Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/323830343a343437383a3a2f33322d313238203d3e20323637363334.roa
File:                     323830343a343437383a3a2f33322d313238203d3e20323637363334.roa (raw, json)
Hash identifier:          6TqsiGa8AosgXfH6Zs3pJ+hHhzsY+sPLOU+nVcukOjA=
Subject key identifier:   B5:64:10:4F:24:52:FB:6A:AD:89:53:86:14:06:7F:30:CD:68:BA:3E
Certificate issuer:       /CN=A5FC978C4C40DFA72931518FA40AD7A23CE7D33E
Certificate serial:       483628DA0303148C0E7FD9CDE87D5BD3F0F1B216
Authority key identifier: A5:FC:97:8C:4C:40:DF:A7:29:31:51:8F:A4:0A:D7:A2:3C:E7:D3:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/323830343a343437383a3a2f33322d313238203d3e20323637363334.roa
Signing time:             Tue 16 Sep 2025 23:22:29 +0000
ROA not before:           Tue 16 Sep 2025 23:17:29 +0000
ROA not after:            Tue 15 Sep 2026 23:22:29 +0000
asID:                     267634
IP address blocks:        2804:4478::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.crl
                          rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 08:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:36:28:da:03:03:14:8c:0e:7f:d9:cd:e8:7d:5b:d3:f0:f1:b2:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5FC978C4C40DFA72931518FA40AD7A23CE7D33E
        Validity
            Not Before: Sep 16 23:17:29 2025 GMT
            Not After : Sep 15 23:22:29 2026 GMT
        Subject: CN=B564104F2452FB6AAD89538614067F30CD68BA3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:52:e8:2b:53:c8:db:e7:ed:12:4d:a6:ce:
                    17:b6:0a:99:0e:7e:cb:67:08:3a:c1:82:42:f6:72:
                    d7:f3:38:ff:f2:63:6c:ff:98:d4:eb:18:cf:57:81:
                    1a:bb:50:a9:6a:28:ac:6a:c6:14:8f:78:b8:e6:2e:
                    39:2b:3d:ea:26:2c:14:c0:9f:ea:91:09:f9:28:98:
                    84:d7:f3:31:ed:dc:5a:52:c1:0d:a3:f0:7c:87:a0:
                    b4:b0:23:61:85:ee:f2:06:7d:34:ab:4e:ea:0f:cb:
                    ec:d1:5f:f9:e0:42:74:97:1c:c0:f5:2d:89:7c:10:
                    96:1d:8d:57:8a:e7:0a:89:93:47:64:21:19:f0:d2:
                    98:6c:64:b0:9d:9d:ce:88:9c:3d:b6:6c:16:4c:fd:
                    35:25:07:29:77:48:22:3c:26:72:c6:eb:dc:71:db:
                    e8:8a:d9:2d:cb:cf:6c:45:b1:cc:a6:cd:7e:b9:13:
                    6e:3d:cd:60:e7:eb:b8:81:5f:11:bc:26:12:48:4a:
                    12:cd:54:3c:5e:97:79:2e:a8:4d:67:08:64:b6:42:
                    f4:81:a7:50:15:09:08:db:93:83:05:aa:af:1d:4b:
                    06:78:89:2d:46:b2:7f:83:dd:c5:d2:f1:f6:c1:c7:
                    e3:57:2c:b1:37:5b:59:9e:6b:6b:6c:6a:71:07:b7:
                    2f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:64:10:4F:24:52:FB:6A:AD:89:53:86:14:06:7F:30:CD:68:BA:3E
            X509v3 Authority Key Identifier:
                keyid:A5:FC:97:8C:4C:40:DF:A7:29:31:51:8F:A4:0A:D7:A2:3C:E7:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/323830343a343437383a3a2f33322d313238203d3e20323637363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4478::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:13:79:1a:2d:5a:24:00:37:ae:f5:32:35:d9:4b:39:87:6d:
         96:fa:57:4b:8b:ba:8b:92:c6:34:aa:2b:9a:eb:e4:00:c7:31:
         df:11:b2:e9:42:e3:01:58:a4:a1:0c:22:d7:26:3c:43:b5:39:
         e0:20:03:64:9b:92:0c:8d:e1:f6:1e:42:ae:64:31:d6:0e:dd:
         92:5a:29:8e:ac:33:b5:78:ed:ff:9d:00:99:77:3d:8d:6f:87:
         7e:4c:9a:32:0e:ef:1f:dd:5c:80:b5:c5:70:36:33:87:b3:89:
         ac:d4:c8:be:a1:8c:88:49:80:60:01:8b:12:ef:e4:a6:dd:6c:
         cb:f2:a2:a3:23:77:34:5e:74:71:7d:51:3e:4a:84:ef:44:43:
         46:2b:ea:9a:4c:dd:48:44:36:7a:fa:c2:61:9c:a7:7d:b0:8a:
         be:10:68:76:3e:4f:98:ad:49:dc:68:11:90:09:44:12:22:a8:
         7f:75:ed:32:90:be:ff:82:6c:82:cd:93:8b:04:0c:d0:66:dd:
         43:64:ef:80:7b:a2:6e:24:5c:26:ec:a3:a4:da:9c:5b:a9:c0:
         09:27:e2:21:bc:c4:bf:b0:0c:a3:f3:0a:02:86:91:e5:b5:1b:
         7b:a1:fe:1d:d2:d9:0d:57:86:98:55:22:b6:1e:f7:77:94:33:
         8c:9e:53:32
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUSDYo2gMDFIwOf9nN6H1b0/DxshYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVGQzk3OEM0QzQwREZBNzI5MzE1MThGQTQwQUQ3QTIz
Q0U3RDMzRTAeFw0yNTA5MTYyMzE3MjlaFw0yNjA5MTUyMzIyMjlaMDMxMTAvBgNV
BAMTKEI1NjQxMDRGMjQ1MkZCNkFBRDg5NTM4NjE0MDY3RjMwQ0Q2OEJBM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGGFLoK1PI2+ftEk2mzhe2CpkO
fstnCDrBgkL2ctfzOP/yY2z/mNTrGM9XgRq7UKlqKKxqxhSPeLjmLjkrPeomLBTA
n+qRCfkomITX8zHt3FpSwQ2j8HyHoLSwI2GF7vIGfTSrTuoPy+zRX/ngQnSXHMD1
LYl8EJYdjVeK5wqJk0dkIRnw0phsZLCdnc6InD22bBZM/TUlByl3SCI8JnLG69xx
2+iK2S3Lz2xFscymzX65E249zWDn67iBXxG8JhJIShLNVDxel3kuqE1nCGS2QvSB
p1AVCQjbk4MFqq8dSwZ4iS1Gsn+D3cXS8fbBx+NXLLE3W1mea2tsanEHty8nAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUtWQQTyRS+2qtiVOGFAZ/MM1ouj4wHwYDVR0j
BBgwFoAUpfyXjExA36cpMVGPpArXojzn0z4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFY4ZjVqUENkQkZ0UkY2Nk1GaldESzI0bnFURXp6OWZ2RFhBR2RNaU5h
d28vMC9BNUZDOTc4QzRDNDBERkE3MjkzMTUxOEZBNDBBRDdBMjNDRTdEMzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1RkM5NzhDNEM0MERGQTcy
OTMxNTE4RkE0MEFEN0EyM0NFN0QzM0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhWOGY1alBDZEJGdFJGNjZNRmpXREsyNG5xVEV6ejlmdkRYQUdkTWlOYXdvLzAv
MzIzODMwMzQzYTM0MzQzNzM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzczNjMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBER4MA0GCSqGSIb3DQEBCwUAA4IBAQDNE3ka
LVokADeu9TI12Us5h22W+ldLi7qLksY0qiua6+QAxzHfEbLpQuMBWKShDCLXJjxD
tTngIANkm5IMjeH2HkKuZDHWDt2SWimOrDO1eO3/nQCZdz2Nb4d+TJoyDu8f3VyA
tcVwNjOHs4ms1Mi+oYyISYBgAYsS7+Sm3WzL8qKjI3c0XnRxfVE+SoTvRENGK+qa
TN1IRDZ6+sJhnKd9sIq+EGh2Pk+YrUncaBGQCUQSIqh/de0ykL7/gmyCzZOLBAzQ
Zt1DZO+Ae6JuJFwm7KOk2pxbqcAJJ+IhvMS/sAyj8woChpHltRt7of4d0tkNV4aY
VSK2Hvd3lDOMnlMy
-----END CERTIFICATE-----
Generated at Fri Sep 19 13:11:41 2025 by rpki-client