Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d313238203d3e20323636303231.roa
File:                     323830343a333934303a3a2f33322d313238203d3e20323636303231.roa (raw, json)
Hash identifier:          n1/k/24kjqJXe2r20/x1gaSwnGuGBYSahjcqoj1o5O4=
Subject key identifier:   9C:E2:62:DF:36:EC:AB:08:6D:2B:6E:AF:E2:58:88:3D:7E:34:BA:AE
Certificate issuer:       /CN=1009452148BF025D133579CC61462AB945880968
Certificate serial:       5AD105140BC263EA1BCEA83F943FC4C6C56B21EF
Authority key identifier: 10:09:45:21:48:BF:02:5D:13:35:79:CC:61:46:2A:B9:45:88:09:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1009452148BF025D133579CC61462AB945880968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d313238203d3e20323636303231.roa
Signing time:             Wed 22 Oct 2025 14:07:10 +0000
ROA not before:           Wed 22 Oct 2025 14:02:10 +0000
ROA not after:            Wed 21 Oct 2026 14:07:10 +0000
asID:                     266021
IP address blocks:        2804:3940::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/1009452148BF025D133579CC61462AB945880968.crl
                          rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/1009452148BF025D133579CC61462AB945880968.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1009452148BF025D133579CC61462AB945880968.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 01:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d1:05:14:0b:c2:63:ea:1b:ce:a8:3f:94:3f:c4:c6:c5:6b:21:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1009452148BF025D133579CC61462AB945880968
        Validity
            Not Before: Oct 22 14:02:10 2025 GMT
            Not After : Oct 21 14:07:10 2026 GMT
        Subject: CN=9CE262DF36ECAB086D2B6EAFE258883D7E34BAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:56:e9:fa:67:10:c3:3d:9a:98:d0:73:88:
                    d4:18:57:4e:8f:4a:8e:8c:1f:51:07:2c:13:74:cd:
                    15:5f:c0:e6:ca:c0:e9:6a:b5:8c:0c:6f:07:ca:24:
                    ec:08:1d:82:c9:ed:1b:ff:85:6f:0c:95:3e:aa:12:
                    98:48:6b:2a:24:6e:a8:ba:01:b5:07:54:68:a5:c4:
                    34:4b:42:dd:a1:8c:46:4a:03:8c:d0:5c:ea:ca:25:
                    d6:13:c4:fe:4d:06:01:9e:e8:c5:29:1b:b8:92:43:
                    03:91:fd:d3:43:25:54:d7:53:24:12:5a:af:92:7b:
                    39:37:ca:77:ac:23:d6:17:bb:71:fc:d6:75:65:cc:
                    c1:f4:50:f2:d9:b7:fc:d9:d7:4e:15:94:8d:2a:8c:
                    22:08:08:74:9d:52:ea:a5:50:cf:dd:1e:09:a4:01:
                    92:d5:5d:4f:2c:62:fe:59:92:4d:b2:37:e3:12:03:
                    64:d8:1e:ff:a0:77:9c:24:d5:84:79:2d:90:6d:9b:
                    5f:04:93:22:46:c9:f8:1e:49:8d:45:24:58:1d:ed:
                    03:85:c8:b0:45:57:c2:d7:19:08:33:32:3e:82:e9:
                    f8:38:52:19:e5:76:f2:c4:ad:a3:91:12:dd:cd:85:
                    74:de:13:e7:0a:f1:b6:55:c5:2f:c6:1d:b7:be:39:
                    36:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E2:62:DF:36:EC:AB:08:6D:2B:6E:AF:E2:58:88:3D:7E:34:BA:AE
            X509v3 Authority Key Identifier:
                keyid:10:09:45:21:48:BF:02:5D:13:35:79:CC:61:46:2A:B9:45:88:09:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/1009452148BF025D133579CC61462AB945880968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1009452148BF025D133579CC61462AB945880968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/323830343a333934303a3a2f33322d313238203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3940::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:fb:10:5d:d9:45:8d:c3:09:05:f0:38:d2:07:05:ed:f6:ae:
         64:a0:2f:38:d7:8e:a0:a9:1a:20:c0:7c:69:3a:14:ff:bd:fd:
         b8:c4:57:90:25:da:21:df:fa:b8:26:58:e7:ae:33:53:a8:d5:
         dc:cb:6a:e0:da:a2:56:10:7f:97:54:1c:1f:a9:27:79:d3:2c:
         42:1b:97:a8:2c:a9:fd:01:a5:bc:98:94:7a:18:c4:f9:2f:2b:
         c3:49:a1:7a:42:c3:19:53:a9:96:8b:08:bd:c8:de:72:29:e4:
         2b:95:c4:94:cb:68:53:40:a4:08:12:f9:6b:f5:fc:6d:36:df:
         b5:c1:75:a2:1e:de:4e:98:cf:96:ae:65:c5:7a:cd:5e:e3:ac:
         4d:dd:e8:34:a1:23:72:1b:89:42:be:63:81:73:65:b2:28:df:
         7d:2f:e9:73:d3:42:a2:51:2f:47:03:7d:f5:11:f8:22:69:37:
         29:a5:90:31:de:1c:87:eb:2d:ce:01:6e:6d:ae:97:48:b3:4e:
         b6:da:b0:99:a7:56:72:98:ea:b6:4b:e6:dd:c7:4e:22:3f:c1:
         1c:36:a2:be:75:a8:b7:db:65:38:85:b7:0d:4b:3c:4d:45:a3:
         84:66:47:98:9a:af:0d:a0:49:27:bc:b3:ba:4d:c3:9f:63:e2:
         7d:bb:9f:9f
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUWtEFFAvCY+obzqg/lD/ExsVrIe8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAwOTQ1MjE0OEJGMDI1RDEzMzU3OUNDNjE0NjJBQjk0
NTg4MDk2ODAeFw0yNTEwMjIxNDAyMTBaFw0yNjEwMjExNDA3MTBaMDMxMTAvBgNV
BAMTKDlDRTI2MkRGMzZFQ0FCMDg2RDJCNkVBRkUyNTg4ODNEN0UzNEJBQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMlbp+mcQwz2amNBziNQYV06P
So6MH1EHLBN0zRVfwObKwOlqtYwMbwfKJOwIHYLJ7Rv/hW8MlT6qEphIayokbqi6
AbUHVGilxDRLQt2hjEZKA4zQXOrKJdYTxP5NBgGe6MUpG7iSQwOR/dNDJVTXUyQS
Wq+Sezk3ynesI9YXu3H81nVlzMH0UPLZt/zZ104VlI0qjCIICHSdUuqlUM/dHgmk
AZLVXU8sYv5Zkk2yN+MSA2TYHv+gd5wk1YR5LZBtm18EkyJGyfgeSY1FJFgd7QOF
yLBFV8LXGQgzMj6C6fg4UhnldvLEraOREt3NhXTeE+cK8bZVxS/GHbe+OTYNAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUnOJi3zbsqwhtK26v4liIPX40uq4wHwYDVR0j
BBgwFoAUEAlFIUi/Al0TNXnMYUYquUWICWgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFDWTYyWHFqNEhuTlh0dkcyd2ZXNHFaTTNBTnNvN1NWajlNUkxZNXla
NWEvMC8xMDA5NDUyMTQ4QkYwMjVEMTMzNTc5Q0M2MTQ2MkFCOTQ1ODgwOTY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwMDk0NTIxNDhCRjAyNUQx
MzM1NzlDQzYxNDYyQUI5NDU4ODA5NjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBQ1k2MlhxajRIbk5YdHZHMndmVzRxWk0zQU5zbzdTVmo5TVJMWTV5WjVhLzAv
MzIzODMwMzQzYTMzMzkzNDMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzMDMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDlAMA0GCSqGSIb3DQEBCwUAA4IBAQCp+xBd
2UWNwwkF8DjSBwXt9q5koC84146gqRogwHxpOhT/vf24xFeQJdoh3/q4JljnrjNT
qNXcy2rg2qJWEH+XVBwfqSd50yxCG5eoLKn9AaW8mJR6GMT5LyvDSaF6QsMZU6mW
iwi9yN5yKeQrlcSUy2hTQKQIEvlr9fxtNt+1wXWiHt5OmM+WrmXFes1e46xN3eg0
oSNyG4lCvmOBc2WyKN99L+lz00KiUS9HA331EfgiaTcppZAx3hyH6y3OAW5trpdI
s0622rCZp1ZymOq2S+bdx04iP8EcNqK+dai322U4hbcNSzxNRaOEZkeYmq8NoEkn
vLO6TcOfY+J9u5+f
-----END CERTIFICATE-----
Generated at Tue Nov 4 05:04:05 2025 by rpki-client