Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/323830343a326138343a3a2f33322d313238203d3e20323634303736.roa
File:                     323830343a326138343a3a2f33322d313238203d3e20323634303736.roa (raw, json)
Hash identifier:          YJKFiAKMThgxizm6OnFztHFMFUv9HZTzDxY2b7a+KOM=
Subject key identifier:   EF:B2:34:B2:7C:CA:2F:3D:E8:46:70:C4:84:21:4D:C6:C3:6C:0F:C6
Certificate issuer:       /CN=F2FC2409C974536DD07DCF34EDA886CFCF34700A
Certificate serial:       20CF9DA66C84B09637B3B91CBE14CA4D98C8BB23
Authority key identifier: F2:FC:24:09:C9:74:53:6D:D0:7D:CF:34:ED:A8:86:CF:CF:34:70:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2FC2409C974536DD07DCF34EDA886CFCF34700A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/323830343a326138343a3a2f33322d313238203d3e20323634303736.roa
Signing time:             Fri 29 Aug 2025 15:42:56 +0000
ROA not before:           Fri 29 Aug 2025 15:37:56 +0000
ROA not after:            Fri 28 Aug 2026 15:42:56 +0000
asID:                     264076
IP address blocks:        2804:2a84::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/F2FC2409C974536DD07DCF34EDA886CFCF34700A.crl
                          rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/F2FC2409C974536DD07DCF34EDA886CFCF34700A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2FC2409C974536DD07DCF34EDA886CFCF34700A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cf:9d:a6:6c:84:b0:96:37:b3:b9:1c:be:14:ca:4d:98:c8:bb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2FC2409C974536DD07DCF34EDA886CFCF34700A
        Validity
            Not Before: Aug 29 15:37:56 2025 GMT
            Not After : Aug 28 15:42:56 2026 GMT
        Subject: CN=EFB234B27CCA2F3DE84670C484214DC6C36C0FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:94:51:8a:55:1b:6b:42:95:35:96:30:c0:e1:
                    e0:d0:f3:6b:e7:25:21:6e:15:f8:93:f3:ec:12:f7:
                    2b:1f:b5:d8:f0:bd:48:a3:42:6d:6d:a5:7f:ca:52:
                    3a:98:85:81:7a:88:c0:b5:2a:bf:78:01:76:8f:49:
                    0e:81:fa:b2:c0:db:28:c7:c2:f1:b2:0e:4f:06:20:
                    b9:91:fe:bd:40:4e:11:89:44:f0:e3:02:0e:86:78:
                    d2:ba:be:c5:7f:4c:7f:32:c2:cb:d6:d1:6b:f8:3a:
                    8d:ba:c8:56:8f:d7:46:66:ae:ac:63:a9:ad:d5:91:
                    bd:99:f3:93:1f:0f:ca:42:ea:22:9f:5e:2f:85:4a:
                    7d:25:3a:ed:51:ae:8c:a2:7f:ea:22:df:3b:c0:eb:
                    ac:7a:14:c8:15:fa:ca:00:68:8b:f9:a8:db:84:6d:
                    72:a2:93:dd:50:48:f0:68:18:d5:b8:23:3a:65:2e:
                    2f:e4:34:a4:36:b4:83:09:7f:b5:5d:0a:34:70:da:
                    eb:88:c2:3c:33:49:78:fb:58:5c:a4:8f:a8:58:9a:
                    65:1c:7e:4f:50:8c:17:d8:cd:cf:91:f5:14:58:33:
                    1b:9d:68:0d:4b:b9:78:34:4e:1a:05:72:3d:9a:2c:
                    7e:f8:53:bf:15:3c:f1:c4:2e:e4:ac:bb:1b:8b:bb:
                    f0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B2:34:B2:7C:CA:2F:3D:E8:46:70:C4:84:21:4D:C6:C3:6C:0F:C6
            X509v3 Authority Key Identifier:
                keyid:F2:FC:24:09:C9:74:53:6D:D0:7D:CF:34:ED:A8:86:CF:CF:34:70:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/F2FC2409C974536DD07DCF34EDA886CFCF34700A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2FC2409C974536DD07DCF34EDA886CFCF34700A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH8GeiLYax5aQofPTvQzRdrzMdwfPFBR3TheaamdyRZu/0/323830343a326138343a3a2f33322d313238203d3e20323634303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a84::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:46:79:ff:72:f2:98:c5:09:21:bc:ed:3a:53:b5:32:93:20:
         34:53:06:23:0e:71:af:f0:5d:f6:42:ea:c3:52:3c:cd:26:0d:
         17:28:c3:7f:c0:26:e7:d5:84:81:db:72:4b:0c:9e:b8:d7:71:
         06:a2:f1:fc:2d:29:0e:f0:23:1b:a6:04:a5:82:e1:06:af:07:
         29:f0:03:be:cf:70:47:bd:b8:b4:3f:d0:b2:bf:4f:f8:d0:ef:
         58:4f:bd:b9:55:81:ff:f9:fb:d8:69:28:69:e6:72:b0:57:8b:
         d8:fe:6a:b5:ab:25:c6:1a:7d:c3:e4:64:af:4a:1a:24:e8:5d:
         32:2a:ff:20:e0:03:b6:ad:e4:18:0f:f9:ca:ae:56:82:78:36:
         da:db:5a:94:0c:05:a8:f8:c8:7b:02:f7:0c:bc:d0:51:22:4e:
         43:19:89:41:48:e6:8e:01:e1:c5:3c:1f:03:84:f9:4a:9d:7d:
         3e:10:f5:e8:7c:8a:dc:db:ef:26:10:e1:c4:5f:8e:50:04:07:
         45:a6:6b:80:45:63:3d:76:55:a4:4e:a1:3b:03:27:36:7e:d1:
         31:7c:e7:18:34:6c:62:58:c6:8f:58:e5:96:ff:fe:a8:4c:b9:
         73:9f:4b:8d:86:39:9d:1f:d0:e0:57:f2:8b:22:96:05:49:cd:
         d9:3d:02:ed
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUIM+dpmyEsJY3s7kcvhTKTZjIuyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJGQzI0MDlDOTc0NTM2REQwN0RDRjM0RURBODg2Q0ZD
RjM0NzAwQTAeFw0yNTA4MjkxNTM3NTZaFw0yNjA4MjgxNTQyNTZaMDMxMTAvBgNV
BAMTKEVGQjIzNEIyN0NDQTJGM0RFODQ2NzBDNDg0MjE0REM2QzM2QzBGQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGlFGKVRtrQpU1ljDA4eDQ82vn
JSFuFfiT8+wS9ysftdjwvUijQm1tpX/KUjqYhYF6iMC1Kr94AXaPSQ6B+rLA2yjH
wvGyDk8GILmR/r1AThGJRPDjAg6GeNK6vsV/TH8ywsvW0Wv4Oo26yFaP10Zmrqxj
qa3Vkb2Z85MfD8pC6iKfXi+FSn0lOu1Rroyif+oi3zvA66x6FMgV+soAaIv5qNuE
bXKik91QSPBoGNW4IzplLi/kNKQ2tIMJf7VdCjRw2uuIwjwzSXj7WFykj6hYmmUc
fk9QjBfYzc+R9RRYMxudaA1LuXg0ThoFcj2aLH74U78VPPHELuSsuxuLu/BjAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU77I0snzKLz3oRnDEhCFNxsNsD8YwHwYDVR0j
BBgwFoAU8vwkCcl0U23Qfc807aiGz880cAowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0g4R2VpTFlheDVhUW9mUFR2UXpSZHJ6TWR3ZlBGQlIzVGhlYWFtZHlS
WnUvMC9GMkZDMjQwOUM5NzQ1MzZERDA3RENGMzRFREE4ODZDRkNGMzQ3MDBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyRkMyNDA5Qzk3NDUzNkRE
MDdEQ0YzNEVEQTg4NkNGQ0YzNDcwMEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIOEdlaUxZYXg1YVFvZlBUdlF6UmRyek1kd2ZQRkJSM1RoZWFhbWR5Ulp1LzAv
MzIzODMwMzQzYTMyNjEzODM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzQzMDM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBCqEMA0GCSqGSIb3DQEBCwUAA4IBAQCCRnn/
cvKYxQkhvO06U7UykyA0UwYjDnGv8F32QurDUjzNJg0XKMN/wCbn1YSB23JLDJ64
13EGovH8LSkO8CMbpgSlguEGrwcp8AO+z3BHvbi0P9Cyv0/40O9YT725VYH/+fvY
aShp5nKwV4vY/mq1qyXGGn3D5GSvShok6F0yKv8g4AO2reQYD/nKrlaCeDba21qU
DAWo+Mh7AvcMvNBRIk5DGYlBSOaOAeHFPB8DhPlKnX0+EPXofIrc2+8mEOHEX45Q
BAdFpmuARWM9dlWkTqE7Ayc2ftExfOcYNGxiWMaPWOWW//6oTLlzn0uNhjmdH9Dg
V/KLIpYFSc3ZPQLt
-----END CERTIFICATE-----
Generated at Fri Sep 19 09:07:58 2025 by rpki-client