Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/323830343a3362633a303a633a3a2f36342d3634203d3e203238363234.roa
File:                     323830343a3362633a303a633a3a2f36342d3634203d3e203238363234.roa (raw, json)
Hash identifier:          DDkpMxtxzeb/11JtUJk2/No6IkLXvRTaddUZ9SxJNYE=
Subject key identifier:   60:E1:B9:C2:4C:97:2D:20:0E:7F:C8:5A:61:8D:73:5B:25:92:E3:B1
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       51853F54B820E0C21B7C841238EAEA2E063C0247
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/323830343a3362633a303a633a3a2f36342d3634203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:29 +0000
ROA not before:           Thu 30 Oct 2025 02:40:29 +0000
ROA not after:            Thu 29 Oct 2026 02:45:29 +0000
asID:                     28624
IP address blocks:        2804:3bc:0:c::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:85:3f:54:b8:20:e0:c2:1b:7c:84:12:38:ea:ea:2e:06:3c:02:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:29 2025 GMT
            Not After : Oct 29 02:45:29 2026 GMT
        Subject: CN=60E1B9C24C972D200E7FC85A618D735B2592E3B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1c:e2:7a:33:d9:ab:d6:0b:1d:30:3b:d7:98:
                    33:88:19:52:90:87:7e:e5:e2:76:8c:ef:8e:97:6c:
                    f3:e6:29:0b:77:d4:05:81:d0:27:d1:ea:43:0a:02:
                    69:e7:2e:5c:49:8c:55:3e:b4:4a:a9:2a:93:09:bf:
                    e6:b0:2b:bf:6e:d7:ed:3b:80:3e:44:f9:45:31:dd:
                    3e:6b:99:a6:4e:be:b9:04:b0:d3:13:f6:80:7e:a5:
                    fc:ff:ff:f9:94:3e:f9:a0:39:c2:3d:34:7c:bd:7a:
                    00:ff:2b:14:57:08:c3:42:cc:82:9a:b6:90:c0:60:
                    63:91:33:52:63:33:ff:f3:72:4b:a7:00:e1:a4:34:
                    09:aa:97:aa:50:a4:e3:2f:0b:e2:90:fb:31:1a:e5:
                    fb:8a:c3:e1:e9:13:58:e1:52:e7:c0:99:af:37:2d:
                    fc:9b:9c:d6:b2:cf:0c:3c:b9:1e:ff:b1:66:68:ae:
                    4f:d4:fa:e6:a6:e9:d8:8e:02:24:aa:b2:e7:e1:5d:
                    ca:3c:7b:1f:ba:77:f6:9b:55:34:71:cb:c5:8a:c3:
                    d7:aa:6f:88:a9:a6:f4:97:c9:10:7f:cd:8d:cb:e5:
                    b9:e9:61:da:80:16:37:8c:13:45:d7:2f:23:2b:ae:
                    e0:6f:ee:5e:6f:5f:4d:20:cd:21:50:b2:09:8c:5a:
                    26:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E1:B9:C2:4C:97:2D:20:0E:7F:C8:5A:61:8D:73:5B:25:92:E3:B1
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/323830343a3362633a303a633a3a2f36342d3634203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bc:0:c::/64

    Signature Algorithm: sha256WithRSAEncryption
         18:1a:93:48:ad:1b:aa:77:5f:d5:25:82:f4:ef:94:72:c4:9a:
         67:53:81:d0:22:66:47:f1:66:83:96:53:18:13:dc:33:f2:e5:
         fa:df:b8:82:5a:6d:78:0e:22:7f:9c:55:27:c4:74:85:54:a5:
         ae:e0:4c:c8:77:32:f3:cc:62:99:f9:37:88:27:c0:26:78:57:
         ac:08:90:70:2c:77:a6:04:b5:9b:f8:ab:e0:18:51:b8:55:d3:
         77:78:3f:c3:4f:95:13:c9:d1:d6:bc:4e:93:91:19:04:29:51:
         f2:46:87:54:51:58:23:15:0c:ef:1a:ad:f4:f2:52:d1:a7:70:
         7f:af:4c:05:4f:d0:ec:8f:74:72:4d:14:1f:77:57:15:c7:f5:
         b8:04:90:8d:96:0e:58:fe:19:5a:59:41:f2:f3:9e:3b:34:07:
         93:bf:6f:a8:e0:e5:44:8c:b4:08:c4:eb:cd:b9:27:23:19:59:
         e1:4d:29:aa:f2:a5:31:7d:ab:0b:ac:5c:0b:a1:33:c9:70:a9:
         92:14:f5:1d:bf:7a:54:35:eb:a6:ec:99:61:7f:82:9c:17:a2:
         91:9c:57:62:c6:fb:32:77:68:1d:1f:74:a1:23:32:ac:5f:90:
         34:83:73:23:a4:14:ea:2f:4b:d6:aa:99:55:dc:b8:f7:22:b9:
         18:4f:98:22
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUUYU/VLgg4MIbfIQSOOrqLgY8AkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc5ODhBRTZBNzlFNzhERDcxMjM1MDk2RTlCQUUyRTQy
OUJBMDZDNDAeFw0yNTEwMzAwMjQwMjlaFw0yNjEwMjkwMjQ1MjlaMDMxMTAvBgNV
BAMTKDYwRTFCOUMyNEM5NzJEMjAwRTdGQzg1QTYxOEQ3MzVCMjU5MkUzQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHOJ6M9mr1gsdMDvXmDOIGVKQ
h37l4naM746XbPPmKQt31AWB0CfR6kMKAmnnLlxJjFU+tEqpKpMJv+awK79u1+07
gD5E+UUx3T5rmaZOvrkEsNMT9oB+pfz///mUPvmgOcI9NHy9egD/KxRXCMNCzIKa
tpDAYGORM1JjM//zckunAOGkNAmql6pQpOMvC+KQ+zEa5fuKw+HpE1jhUufAma83
LfybnNayzww8uR7/sWZork/U+uam6diOAiSqsufhXco8ex+6d/abVTRxy8WKw9eq
b4ippvSXyRB/zY3L5bnpYdqAFjeME0XXLyMrruBv7l5vX00gzSFQsgmMWiZDAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUYOG5wkyXLSAOf8haYY1zWyWS47EwHwYDVR0j
BBgwFoAUx5iK5qeeeN1xI1CW6bri5Cm6BsQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxjNmR5OWl3d1d0MmE4VzNBcXhhN21lNDRVRzJ2b21nZ000Wm11MlF2
S3EvMC9DNzk4OEFFNkE3OUU3OERENzEyMzUwOTZFOUJBRTJFNDI5QkEwNkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3OTg4QUU2QTc5RTc4REQ3
MTIzNTA5NkU5QkFFMkU0MjlCQTA2QzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMYzZkeTlpd3dXdDJhOFczQXF4YTdtZTQ0VUcydm9tZ2dNNFptdTJRdktxLzAv
MzIzODMwMzQzYTMzNjI2MzNhMzAzYTYzM2EzYTJmMzYzNDJkMzYzNDIwM2QzZTIw
MzIzODM2MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEF
BQcBBwEB/wQVMBMwEQQCAAIwCwMJACgEA7wAAAAMMA0GCSqGSIb3DQEBCwUAA4IB
AQAYGpNIrRuqd1/VJYL075RyxJpnU4HQImZH8WaDllMYE9wz8uX637iCWm14DiJ/
nFUnxHSFVKWu4EzIdzLzzGKZ+TeIJ8AmeFesCJBwLHemBLWb+KvgGFG4VdN3eD/D
T5UTydHWvE6TkRkEKVHyRodUUVgjFQzvGq308lLRp3B/r0wFT9Dsj3RyTRQfd1cV
x/W4BJCNlg5Y/hlaWUHy8547NAeTv2+o4OVEjLQIxOvNuScjGVnhTSmq8qUxfasL
rFwLoTPJcKmSFPUdv3pUNeum7Jlhf4KcF6KRnFdixvsyd2gdH3ShIzKsX5A0g3Mj
pBTqL0vWqplV3Lj3IrkYT5gi
-----END CERTIFICATE-----
Generated at Tue Nov 4 05:26:59 2025 by rpki-client