Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/323830343a343630383a3a2f33322d313238203d3e20323636393634.roa
File:                     323830343a343630383a3a2f33322d313238203d3e20323636393634.roa (raw, json)
Hash identifier:          t0So4m7mUlOcMD8HMnneLnSPxKfi1R/Wwa4DuDhh2yQ=
Subject key identifier:   F8:8F:5A:89:1D:B9:E9:A3:19:E2:6A:AD:93:8B:D8:38:69:41:B3:18
Certificate issuer:       /CN=FBD3E36E99438BA7302F250CEE3673B235F797AC
Certificate serial:       23C8B507326826F792559A2E9E8DA88B38AB43DE
Authority key identifier: FB:D3:E3:6E:99:43:8B:A7:30:2F:25:0C:EE:36:73:B2:35:F7:97:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBD3E36E99438BA7302F250CEE3673B235F797AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/323830343a343630383a3a2f33322d313238203d3e20323636393634.roa
Signing time:             Fri 19 Sep 2025 12:55:42 +0000
ROA not before:           Fri 19 Sep 2025 12:50:42 +0000
ROA not after:            Fri 18 Sep 2026 12:55:42 +0000
asID:                     266964
IP address blocks:        2804:4608::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/FBD3E36E99438BA7302F250CEE3673B235F797AC.crl
                          rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/FBD3E36E99438BA7302F250CEE3673B235F797AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBD3E36E99438BA7302F250CEE3673B235F797AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 13:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c8:b5:07:32:68:26:f7:92:55:9a:2e:9e:8d:a8:8b:38:ab:43:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBD3E36E99438BA7302F250CEE3673B235F797AC
        Validity
            Not Before: Sep 19 12:50:42 2025 GMT
            Not After : Sep 18 12:55:42 2026 GMT
        Subject: CN=F88F5A891DB9E9A319E26AAD938BD8386941B318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:76:4e:8e:51:cb:56:ba:49:6e:79:75:0c:d3:
                    d2:03:06:68:24:68:86:45:e6:20:93:f4:e4:ad:3e:
                    9a:e4:da:71:48:ff:30:36:aa:0a:cc:4e:3a:85:0b:
                    a5:fa:62:81:db:8c:6a:ed:88:5a:35:ed:69:7b:be:
                    a4:46:cd:b5:b0:b7:b9:82:f7:24:4b:7f:8d:c1:ae:
                    1c:75:c2:6e:13:36:7a:50:10:81:3d:f8:78:54:59:
                    c6:5c:12:df:d3:94:06:93:8a:75:0e:0a:c7:1f:0d:
                    65:58:b0:72:25:29:20:02:40:84:b6:1f:91:79:29:
                    66:a6:90:cd:70:87:bd:03:be:ae:aa:ae:40:8b:41:
                    f3:a9:92:67:26:ce:c6:78:03:38:9a:74:2b:a8:cd:
                    31:d1:fc:24:ff:7b:e5:b7:70:73:9b:db:07:55:e6:
                    41:c6:c4:16:5d:b6:71:fe:ed:f8:76:40:82:b6:4f:
                    2b:67:6a:5d:d6:3e:81:d7:29:d6:2f:f1:90:96:11:
                    16:71:43:9c:d0:a3:8f:ba:5a:68:78:28:59:ca:d1:
                    f8:25:f4:bf:d3:83:e3:a5:40:08:1e:2c:8d:e7:45:
                    dc:02:9e:85:2f:aa:78:b1:7f:27:75:0d:f5:74:dc:
                    a2:d7:2a:cf:7c:9f:a1:80:eb:a5:dc:ac:91:1f:b3:
                    1d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8F:5A:89:1D:B9:E9:A3:19:E2:6A:AD:93:8B:D8:38:69:41:B3:18
            X509v3 Authority Key Identifier:
                keyid:FB:D3:E3:6E:99:43:8B:A7:30:2F:25:0C:EE:36:73:B2:35:F7:97:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/FBD3E36E99438BA7302F250CEE3673B235F797AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBD3E36E99438BA7302F250CEE3673B235F797AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/323830343a343630383a3a2f33322d313238203d3e20323636393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4608::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:d7:ba:ba:3f:60:ce:f9:58:95:77:f7:2b:88:c3:30:e6:83:
         41:4e:51:f3:f5:64:e3:66:ea:1e:05:5c:3a:ad:8a:b4:9c:ce:
         c7:0c:b9:e2:d4:ea:32:c5:42:3f:4c:0b:0d:f9:56:b1:60:c4:
         3a:02:05:65:3b:f9:4e:c5:5d:9b:a4:b7:af:59:81:b0:e2:0f:
         45:a0:6c:0b:0a:0a:e8:6b:7d:55:dd:b2:09:7d:64:f7:9a:98:
         f2:6b:bd:f2:fe:78:dc:39:78:36:a7:d2:5a:b4:d6:37:17:12:
         bf:e4:d1:df:a4:ec:e5:97:34:4a:53:65:e6:9a:4d:01:69:0d:
         bc:60:44:88:7d:f5:a8:56:b0:0a:70:da:c4:42:10:d7:92:d0:
         9f:57:86:3c:9f:d4:6e:d7:4e:28:e7:3b:5a:3d:fb:9d:21:f7:
         9a:ad:67:6c:33:e6:61:40:5a:9f:9c:48:08:2c:93:4e:ba:f6:
         8e:d7:bf:61:ad:6c:a5:68:40:62:66:4f:f6:a3:c0:4a:c4:e9:
         4f:c0:82:cc:b5:6e:58:5e:ca:40:9d:da:a6:76:ee:8f:c2:bc:
         9d:4e:5f:ac:d8:50:94:8e:d3:a7:91:da:f2:e1:88:ef:24:16:
         bc:ed:5c:f6:11:4c:ec:2c:5d:d8:b4:86:87:fa:a3:17:d9:11:
         28:01:de:b5
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUI8i1BzJoJveSVZouno2oizirQ94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJEM0UzNkU5OTQzOEJBNzMwMkYyNTBDRUUzNjczQjIz
NUY3OTdBQzAeFw0yNTA5MTkxMjUwNDJaFw0yNjA5MTgxMjU1NDJaMDMxMTAvBgNV
BAMTKEY4OEY1QTg5MURCOUU5QTMxOUUyNkFBRDkzOEJEODM4Njk0MUIzMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDddk6OUctWuklueXUM09IDBmgk
aIZF5iCT9OStPprk2nFI/zA2qgrMTjqFC6X6YoHbjGrtiFo17Wl7vqRGzbWwt7mC
9yRLf43Brhx1wm4TNnpQEIE9+HhUWcZcEt/TlAaTinUOCscfDWVYsHIlKSACQIS2
H5F5KWamkM1wh70Dvq6qrkCLQfOpkmcmzsZ4AziadCuozTHR/CT/e+W3cHOb2wdV
5kHGxBZdtnH+7fh2QIK2Tytnal3WPoHXKdYv8ZCWERZxQ5zQo4+6Wmh4KFnK0fgl
9L/Tg+OlQAgeLI3nRdwCnoUvqnixfyd1DfV03KLXKs98n6GA66XcrJEfsx2XAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU+I9aiR256aMZ4mqtk4vYOGlBsxgwHwYDVR0j
BBgwFoAU+9PjbplDi6cwLyUM7jZzsjX3l6wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWl5bXRUTUYyblNGV1FOMnJtNXNtQ1Axd3YyQXpiS0dWdTFoeVphaVBT
REEvMC9GQkQzRTM2RTk5NDM4QkE3MzAyRjI1MENFRTM2NzNCMjM1Rjc5N0FDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRDNFMzZFOTk0MzhCQTcz
MDJGMjUwQ0VFMzY3M0IyMzVGNzk3QUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VpeW10VE1GMm5TRldRTjJybTVzbUNQMXd2MkF6YktHVnUxaHlaYWlQU0RBLzAv
MzIzODMwMzQzYTM0MzYzMDM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzOTM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBEYIMA0GCSqGSIb3DQEBCwUAA4IBAQAP17q6
P2DO+ViVd/criMMw5oNBTlHz9WTjZuoeBVw6rYq0nM7HDLni1OoyxUI/TAsN+Vax
YMQ6AgVlO/lOxV2bpLevWYGw4g9FoGwLCgroa31V3bIJfWT3mpjya73y/njcOXg2
p9JatNY3FxK/5NHfpOzllzRKU2Xmmk0BaQ28YESIffWoVrAKcNrEQhDXktCfV4Y8
n9Ru104o5ztaPfudIfearWdsM+ZhQFqfnEgILJNOuvaO179hrWylaEBiZk/2o8BK
xOlPwILMtW5YXspAndqmdu6PwrydTl+s2FCUjtOnkdry4YjvJBa87Vz2EUzsLF3Y
tIaH+qMX2REoAd61
-----END CERTIFICATE-----
Generated at Sat Sep 20 00:47:59 2025 by rpki-client