Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/323830343a6234343a613030303a3a2f33362d3336203d3e20323632343438.roa
File:                     323830343a6234343a613030303a3a2f33362d3336203d3e20323632343438.roa (raw, json)
Hash identifier:          CoPS0BBnVIYIYytIfDmRGV5j1VuK48O4lg5ckEwol6I=
Subject key identifier:   E9:AF:0B:37:AA:98:BE:F1:3D:99:7C:F9:6A:36:2A:72:52:E1:80:10
Certificate issuer:       /CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1
Certificate serial:       2A2BA992DE224E696AB2FDA1FFAC38181D39287B
Authority key identifier: E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/323830343a6234343a613030303a3a2f33362d3336203d3e20323632343438.roa
Signing time:             Wed 24 Sep 2025 02:16:24 +0000
ROA not before:           Wed 24 Sep 2025 02:11:24 +0000
ROA not after:            Wed 23 Sep 2026 02:16:24 +0000
asID:                     262448
IP address blocks:        2804:b44:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl
                          rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Oct 2025 02:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2b:a9:92:de:22:4e:69:6a:b2:fd:a1:ff:ac:38:18:1d:39:28:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E713D650F1CB4B63377AD9E76628FB20A8E70BC1
        Validity
            Not Before: Sep 24 02:11:24 2025 GMT
            Not After : Sep 23 02:16:24 2026 GMT
        Subject: CN=E9AF0B37AA98BEF13D997CF96A362A7252E18010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f8:d1:b6:73:cb:44:6a:0a:4a:d8:a6:04:32:
                    2f:b5:de:0d:ba:88:a6:c9:ae:ed:ec:f2:bd:94:14:
                    45:5b:a1:61:19:57:c0:eb:33:2c:33:b2:d1:c2:11:
                    da:36:50:c1:dc:0a:19:23:2f:e3:0a:13:a1:c0:a4:
                    b4:8d:53:06:23:8b:83:9e:6e:d0:06:ae:21:94:b7:
                    1d:09:d9:7f:ba:21:bc:bf:63:47:ec:77:02:0e:92:
                    ba:27:99:0a:a0:b6:21:09:b6:1a:c6:28:64:fe:13:
                    46:86:be:7a:2a:14:e6:c2:9d:9b:36:2e:05:e7:62:
                    0b:d3:a3:b8:37:21:ed:47:b3:6f:ca:56:39:0d:13:
                    73:f8:2b:48:33:60:d2:e4:e0:20:f5:4c:48:2e:02:
                    f9:f0:08:a5:5d:85:4b:72:cf:c7:a5:3c:a9:f9:68:
                    47:4d:47:b9:93:f8:50:eb:a8:31:7a:e6:1e:16:7f:
                    55:da:97:c4:0b:6c:82:1a:01:3e:31:01:4b:9b:57:
                    a8:7c:88:36:d6:53:cd:1c:8b:62:41:a8:f9:e7:db:
                    b5:b0:de:28:bf:d8:95:a1:99:f3:15:26:85:29:69:
                    22:a9:92:32:1f:ed:10:06:99:81:23:2f:e9:71:10:
                    08:c6:b8:f2:fd:41:23:cf:3c:46:2d:1d:0e:72:d8:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AF:0B:37:AA:98:BE:F1:3D:99:7C:F9:6A:36:2A:72:52:E1:80:10
            X509v3 Authority Key Identifier:
                keyid:E7:13:D6:50:F1:CB:4B:63:37:7A:D9:E7:66:28:FB:20:A8:E7:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E713D650F1CB4B63377AD9E76628FB20A8E70BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/a1SwiCb8qPobUmanYrqYjNRoCRshwuimWh2t1764Gfy/0/323830343a6234343a613030303a3a2f33362d3336203d3e20323632343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b44:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         00:79:cb:68:8d:91:db:94:1c:24:51:94:6a:87:c1:78:ad:ad:
         dc:71:70:cb:b7:60:e0:bf:ee:1c:84:51:f5:be:8e:82:0a:28:
         be:e4:ea:cc:cb:bc:23:3a:ce:6e:8f:68:79:38:fa:e4:c2:51:
         41:2c:b1:95:61:de:24:ea:8b:b3:86:12:bc:d1:b5:f3:7b:e2:
         50:bb:fe:9c:00:d5:91:0c:04:9e:a0:47:f1:f1:c9:86:59:1f:
         a8:09:cb:c1:67:5d:df:36:d7:ae:9d:50:3d:b5:b0:6d:b6:36:
         2e:21:6d:14:96:7d:1b:a8:fb:5c:89:0d:99:28:5b:24:16:89:
         94:22:27:94:15:29:89:f7:3b:fb:b9:d2:06:72:31:d1:da:3b:
         ac:87:d6:95:81:d4:72:b3:84:61:d6:92:63:5d:19:6d:9f:83:
         05:35:ae:16:f0:e8:2d:49:ff:13:47:58:af:ec:42:da:45:17:
         f1:5a:36:40:92:6e:31:09:fd:7e:6d:ec:a2:5a:34:a1:30:16:
         a2:61:3b:31:a5:c6:9a:25:03:fa:b9:ef:61:df:5b:a4:0f:e8:
         27:2f:e2:3d:7a:40:5a:3a:00:6a:66:78:0f:66:2e:6e:60:63:
         39:22:47:eb:b4:56:b9:e1:65:44:cd:ba:ff:cf:4d:1d:37:0f:
         87:97:cb:aa
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUKiupkt4iTmlqsv2h/6w4GB05KHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTcxM0Q2NTBGMUNCNEI2MzM3N0FEOUU3NjYyOEZCMjBB
OEU3MEJDMTAeFw0yNTA5MjQwMjExMjRaFw0yNjA5MjMwMjE2MjRaMDMxMTAvBgNV
BAMTKEU5QUYwQjM3QUE5OEJFRjEzRDk5N0NGOTZBMzYyQTcyNTJFMTgwMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+NG2c8tEagpK2KYEMi+13g26
iKbJru3s8r2UFEVboWEZV8DrMywzstHCEdo2UMHcChkjL+MKE6HApLSNUwYji4Oe
btAGriGUtx0J2X+6Iby/Y0fsdwIOkronmQqgtiEJthrGKGT+E0aGvnoqFObCnZs2
LgXnYgvTo7g3Ie1Hs2/KVjkNE3P4K0gzYNLk4CD1TEguAvnwCKVdhUtyz8elPKn5
aEdNR7mT+FDrqDF65h4Wf1Xal8QLbIIaAT4xAUubV6h8iDbWU80ci2JBqPnn27Ww
3ii/2JWhmfMVJoUpaSKpkjIf7RAGmYEjL+lxEAjGuPL9QSPPPEYtHQ5y2O3LAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU6a8LN6qYvvE9mXz5ajYqclLhgBAwHwYDVR0j
BBgwFoAU5xPWUPHLS2M3etnnZij7IKjnC8EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hMVN3aUNiOHFQb2JVbWFuWXJxWWpOUm9DUnNod3VpbVdoMnQxNzY0R2Z5
LzAvRTcxM0Q2NTBGMUNCNEI2MzM3N0FEOUU3NjYyOEZCMjBBOEU3MEJDMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNzEzRDY1MEYxQ0I0QjYzMzc3
QUQ5RTc2NjI4RkIyMEE4RTcwQkMxLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAG
CCsGAQUFBzALhoGTcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h
MVN3aUNiOHFQb2JVbWFuWXJxWWpOUm9DUnNod3VpbVdoMnQxNzY0R2Z5LzAvMzIz
ODMwMzQzYTYyMzQzNDNhNjEzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAz
MjM2MzIzNDM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAtEoDANBgkqhkiG9w0BAQsFAAOCAQEA
AHnLaI2R25QcJFGUaofBeK2t3HFwy7dg4L/uHIRR9b6OggoovuTqzMu8IzrObo9o
eTj65MJRQSyxlWHeJOqLs4YSvNG183viULv+nADVkQwEnqBH8fHJhlkfqAnLwWdd
3zbXrp1QPbWwbbY2LiFtFJZ9G6j7XIkNmShbJBaJlCInlBUpifc7+7nSBnIx0do7
rIfWlYHUcrOEYdaSY10ZbZ+DBTWuFvDoLUn/E0dYr+xC2kUX8Vo2QJJuMQn9fm3s
olo0oTAWomE7MaXGmiUD+rnvYd9bpA/oJy/iPXpAWjoAamZ4D2YubmBjOSJH67RW
ueFlRM26/89NHTcPh5fLqg==
-----END CERTIFICATE-----
Generated at Thu Oct 9 14:44:14 2025 by rpki-client