Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a3a2f33332d3333203d3e20323730393035.roa
File:                     323830343a373334343a3a2f33332d3333203d3e20323730393035.roa (raw, json)
Hash identifier:          f+IuAr2PdhB8vRwaHvOEUwIs2xnnXXsBPgFKYRki9wQ=
Subject key identifier:   B4:B2:03:71:15:B2:E6:4C:E1:13:B2:26:98:45:2C:A5:5D:AE:F7:7F
Certificate issuer:       /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial:       1403BF6EFF803C1ACCA8669E1B69A63F774D6CE1
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a3a2f33332d3333203d3e20323730393035.roa
Signing time:             Wed 01 Oct 2025 16:15:44 +0000
ROA not before:           Wed 01 Oct 2025 16:10:44 +0000
ROA not after:            Wed 30 Sep 2026 16:15:44 +0000
asID:                     270905
IP address blocks:        2804:7344::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
                          rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:03:bf:6e:ff:80:3c:1a:cc:a8:66:9e:1b:69:a6:3f:77:4d:6c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
        Validity
            Not Before: Oct  1 16:10:44 2025 GMT
            Not After : Sep 30 16:15:44 2026 GMT
        Subject: CN=B4B2037115B2E64CE113B22698452CA55DAEF77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:97:a3:c6:68:22:9f:c6:e6:c8:12:05:92:59:
                    3c:1c:0f:9a:a6:93:16:1b:ef:a5:54:b3:3d:10:69:
                    87:55:04:56:3e:a2:5e:70:e9:62:39:22:37:30:3f:
                    9e:ac:c3:cd:8f:e8:25:04:69:c0:d6:a2:b2:65:b6:
                    96:8f:aa:28:4b:7c:7e:c1:2f:25:dc:9d:5f:00:78:
                    50:28:52:b6:43:fc:9d:6d:1c:2f:91:d3:15:d2:28:
                    25:b7:c8:66:6b:3d:59:3b:00:33:fc:ab:03:68:fd:
                    07:0d:b4:e5:01:d2:ad:5f:26:9d:92:6d:8a:ef:43:
                    b9:6d:58:e4:ae:84:90:01:1f:10:81:40:80:f0:55:
                    46:bd:2a:78:7e:7f:67:bf:a3:d8:f5:17:bc:da:84:
                    cb:fb:15:86:9a:5d:72:f8:8a:fd:32:3e:8c:42:81:
                    28:f0:2a:a2:fc:02:40:c5:52:fb:e2:56:49:ef:60:
                    2e:11:61:37:e7:10:10:fa:81:cd:b8:b6:fb:af:18:
                    53:ce:92:90:24:35:8b:3e:72:c6:9d:a8:a0:ec:5e:
                    bb:c7:39:4d:ef:f2:82:c2:12:95:75:36:eb:37:7c:
                    51:ce:43:7a:76:f8:f1:c4:57:4d:c7:68:3d:94:93:
                    e2:f2:29:03:59:4c:78:d6:20:7c:1f:c3:6d:60:5d:
                    32:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B2:03:71:15:B2:E6:4C:E1:13:B2:26:98:45:2C:A5:5D:AE:F7:7F
            X509v3 Authority Key Identifier:
                keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a3a2f33332d3333203d3e20323730393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7344::/33

    Signature Algorithm: sha256WithRSAEncryption
         99:12:ff:0f:fe:74:b6:6d:91:73:a0:de:b3:8e:18:4a:76:e0:
         eb:d3:79:5f:5d:e6:8a:b3:7a:99:60:c3:15:03:b4:f5:95:35:
         78:7e:5b:96:17:ee:f0:e5:a9:cf:74:2d:4a:ab:29:0c:1a:db:
         6e:a3:06:53:b8:2d:8d:14:93:55:f4:ad:43:6e:e9:c0:ca:ae:
         6e:27:a3:a9:3a:53:b7:7b:4e:f3:42:23:2d:a3:23:98:ae:2b:
         82:b9:a1:02:2f:a0:87:61:16:1d:7f:6c:1d:08:61:51:1d:ba:
         5b:0b:0a:63:b7:a6:6e:f9:9d:f3:48:2b:fd:d8:5d:bd:bf:b0:
         52:6d:5b:08:34:fb:a6:88:6c:3f:cf:f6:97:93:67:df:4a:c3:
         ee:ef:c4:73:cb:9f:45:dd:32:57:b0:f3:59:0d:89:9a:3d:e9:
         d2:1c:d8:36:75:ef:4a:32:d5:64:42:75:4e:c2:39:3e:96:d0:
         f7:32:f1:c4:7b:db:ee:bd:9b:69:e1:10:60:5d:e8:48:4b:83:
         28:7f:f8:30:e0:eb:6a:9c:6e:55:d0:ee:2b:12:f0:25:21:01:
         6a:91:18:e6:99:0e:71:d9:ef:38:87:8a:49:70:1d:c2:2f:4b:
         33:cc:d0:f4:c9:92:7f:47:21:0f:4a:08:18:61:d1:6c:57:31:
         57:ca:62:e8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFAO/bv+APBrMqGaeG2mmP3dNbOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhERDQ1N0FGRDg3NzU3NzI5RTY1Nzg4MTc4NjYwMUJG
NTZFRDQ1RjAeFw0yNTEwMDExNjEwNDRaFw0yNjA5MzAxNjE1NDRaMDMxMTAvBgNV
BAMTKEI0QjIwMzcxMTVCMkU2NENFMTEzQjIyNjk4NDUyQ0E1NURBRUY3N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWl6PGaCKfxubIEgWSWTwcD5qm
kxYb76VUsz0QaYdVBFY+ol5w6WI5IjcwP56sw82P6CUEacDWorJltpaPqihLfH7B
LyXcnV8AeFAoUrZD/J1tHC+R0xXSKCW3yGZrPVk7ADP8qwNo/QcNtOUB0q1fJp2S
bYrvQ7ltWOSuhJABHxCBQIDwVUa9Knh+f2e/o9j1F7zahMv7FYaaXXL4iv0yPoxC
gSjwKqL8AkDFUvviVknvYC4RYTfnEBD6gc24tvuvGFPOkpAkNYs+csadqKDsXrvH
OU3v8oLCEpV1Nus3fFHOQ3p2+PHEV03HaD2Uk+LyKQNZTHjWIHwfw21gXTJtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtLIDcRWy5kzhE7ImmEUspV2u938wHwYDVR0j
BBgwFoAUaN1Fev2HdXcp5leIF4ZgG/Vu1F8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVlLUTRlcnZQbXlvcjZrbVN1TEtCUGs0amNyVlQ1ZkhZaTNncGV6aDRx
aEYvMC82OERENDU3QUZEODc3NTc3MjlFNjU3ODgxNzg2NjAxQkY1NkVENDVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4REQ0NTdBRkQ4Nzc1Nzcy
OUU2NTc4ODE3ODY2MDFCRjU2RUQ0NUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlZS1E0ZXJ2UG15b3I2a21TdUxLQlBrNGpjclZUNWZIWWkzZ3Blemg0cWhGLzAv
MzIzODMwMzQzYTM3MzMzNDM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNzMw
MzkzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKARzRAAwDQYJKoZIhvcNAQELBQADggEBAJkS/w/+
dLZtkXOg3rOOGEp24OvTeV9d5oqzeplgwxUDtPWVNXh+W5YX7vDlqc90LUqrKQwa
226jBlO4LY0Uk1X0rUNu6cDKrm4no6k6U7d7TvNCIy2jI5iuK4K5oQIvoIdhFh1/
bB0IYVEdulsLCmO3pm75nfNIK/3YXb2/sFJtWwg0+6aIbD/P9peTZ99Kw+7vxHPL
n0XdMlew81kNiZo96dIc2DZ170oy1WRCdU7COT6W0Pcy8cR72+69m2nhEGBd6EhL
gyh/+DDg62qcblXQ7isS8CUhAWqRGOaZDnHZ7ziHiklwHcIvSzPM0PTJkn9HIQ9K
CBhh0WxXMVfKYug=
-----END CERTIFICATE-----
Generated at Tue Nov 4 05:07:43 2025 by rpki-client