Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a343030303a3a2f33342d3334203d3e20323636393438.roa
File:                     323830343a343563343a343030303a3a2f33342d3334203d3e20323636393438.roa (raw, json)
Hash identifier:          73b5spkf2SCtGEglwyHzfOrHk6pG61X2QRLRsD+cNZ0=
Subject key identifier:   F9:6A:F6:25:2B:B4:D8:34:47:66:C8:EC:6E:E0:4C:0C:FA:92:1A:CC
Certificate issuer:       /CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
Certificate serial:       0E52FB01589B6BA07CEB1F2507DA4F29AC661477
Authority key identifier: C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a343030303a3a2f33342d3334203d3e20323636393438.roa
Signing time:             Mon 08 Sep 2025 19:01:57 +0000
ROA not before:           Mon 08 Sep 2025 18:56:57 +0000
ROA not after:            Mon 07 Sep 2026 19:01:57 +0000
asID:                     266948
IP address blocks:        2804:45c4:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl
                          rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:52:fb:01:58:9b:6b:a0:7c:eb:1f:25:07:da:4f:29:ac:66:14:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C187026B3C2D3E51BF32537775C2BEDA748FFDD8
        Validity
            Not Before: Sep  8 18:56:57 2025 GMT
            Not After : Sep  7 19:01:57 2026 GMT
        Subject: CN=F96AF6252BB4D8344766C8EC6EE04C0CFA921ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:58:c4:1d:4e:55:95:06:25:92:f2:93:6c:a1:
                    d8:aa:25:18:2f:b6:87:81:a4:ed:bf:c1:a0:1b:96:
                    b5:72:06:d0:b8:6b:6b:20:07:a9:00:60:4f:9b:59:
                    b6:4c:9e:20:43:2b:c2:87:3e:58:d1:b6:81:ba:d9:
                    a2:62:cf:eb:a7:be:fe:73:4d:1f:3a:bf:d6:ee:ee:
                    1a:f5:34:dd:b2:c9:37:26:7d:e4:23:f3:fd:00:1d:
                    6c:14:26:35:b9:63:5d:bb:a4:80:e5:5b:44:f1:d2:
                    ed:08:3e:d7:c2:25:88:8c:9c:78:24:a7:6f:15:30:
                    b5:fc:68:6d:dc:d5:e4:fd:f0:dc:c4:83:dc:52:0d:
                    b7:2f:70:45:51:91:0c:39:c4:c7:21:49:45:74:f1:
                    3f:8f:30:88:14:b2:8c:99:05:6b:e9:3a:9c:8a:14:
                    61:57:26:af:0a:86:29:99:0c:09:a2:26:f5:8b:75:
                    72:36:6b:12:a7:15:1d:a6:5b:c7:5a:4f:a9:09:23:
                    1c:e7:27:d5:13:a7:23:76:bc:80:49:e4:1f:bf:2e:
                    ca:27:9d:f0:ec:97:71:f0:dd:77:b9:6f:11:cf:13:
                    03:07:65:f2:bf:ce:4c:13:a7:46:72:d3:b9:a9:65:
                    f1:78:3e:2c:f9:52:dc:35:ae:e5:11:2c:f4:83:78:
                    61:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6A:F6:25:2B:B4:D8:34:47:66:C8:EC:6E:E0:4C:0C:FA:92:1A:CC
            X509v3 Authority Key Identifier:
                keyid:C1:87:02:6B:3C:2D:3E:51:BF:32:53:77:75:C2:BE:DA:74:8F:FD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C187026B3C2D3E51BF32537775C2BEDA748FFDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/323830343a343563343a343030303a3a2f33342d3334203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45c4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4e:05:05:e5:85:2d:60:8b:b8:4e:1b:d9:a6:e0:e7:b5:a1:7b:
         37:67:8e:f7:e9:9d:f4:c8:47:9b:f8:13:5e:7d:14:fb:96:4c:
         c0:4d:37:0c:99:d4:44:3e:81:a4:41:9e:d7:40:67:23:13:66:
         de:0b:f5:68:c5:a9:d6:74:cf:cb:56:42:3f:f0:78:7b:5c:21:
         e8:9b:30:47:a9:ee:2a:10:a1:b1:17:3a:fa:47:2c:7b:b1:72:
         14:6b:65:06:04:9c:aa:b9:b6:15:ad:e3:02:80:cc:6a:5c:e2:
         d8:5d:f7:d8:de:8b:27:a0:0e:4f:70:2f:6e:18:bb:3a:d5:48:
         9d:92:4c:2f:9c:4e:ff:f6:05:ed:e8:57:a3:e9:df:c7:4b:26:
         e8:f2:bf:75:5c:e2:2f:37:b1:86:cd:b5:16:58:46:15:f3:1a:
         ad:02:87:3f:97:40:6f:27:47:46:28:70:21:da:82:75:81:22:
         e3:0e:41:aa:46:83:96:fd:45:ea:d1:23:cc:e4:23:c5:f9:e6:
         ce:25:c6:1a:42:f5:93:72:70:c1:47:d2:88:28:fa:d4:6b:ed:
         38:83:d8:2b:f4:86:f5:0b:6d:92:96:d4:9d:a6:52:a5:d4:d5:
         88:43:cd:a6:c7:d9:8a:bb:e3:e1:82:6c:1b:06:1b:dc:23:64:
         4b:f0:97:8b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUDlL7AViba6B86x8lB9pPKaxmFHcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzE4NzAyNkIzQzJEM0U1MUJGMzI1Mzc3NzVDMkJFREE3
NDhGRkREODAeFw0yNTA5MDgxODU2NTdaFw0yNjA5MDcxOTAxNTdaMDMxMTAvBgNV
BAMTKEY5NkFGNjI1MkJCNEQ4MzQ0NzY2QzhFQzZFRTA0QzBDRkE5MjFBQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWMQdTlWVBiWS8pNsodiqJRgv
toeBpO2/waAblrVyBtC4a2sgB6kAYE+bWbZMniBDK8KHPljRtoG62aJiz+unvv5z
TR86v9bu7hr1NN2yyTcmfeQj8/0AHWwUJjW5Y127pIDlW0Tx0u0IPtfCJYiMnHgk
p28VMLX8aG3c1eT98NzEg9xSDbcvcEVRkQw5xMchSUV08T+PMIgUsoyZBWvpOpyK
FGFXJq8KhimZDAmiJvWLdXI2axKnFR2mW8daT6kJIxznJ9UTpyN2vIBJ5B+/Lson
nfDsl3Hw3Xe5bxHPEwMHZfK/zkwTp0Zy07mpZfF4Piz5Utw1ruURLPSDeGExAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQU+Wr2JSu02DRHZsjsbuBMDPqSGswwHwYDVR0j
BBgwFoAUwYcCazwtPlG/MlN3dcK+2nSP/dgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnVKYzQyb2lWTXBqTkg4NU13RzNtcTk1VXVhRG9jaFhHMzhiWm5NdG1j
WkgvMC9DMTg3MDI2QjNDMkQzRTUxQkYzMjUzNzc3NUMyQkVEQTc0OEZGREQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxODcwMjZCM0MyRDNFNTFC
RjMyNTM3Nzc1QzJCRURBNzQ4RkZERDguY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z1SmM0Mm9pVk1wak5IODVNd0czbXE5NVV1YURvY2hYRzM4YlpuTXRtY1pILzAv
MzIzODMwMzQzYTM0MzU2MzM0M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNjM5MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigERcRAMA0GCSqGSIb3DQEBCwUA
A4IBAQBOBQXlhS1gi7hOG9mm4Oe1oXs3Z4736Z30yEeb+BNefRT7lkzATTcMmdRE
PoGkQZ7XQGcjE2beC/VoxanWdM/LVkI/8Hh7XCHomzBHqe4qEKGxFzr6Ryx7sXIU
a2UGBJyqubYVreMCgMxqXOLYXffY3osnoA5PcC9uGLs61UidkkwvnE7/9gXt6Fej
6d/HSybo8r91XOIvN7GGzbUWWEYV8xqtAoc/l0BvJ0dGKHAh2oJ1gSLjDkGqRoOW
/UXq0SPM5CPF+ebOJcYaQvWTcnDBR9KIKPrUa+04g9gr9Ib1C22SltSdplKl1NWI
Q82mx9mKu+PhgmwbBhvcI2RL8JeL
-----END CERTIFICATE-----
Generated at Fri Sep 19 08:03:17 2025 by rpki-client