Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/0/323830343a3661633a3a2f33322d3438203d3e20323632363031.roa
File:                     323830343a3661633a3a2f33322d3438203d3e20323632363031.roa (raw, json)
Hash identifier:          c1439X57T9V+56zxYd15hZRZ1H4D3VR3lS+zNn0zcy4=
Subject key identifier:   1D:02:24:BC:62:7C:3C:69:1D:A9:CA:00:D9:1C:4F:40:24:FF:F6:87
Certificate issuer:       /CN=6EA59A106C1396C952A0A7640FABF97AACAE8AF8
Certificate serial:       5D96F5A62E6516FB6AF3897001679C7C4F6C73F7
Authority key identifier: 6E:A5:9A:10:6C:13:96:C9:52:A0:A7:64:0F:AB:F9:7A:AC:AE:8A:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA59A106C1396C952A0A7640FABF97AACAE8AF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/0/323830343a3661633a3a2f33322d3438203d3e20323632363031.roa
Signing time:             Wed 29 Oct 2025 17:27:16 +0000
ROA not before:           Wed 29 Oct 2025 17:22:16 +0000
ROA not after:            Wed 28 Oct 2026 17:27:16 +0000
asID:                     262601
IP address blocks:        2804:6ac::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/0/6EA59A106C1396C952A0A7640FABF97AACAE8AF8.crl
                          rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/0/6EA59A106C1396C952A0A7640FABF97AACAE8AF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA59A106C1396C952A0A7640FABF97AACAE8AF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 06:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:96:f5:a6:2e:65:16:fb:6a:f3:89:70:01:67:9c:7c:4f:6c:73:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EA59A106C1396C952A0A7640FABF97AACAE8AF8
        Validity
            Not Before: Oct 29 17:22:16 2025 GMT
            Not After : Oct 28 17:27:16 2026 GMT
        Subject: CN=1D0224BC627C3C691DA9CA00D91C4F4024FFF687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:48:14:74:9f:ac:9b:c5:10:52:5a:92:3d:af:
                    69:6b:cb:1c:02:a7:ff:d9:1c:05:91:a6:c6:ac:35:
                    6d:11:2b:94:a2:1e:a0:81:5c:0e:3c:47:d6:0b:7d:
                    35:b1:d7:5d:da:46:eb:e0:dc:dd:49:10:bf:5b:72:
                    5f:af:77:6e:62:be:7c:6f:dc:e3:07:ab:68:77:b6:
                    59:ea:71:fc:ca:6f:a8:9a:64:a4:95:c8:c2:cd:44:
                    a0:54:a3:c0:54:1e:6c:c2:a9:53:c2:22:3b:77:4c:
                    17:0a:c0:64:45:8a:4e:e7:39:69:8a:fc:d4:3c:0c:
                    c8:df:5d:51:20:59:19:0b:17:c1:79:91:2c:8f:af:
                    a6:55:cd:55:4b:b7:0a:7e:a1:d8:2f:42:2a:7e:98:
                    50:c9:82:02:cc:36:4c:0f:6d:82:29:08:41:7a:b2:
                    24:74:86:a0:6e:56:f1:30:de:96:e0:eb:0f:da:11:
                    8c:3a:5e:2c:0e:ab:ff:a3:c1:56:10:c1:3e:b0:2b:
                    00:16:92:ec:77:09:50:64:c5:57:02:44:c3:5f:ef:
                    d1:ea:6d:a5:d0:cd:67:42:03:96:05:b4:37:f6:80:
                    d0:d1:7f:a4:e5:a8:52:49:2c:1e:7b:8e:f6:45:cc:
                    ec:06:cd:c3:09:5a:c4:4c:ae:24:e1:fb:8f:ce:6e:
                    f7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:02:24:BC:62:7C:3C:69:1D:A9:CA:00:D9:1C:4F:40:24:FF:F6:87
            X509v3 Authority Key Identifier:
                keyid:6E:A5:9A:10:6C:13:96:C9:52:A0:A7:64:0F:AB:F9:7A:AC:AE:8A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/0/6EA59A106C1396C952A0A7640FABF97AACAE8AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA59A106C1396C952A0A7640FABF97AACAE8AF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/0/323830343a3661633a3a2f33322d3438203d3e20323632363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:2b:49:0b:a3:6e:f4:eb:53:b2:bc:59:a3:78:f4:19:df:4e:
         14:94:f2:8a:bf:cf:27:91:7f:d9:9c:48:99:b7:91:6f:54:9c:
         e0:c6:ef:b8:6a:55:14:b2:0d:9f:c4:04:9f:8f:0c:9e:8b:0c:
         1f:57:2e:a0:38:8e:01:5d:28:16:35:ab:02:b1:fa:23:5a:13:
         2e:52:8f:3f:32:1b:7e:4e:64:5d:5d:90:cc:01:20:70:72:4b:
         1b:99:23:3d:53:32:e3:71:2a:85:a4:4b:86:88:ed:ad:cd:4c:
         a2:b8:d0:1c:ed:a7:95:d5:bf:d7:f1:16:4a:13:55:51:ff:d9:
         1b:71:f8:3f:b4:9c:8e:ab:76:d6:a9:4c:72:c1:92:aa:db:00:
         14:6e:cc:94:9c:cb:d0:fd:38:f6:cd:5e:e2:17:fe:08:b6:ce:
         34:0b:2c:b7:c2:56:59:92:65:11:61:e2:91:e3:f0:46:b5:c2:
         fb:00:b3:7b:80:56:fe:d0:8d:52:72:5e:e8:10:8f:54:11:b8:
         ad:4b:01:1c:74:c3:59:c4:3b:ed:3d:35:6b:07:38:5e:fb:f5:
         3b:25:f6:95:55:e3:4d:81:e3:32:47:8d:d8:b9:f1:a8:8e:06:
         d5:df:a6:05:2d:a9:69:e6:8d:4a:63:f4:3a:de:34:21:53:5a:
         26:37:49:d8
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUXZb1pi5lFvtq84lwAWecfE9sc/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVBNTlBMTA2QzEzOTZDOTUyQTBBNzY0MEZBQkY5N0FB
Q0FFOEFGODAeFw0yNTEwMjkxNzIyMTZaFw0yNjEwMjgxNzI3MTZaMDMxMTAvBgNV
BAMTKDFEMDIyNEJDNjI3QzNDNjkxREE5Q0EwMEQ5MUM0RjQwMjRGRkY2ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYSBR0n6ybxRBSWpI9r2lryxwC
p//ZHAWRpsasNW0RK5SiHqCBXA48R9YLfTWx113aRuvg3N1JEL9bcl+vd25ivnxv
3OMHq2h3tlnqcfzKb6iaZKSVyMLNRKBUo8BUHmzCqVPCIjt3TBcKwGRFik7nOWmK
/NQ8DMjfXVEgWRkLF8F5kSyPr6ZVzVVLtwp+odgvQip+mFDJggLMNkwPbYIpCEF6
siR0hqBuVvEw3pbg6w/aEYw6XiwOq/+jwVYQwT6wKwAWkux3CVBkxVcCRMNf79Hq
baXQzWdCA5YFtDf2gNDRf6TlqFJJLB57jvZFzOwGzcMJWsRMriTh+4/Obvc9AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUHQIkvGJ8PGkdqcoA2RxPQCT/9ocwHwYDVR0j
BBgwFoAUbqWaEGwTlslSoKdkD6v5eqyuivgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0NXSGlvZzgxMldoRlF0WkRvaXNRNDlvMm51bXJKcEhuMVZCaU56Tmo4
TnAvMC82RUE1OUExMDZDMTM5NkM5NTJBMEE3NjQwRkFCRjk3QUFDQUU4QUY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFQTU5QTEwNkMxMzk2Qzk1
MkEwQTc2NDBGQUJGOTdBQUNBRThBRjguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NDV0hpb2c4MTJXaEZRdFpEb2lzUTQ5bzJudW1ySnBIbjFWQmlOek5qOE5wLzAv
MzIzODMwMzQzYTM2NjE2MzNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMjM2
MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEBqwwDQYJKoZIhvcNAQELBQADggEBAJArSQujbvTr
U7K8WaN49BnfThSU8oq/zyeRf9mcSJm3kW9UnODG77hqVRSyDZ/EBJ+PDJ6LDB9X
LqA4jgFdKBY1qwKx+iNaEy5Sjz8yG35OZF1dkMwBIHBySxuZIz1TMuNxKoWkS4aI
7a3NTKK40Bztp5XVv9fxFkoTVVH/2Rtx+D+0nI6rdtapTHLBkqrbABRuzJScy9D9
OPbNXuIX/gi2zjQLLLfCVlmSZRFh4pHj8Ea1wvsAs3uAVv7QjVJyXugQj1QRuK1L
ARx0w1nEO+09NWsHOF779Tsl9pVV402B4zJHjdi58aiOBtXfpgUtqWnmjUpj9Dre
NCFTWiY3Sdg=
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:06:25 2025 by rpki-client