Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a333030303a3a2f33362d3336203d3e20323632373937.roa
File:                     323830343a3233633a333030303a3a2f33362d3336203d3e20323632373937.roa (raw, json)
Hash identifier:          ltAvHfiFEsBTiDK3/UN2mh586FhxzJtBCSkDQAJxEmY=
Subject key identifier:   88:52:B7:FA:76:BE:8A:81:28:6F:6A:4F:1F:9E:D1:51:00:4B:39:89
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       378C38B72E177A13A1582039D87816DFBC0670A8
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a333030303a3a2f33362d3336203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:15 +0000
ROA not before:           Thu 23 Oct 2025 14:08:15 +0000
ROA not after:            Thu 22 Oct 2026 14:13:15 +0000
asID:                     262797
IP address blocks:        2804:23c:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8c:38:b7:2e:17:7a:13:a1:58:20:39:d8:78:16:df:bc:06:70:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:15 2025 GMT
            Not After : Oct 22 14:13:15 2026 GMT
        Subject: CN=8852B7FA76BE8A81286F6A4F1F9ED151004B3989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:cc:7c:2a:9e:98:0b:1e:a3:a8:e8:28:17:
                    a2:9e:6c:f8:e3:f8:32:4f:68:43:f2:8c:9c:0f:a4:
                    db:c9:9a:c4:b8:9f:f3:0d:29:a2:48:e5:42:5d:10:
                    4e:61:05:88:da:7a:56:48:cc:f8:9b:45:e3:8a:1f:
                    59:25:7a:a9:d6:1c:8d:03:d6:9d:0a:35:77:b5:19:
                    d9:96:af:a6:45:37:bd:af:4e:25:6e:c1:05:fd:1a:
                    55:5b:ae:32:c6:1c:d4:36:11:41:0d:d9:dd:7a:78:
                    e7:c8:79:3e:43:8e:22:2a:73:57:21:92:7e:b3:2f:
                    f0:27:40:b2:b4:ea:30:f9:a2:16:a5:8d:01:01:ae:
                    ec:a4:59:70:2e:08:1d:f8:ae:34:63:e5:63:2a:4c:
                    d3:c4:66:b3:f9:a8:16:cf:d9:98:fb:8b:59:30:7a:
                    4a:94:55:18:fb:cb:26:08:6b:7c:ad:6a:01:79:94:
                    0e:09:a1:a8:7e:12:0d:d7:85:52:ca:0c:ea:c8:89:
                    78:89:76:44:88:90:53:9b:d1:e6:32:7e:7a:ca:67:
                    ee:8a:1e:5d:49:7d:cc:14:a1:4c:f8:83:66:b5:19:
                    bd:28:6c:d2:e4:2c:43:43:b3:f4:83:87:d0:66:ac:
                    69:7e:b4:7f:e2:74:54:f4:3d:cc:2f:78:0b:a5:9a:
                    67:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:52:B7:FA:76:BE:8A:81:28:6F:6A:4F:1F:9E:D1:51:00:4B:39:89
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a333030303a3a2f33362d3336203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9d:be:62:4b:87:20:aa:54:88:26:30:99:8f:94:2e:27:0a:c3:
         b3:2f:34:a3:15:60:12:2a:6a:a5:9f:a7:19:4a:da:cb:61:e7:
         49:4f:6c:52:6f:1c:05:7d:76:84:73:89:b2:d5:7b:0f:04:93:
         54:b8:64:e5:58:29:d2:74:ba:1d:0b:5a:f2:51:73:73:ae:92:
         5a:c1:3b:34:b5:03:47:2c:ed:78:ce:c1:1b:e9:a4:60:92:5c:
         2f:43:b7:97:94:4c:a9:82:28:67:fd:f8:01:8a:28:eb:f7:76:
         19:8e:ff:a9:87:45:46:68:7f:31:b9:52:47:51:51:ea:aa:9f:
         2f:ba:87:3a:ad:16:38:a9:be:cb:b4:f3:ac:0d:6a:88:95:06:
         b1:aa:fd:1f:4f:ab:0b:5f:19:11:6d:3a:86:b4:28:e1:6c:ea:
         bb:c6:72:88:39:ab:f1:b8:ba:66:5d:00:7c:aa:31:6f:68:1a:
         bd:0c:58:fa:50:8f:01:15:20:4c:b7:d9:61:32:0a:ce:d8:31:
         ab:32:ee:35:73:3a:1f:e1:64:3d:de:e5:d9:99:a8:5f:44:17:
         bb:44:a9:3f:39:f2:05:98:31:5f:c7:a3:f8:e5:10:42:5c:b9:
         50:7f:b4:a3:d7:87:d2:2d:70:11:1e:e4:08:5f:2d:80:62:b0:
         77:9d:64:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUN4w4ty4XehOhWCA52HgW37wGcKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYyQ0RBNEFFNEI1Q0FENzNCMDY4Q0Y2MUQyRUU4MkNC
RTkwQzIwQjAeFw0yNTEwMjMxNDA4MTVaFw0yNjEwMjIxNDEzMTVaMDMxMTAvBgNV
BAMTKDg4NTJCN0ZBNzZCRThBODEyODZGNkE0RjFGOUVEMTUxMDA0QjM5ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILsx8Kp6YCx6jqOgoF6KebPjj
+DJPaEPyjJwPpNvJmsS4n/MNKaJI5UJdEE5hBYjaelZIzPibReOKH1kleqnWHI0D
1p0KNXe1GdmWr6ZFN72vTiVuwQX9GlVbrjLGHNQ2EUEN2d16eOfIeT5DjiIqc1ch
kn6zL/AnQLK06jD5ohaljQEBruykWXAuCB34rjRj5WMqTNPEZrP5qBbP2Zj7i1kw
ekqUVRj7yyYIa3ytagF5lA4Joah+Eg3XhVLKDOrIiXiJdkSIkFOb0eYyfnrKZ+6K
Hl1JfcwUoUz4g2a1Gb0obNLkLENDs/SDh9BmrGl+tH/idFT0PcwveAulmmcFAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUiFK3+na+ioEob2pPH57RUQBLOYkwHwYDVR0j
BBgwFoAUpizaSuS1ytc7Boz2HS7oLL6QwgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1lwUHNCdEV0YTlKTDhTMlNnb1Ruejl2Mnk0QzU2Rkg4OWJXZ1ZCRlRO
UFMvMi9BNjJDREE0QUU0QjVDQUQ3M0IwNjhDRjYxRDJFRTgyQ0JFOTBDMjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MkNEQTRBRTRCNUNBRDcz
QjA2OENGNjFEMkVFODJDQkU5MEMyMEIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NZcFBzQnRFdGE5Skw4UzJTZ29Ubno5djJ5NEM1NkZIODliV2dWQkZUTlBTLzIv
MzIzODMwMzQzYTMyMzM2MzNhMzMzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzIzNzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAI8MDANBgkqhkiG9w0BAQsFAAOC
AQEAnb5iS4cgqlSIJjCZj5QuJwrDsy80oxVgEipqpZ+nGUray2HnSU9sUm8cBX12
hHOJstV7DwSTVLhk5Vgp0nS6HQta8lFzc66SWsE7NLUDRyzteM7BG+mkYJJcL0O3
l5RMqYIoZ/34AYoo6/d2GY7/qYdFRmh/MblSR1FR6qqfL7qHOq0WOKm+y7TzrA1q
iJUGsar9H0+rC18ZEW06hrQo4Wzqu8ZyiDmr8bi6Zl0AfKoxb2gavQxY+lCPARUg
TLfZYTIKztgxqzLuNXM6H+FkPd7l2ZmoX0QXu0SpPznyBZgxX8ej+OUQQly5UH+0
o9eH0i1wER7kCF8tgGKwd51kxg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:37:37 2025 by rpki-client