Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/323830343a6133383a3a2f33322d3334203d3e20323633303335.roa
File:                     323830343a6133383a3a2f33322d3334203d3e20323633303335.roa (raw, json)
Hash identifier:          2qxDVoXo+XY/tKYEra2k+wvwLq1m6vijBeQyPG86OW8=
Subject key identifier:   AF:6F:48:55:9F:21:3A:B0:DB:E2:B5:11:BF:29:30:86:3C:2B:5C:E4
Certificate issuer:       /CN=F7A2A2F4D3EDA62F73C339EBAB3CE8E9CCF147E2
Certificate serial:       5AB7079BDC6FFD818C033778BDC8CE0171554B60
Authority key identifier: F7:A2:A2:F4:D3:ED:A6:2F:73:C3:39:EB:AB:3C:E8:E9:CC:F1:47:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7A2A2F4D3EDA62F73C339EBAB3CE8E9CCF147E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/323830343a6133383a3a2f33322d3334203d3e20323633303335.roa
Signing time:             Wed 17 Sep 2025 14:02:33 +0000
ROA not before:           Wed 17 Sep 2025 13:57:33 +0000
ROA not after:            Wed 16 Sep 2026 14:02:33 +0000
asID:                     263035
IP address blocks:        2804:a38::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/F7A2A2F4D3EDA62F73C339EBAB3CE8E9CCF147E2.crl
                          rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/F7A2A2F4D3EDA62F73C339EBAB3CE8E9CCF147E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7A2A2F4D3EDA62F73C339EBAB3CE8E9CCF147E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:23:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b7:07:9b:dc:6f:fd:81:8c:03:37:78:bd:c8:ce:01:71:55:4b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7A2A2F4D3EDA62F73C339EBAB3CE8E9CCF147E2
        Validity
            Not Before: Sep 17 13:57:33 2025 GMT
            Not After : Sep 16 14:02:33 2026 GMT
        Subject: CN=AF6F48559F213AB0DBE2B511BF2930863C2B5CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e4:16:4e:58:da:35:aa:c7:e9:f6:ff:27:54:
                    49:76:99:82:ac:a9:83:66:33:78:67:a6:d5:47:4a:
                    5f:d1:97:74:3f:c3:15:86:7b:8b:f6:bf:a1:c2:4c:
                    02:94:09:94:28:25:d2:6a:15:32:f9:b9:15:9b:d4:
                    87:5c:f8:97:50:54:2a:9d:33:3d:39:6a:00:fa:9b:
                    48:1b:17:5c:b7:53:3d:22:12:6a:4c:85:9f:c4:72:
                    14:82:14:53:f8:40:0e:68:11:0b:f1:33:ef:1c:08:
                    ee:31:34:a5:0d:e2:4e:1f:b4:4d:8f:e5:c7:8a:cd:
                    36:07:9d:b9:02:f1:85:fb:76:4f:91:57:37:76:b2:
                    25:32:21:ed:0d:fa:a0:fa:17:6e:25:b9:4b:85:98:
                    d0:bb:94:05:38:60:94:bf:9a:67:6f:16:e2:8d:fd:
                    ce:8e:1c:c6:67:63:8e:b3:9b:3a:4e:87:15:61:69:
                    d2:1c:04:7f:e1:ac:59:bb:5e:71:9a:1c:e6:0e:36:
                    19:a2:16:4d:19:08:38:a7:a9:35:74:06:b3:36:a5:
                    39:a3:d2:44:c2:18:00:8b:ae:61:39:64:33:ca:0d:
                    49:ca:3d:49:36:81:c5:49:c9:3e:90:e2:72:03:88:
                    77:91:07:b1:3f:5e:46:8b:e5:fc:97:94:ed:7e:c0:
                    c3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6F:48:55:9F:21:3A:B0:DB:E2:B5:11:BF:29:30:86:3C:2B:5C:E4
            X509v3 Authority Key Identifier:
                keyid:F7:A2:A2:F4:D3:ED:A6:2F:73:C3:39:EB:AB:3C:E8:E9:CC:F1:47:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/F7A2A2F4D3EDA62F73C339EBAB3CE8E9CCF147E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7A2A2F4D3EDA62F73C339EBAB3CE8E9CCF147E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/323830343a6133383a3a2f33322d3334203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a38::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:5d:46:79:2f:60:2f:fb:00:1a:4e:9f:85:a0:9b:03:d0:46:
         be:44:79:69:8d:f3:4e:7a:14:b6:96:6a:89:1d:54:0b:70:ad:
         53:d5:52:01:ba:44:68:94:a8:a7:c7:95:7b:8d:97:ae:10:7d:
         39:cb:38:63:3a:08:09:77:c4:46:71:ea:e7:84:09:93:ff:8b:
         9d:1d:af:7c:2f:f5:92:b0:83:a9:27:34:3f:10:da:a4:e1:5a:
         2a:97:52:81:6e:f3:87:1e:0f:d3:7b:7f:3e:79:a2:3f:ef:c7:
         02:6a:4c:17:28:e5:ca:17:ed:89:68:8d:69:8b:5a:90:b4:e2:
         57:51:16:2c:c7:93:56:64:f2:53:14:de:b8:98:41:75:fc:a8:
         d3:68:a3:09:0f:30:ac:26:99:ef:3c:b7:5b:0c:2e:74:10:66:
         53:b9:dd:8a:d0:f6:63:b4:5d:66:86:41:7b:ce:83:4c:79:1a:
         0d:6f:37:f3:b8:62:0d:02:5a:06:12:fe:59:f6:70:0c:e4:aa:
         86:16:bf:f3:e3:03:26:24:f8:98:eb:fd:cd:29:92:1f:9e:18:
         d8:d4:7f:25:2e:0b:86:3b:59:93:0e:c3:ef:4e:3a:85:79:bc:
         ee:0e:0e:b7:eb:2d:a0:07:cb:c8:18:ab:0a:e9:69:74:57:b5:
         08:ba:77:b4
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUWrcHm9xv/YGMAzd4vcjOAXFVS2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdBMkEyRjREM0VEQTYyRjczQzMzOUVCQUIzQ0U4RTlD
Q0YxNDdFMjAeFw0yNTA5MTcxMzU3MzNaFw0yNjA5MTYxNDAyMzNaMDMxMTAvBgNV
BAMTKEFGNkY0ODU1OUYyMTNBQjBEQkUyQjUxMUJGMjkzMDg2M0MyQjVDRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85BZOWNo1qsfp9v8nVEl2mYKs
qYNmM3hnptVHSl/Rl3Q/wxWGe4v2v6HCTAKUCZQoJdJqFTL5uRWb1Idc+JdQVCqd
Mz05agD6m0gbF1y3Uz0iEmpMhZ/EchSCFFP4QA5oEQvxM+8cCO4xNKUN4k4ftE2P
5ceKzTYHnbkC8YX7dk+RVzd2siUyIe0N+qD6F24luUuFmNC7lAU4YJS/mmdvFuKN
/c6OHMZnY46zmzpOhxVhadIcBH/hrFm7XnGaHOYONhmiFk0ZCDinqTV0BrM2pTmj
0kTCGACLrmE5ZDPKDUnKPUk2gcVJyT6Q4nIDiHeRB7E/XkaL5fyXlO1+wMMbAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUr29IVZ8hOrDb4rURvykwhjwrXOQwHwYDVR0j
BBgwFoAU96Ki9NPtpi9zwznrqzzo6czxR+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUpNcmRVZ2p6cnlHeXlxd2FpMTRlZXo5elZqWnRieTZ6R3IxcUJ0QW9K
RDIvMC9GN0EyQTJGNEQzRURBNjJGNzNDMzM5RUJBQjNDRThFOUNDRjE0N0UyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y3QTJBMkY0RDNFREE2MkY3
M0MzMzlFQkFCM0NFOEU5Q0NGMTQ3RTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKTXJkVWdqenJ5R3l5cXdhaTE0ZWV6OXpWalp0Ynk2ekdyMXFCdEFvSkQyLzAv
MzIzODMwMzQzYTYxMzMzODNhM2EyZjMzMzIyZDMzMzQyMDNkM2UyMDMyMzYzMzMw
MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECjgwDQYJKoZIhvcNAQELBQADggEBAINdRnkvYC/7
ABpOn4WgmwPQRr5EeWmN8056FLaWaokdVAtwrVPVUgG6RGiUqKfHlXuNl64QfTnL
OGM6CAl3xEZx6ueECZP/i50dr3wv9ZKwg6knND8Q2qThWiqXUoFu84ceD9N7fz55
oj/vxwJqTBco5coX7YlojWmLWpC04ldRFizHk1Zk8lMU3riYQXX8qNNoowkPMKwm
me88t1sMLnQQZlO53YrQ9mO0XWaGQXvOg0x5Gg1vN/O4Yg0CWgYS/ln2cAzkqoYW
v/PjAyYk+Jjr/c0pkh+eGNjUfyUuC4Y7WZMOw+9OOoV5vO4ODrfrLaAHy8gYqwrp
aXRXtQi6d7Q=
-----END CERTIFICATE-----
Generated at Thu Sep 18 20:49:02 2025 by rpki-client