0iIqW3pYltCHk4PQBXweMTHpOOFk1HF78MJTptTHsr4qjdX4gG+gDTUDOK8erC
UpkMm9LbZ1PzTjW3PygIW+Kn6CtHQjNH5LCpU57EgNtGAkfkRb3BJKagkTCmDDrp
LHK2+ohbRlA5uqw8fnox5ssymjz+mfMbTAjFArVJgR5YdFZN73iZSOQB3Ce4Lomt
YZYbfTST3MeTFC3VGpOIlRKwGs5ahgGIPkn5oxpnqppupqRhquoIgSKIfUmFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUwYhnVoOsFtz6vAQQwSPXVnz0UN0wHwYDVR0j
BBgwFoAU74VPNqK4X3ynRUOh9VGEh9N14pIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9RSlpqS0NtNlUyQVFoUEZGMlY4cVpYZVVEV1ZibWprOUFZNW9xTmFlRG45
LzAvRUY4NTRGMzZBMkI4NUY3Q0E3NDU0M0ExRjU1MTg0ODdEMzc1RTI5Mi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FRjg1NEYzNkEyQjg1RjdDQTc0
NTQzQTFGNTUxODQ4N0QzNzVFMjkyLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9R
SlpqS0NtNlUyQVFoUEZGMlY4cVpYZVVEV1ZibWprOUFZNW9xTmFlRG45LzAvMzIz
ODMwMzQzYTMyMzY2NjM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjMzMzgz
NjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQm9DANBgkqhkiG9w0BAQsFAAOCAQEAkMMJEyAldOVp
ftLuvvDv8BOdtUe8faWS7nmZpFqNUGyxmN9f0OdZWpmH+GbAgZ4lQKulfp+ovr6u
3mtGqnwt7T7/x1a72NN0jqvvGBa3JdeQXVeH4G+wYjKdJYeossFKqWrdIVOzQv7C
daBdZljQTJfCBPb0nw9xgsMURSlmQkaM7wdpzyGPbSedfXnx50wEhhNO5sgYH4bC
o7x4R6SsYLH6lZZHxwGswpGr1hg69HUepl70CNFP+USNp0tusA1Hi14IF+pERa2K
mGNraUk1izdqeUMrRc3GG8Ghw/3chPIYyRnEnqBuTGsnbLxEoETemNMi4eIs0IOa
e1CyT4aA0Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:13:22 2025 by rpki-client