Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/323830343a333439383a3a2f33322d3332203d3e20323635343637.roa
File:                     323830343a333439383a3a2f33322d3332203d3e20323635343637.roa (raw, json)
Hash identifier:          4D/uPrjckjTtR2ilbkEgeu65wdvem/4E5VO6ZsCNI7M=
Subject key identifier:   81:3A:B6:8F:9B:2F:FE:96:A4:3A:D8:80:98:8F:02:E0:4B:74:43:36
Certificate issuer:       /CN=5DF3A6CA02D193DDAF65AB631967B12ACCCD8517
Certificate serial:       041AD3F9CD5C889B495658AED349B2A3025B1E3F
Authority key identifier: 5D:F3:A6:CA:02:D1:93:DD:AF:65:AB:63:19:67:B1:2A:CC:CD:85:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/323830343a333439383a3a2f33322d3332203d3e20323635343637.roa
Signing time:             Mon 15 Sep 2025 20:08:14 +0000
ROA not before:           Mon 15 Sep 2025 20:03:14 +0000
ROA not after:            Mon 14 Sep 2026 20:08:14 +0000
asID:                     265467
IP address blocks:        2804:3498::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.crl
                          rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 05:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1a:d3:f9:cd:5c:88:9b:49:56:58:ae:d3:49:b2:a3:02:5b:1e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF3A6CA02D193DDAF65AB631967B12ACCCD8517
        Validity
            Not Before: Sep 15 20:03:14 2025 GMT
            Not After : Sep 14 20:08:14 2026 GMT
        Subject: CN=813AB68F9B2FFE96A43AD880988F02E04B744336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:db:96:49:5c:09:1d:4e:fc:15:cc:e6:e5:
                    0d:aa:2f:e8:82:d3:d1:46:04:9b:5c:83:44:36:cc:
                    47:35:ed:34:6b:b8:0e:b9:55:27:3e:e0:bc:14:eb:
                    a1:0b:fe:41:7a:2a:30:6d:67:7c:03:e5:34:05:da:
                    13:6b:30:2c:eb:a0:67:81:c6:e0:9c:1f:b8:9f:3b:
                    5e:1c:df:d4:e1:d6:61:95:71:d8:be:63:87:fc:00:
                    63:a8:f9:bd:10:7a:b2:b8:bd:f5:46:29:c7:c5:35:
                    b5:69:a4:d3:36:3d:39:2c:93:59:88:23:03:7c:fa:
                    99:35:75:98:92:96:6b:53:4f:ba:9a:d6:0c:cd:62:
                    42:0d:a9:b6:45:71:c9:f5:e9:3f:0d:78:b5:fc:8c:
                    4d:0f:ca:da:d5:74:e9:3d:f8:ed:7a:4d:85:00:d3:
                    43:92:64:bd:87:74:43:cd:ea:90:53:ef:48:82:cf:
                    6b:b4:59:84:f7:7b:8f:11:c7:ca:64:d3:ad:f5:35:
                    5d:27:a1:01:49:7f:a5:0f:ed:b8:0a:db:d0:28:63:
                    70:a1:b5:20:02:d7:ab:60:ea:8b:8a:34:0c:4c:2c:
                    fa:bb:fc:87:4d:9c:15:36:a6:5f:51:59:b2:42:d1:
                    07:cb:07:5a:a5:73:c1:ec:a7:71:a6:9e:41:c4:49:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3A:B6:8F:9B:2F:FE:96:A4:3A:D8:80:98:8F:02:E0:4B:74:43:36
            X509v3 Authority Key Identifier:
                keyid:5D:F3:A6:CA:02:D1:93:DD:AF:65:AB:63:19:67:B1:2A:CC:CD:85:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/323830343a333439383a3a2f33322d3332203d3e20323635343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3498::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:8b:4a:c6:a6:1b:2e:4e:43:12:96:63:2e:aa:fa:7c:41:b7:
         98:d2:ba:d0:b4:69:63:04:fd:0a:72:3a:81:c2:6b:19:88:4a:
         eb:21:3f:2d:b7:55:1f:b2:8f:95:b3:fc:66:cb:a6:47:a9:3e:
         91:23:5f:4c:71:af:3a:85:1c:bc:14:a6:7d:8a:20:ff:f7:c5:
         6d:05:3f:3b:60:01:4e:88:9e:68:94:fc:8c:ea:f0:c3:27:9b:
         e5:b3:e1:60:5e:fa:9b:e7:12:c2:b8:ac:91:54:c7:85:6d:36:
         97:60:70:8b:60:c9:7b:ec:ed:53:ee:4a:7b:e1:a2:40:9c:42:
         f2:57:ce:11:77:a6:76:e1:a9:a0:0a:88:33:a4:11:28:c9:6b:
         44:4b:6a:b6:db:55:01:1c:cd:24:7d:34:f0:9a:2b:d5:c4:54:
         78:99:13:4f:49:ad:dd:06:03:11:2d:b7:8f:53:44:08:56:d3:
         2f:62:3f:7b:19:f9:08:a6:75:b5:49:c3:e4:9a:1d:8d:de:5d:
         e8:21:12:17:fb:01:3a:11:d7:83:c7:b2:eb:48:1e:6b:26:3a:
         75:d8:d4:71:61:6c:f5:a8:24:59:a2:83:21:ff:05:8e:72:fb:
         8e:78:15:99:5f:1d:d4:64:d5:66:b7:2f:15:de:b4:ea:97:d5:
         91:d0:5e:d7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUBBrT+c1ciJtJVliu00myowJbHj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURGM0E2Q0EwMkQxOTNEREFGNjVBQjYzMTk2N0IxMkFD
Q0NEODUxNzAeFw0yNTA5MTUyMDAzMTRaFw0yNjA5MTQyMDA4MTRaMDMxMTAvBgNV
BAMTKDgxM0FCNjhGOUIyRkZFOTZBNDNBRDg4MDk4OEYwMkUwNEI3NDQzMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj/NuWSVwJHU78Fczm5Q2qL+iC
09FGBJtcg0Q2zEc17TRruA65VSc+4LwU66EL/kF6KjBtZ3wD5TQF2hNrMCzroGeB
xuCcH7ifO14c39Th1mGVcdi+Y4f8AGOo+b0QerK4vfVGKcfFNbVppNM2PTksk1mI
IwN8+pk1dZiSlmtTT7qa1gzNYkINqbZFccn16T8NeLX8jE0PytrVdOk9+O16TYUA
00OSZL2HdEPN6pBT70iCz2u0WYT3e48Rx8pk0631NV0noQFJf6UP7bgK29AoY3Ch
tSAC16tg6ouKNAxMLPq7/IdNnBU2pl9RWbJC0QfLB1qlc8Hsp3GmnkHESbnVAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUgTq2j5sv/pakOtiAmI8C4Et0QzYwHwYDVR0j
BBgwFoAUXfOmygLRk92vZatjGWexKszNhRcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpmZm9WdEM3aFVXVTQ2NjFuRmZhYTRBZGdQRWdtS1JORTk2eTFvWkhT
TGUvMC81REYzQTZDQTAyRDE5M0REQUY2NUFCNjMxOTY3QjEyQUNDQ0Q4NTE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVERjNBNkNBMDJEMTkzRERB
RjY1QUI2MzE5NjdCMTJBQ0NDRDg1MTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6ZmZvVnRDN2hVV1U0NjYxbkZmYWE0QWRnUEVnbUtSTkU5Nnkxb1pIU0xlLzAv
MzIzODMwMzQzYTMzMzQzOTM4M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzQzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ0mDANBgkqhkiG9w0BAQsFAAOCAQEAC4tKxqYb
Lk5DEpZjLqr6fEG3mNK60LRpYwT9CnI6gcJrGYhK6yE/LbdVH7KPlbP8ZsumR6k+
kSNfTHGvOoUcvBSmfYog//fFbQU/O2ABToieaJT8jOrwwyeb5bPhYF76m+cSwris
kVTHhW02l2Bwi2DJe+ztU+5Ke+GiQJxC8lfOEXemduGpoAqIM6QRKMlrREtqtttV
ARzNJH008Jor1cRUeJkTT0mt3QYDES23j1NECFbTL2I/exn5CKZ1tUnD5Jodjd5d
6CESF/sBOhHXg8ey60geayY6ddjUcWFs9agkWaKDIf8FjnL7jngVmV8d1GTVZrcv
Fd606pfVkdBe1w==
-----END CERTIFICATE-----
Generated at Thu Sep 18 14:39:21 2025 by rpki-client