Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a343030303a3a2f33362d3336203d3e20323632373937.roa
File:                     323830343a3233633a343030303a3a2f33362d3336203d3e20323632373937.roa (raw, json)
Hash identifier:          AjEUBThPhpbDwGn1R+kYS0J8tP+jQWFjZY7sI0vL9/Y=
Subject key identifier:   2F:FF:11:E1:21:86:1E:B5:91:5F:FB:35:B4:2D:B3:5D:8D:0A:92:D5
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       218571D554596276F9F61ECB988518AF69CC5B9D
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a343030303a3a2f33362d3336203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:18 +0000
ROA not before:           Thu 23 Oct 2025 14:08:18 +0000
ROA not after:            Thu 22 Oct 2026 14:13:18 +0000
asID:                     262797
IP address blocks:        2804:23c:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:85:71:d5:54:59:62:76:f9:f6:1e:cb:98:85:18:af:69:cc:5b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:18 2025 GMT
            Not After : Oct 22 14:13:18 2026 GMT
        Subject: CN=2FFF11E121861EB5915FFB35B42DB35D8D0A92D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4a:d1:90:ee:02:71:95:c4:d2:c2:4a:3d:f7:
                    10:4c:f8:9b:74:33:28:05:0d:0c:2f:83:dd:c2:fd:
                    79:f9:47:5c:4e:b4:4e:80:ba:2d:ce:90:18:15:e2:
                    42:cd:e5:22:49:44:a6:6d:19:57:0c:7d:fc:41:52:
                    bc:11:d7:65:28:7d:67:00:24:5c:b2:32:36:03:8f:
                    2e:ff:c9:08:a6:d1:25:00:03:17:11:3a:6b:af:ea:
                    ee:30:58:2a:9e:1e:3f:76:27:44:e4:f1:ce:2e:79:
                    58:c0:e5:23:36:00:38:d4:1d:77:78:75:86:00:17:
                    3a:0f:3d:c5:d5:5f:34:76:47:dc:f2:1f:31:5f:a6:
                    59:75:f2:7b:89:f8:7e:48:f6:c0:eb:ee:78:9a:fc:
                    fc:0a:5b:65:61:b4:bf:ac:c8:24:b5:0c:c6:6d:3d:
                    2d:a1:18:e4:0f:63:d6:7b:c3:6a:56:f4:62:c8:15:
                    5d:f4:21:95:29:61:98:4a:c2:14:d7:9a:09:a7:7c:
                    55:8c:c2:cc:f1:34:c9:88:9c:cb:15:e3:56:c5:a8:
                    eb:f2:61:28:f1:07:24:cf:ec:08:0c:1e:1d:5e:7c:
                    46:0b:8f:00:0a:1c:b5:41:ed:93:07:e5:c9:76:1b:
                    bb:fe:cb:34:3d:70:ea:10:f0:99:d3:b1:bb:0a:d2:
                    f9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FF:11:E1:21:86:1E:B5:91:5F:FB:35:B4:2D:B3:5D:8D:0A:92:D5
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a343030303a3a2f33362d3336203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8e:41:32:82:af:67:d7:4f:32:25:fd:75:bc:3b:9c:e8:0d:e3:
         11:9e:81:d5:46:f6:51:43:b6:8f:af:1c:fd:86:85:20:7d:74:
         00:5a:3c:75:a9:cd:c7:d5:da:f2:62:5c:76:35:d7:8e:c9:dc:
         d1:89:7d:a5:eb:e6:3f:10:ad:41:55:18:7b:83:88:8c:e8:cf:
         b8:31:dd:e4:c3:70:d9:3b:2c:fb:90:02:6c:b9:d6:b0:80:0a:
         6e:ca:4e:16:aa:42:40:6f:58:9d:35:cc:a6:87:65:49:20:5e:
         0b:3f:db:3c:e8:ff:40:cd:ba:a1:45:e4:c4:49:ce:a6:95:d0:
         cc:83:bf:2c:70:ae:85:04:4a:05:30:0b:98:fd:a7:fc:04:02:
         c7:5c:ca:59:f9:f1:85:6a:71:68:42:4d:ed:48:84:af:cd:e0:
         19:61:28:18:35:2a:f7:dc:b3:35:f8:0f:e8:e3:82:36:78:fc:
         c6:b6:ed:cd:ac:b1:92:93:62:7c:2c:de:51:11:1d:9c:35:a2:
         68:6b:f6:9e:66:d6:94:fc:f9:97:cb:6e:94:5f:c2:72:01:3c:
         c5:f3:33:11:92:e2:72:69:80:87:73:39:41:88:5b:12:2f:44:
         dc:32:e5:64:59:3b:0d:14:f6:d7:2c:86:ce:93:6e:27:7a:18:
         b3:56:6d:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIYVx1VRZYnb59h7LmIUYr2nMW50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYyQ0RBNEFFNEI1Q0FENzNCMDY4Q0Y2MUQyRUU4MkNC
RTkwQzIwQjAeFw0yNTEwMjMxNDA4MThaFw0yNjEwMjIxNDEzMThaMDMxMTAvBgNV
BAMTKDJGRkYxMUUxMjE4NjFFQjU5MTVGRkIzNUI0MkRCMzVEOEQwQTkyRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrStGQ7gJxlcTSwko99xBM+Jt0
MygFDQwvg93C/Xn5R1xOtE6Aui3OkBgV4kLN5SJJRKZtGVcMffxBUrwR12UofWcA
JFyyMjYDjy7/yQim0SUAAxcROmuv6u4wWCqeHj92J0Tk8c4ueVjA5SM2ADjUHXd4
dYYAFzoPPcXVXzR2R9zyHzFfpll18nuJ+H5I9sDr7nia/PwKW2VhtL+syCS1DMZt
PS2hGOQPY9Z7w2pW9GLIFV30IZUpYZhKwhTXmgmnfFWMwszxNMmInMsV41bFqOvy
YSjxByTP7AgMHh1efEYLjwAKHLVB7ZMH5cl2G7v+yzQ9cOoQ8JnTsbsK0vmJAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUL/8R4SGGHrWRX/s1tC2zXY0KktUwHwYDVR0j
BBgwFoAUpizaSuS1ytc7Boz2HS7oLL6QwgswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1lwUHNCdEV0YTlKTDhTMlNnb1Ruejl2Mnk0QzU2Rkg4OWJXZ1ZCRlRO
UFMvMi9BNjJDREE0QUU0QjVDQUQ3M0IwNjhDRjYxRDJFRTgyQ0JFOTBDMjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MkNEQTRBRTRCNUNBRDcz
QjA2OENGNjFEMkVFODJDQkU5MEMyMEIuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NZcFBzQnRFdGE5Skw4UzJTZ29Ubno5djJ5NEM1NkZIODliV2dWQkZUTlBTLzIv
MzIzODMwMzQzYTMyMzM2MzNhMzQzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzIzNzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBAI8QDANBgkqhkiG9w0BAQsFAAOC
AQEAjkEygq9n108yJf11vDuc6A3jEZ6B1Ub2UUO2j68c/YaFIH10AFo8danNx9Xa
8mJcdjXXjsnc0Yl9pevmPxCtQVUYe4OIjOjPuDHd5MNw2Tss+5ACbLnWsIAKbspO
FqpCQG9YnTXMpodlSSBeCz/bPOj/QM26oUXkxEnOppXQzIO/LHCuhQRKBTALmP2n
/AQCx1zKWfnxhWpxaEJN7UiEr83gGWEoGDUq99yzNfgP6OOCNnj8xrbtzayxkpNi
fCzeUREdnDWiaGv2nmbWlPz5l8tulF/CcgE8xfMzEZLicmmAh3M5QYhbEi9E3DLl
ZFk7DRT21yyGzpNuJ3oYs1ZtvA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:37:31 2025 by rpki-client