Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/323830343a323163633a363030303a3a2f34302d3430203d3e20323634353734.roa
File:                     323830343a323163633a363030303a3a2f34302d3430203d3e20323634353734.roa (raw, json)
Hash identifier:          wainEgmvGiHnIphxsuRPVwuwpV3KL/sXSyRgMQzsTpE=
Subject key identifier:   11:8B:37:E3:34:13:82:7B:01:7F:F4:CF:35:C9:A9:3F:77:80:D4:42
Certificate issuer:       /CN=DEE97EA822C5C1473B05759617FBCDB55BB6E7AD
Certificate serial:       0AC2F05C909EBA4DAD15D29D43352B5249DF28DF
Authority key identifier: DE:E9:7E:A8:22:C5:C1:47:3B:05:75:96:17:FB:CD:B5:5B:B6:E7:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/323830343a323163633a363030303a3a2f34302d3430203d3e20323634353734.roa
Signing time:             Wed 17 Sep 2025 20:29:28 +0000
ROA not before:           Wed 17 Sep 2025 20:24:28 +0000
ROA not after:            Wed 16 Sep 2026 20:29:28 +0000
asID:                     264574
IP address blocks:        2804:21cc:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.crl
                          rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 06:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c2:f0:5c:90:9e:ba:4d:ad:15:d2:9d:43:35:2b:52:49:df:28:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE97EA822C5C1473B05759617FBCDB55BB6E7AD
        Validity
            Not Before: Sep 17 20:24:28 2025 GMT
            Not After : Sep 16 20:29:28 2026 GMT
        Subject: CN=118B37E33413827B017FF4CF35C9A93F7780D442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:15:81:7b:dc:69:65:2d:07:2d:6b:cd:f5:ab:
                    4f:48:33:05:61:53:4a:3c:33:44:6e:96:d6:74:fe:
                    ed:f6:9d:7b:ec:3b:49:97:45:6a:39:bc:de:30:ad:
                    7c:2f:66:92:5b:3f:66:93:2e:d0:f3:bd:b8:70:21:
                    02:ca:2c:5c:23:01:98:ed:06:fd:a6:2c:a0:61:64:
                    82:4b:2f:27:75:58:ef:ec:dd:56:4d:89:43:32:43:
                    26:bc:87:ce:c4:cd:fa:3e:b4:36:25:64:6b:75:50:
                    96:0d:6b:f0:c1:a6:06:8c:cc:88:7c:2f:cf:8b:e6:
                    a9:b7:13:31:f2:e0:23:91:8b:c8:26:48:ac:34:6f:
                    82:42:85:65:1b:37:25:97:95:8c:20:8c:af:60:19:
                    e3:50:53:2b:27:82:5f:4a:f5:b0:44:57:7c:a6:88:
                    06:47:57:77:05:da:42:fc:ea:c7:eb:d6:15:d5:82:
                    3c:3b:f6:4a:88:95:22:17:cd:bb:24:8a:71:d0:30:
                    72:be:f8:98:39:70:ae:ec:57:33:ba:11:55:2c:7f:
                    5f:a5:fa:22:3e:28:fb:40:59:7b:80:e0:d0:cd:8a:
                    d6:9d:75:23:c1:03:0e:ce:50:41:78:f2:ff:2b:f2:
                    e5:ba:12:f8:18:69:ac:6b:ef:81:0b:46:2a:67:88:
                    30:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8B:37:E3:34:13:82:7B:01:7F:F4:CF:35:C9:A9:3F:77:80:D4:42
            X509v3 Authority Key Identifier:
                keyid:DE:E9:7E:A8:22:C5:C1:47:3B:05:75:96:17:FB:CD:B5:5B:B6:E7:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/323830343a323163633a363030303a3a2f34302d3430203d3e20323634353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21cc:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:7e:c0:8d:c5:08:3d:a0:7b:3b:14:3c:38:55:65:b3:c3:96:
         2a:66:12:b4:fe:a0:d4:a3:ef:db:79:b4:20:b5:95:1e:40:06:
         04:ec:a6:fa:d9:14:c4:7f:e6:67:9c:b4:73:0e:a6:a3:0d:ae:
         02:0c:a9:b1:5b:6c:1b:2a:9d:12:a3:20:4b:a3:6f:35:93:5d:
         50:28:4b:fb:5f:c3:16:94:ab:0c:45:ab:9d:9a:ed:2f:f6:0a:
         6f:4b:3d:28:e3:f9:cb:c2:b9:28:f6:f7:e3:0d:ae:be:5e:43:
         38:bc:70:ce:25:d5:16:f1:3c:ea:61:87:c3:31:9a:d4:12:25:
         4f:bb:29:ba:b2:d8:46:66:63:10:fc:28:19:98:76:2d:fb:12:
         6b:16:80:bb:b3:fd:b2:7b:62:65:2c:26:94:ef:99:0d:8e:1e:
         71:7b:96:4a:5c:7d:be:9f:96:71:af:39:98:10:70:29:7b:67:
         42:e4:0c:96:f0:4c:59:f7:ef:6e:94:d3:29:a8:a4:50:87:c1:
         90:65:df:de:3c:2c:bf:e1:ee:39:4d:fb:18:fd:0b:86:da:b0:
         2b:52:c9:49:44:29:3d:87:53:08:c6:b7:b4:8e:0f:a9:d8:c2:
         a9:ec:a2:1f:58:f1:48:f5:10:98:3d:41:ba:1c:bf:ff:b0:a5:
         b8:40:47:c0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCsLwXJCeuk2tFdKdQzUrUknfKN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVFOTdFQTgyMkM1QzE0NzNCMDU3NTk2MTdGQkNEQjU1
QkI2RTdBRDAeFw0yNTA5MTcyMDI0MjhaFw0yNjA5MTYyMDI5MjhaMDMxMTAvBgNV
BAMTKDExOEIzN0UzMzQxMzgyN0IwMTdGRjRDRjM1QzlBOTNGNzc4MEQ0NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOFYF73GllLQcta831q09IMwVh
U0o8M0RultZ0/u32nXvsO0mXRWo5vN4wrXwvZpJbP2aTLtDzvbhwIQLKLFwjAZjt
Bv2mLKBhZIJLLyd1WO/s3VZNiUMyQya8h87Ezfo+tDYlZGt1UJYNa/DBpgaMzIh8
L8+L5qm3EzHy4CORi8gmSKw0b4JChWUbNyWXlYwgjK9gGeNQUysngl9K9bBEV3ym
iAZHV3cF2kL86sfr1hXVgjw79kqIlSIXzbskinHQMHK++Jg5cK7sVzO6EVUsf1+l
+iI+KPtAWXuA4NDNitaddSPBAw7OUEF48v8r8uW6EvgYaaxr74ELRipniDDbAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUEYs34zQTgnsBf/TPNcmpP3eA1EIwHwYDVR0j
BBgwFoAU3ul+qCLFwUc7BXWWF/vNtVu2560wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlVFeUtIY0pVNjVHYzJaRUZjTTRQbWk5QWN3YlhWcVJna0V2cUYzNUZM
aDQvMC9ERUU5N0VBODIyQzVDMTQ3M0IwNTc1OTYxN0ZCQ0RCNTVCQjZFN0FELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFRTk3RUE4MjJDNUMxNDcz
QjA1NzU5NjE3RkJDREI1NUJCNkU3QUQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZVRXlLSGNKVTY1R2MyWkVGY000UG1pOUFjd2JYVnFSZ2tFdnFGMzVGTGg0LzAv
MzIzODMwMzQzYTMyMzE2MzYzM2EzNjMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNk
M2UyMDMyMzYzNDM1MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACgEIcxgMA0GCSqGSIb3DQEBCwUA
A4IBAQAyfsCNxQg9oHs7FDw4VWWzw5YqZhK0/qDUo+/bebQgtZUeQAYE7Kb62RTE
f+ZnnLRzDqajDa4CDKmxW2wbKp0SoyBLo281k11QKEv7X8MWlKsMRaudmu0v9gpv
Sz0o4/nLwrko9vfjDa6+XkM4vHDOJdUW8TzqYYfDMZrUEiVPuym6sthGZmMQ/CgZ
mHYt+xJrFoC7s/2ye2JlLCaU75kNjh5xe5ZKXH2+n5ZxrzmYEHApe2dC5AyW8ExZ
9+9ulNMpqKRQh8GQZd/ePCy/4e45TfsY/QuG2rArUslJRCk9h1MIxre0jg+p2MKp
7KIfWPFI9RCYPUG6HL//sKW4QEfA
-----END CERTIFICATE-----
Generated at Fri Sep 19 09:08:47 2025 by rpki-client