Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/323830343a356432383a363030303a3a2f33352d3335203d3e20323638393534.roa
File:                     323830343a356432383a363030303a3a2f33352d3335203d3e20323638393534.roa (raw, json)
Hash identifier:          pSjr0W9EU2lZSDouTjKltYTFZm8uPhaGr/KdghxjwZI=
Subject key identifier:   36:CF:0B:E5:92:66:4E:70:C9:F1:6E:56:25:14:17:CF:55:0C:E9:3C
Certificate issuer:       /CN=FF0BEEF86816A988DAE50E54112CB228061C7D50
Certificate serial:       193FE7A2B978E27D75EE14D2613AA947F72A6BF4
Authority key identifier: FF:0B:EE:F8:68:16:A9:88:DA:E5:0E:54:11:2C:B2:28:06:1C:7D:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF0BEEF86816A988DAE50E54112CB228061C7D50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/323830343a356432383a363030303a3a2f33352d3335203d3e20323638393534.roa
Signing time:             Wed 05 Nov 2025 11:37:55 +0000
ROA not before:           Wed 05 Nov 2025 11:32:55 +0000
ROA not after:            Wed 04 Nov 2026 11:37:55 +0000
asID:                     268954
IP address blocks:        2804:5d28:6000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/FF0BEEF86816A988DAE50E54112CB228061C7D50.crl
                          rsync://rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/FF0BEEF86816A988DAE50E54112CB228061C7D50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF0BEEF86816A988DAE50E54112CB228061C7D50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 19:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3f:e7:a2:b9:78:e2:7d:75:ee:14:d2:61:3a:a9:47:f7:2a:6b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF0BEEF86816A988DAE50E54112CB228061C7D50
        Validity
            Not Before: Nov  5 11:32:55 2025 GMT
            Not After : Nov  4 11:37:55 2026 GMT
        Subject: CN=36CF0BE592664E70C9F16E56251417CF550CE93C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:94:a1:c7:36:2b:ad:64:5a:b5:51:a9:f6:5a:
                    04:87:e3:a6:80:3a:da:1f:e7:4d:e5:e4:ad:be:16:
                    84:49:2b:70:f8:1b:7f:c3:58:1e:e3:27:c4:55:05:
                    7b:f6:e4:0b:6f:7d:f3:05:42:dc:57:a3:94:57:9f:
                    f8:c9:33:1c:e9:62:a4:b6:82:2d:b9:42:25:0d:2d:
                    1e:c9:c4:20:8e:0a:89:6f:44:81:27:e1:eb:ee:fc:
                    59:4d:8f:c7:2a:32:f5:07:44:e6:01:84:cf:ee:fe:
                    98:f1:d9:39:46:4f:dd:a1:db:a1:dc:31:64:6a:cb:
                    41:4c:6a:73:83:0a:89:d0:fd:f4:37:83:f2:f4:88:
                    e2:cc:67:f1:bc:37:e1:15:63:b7:bc:81:c9:14:16:
                    6d:17:c3:a3:49:84:52:29:3a:40:62:24:ee:1b:3b:
                    62:79:e1:4e:84:3c:f1:00:e0:49:3b:f3:36:b8:bf:
                    d0:05:0d:57:c7:0f:04:e2:73:f3:da:19:6e:75:51:
                    01:b5:86:79:5f:ee:49:15:4c:74:0e:b7:9e:c1:76:
                    91:20:99:06:7c:9f:e3:d8:8c:59:d2:33:7d:0f:93:
                    cf:59:f3:66:b7:bd:66:49:7b:3d:a6:16:69:dd:9f:
                    8d:fd:35:c2:2b:96:88:c0:78:7f:a6:4f:d7:c1:93:
                    4c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CF:0B:E5:92:66:4E:70:C9:F1:6E:56:25:14:17:CF:55:0C:E9:3C
            X509v3 Authority Key Identifier:
                keyid:FF:0B:EE:F8:68:16:A9:88:DA:E5:0E:54:11:2C:B2:28:06:1C:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/FF0BEEF86816A988DAE50E54112CB228061C7D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF0BEEF86816A988DAE50E54112CB228061C7D50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/323830343a356432383a363030303a3a2f33352d3335203d3e20323638393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d28:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         31:3b:cd:5d:d0:ca:72:18:2b:b7:a6:bf:01:7e:70:0e:84:06:
         65:90:af:f5:65:46:6f:af:c7:26:e2:18:bf:e2:86:99:32:05:
         3e:3e:8a:5b:d9:41:f2:62:94:74:74:30:32:95:8b:93:cf:dc:
         e3:0f:3d:05:35:80:51:82:27:9c:ac:3a:89:bc:07:62:e0:ca:
         60:a3:59:b8:83:76:00:dd:66:83:f8:7a:60:f4:2b:86:14:0e:
         22:03:26:66:70:4c:94:03:12:61:e9:a7:27:6f:dd:65:ca:16:
         f1:59:0a:0a:e7:67:9a:53:53:9c:e6:f5:06:b9:1c:0d:e5:92:
         77:be:f2:5f:2e:4a:a0:f8:4f:05:37:01:ff:f1:06:c8:c3:6f:
         54:63:69:34:f8:40:4e:16:51:be:83:b7:bd:63:5f:ac:b5:51:
         a6:8d:39:30:6e:93:5a:3f:c2:27:c7:0a:7f:b8:8f:aa:1f:1a:
         8d:14:e4:b3:2e:ea:52:67:90:4f:a7:00:0d:bc:26:87:2f:68:
         fe:4b:c1:b7:30:0b:f0:05:d5:25:c1:7f:e5:25:0c:a2:d2:19:
         b7:96:20:20:9d:b4:42:b6:86:a3:e6:a9:95:b4:ae:c4:49:4d:
         83:9f:2e:22:72:c5:d4:8b:33:9b:76:a2:79:a4:d0:16:fd:03:
         8d:e9:5d:fc
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUGT/norl44n117hTSYTqpR/cqa/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYwQkVFRjg2ODE2QTk4OERBRTUwRTU0MTEyQ0IyMjgw
NjFDN0Q1MDAeFw0yNTExMDUxMTMyNTVaFw0yNjExMDQxMTM3NTVaMDMxMTAvBgNV
BAMTKDM2Q0YwQkU1OTI2NjRFNzBDOUYxNkU1NjI1MTQxN0NGNTUwQ0U5M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHlKHHNiutZFq1Uan2WgSH46aA
Otof503l5K2+FoRJK3D4G3/DWB7jJ8RVBXv25AtvffMFQtxXo5RXn/jJMxzpYqS2
gi25QiUNLR7JxCCOColvRIEn4evu/FlNj8cqMvUHROYBhM/u/pjx2TlGT92h26Hc
MWRqy0FManODConQ/fQ3g/L0iOLMZ/G8N+EVY7e8gckUFm0Xw6NJhFIpOkBiJO4b
O2J54U6EPPEA4Ek78za4v9AFDVfHDwTic/PaGW51UQG1hnlf7kkVTHQOt57BdpEg
mQZ8n+PYjFnSM30Pk89Z82a3vWZJez2mFmndn439NcIrlojAeH+mT9fBk0z3AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUNs8L5ZJmTnDJ8W5WJRQXz1UM6TwwHwYDVR0j
BBgwFoAU/wvu+GgWqYja5Q5UESyyKAYcfVAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0sxU1dKYXpSUDl3NWdRWnNLMkwxb1NFQ3VMUWhRU0pEcWdqVHhUYjN1
TncvMC9GRjBCRUVGODY4MTZBOTg4REFFNTBFNTQxMTJDQjIyODA2MUM3RDUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMEJFRUY4NjgxNkE5ODhE
QUU1MEU1NDExMkNCMjI4MDYxQzdENTAuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLMVNXSmF6UlA5dzVnUVpzSzJMMW9TRUN1TFFoUVNKRHFnalR4VGIzdU53LzAv
MzIzODMwMzQzYTM1NjQzMjM4M2EzNjMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzYzODM5MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEXShgMA0GCSqGSIb3DQEBCwUA
A4IBAQAxO81d0MpyGCu3pr8BfnAOhAZlkK/1ZUZvr8cm4hi/4oaZMgU+Popb2UHy
YpR0dDAylYuTz9zjDz0FNYBRgiecrDqJvAdi4Mpgo1m4g3YA3WaD+Hpg9CuGFA4i
AyZmcEyUAxJh6acnb91lyhbxWQoK52eaU1Oc5vUGuRwN5ZJ3vvJfLkqg+E8FNwH/
8QbIw29UY2k0+EBOFlG+g7e9Y1+stVGmjTkwbpNaP8Inxwp/uI+qHxqNFOSzLupS
Z5BPpwANvCaHL2j+S8G3MAvwBdUlwX/lJQyi0hm3liAgnbRCtoaj5qmVtK7ESU2D
ny4icsXUizObdqJ5pNAW/QON6V38
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:32:10 2025 by rpki-client