Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a313030303a3a2f34302d3430203d3e20323635343638.roa
File:                     323830343a333439633a313030303a3a2f34302d3430203d3e20323635343638.roa (raw, json)
Hash identifier:          +6EcJeb4m4ySaoD30mnagx1VHy6E7LnBocZ/s2OaBNQ=
Subject key identifier:   B8:43:14:2B:84:7D:2E:65:63:FE:04:74:66:14:0E:D2:8F:4B:3A:5B
Certificate issuer:       /CN=D122D268516BC498BFD4DFF4B38F0B442647ABE4
Certificate serial:       0DC25DC88C573D1640A5FC8C40C0E5E3338CAB55
Authority key identifier: D1:22:D2:68:51:6B:C4:98:BF:D4:DF:F4:B3:8F:0B:44:26:47:AB:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D122D268516BC498BFD4DFF4B38F0B442647ABE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a313030303a3a2f34302d3430203d3e20323635343638.roa
Signing time:             Tue 16 Sep 2025 15:49:18 +0000
ROA not before:           Tue 16 Sep 2025 15:44:18 +0000
ROA not after:            Tue 15 Sep 2026 15:49:18 +0000
asID:                     265468
IP address blocks:        2804:349c:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D122D268516BC498BFD4DFF4B38F0B442647ABE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c2:5d:c8:8c:57:3d:16:40:a5:fc:8c:40:c0:e5:e3:33:8c:ab:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D122D268516BC498BFD4DFF4B38F0B442647ABE4
        Validity
            Not Before: Sep 16 15:44:18 2025 GMT
            Not After : Sep 15 15:49:18 2026 GMT
        Subject: CN=B843142B847D2E6563FE047466140ED28F4B3A5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:16:08:06:11:1c:33:e1:35:28:40:00:f7:
                    a3:2a:d4:43:b3:c4:5e:fa:15:d3:65:3b:82:38:3b:
                    04:4a:0c:6e:75:5e:31:e8:41:70:89:df:11:5c:93:
                    97:1f:fc:96:17:72:ef:fd:94:81:02:0c:2c:ee:de:
                    6f:b2:f0:ec:f5:9f:07:22:cd:eb:83:06:0d:a1:fe:
                    1e:b7:29:b2:21:95:f0:26:5e:1e:7b:68:eb:0c:52:
                    59:9e:c6:d9:f7:28:e4:d9:e2:a9:96:f5:cf:60:61:
                    f9:05:b5:23:b8:45:9b:94:f6:6e:0e:f5:47:c5:5f:
                    5d:70:1e:1d:18:4c:13:29:88:c2:ae:25:c9:f8:8e:
                    5c:b9:04:83:14:ba:75:4c:29:96:4c:41:36:4a:3c:
                    2d:35:6b:c8:e2:50:17:cf:a3:23:67:7f:a7:7c:51:
                    f2:16:dd:dd:a1:f7:93:5b:a9:9a:5c:24:44:89:c9:
                    1a:52:89:f7:55:db:ab:d8:18:2d:cc:23:25:be:b8:
                    9e:7d:37:91:67:5e:50:a9:28:55:5c:f4:bd:8f:16:
                    00:f9:61:7e:05:ec:06:ef:05:dc:85:26:41:55:c1:
                    3c:c5:12:4c:ca:6c:a9:90:12:f2:a2:1c:c4:36:be:
                    79:52:6b:ed:62:fc:f5:2c:0a:1a:2e:aa:ae:7c:56:
                    0d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:43:14:2B:84:7D:2E:65:63:FE:04:74:66:14:0E:D2:8F:4B:3A:5B
            X509v3 Authority Key Identifier:
                keyid:D1:22:D2:68:51:6B:C4:98:BF:D4:DF:F4:B3:8F:0B:44:26:47:AB:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D122D268516BC498BFD4DFF4B38F0B442647ABE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a313030303a3a2f34302d3430203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:349c:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:dd:8e:3b:46:c1:73:35:89:88:35:77:3a:37:1b:f5:1f:f8:
         02:45:e3:6a:b0:3d:e6:e5:0c:39:5b:6a:43:58:41:b2:c2:61:
         a4:07:54:01:cf:1b:81:b6:15:ee:e6:89:60:2f:05:a5:45:7a:
         76:2f:52:13:d8:bb:9f:76:b1:03:95:16:6c:e5:40:ad:34:54:
         0d:9f:54:57:be:56:76:29:84:d1:e0:6b:11:77:29:cc:70:6f:
         18:6e:ff:30:27:fe:4d:37:a0:26:07:99:50:66:5c:2f:4b:76:
         1f:2a:aa:d8:41:24:32:1b:4e:79:ec:77:bf:d2:31:45:33:cb:
         26:72:63:99:bb:b9:84:b0:9a:c8:43:2e:1c:b0:9f:ca:2c:e6:
         5d:b8:c3:41:0d:a9:fe:69:2f:e0:82:17:02:f1:c5:b1:24:48:
         ce:3d:f7:43:09:08:6a:f6:34:24:b2:d2:24:dd:fc:a9:53:37:
         e9:f0:b7:62:79:26:bd:99:7a:11:b1:d9:4a:ae:45:9d:1e:a7:
         d9:f8:ae:60:b0:8e:b8:1f:40:fa:cc:d3:a1:2a:1b:89:2a:9b:
         50:4e:d4:4d:e3:8d:d5:3b:0a:05:9c:f0:d7:4e:f0:5f:35:a8:
         d7:26:f4:22:78:4f:1d:c9:ee:80:b5:f7:36:08:10:4d:9e:44:
         6f:a8:18:26
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDcJdyIxXPRZApfyMQMDl4zOMq1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDEyMkQyNjg1MTZCQzQ5OEJGRDRERkY0QjM4RjBCNDQy
NjQ3QUJFNDAeFw0yNTA5MTYxNTQ0MThaFw0yNjA5MTUxNTQ5MThaMDMxMTAvBgNV
BAMTKEI4NDMxNDJCODQ3RDJFNjU2M0ZFMDQ3NDY2MTQwRUQyOEY0QjNBNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgYRYIBhEcM+E1KEAA96Mq1EOz
xF76FdNlO4I4OwRKDG51XjHoQXCJ3xFck5cf/JYXcu/9lIECDCzu3m+y8Oz1nwci
zeuDBg2h/h63KbIhlfAmXh57aOsMUlmextn3KOTZ4qmW9c9gYfkFtSO4RZuU9m4O
9UfFX11wHh0YTBMpiMKuJcn4jly5BIMUunVMKZZMQTZKPC01a8jiUBfPoyNnf6d8
UfIW3d2h95NbqZpcJESJyRpSifdV26vYGC3MIyW+uJ59N5FnXlCpKFVc9L2PFgD5
YX4F7AbvBdyFJkFVwTzFEkzKbKmQEvKiHMQ2vnlSa+1i/PUsChouqq58Vg2VAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUuEMUK4R9LmVj/gR0ZhQO0o9LOlswHwYDVR0j
BBgwFoAU0SLSaFFrxJi/1N/0s48LRCZHq+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVFZU2VvenFzcGl1bkNrOTR5SnNLTmhwUjNibzFRNVFwakZUNnlxczdN
V0IvMC9EMTIyRDI2ODUxNkJDNDk4QkZENERGRjRCMzhGMEI0NDI2NDdBQkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMjJEMjY4NTE2QkM0OThC
RkQ0REZGNEIzOEYwQjQ0MjY0N0FCRTQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FRWVNlb3pxc3BpdW5Dazk0eUpzS05ocFIzYm8xUTVRcGpGVDZ5cXM3TVdCLzAv
MzIzODMwMzQzYTMzMzQzOTYzM2EzMTMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNTM0MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgENJwQMA0GCSqGSIb3DQEBCwUA
A4IBAQAf3Y47RsFzNYmINXc6Nxv1H/gCReNqsD3m5Qw5W2pDWEGywmGkB1QBzxuB
thXu5olgLwWlRXp2L1IT2LufdrEDlRZs5UCtNFQNn1RXvlZ2KYTR4GsRdynMcG8Y
bv8wJ/5NN6AmB5lQZlwvS3YfKqrYQSQyG0557He/0jFFM8smcmOZu7mEsJrIQy4c
sJ/KLOZduMNBDan+aS/gghcC8cWxJEjOPfdDCQhq9jQkstIk3fypUzfp8LdieSa9
mXoRsdlKrkWdHqfZ+K5gsI64H0D6zNOhKhuJKptQTtRN443VOwoFnPDXTvBfNajX
JvQieE8dye6Atfc2CBBNnkRvqBgm
-----END CERTIFICATE-----
Generated at Thu Sep 18 10:55:46 2025 by rpki-client