Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/323830343a386437303a3a2f33322d313238203d3e20323733333537.roa
File:                     323830343a386437303a3a2f33322d313238203d3e20323733333537.roa (raw, json)
Hash identifier:          D6+X4x765dSWAmEMvUG+Dm9tX6di+clohAXuBujPOkY=
Subject key identifier:   85:53:94:20:D0:A2:C2:5F:96:B4:7F:65:16:70:20:3F:3D:1B:E5:08
Certificate issuer:       /CN=03154C4EC754D92E4D48230775EF6EC6B979CF95
Certificate serial:       44FFAFEBBB0D4C7A6718D2837CD9A24A16BC5BDA
Authority key identifier: 03:15:4C:4E:C7:54:D9:2E:4D:48:23:07:75:EF:6E:C6:B9:79:CF:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03154C4EC754D92E4D48230775EF6EC6B979CF95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/323830343a386437303a3a2f33322d313238203d3e20323733333537.roa
Signing time:             Thu 23 Oct 2025 15:29:22 +0000
ROA not before:           Thu 23 Oct 2025 15:24:22 +0000
ROA not after:            Thu 22 Oct 2026 15:29:22 +0000
asID:                     273357
IP address blocks:        2804:8d70::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/03154C4EC754D92E4D48230775EF6EC6B979CF95.crl
                          rsync://rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/03154C4EC754D92E4D48230775EF6EC6B979CF95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03154C4EC754D92E4D48230775EF6EC6B979CF95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 05:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ff:af:eb:bb:0d:4c:7a:67:18:d2:83:7c:d9:a2:4a:16:bc:5b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03154C4EC754D92E4D48230775EF6EC6B979CF95
        Validity
            Not Before: Oct 23 15:24:22 2025 GMT
            Not After : Oct 22 15:29:22 2026 GMT
        Subject: CN=85539420D0A2C25F96B47F651670203F3D1BE508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:b4:a8:c1:a3:7e:ca:e3:f8:f0:24:85:11:
                    23:96:21:6c:60:53:1b:ad:7f:30:e4:0d:a4:8c:42:
                    4b:93:e4:e4:10:31:9d:47:1f:c0:82:c9:b8:ac:97:
                    b8:2f:6f:c2:8a:ac:98:99:73:c7:56:e7:fe:40:fe:
                    fe:3e:4e:0f:4e:47:da:76:47:f3:16:8f:41:26:6f:
                    3c:1e:2c:3b:08:5b:9e:ec:03:8f:94:70:ab:6e:25:
                    e7:18:86:66:d3:fb:e8:f7:3e:f7:19:7f:eb:4d:e9:
                    e5:4c:00:86:66:83:27:34:db:d6:fa:35:b6:33:d2:
                    ac:be:8d:b6:b1:3c:17:05:4c:07:38:31:30:0c:68:
                    71:dc:c3:f7:e7:36:97:63:8f:41:34:8f:67:25:33:
                    23:5a:1e:44:5f:4a:0e:66:cf:4c:29:ed:4c:fb:61:
                    80:f9:1a:2b:bb:af:25:8e:f9:ec:ce:13:55:5b:0c:
                    dd:37:36:a9:6e:ce:3c:a7:41:5a:13:cb:a9:a2:24:
                    42:36:13:cf:5b:75:c6:fe:47:0e:93:73:b4:7e:83:
                    6b:7e:b8:6a:dd:fc:37:64:b5:57:fa:79:ef:37:2f:
                    a1:bc:ee:8b:eb:76:24:2f:b0:b4:9f:42:37:e7:c4:
                    e8:64:7c:28:83:15:e9:c1:ee:e9:04:72:53:39:3d:
                    61:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:53:94:20:D0:A2:C2:5F:96:B4:7F:65:16:70:20:3F:3D:1B:E5:08
            X509v3 Authority Key Identifier:
                keyid:03:15:4C:4E:C7:54:D9:2E:4D:48:23:07:75:EF:6E:C6:B9:79:CF:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/03154C4EC754D92E4D48230775EF6EC6B979CF95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03154C4EC754D92E4D48230775EF6EC6B979CF95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4iUdeeuhT2A3tGv5XbWFcVv9yZjN4f9hr9dcA7dZ3pA/0/323830343a386437303a3a2f33322d313238203d3e20323733333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d70::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:80:c0:78:57:e7:3b:4c:a3:82:11:3c:68:80:82:17:d2:a8:
         cc:85:33:ee:e2:8e:95:b0:da:c3:7e:4d:3e:b3:dc:85:54:01:
         25:1d:f8:16:d6:31:85:0c:b5:47:e6:db:81:7e:0c:ea:ce:47:
         fa:3a:08:cd:80:3e:cd:fd:cd:67:f7:66:7b:d3:73:61:8a:ce:
         bc:08:27:72:76:3b:23:37:17:3e:9f:b4:7a:0f:c1:29:82:13:
         10:c3:a0:4c:f9:25:8a:85:37:2b:27:6f:e6:94:98:65:04:41:
         78:c7:3d:e1:68:e8:f0:16:67:25:61:93:a9:a6:43:68:7a:ab:
         aa:b9:f2:67:48:5e:08:6c:b2:20:50:ee:e6:59:c0:f3:c5:00:
         9f:94:b1:a8:89:40:43:65:0a:a8:f6:95:82:46:a8:cd:96:24:
         4f:d7:ad:e4:ff:8d:73:da:39:76:82:20:f5:b9:02:4c:ca:55:
         91:ba:df:2f:e0:31:0b:ba:b7:5c:f0:47:cf:e5:60:48:00:13:
         bf:e1:03:4c:74:b1:34:69:9d:32:3f:dd:30:7e:f2:f1:0d:1d:
         fd:d8:12:92:82:92:b1:da:61:7c:f3:a9:c8:38:ad:5d:cb:29:
         33:9f:d9:3a:43:4e:25:32:f8:ce:35:4b:58:69:29:73:ad:06:
         ef:61:a8:6e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIURP+v67sNTHpnGNKDfNmiSha8W9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMxNTRDNEVDNzU0RDkyRTRENDgyMzA3NzVFRjZFQzZC
OTc5Q0Y5NTAeFw0yNTEwMjMxNTI0MjJaFw0yNjEwMjIxNTI5MjJaMDMxMTAvBgNV
BAMTKDg1NTM5NDIwRDBBMkMyNUY5NkI0N0Y2NTE2NzAyMDNGM0QxQkU1MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54LSowaN+yuP48CSFESOWIWxg
UxutfzDkDaSMQkuT5OQQMZ1HH8CCybisl7gvb8KKrJiZc8dW5/5A/v4+Tg9OR9p2
R/MWj0EmbzweLDsIW57sA4+UcKtuJecYhmbT++j3PvcZf+tN6eVMAIZmgyc029b6
NbYz0qy+jbaxPBcFTAc4MTAMaHHcw/fnNpdjj0E0j2clMyNaHkRfSg5mz0wp7Uz7
YYD5Giu7ryWO+ezOE1VbDN03NqluzjynQVoTy6miJEI2E89bdcb+Rw6Tc7R+g2t+
uGrd/DdktVf6ee83L6G87ovrdiQvsLSfQjfnxOhkfCiDFenB7ukEclM5PWEdAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUhVOUINCiwl+WtH9lFnAgPz0b5QgwHwYDVR0j
BBgwFoAUAxVMTsdU2S5NSCMHde9uxrl5z5UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjRpVWRlZXVoVDJBM3RHdjVYYldGY1Z2OXlaak40ZjlocjlkY0E3ZFoz
cEEvMC8wMzE1NEM0RUM3NTREOTJFNEQ0ODIzMDc3NUVGNkVDNkI5NzlDRjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMTU0QzRFQzc1NEQ5MkU0
RDQ4MjMwNzc1RUY2RUM2Qjk3OUNGOTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I0aVVkZWV1aFQyQTN0R3Y1WGJXRmNWdjl5WmpONGY5aHI5ZGNBN2RaM3BBLzAv
MzIzODMwMzQzYTM4NjQzNzMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM3
MzMzMzM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBI1wMA0GCSqGSIb3DQEBCwUAA4IBAQBdgMB4
V+c7TKOCETxogIIX0qjMhTPu4o6VsNrDfk0+s9yFVAElHfgW1jGFDLVH5tuBfgzq
zkf6OgjNgD7N/c1n92Z703Nhis68CCdydjsjNxc+n7R6D8EpghMQw6BM+SWKhTcr
J2/mlJhlBEF4xz3haOjwFmclYZOppkNoeququfJnSF4IbLIgUO7mWcDzxQCflLGo
iUBDZQqo9pWCRqjNliRP163k/41z2jl2giD1uQJMylWRut8v4DELurdc8EfP5WBI
ABO/4QNMdLE0aZ0yP90wfvLxDR392BKSgpKx2mF886nIOK1dyykzn9k6Q04lMvjO
NUtYaSlzrQbvYahu
-----END CERTIFICATE-----
Generated at Tue Nov 4 05:08:16 2025 by rpki-client