Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/323830343a386161633a3a2f33322d3438203d3e20323733363835.roa
File:                     323830343a386161633a3a2f33322d3438203d3e20323733363835.roa (raw, json)
Hash identifier:          r9BKYATaL7zpuCLfHYLC8h82pNv7+c+XuB+/9Zzo3Wo=
Subject key identifier:   98:3A:98:44:60:4E:AD:CD:B0:77:8E:E8:4D:30:68:40:73:2A:11:CE
Certificate issuer:       /CN=C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18
Certificate serial:       63920F6B30391C6F0AB4E5099E36D016083C5FAB
Authority key identifier: C9:A3:CA:03:61:FB:5D:EB:B5:D1:BC:76:78:BE:30:AB:AB:EA:CE:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/323830343a386161633a3a2f33322d3438203d3e20323733363835.roa
Signing time:             Tue 28 Oct 2025 20:57:37 +0000
ROA not before:           Tue 28 Oct 2025 20:52:37 +0000
ROA not after:            Tue 27 Oct 2026 20:57:37 +0000
asID:                     273685
IP address blocks:        2804:8aac::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.crl
                          rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 05:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:92:0f:6b:30:39:1c:6f:0a:b4:e5:09:9e:36:d0:16:08:3c:5f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18
        Validity
            Not Before: Oct 28 20:52:37 2025 GMT
            Not After : Oct 27 20:57:37 2026 GMT
        Subject: CN=983A9844604EADCDB0778EE84D306840732A11CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a6:d1:0a:9b:79:a5:a1:b2:af:1f:dd:bf:cc:
                    cf:f4:32:33:ed:d9:38:12:2b:b6:82:f1:cd:46:cb:
                    70:d9:4f:56:c1:4c:d4:db:5f:2c:8b:42:48:ce:7e:
                    b3:b1:92:8b:d8:55:c0:1c:37:f4:d0:57:6b:7b:15:
                    a3:21:ae:fa:1c:a2:b7:dd:67:d9:29:e0:e3:73:b3:
                    8f:da:49:3a:c3:71:b9:1e:70:66:8f:e4:8e:be:f1:
                    a4:07:7f:18:04:92:a3:7d:35:dd:22:99:da:99:fb:
                    b9:d6:55:39:c8:6c:82:3e:95:f9:3c:76:d7:dc:cd:
                    6b:59:26:04:9b:17:24:a4:04:6a:1f:a0:6b:5b:4b:
                    7e:26:1f:22:7d:0c:f6:c4:76:59:59:43:02:c3:b4:
                    9e:56:bb:09:a8:ab:77:6d:6f:22:94:54:ee:ed:b5:
                    e5:a0:b0:9d:77:d5:ed:3b:8f:31:48:f6:1a:a7:5b:
                    6e:26:d6:29:b9:81:1e:e8:a9:d1:24:1a:6e:f6:90:
                    4f:24:f3:0a:6c:98:cd:95:be:1b:6d:89:8c:58:d2:
                    b6:91:c7:5f:1d:a9:84:91:f1:ae:02:13:8e:0b:01:
                    09:80:4b:55:5e:2f:de:0f:f1:51:03:4b:22:50:9c:
                    fc:6a:84:2c:ad:32:f7:54:cc:83:fa:7f:48:2f:43:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3A:98:44:60:4E:AD:CD:B0:77:8E:E8:4D:30:68:40:73:2A:11:CE
            X509v3 Authority Key Identifier:
                keyid:C9:A3:CA:03:61:FB:5D:EB:B5:D1:BC:76:78:BE:30:AB:AB:EA:CE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9A3CA0361FB5DEBB5D1BC7678BE30ABABEACE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/323830343a386161633a3a2f33322d3438203d3e20323733363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aac::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:c1:48:fb:20:5c:0e:fc:c7:20:0f:ec:3b:b3:03:45:2b:89:
         08:51:45:9d:d1:cd:e0:fd:b7:c5:1f:05:bf:d0:51:3e:d2:97:
         0a:fa:fe:39:9b:1a:e4:cd:0c:2f:57:e4:01:2f:34:a4:cd:22:
         c7:8c:77:2f:79:4b:5c:6e:5c:4d:e0:90:95:29:ec:5b:2f:1e:
         d8:51:0a:ed:a9:c0:1e:4b:14:9b:30:c7:98:f0:64:16:15:63:
         52:c0:00:8f:4e:3e:c7:77:63:ca:63:3a:3b:6d:2b:21:0b:06:
         46:8f:49:ec:35:07:ef:07:e6:fc:95:57:e5:f1:b1:14:2e:8b:
         8c:16:8b:13:23:cc:1a:68:31:8c:fc:64:3f:ab:b5:31:d5:57:
         2b:32:b4:61:d1:4e:2f:c6:6e:1b:e9:86:2a:7f:e6:4d:5c:4d:
         6f:ca:8b:8b:39:94:7b:60:69:39:08:17:ef:f6:93:94:eb:66:
         78:e7:51:9e:63:f9:42:19:8c:ba:be:28:8d:3c:6b:d4:e1:bb:
         e7:d8:5e:9f:d4:0f:c7:41:5a:4f:34:df:6b:30:a3:85:47:ff:
         8e:da:c7:e7:c1:bb:60:ac:69:71:c4:4b:c8:cd:16:fb:92:00:
         ac:3b:0d:c0:d5:3d:d5:8e:8d:51:52:72:28:96:e6:84:08:82:
         4f:6c:96:19
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUY5IPazA5HG8KtOUJnjbQFgg8X6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlBM0NBMDM2MUZCNURFQkI1RDFCQzc2NzhCRTMwQUJB
QkVBQ0UxODAeFw0yNTEwMjgyMDUyMzdaFw0yNjEwMjcyMDU3MzdaMDMxMTAvBgNV
BAMTKDk4M0E5ODQ0NjA0RUFEQ0RCMDc3OEVFODREMzA2ODQwNzMyQTExQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ptEKm3mlobKvH92/zM/0MjPt
2TgSK7aC8c1Gy3DZT1bBTNTbXyyLQkjOfrOxkovYVcAcN/TQV2t7FaMhrvocorfd
Z9kp4ONzs4/aSTrDcbkecGaP5I6+8aQHfxgEkqN9Nd0imdqZ+7nWVTnIbII+lfk8
dtfczWtZJgSbFySkBGofoGtbS34mHyJ9DPbEdllZQwLDtJ5Wuwmoq3dtbyKUVO7t
teWgsJ131e07jzFI9hqnW24m1im5gR7oqdEkGm72kE8k8wpsmM2VvhttiYxY0raR
x18dqYSR8a4CE44LAQmAS1VeL94P8VEDSyJQnPxqhCytMvdUzIP6f0gvQ6u5AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUmDqYRGBOrc2wd47oTTBoQHMqEc4wHwYDVR0j
BBgwFoAUyaPKA2H7Xeu10bx2eL4wq6vqzhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVhzRk1ackJtM2NLV1hERHIyZDFtQkcycTdmbVRCOGtENjZSeHN1WlM4
cnMvMC9DOUEzQ0EwMzYxRkI1REVCQjVEMUJDNzY3OEJFMzBBQkFCRUFDRTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QTNDQTAzNjFGQjVERUJC
NUQxQkM3Njc4QkUzMEFCQUJFQUNFMTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FYc0ZNWnJCbTNjS1dYRERyMmQxbUJHMnE3Zm1UQjhrRDY2UnhzdVpTOHJzLzAv
MzIzODMwMzQzYTM4NjE2MTYzM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNzMz
MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASKrDANBgkqhkiG9w0BAQsFAAOCAQEAUMFI+yBc
DvzHIA/sO7MDRSuJCFFFndHN4P23xR8Fv9BRPtKXCvr+OZsa5M0ML1fkAS80pM0i
x4x3L3lLXG5cTeCQlSnsWy8e2FEK7anAHksUmzDHmPBkFhVjUsAAj04+x3djymM6
O20rIQsGRo9J7DUH7wfm/JVX5fGxFC6LjBaLEyPMGmgxjPxkP6u1MdVXKzK0YdFO
L8ZuG+mGKn/mTVxNb8qLizmUe2BpOQgX7/aTlOtmeOdRnmP5QhmMur4ojTxr1OG7
59hen9QPx0FaTzTfazCjhUf/jtrH58G7YKxpccRLyM0W+5IArDsNwNU91Y6NUVJy
KJbmhAiCT2yWGQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 05:07:40 2025 by rpki-client