Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa
File:                     323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa (raw, json)
Hash identifier:          uCF/NQdsS1kJnzmC+uhdurLB+o61bwvge8YWOMYv/TI=
Subject key identifier:   26:30:1E:87:8B:92:2A:A8:21:9B:06:E0:13:AC:01:30:56:57:CC:AA
Certificate issuer:       /CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8
Certificate serial:       6152B83FD673787921DC2B63ADCCEF00397E814C
Authority key identifier: 43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa
Signing time:             Tue 28 Oct 2025 11:04:54 +0000
ROA not before:           Tue 28 Oct 2025 10:59:54 +0000
ROA not after:            Tue 27 Oct 2026 11:04:54 +0000
asID:                     272220
IP address blocks:        2804:1f54:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl
                          rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:52:b8:3f:d6:73:78:79:21:dc:2b:63:ad:cc:ef:00:39:7e:81:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8
        Validity
            Not Before: Oct 28 10:59:54 2025 GMT
            Not After : Oct 27 11:04:54 2026 GMT
        Subject: CN=26301E878B922AA8219B06E013AC01305657CCAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:93:9c:4f:f9:21:fb:fd:dd:8b:6e:a1:5c:da:
                    0e:1d:67:c8:61:34:05:20:6a:d2:15:be:17:56:76:
                    eb:d2:3e:9d:aa:f0:bd:ec:e8:12:84:66:dc:18:41:
                    5c:eb:e8:0d:2c:6e:88:e5:96:67:30:d5:38:2d:f1:
                    29:92:f1:42:17:9d:62:0f:04:63:7b:dd:22:de:e4:
                    46:76:41:c1:c8:48:07:a4:96:7a:04:5b:6b:37:3b:
                    5f:02:0d:3b:8a:6a:96:2d:9e:6a:f7:bf:03:81:79:
                    9b:c9:b0:b2:f7:50:eb:99:3f:02:2f:69:ea:b4:d5:
                    e9:97:87:cd:70:af:01:0f:93:43:0f:8d:2d:11:ad:
                    73:2b:52:62:c9:bb:5b:c5:25:94:ac:8a:9d:64:53:
                    12:98:7a:37:73:d8:55:30:47:00:b5:5c:e5:4c:28:
                    88:61:82:89:3a:86:59:24:1d:cb:eb:3f:b3:73:a3:
                    f3:a3:e6:ec:ab:21:27:b3:21:f6:10:06:55:73:76:
                    7d:82:4c:68:cf:60:14:8c:81:4b:0e:99:b1:92:97:
                    8c:6b:89:88:11:20:05:8f:d2:22:22:3d:f9:d6:8b:
                    86:cc:01:28:71:ec:6a:8a:d2:d2:b5:a2:38:6c:dc:
                    72:b2:ff:79:c6:c5:e5:6a:d0:59:b3:2f:ce:d1:81:
                    01:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:30:1E:87:8B:92:2A:A8:21:9B:06:E0:13:AC:01:30:56:57:CC:AA
            X509v3 Authority Key Identifier:
                keyid:43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a383030303a3a2f33352d3335203d3e20323732323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         91:3d:66:7f:db:c9:5e:5c:ab:de:a8:6e:15:71:a4:16:bc:e0:
         c5:1b:ac:fd:48:55:ac:4a:bc:a2:45:7b:bf:52:77:b6:33:8e:
         bb:e0:0a:64:1b:66:d4:4d:9b:7d:fe:07:7b:46:41:7b:51:f8:
         00:b1:8d:5f:d1:a4:24:41:0e:ea:54:48:34:77:6d:80:dc:73:
         59:6d:68:aa:48:9a:50:6f:17:f2:a6:63:23:96:d7:71:83:70:
         5b:35:72:fc:b0:15:b3:24:5e:37:ec:d9:e1:07:7f:33:a3:b6:
         0d:fc:73:1f:85:16:9f:4c:82:a9:72:1f:74:a3:e9:a3:32:0d:
         0e:2b:7e:03:20:12:92:51:1d:36:d6:5a:f8:09:65:46:17:bb:
         4b:94:3d:24:2d:a8:c7:8d:d1:ba:9c:a9:65:f1:39:c3:cd:9a:
         3e:e0:5e:80:c5:57:b6:ba:f4:98:da:7b:36:ef:c3:e2:9b:09:
         81:23:5c:e8:83:15:ab:34:38:b5:65:d5:41:6f:ca:9b:a0:ad:
         47:c6:d7:26:9e:59:b6:64:5a:9e:5c:a7:5d:1d:93:cc:55:3b:
         bd:86:c9:92:b0:fd:40:de:ef:6e:c7:5f:87:97:8b:d0:df:9e:
         bd:b0:6a:f1:dd:29:77:c4:05:ce:78:b1:7c:e6:6c:2e:f0:1d:
         30:49:5d:20
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUYVK4P9ZzeHkh3CtjrczvADl+gUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGNjQ5NDEwNUYyODgzMjJBRkMxRDdBMUJGMkFENkM4
NzY1NzlEODAeFw0yNTEwMjgxMDU5NTRaFw0yNjEwMjcxMTA0NTRaMDMxMTAvBgNV
BAMTKDI2MzAxRTg3OEI5MjJBQTgyMTlCMDZFMDEzQUMwMTMwNTY1N0NDQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXk5xP+SH7/d2LbqFc2g4dZ8hh
NAUgatIVvhdWduvSPp2q8L3s6BKEZtwYQVzr6A0sbojllmcw1Tgt8SmS8UIXnWIP
BGN73SLe5EZ2QcHISAeklnoEW2s3O18CDTuKapYtnmr3vwOBeZvJsLL3UOuZPwIv
aeq01emXh81wrwEPk0MPjS0RrXMrUmLJu1vFJZSsip1kUxKYejdz2FUwRwC1XOVM
KIhhgok6hlkkHcvrP7Nzo/Oj5uyrISezIfYQBlVzdn2CTGjPYBSMgUsOmbGSl4xr
iYgRIAWP0iIiPfnWi4bMAShx7GqK0tK1ojhs3HKy/3nGxeVq0FmzL87RgQEfAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUJjAeh4uSKqghmwbgE6wBMFZXzKowHwYDVR0j
BBgwFoAUQ/ZJQQXyiDIq/B16G/KtbIdledgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmFkRDRXMkF5b25wRDRGTVZveENFQ2Z2c2VnN3hESGlrYUFqc2R0WEFj
RXUvMC80M0Y2NDk0MTA1RjI4ODMyMkFGQzFEN0ExQkYyQUQ2Qzg3NjU3OUQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzRjY0OTQxMDVGMjg4MzIy
QUZDMUQ3QTFCRjJBRDZDODc2NTc5RDguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JhZEQ0VzJBeW9ucEQ0Rk1Wb3hDRUNmdnNlZzd4REhpa2FBanNkdFhBY0V1LzAv
MzIzODMwMzQzYTMxNjYzNTM0M2EzODMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzczMjMyMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEH1SAMA0GCSqGSIb3DQEBCwUA
A4IBAQCRPWZ/28leXKveqG4VcaQWvODFG6z9SFWsSryiRXu/Une2M4674ApkG2bU
TZt9/gd7RkF7UfgAsY1f0aQkQQ7qVEg0d22A3HNZbWiqSJpQbxfypmMjltdxg3Bb
NXL8sBWzJF437NnhB38zo7YN/HMfhRafTIKpch90o+mjMg0OK34DIBKSUR021lr4
CWVGF7tLlD0kLajHjdG6nKll8TnDzZo+4F6AxVe2uvSY2ns278PimwmBI1zogxWr
NDi1ZdVBb8qboK1Hxtcmnlm2ZFqeXKddHZPMVTu9hsmSsP1A3u9ux1+Hl4vQ3569
sGrx3Sl3xAXOeLF85mwu8B0wSV0g
-----END CERTIFICATE-----
Generated at Tue Nov 4 05:29:17 2025 by rpki-client