Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a333030303a3a2f33362d3336203d3e20323636323638.roa
File:                     323830343a336435343a333030303a3a2f33362d3336203d3e20323636323638.roa (raw, json)
Hash identifier:          EBTiKpr6HZPXTdfKiwP7ofFCIne7wT3pmJTvT4BVqiQ=
Subject key identifier:   E8:4D:42:49:FB:39:C1:6F:24:04:F9:0A:D3:1D:F5:2D:7D:37:3A:2C
Certificate issuer:       /CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
Certificate serial:       22D9FC7D842F5ABB19783558E676051E8616B769
Authority key identifier: F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a333030303a3a2f33362d3336203d3e20323636323638.roa
Signing time:             Mon 15 Sep 2025 23:58:51 +0000
ROA not before:           Mon 15 Sep 2025 23:53:51 +0000
ROA not after:            Mon 14 Sep 2026 23:58:51 +0000
asID:                     266268
IP address blocks:        2804:3d54:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d9:fc:7d:84:2f:5a:bb:19:78:35:58:e6:76:05:1e:86:16:b7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
        Validity
            Not Before: Sep 15 23:53:51 2025 GMT
            Not After : Sep 14 23:58:51 2026 GMT
        Subject: CN=E84D4249FB39C16F2404F90AD31DF52D7D373A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:54:df:12:36:21:0e:ba:e8:39:2a:bc:20:
                    8c:03:2b:a0:e8:f7:b3:55:d0:5d:22:83:b0:16:d9:
                    ab:93:07:55:e6:5b:f7:93:57:8e:bc:40:44:58:4f:
                    8c:5f:30:30:83:73:37:cf:ca:42:ad:33:ae:8b:73:
                    e9:9f:a7:75:54:71:95:be:45:00:cb:8b:a1:3b:bf:
                    56:9b:ea:3c:07:ca:d9:d2:d3:60:08:c2:dd:90:58:
                    e0:87:8d:38:63:70:90:3b:38:a6:b5:27:96:2b:0c:
                    1e:e6:d9:79:44:4f:7d:90:40:07:68:7a:d5:5a:e1:
                    10:78:fd:15:1f:d0:80:ca:e4:97:80:ec:a9:9f:ad:
                    cf:5a:4b:8b:e8:ad:74:97:33:90:85:59:01:e6:fc:
                    8c:53:76:9f:98:9f:9f:06:71:7b:33:7a:3d:92:f6:
                    de:3a:31:2a:4e:8b:a4:b4:34:af:0d:95:ab:ac:63:
                    97:2a:a6:06:f2:d3:9c:05:7b:bf:ab:1e:05:64:ee:
                    30:d9:bb:cd:2c:13:9e:16:66:cc:b0:e9:21:28:6e:
                    02:5a:11:47:ad:4c:c7:24:f0:a8:79:24:9d:ac:f1:
                    a5:14:04:17:ad:2d:ad:21:56:a8:23:bb:8d:d4:a2:
                    02:57:d2:7b:01:13:1d:3e:11:86:49:91:b4:16:0f:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4D:42:49:FB:39:C1:6F:24:04:F9:0A:D3:1D:F5:2D:7D:37:3A:2C
            X509v3 Authority Key Identifier:
                keyid:F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a333030303a3a2f33362d3336203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7b:ae:d8:50:df:51:cf:bf:ee:a9:ac:7c:05:e5:57:44:d9:06:
         7d:a9:a8:c6:46:fe:5f:d5:ed:91:8e:59:51:3a:5f:58:be:2d:
         58:62:b1:35:40:c2:1e:ca:6a:10:61:42:5b:2e:bd:74:51:00:
         f5:f8:74:2a:a3:4b:ba:0f:b8:7f:10:75:f5:6c:bf:17:68:9d:
         12:32:e7:3b:11:a2:13:3f:22:38:55:b2:50:ee:44:06:41:0c:
         1d:1c:c1:09:db:02:73:31:c8:21:55:91:28:b3:a3:38:32:18:
         2f:11:22:ca:d6:09:d5:3c:b5:56:e9:37:01:05:53:0c:56:e6:
         fe:43:db:97:db:04:ed:3f:10:75:c6:f1:7d:76:61:9c:e5:f3:
         30:8b:6b:cb:88:bb:eb:95:4e:55:fb:38:ca:6f:5e:34:dd:b7:
         a7:ad:af:94:f4:60:99:ae:49:d5:8b:0f:8e:d7:14:0d:5a:f8:
         35:82:08:1a:d3:11:48:7d:8e:83:96:10:c0:dd:af:b7:53:e0:
         97:72:d7:74:08:0a:db:ba:7f:57:f4:bc:b1:21:50:c1:3c:6d:
         b0:35:03:f0:c1:9c:01:80:4a:e9:2c:13:71:91:a4:6a:09:f9:
         7b:48:a8:9b:13:b4:53:54:0a:73:c8:1a:f7:c1:5b:5b:36:e0:
         37:23:19:23
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUItn8fYQvWrsZeDVY5nYFHoYWt2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjgwNUZERDY3NDdCMERFQ0IzMUQzQjZCRThCMDBGMEIx
N0VENTU0RDAeFw0yNTA5MTUyMzUzNTFaFw0yNjA5MTQyMzU4NTFaMDMxMTAvBgNV
BAMTKEU4NEQ0MjQ5RkIzOUMxNkYyNDA0RjkwQUQzMURGNTJEN0QzNzNBMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwlTfEjYhDrroOSq8IIwDK6Do
97NV0F0ig7AW2auTB1XmW/eTV468QERYT4xfMDCDczfPykKtM66Lc+mfp3VUcZW+
RQDLi6E7v1ab6jwHytnS02AIwt2QWOCHjThjcJA7OKa1J5YrDB7m2XlET32QQAdo
etVa4RB4/RUf0IDK5JeA7Kmfrc9aS4vorXSXM5CFWQHm/IxTdp+Yn58GcXszej2S
9t46MSpOi6S0NK8NlausY5cqpgby05wFe7+rHgVk7jDZu80sE54WZsyw6SEobgJa
EUetTMck8Kh5JJ2s8aUUBBetLa0hVqgju43UogJX0nsBEx0+EYZJkbQWD1mfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU6E1CSfs5wW8kBPkK0x31LX03OiwwHwYDVR0j
BBgwFoAU+AX91nR7DeyzHTtr6LAPCxftVU0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTdRd3Y5WFpxQkwzalppTFhmUzlyYkZFeFRaUXB3ZDFCNGNYN2Nyb3Zi
TXAvMC9GODA1RkRENjc0N0IwREVDQjMxRDNCNkJFOEIwMEYwQjE3RUQ1NTRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4MDVGREQ2NzQ3QjBERUNC
MzFEM0I2QkU4QjAwRjBCMTdFRDU1NEQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk3UXd2OVhacUJMM2paaUxYZlM5cmJGRXhUWlFwd2QxQjRjWDdjcm92Yk1wLzAv
MzIzODMwMzQzYTMzNjQzNTM0M2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzYzNjMyMzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEPVQwMA0GCSqGSIb3DQEBCwUA
A4IBAQB7rthQ31HPv+6prHwF5VdE2QZ9qajGRv5f1e2RjllROl9Yvi1YYrE1QMIe
ymoQYUJbLr10UQD1+HQqo0u6D7h/EHX1bL8XaJ0SMuc7EaITPyI4VbJQ7kQGQQwd
HMEJ2wJzMcghVZEos6M4MhgvESLK1gnVPLVW6TcBBVMMVub+Q9uX2wTtPxB1xvF9
dmGc5fMwi2vLiLvrlU5V+zjKb1403benra+U9GCZrknViw+O1xQNWvg1ggga0xFI
fY6DlhDA3a+3U+CXctd0CArbun9X9LyxIVDBPG2wNQPwwZwBgErpLBNxkaRqCfl7
SKibE7RTVApzyBr3wVtbNuA3Ixkj
-----END CERTIFICATE-----
Generated at Thu Sep 18 19:10:51 2025 by rpki-client