Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gsxgpcf5FJA1xYUPWV77ivDzyUFf6Xniw3LAhXvTvqHd/0/323830343a356264383a3a2f33322d313238203d3e20323638383732.roa
File:                     323830343a356264383a3a2f33322d313238203d3e20323638383732.roa (raw, json)
Hash identifier:          HPzWWzl1L+8SMcgCLEFQ97Ac+JooY8BPx0/ZuGEfDQ8=
Subject key identifier:   44:71:BF:77:70:65:D2:F6:25:55:0A:AC:2E:0F:7E:CC:E6:38:8F:66
Certificate issuer:       /CN=E022BA9B6C64C3F4D7DA81565E3EC832773CD959
Certificate serial:       06A191E640A8A69AB4061DFCF1FE3E2027492083
Authority key identifier: E0:22:BA:9B:6C:64:C3:F4:D7:DA:81:56:5E:3E:C8:32:77:3C:D9:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E022BA9B6C64C3F4D7DA81565E3EC832773CD959.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gsxgpcf5FJA1xYUPWV77ivDzyUFf6Xniw3LAhXvTvqHd/0/323830343a356264383a3a2f33322d313238203d3e20323638383732.roa
Signing time:             Mon 20 Oct 2025 14:04:37 +0000
ROA not before:           Mon 20 Oct 2025 13:59:37 +0000
ROA not after:            Mon 19 Oct 2026 14:04:37 +0000
asID:                     268872
IP address blocks:        2804:5bd8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gsxgpcf5FJA1xYUPWV77ivDzyUFf6Xniw3LAhXvTvqHd/0/E022BA9B6C64C3F4D7DA81565E3EC832773CD959.crl
                          rsync://rpki-repo.registro.br/repo/Gsxgpcf5FJA1xYUPWV77ivDzyUFf6Xniw3LAhXvTvqHd/0/E022BA9B6C64C3F4D7DA81565E3EC832773CD959.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E022BA9B6C64C3F4D7DA81565E3EC832773CD959.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a1:91:e6:40:a8:a6:9a:b4:06:1d:fc:f1:fe:3e:20:27:49:20:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E022BA9B6C64C3F4D7DA81565E3EC832773CD959
        Validity
            Not Before: Oct 20 13:59:37 2025 GMT
            Not After : Oct 19 14:04:37 2026 GMT
        Subject: CN=4471BF777065D2F625550AAC2E0F7ECCE6388F66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6e:0d:d3:58:63:46:ea:2b:cb:e3:98:8b:86:
                    ce:47:e7:a8:5f:2b:df:27:4d:fb:a9:6e:2b:fd:72:
                    3c:c4:fc:31:72:f0:c3:61:d1:e4:0b:b9:5b:6e:72:
                    e2:ca:c6:86:3a:4f:18:5e:75:81:26:2b:7a:e7:02:
                    e3:16:14:03:ab:26:a3:15:b4:83:f4:e5:27:a3:be:
                    b4:01:79:7d:0d:be:14:65:24:8a:75:1e:b6:09:15:
                    ff:f7:06:20:cb:3b:42:35:c6:78:f2:49:34:65:8c:
                    8c:e0:4a:64:f2:59:cb:15:87:fd:66:6c:aa:b9:cc:
                    96:0f:3b:77:2d:fd:7e:9c:43:5b:68:16:d6:49:e9:
                    e4:f8:b2:7d:fc:b0:4f:3b:8a:d8:84:28:c7:14:3c:
                    04:71:2e:3e:12:7c:9f:94:22:3b:7c:84:f1:14:b3:
                    72:aa:c7:42:bb:cc:ab:27:9e:aa:46:b9:e1:21:40:
                    85:ab:e8:df:64:9f:ab:e9:c4:07:f9:c6:ff:65:c5:
                    04:be:a4:8a:02:ee:9b:61:fc:5e:0e:c1:1a:57:13:
                    13:f6:36:c3:27:b5:21:f7:c8:58:81:9c:09:3c:f8:
                    71:68:2d:e0:f2:10:7a:40:3a:de:c8:1f:cf:bb:e4:
                    69:65:c1:9b:5a:90:54:00:cb:e7:7a:84:f4:9d:28:
                    fd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:71:BF:77:70:65:D2:F6:25:55:0A:AC:2E:0F:7E:CC:E6:38:8F:66
            X509v3 Authority Key Identifier:
                keyid:E0:22:BA:9B:6C:64:C3:F4:D7:DA:81:56:5E:3E:C8:32:77:3C:D9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gsxgpcf5FJA1xYUPWV77ivDzyUFf6Xniw3LAhXvTvqHd/0/E022BA9B6C64C3F4D7DA81565E3EC832773CD959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E022BA9B6C64C3F4D7DA81565E3EC832773CD959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gsxgpcf5FJA1xYUPWV77ivDzyUFf6Xniw3LAhXvTvqHd/0/323830343a356264383a3a2f33322d313238203d3e20323638383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:00:c1:2a:0f:80:d9:f7:7d:c3:ba:4f:54:da:ac:f7:34:3c:
         6d:08:76:f4:a1:81:f8:69:be:48:c8:34:78:8e:b1:2e:e2:e1:
         44:3a:a6:59:99:be:c0:92:b4:cf:70:d2:32:02:9d:a6:93:c0:
         e0:89:11:f9:a9:17:eb:84:9c:9c:fe:6c:48:54:2b:a8:cf:8d:
         05:f4:b5:d3:c9:9c:45:de:6d:13:4c:2a:ba:d6:15:b3:ab:19:
         16:4d:c8:a6:41:69:b3:d7:1a:36:c5:86:b8:75:93:af:75:8b:
         5f:a1:13:0e:12:de:74:bd:09:69:27:4b:5c:2f:74:f9:e1:f2:
         15:8d:67:05:7f:d9:22:a6:27:ad:fd:e0:10:3b:4f:3f:67:81:
         d4:bb:a1:cf:9a:00:f8:75:88:ba:0d:4c:d5:6d:26:48:04:a8:
         94:be:65:cb:90:42:64:96:fc:e8:20:b7:e5:cf:74:dd:47:3f:
         ba:66:3f:7d:2c:e9:f1:4c:ca:80:1b:ab:4d:0f:0d:35:79:e7:
         37:fc:d0:82:76:bb:35:40:22:b0:f6:d3:5a:99:23:b0:14:7c:
         9b:1f:cb:3c:53:72:6c:4d:f8:44:51:0e:9e:e0:75:7c:aa:0e:
         24:17:b9:e8:bd:6e:7c:f3:48:56:0d:c8:e0:cc:8a:e2:50:82:
         b1:99:0b:7b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUBqGR5kCoppq0Bh388f4+ICdJIIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAyMkJBOUI2QzY0QzNGNEQ3REE4MTU2NUUzRUM4MzI3
NzNDRDk1OTAeFw0yNTEwMjAxMzU5MzdaFw0yNjEwMTkxNDA0MzdaMDMxMTAvBgNV
BAMTKDQ0NzFCRjc3NzA2NUQyRjYyNTU1MEFBQzJFMEY3RUNDRTYzODhGNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbbg3TWGNG6ivL45iLhs5H56hf
K98nTfupbiv9cjzE/DFy8MNh0eQLuVtucuLKxoY6TxhedYEmK3rnAuMWFAOrJqMV
tIP05SejvrQBeX0NvhRlJIp1HrYJFf/3BiDLO0I1xnjySTRljIzgSmTyWcsVh/1m
bKq5zJYPO3ct/X6cQ1toFtZJ6eT4sn38sE87itiEKMcUPARxLj4SfJ+UIjt8hPEU
s3Kqx0K7zKsnnqpGueEhQIWr6N9kn6vpxAf5xv9lxQS+pIoC7pth/F4OwRpXExP2
NsMntSH3yFiBnAk8+HFoLeDyEHpAOt7IH8+75GllwZtakFQAy+d6hPSdKP1ZAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQURHG/d3Bl0vYlVQqsLg9+zOY4j2YwHwYDVR0j
BBgwFoAU4CK6m2xkw/TX2oFWXj7IMnc82VkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3N4Z3BjZjVGSkExeFlVUFdWNzdpdkR6eVVGZjZYbml3M0xBaFh2VHZx
SGQvMC9FMDIyQkE5QjZDNjRDM0Y0RDdEQTgxNTY1RTNFQzgzMjc3M0NEOTU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwMjJCQTlCNkM2NEMzRjRE
N0RBODE1NjVFM0VDODMyNzczQ0Q5NTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dzeGdwY2Y1RkpBMXhZVVBXVjc3aXZEenlVRmY2WG5pdzNMQWhYdlR2cUhkLzAv
MzIzODMwMzQzYTM1NjI2NDM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzgzODM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBFvYMA0GCSqGSIb3DQEBCwUAA4IBAQAZAMEq
D4DZ933Duk9U2qz3NDxtCHb0oYH4ab5IyDR4jrEu4uFEOqZZmb7AkrTPcNIyAp2m
k8DgiRH5qRfrhJyc/mxIVCuoz40F9LXTyZxF3m0TTCq61hWzqxkWTcimQWmz1xo2
xYa4dZOvdYtfoRMOEt50vQlpJ0tcL3T54fIVjWcFf9kipiet/eAQO08/Z4HUu6HP
mgD4dYi6DUzVbSZIBKiUvmXLkEJklvzoILflz3TdRz+6Zj99LOnxTMqAG6tNDw01
eec3/NCCdrs1QCKw9tNamSOwFHybH8s8U3JsTfhEUQ6e4HV8qg4kF7novW5880hW
DcjgzIriUIKxmQt7
-----END CERTIFICATE-----
Generated at Tue Nov 4 05:02:12 2025 by rpki-client