Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/323830343a333764633a3a2f33322d313238203d3e20323636343430.roa
File:                     323830343a333764633a3a2f33322d313238203d3e20323636343430.roa (raw, json)
Hash identifier:          ljtDUaBK64bKw8D577GcFAYINbUO+k+F9aiNNEeXmD8=
Subject key identifier:   C5:55:5D:3E:10:C6:EA:13:44:D0:65:96:3F:38:52:54:4E:9A:29:A6
Certificate issuer:       /CN=02DB708FAA035F37E9C4D396E2C459A6F379C838
Certificate serial:       51EC0196D4C5A05C4CB11023B2C9E92A94757E35
Authority key identifier: 02:DB:70:8F:AA:03:5F:37:E9:C4:D3:96:E2:C4:59:A6:F3:79:C8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DB708FAA035F37E9C4D396E2C459A6F379C838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/323830343a333764633a3a2f33322d313238203d3e20323636343430.roa
Signing time:             Mon 27 Oct 2025 14:28:16 +0000
ROA not before:           Mon 27 Oct 2025 14:23:16 +0000
ROA not after:            Mon 26 Oct 2026 14:28:16 +0000
asID:                     266440
IP address blocks:        2804:37dc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/02DB708FAA035F37E9C4D396E2C459A6F379C838.crl
                          rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/02DB708FAA035F37E9C4D396E2C459A6F379C838.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DB708FAA035F37E9C4D396E2C459A6F379C838.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 08:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ec:01:96:d4:c5:a0:5c:4c:b1:10:23:b2:c9:e9:2a:94:75:7e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02DB708FAA035F37E9C4D396E2C459A6F379C838
        Validity
            Not Before: Oct 27 14:23:16 2025 GMT
            Not After : Oct 26 14:28:16 2026 GMT
        Subject: CN=C5555D3E10C6EA1344D065963F3852544E9A29A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:cd:ec:5e:f6:cd:76:45:89:be:cb:04:ed:
                    2d:20:a5:c6:22:d3:a9:c6:f2:e0:37:4f:5b:ee:b0:
                    8f:e8:01:7c:e4:10:69:72:1b:e6:41:ab:5a:20:19:
                    b5:ee:c6:fe:80:d8:44:4f:f4:66:89:8e:82:7e:a5:
                    de:9f:91:8e:dc:2e:a8:88:3f:1f:63:3a:2f:e8:5c:
                    7a:5f:e4:d0:4f:04:bb:d3:cc:63:0e:c7:3e:1d:c3:
                    5e:31:f8:94:b7:45:13:ca:aa:33:7b:16:f2:b6:74:
                    cd:de:a3:ff:c9:07:e2:d6:75:27:6a:7b:cc:63:4c:
                    82:f6:47:e9:41:0a:f7:ac:e3:20:d2:63:34:c9:1d:
                    7c:8a:4a:6a:aa:37:7a:f7:a0:e8:a8:ae:b4:e1:19:
                    29:64:76:67:6f:ba:b2:85:43:6b:e9:b2:ab:56:34:
                    eb:ef:69:cf:25:51:0e:eb:5e:37:c0:f8:33:3b:cc:
                    bf:36:13:10:f8:44:b8:b9:13:34:8e:59:f1:2b:c2:
                    f2:e9:06:b1:1e:9e:f1:25:ff:1f:cd:09:60:28:89:
                    ea:0f:c0:7f:10:30:09:f3:e9:dc:c2:15:be:10:39:
                    1c:10:a3:30:e9:25:d7:9a:72:43:81:73:bb:d5:50:
                    09:17:16:a1:41:04:f8:78:04:f8:ab:cf:1d:ec:d7:
                    ac:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:55:5D:3E:10:C6:EA:13:44:D0:65:96:3F:38:52:54:4E:9A:29:A6
            X509v3 Authority Key Identifier:
                keyid:02:DB:70:8F:AA:03:5F:37:E9:C4:D3:96:E2:C4:59:A6:F3:79:C8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/02DB708FAA035F37E9C4D396E2C459A6F379C838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DB708FAA035F37E9C4D396E2C459A6F379C838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/323830343a333764633a3a2f33322d313238203d3e20323636343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:0b:1d:e1:78:b0:0e:71:d1:d6:14:a1:f8:24:d2:96:78:d3:
         c4:47:09:6d:9e:d6:ac:49:32:48:95:25:6d:e2:e1:ba:a6:33:
         8f:ac:aa:9c:c3:47:6b:30:d9:88:30:6c:c9:fa:59:ed:69:69:
         6f:55:55:2d:70:84:48:a2:41:09:b6:d8:19:d1:e1:3e:a6:eb:
         9a:d5:22:1e:fd:1e:4f:f8:47:b2:35:c9:27:d9:1e:48:ea:1f:
         9f:75:43:d2:98:dd:5c:07:d8:3d:52:e3:18:03:3a:0d:5d:cc:
         4f:92:ac:21:51:83:0a:8a:1b:e1:1c:44:d6:bb:5b:cb:54:9c:
         5c:39:f7:7c:ad:d7:87:e6:5f:78:f6:c6:81:16:a2:2d:8b:a9:
         6f:5a:fe:75:d1:8b:2f:45:4e:04:f7:29:d5:db:a1:e7:57:3c:
         61:99:82:83:15:d6:e0:87:bb:f5:8e:54:69:2e:ab:f9:d4:b3:
         75:03:d4:30:70:b6:9c:51:b6:3d:0b:ae:ec:b5:8e:a3:c6:df:
         de:10:61:cf:f3:ea:61:c4:3d:e8:5c:b2:6c:c5:e5:14:44:e0:
         8e:25:95:b2:8a:9b:3f:10:be:6f:83:02:a3:a3:e5:a3:41:31:
         64:e6:58:ac:fc:64:26:85:fd:37:31:da:80:61:c2:89:dd:f2:
         6e:36:ef:8a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUUewBltTFoFxMsRAjssnpKpR1fjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJEQjcwOEZBQTAzNUYzN0U5QzREMzk2RTJDNDU5QTZG
Mzc5QzgzODAeFw0yNTEwMjcxNDIzMTZaFw0yNjEwMjYxNDI4MTZaMDMxMTAvBgNV
BAMTKEM1NTU1RDNFMTBDNkVBMTM0NEQwNjU5NjNGMzg1MjU0NEU5QTI5QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8O83sXvbNdkWJvssE7S0gpcYi
06nG8uA3T1vusI/oAXzkEGlyG+ZBq1ogGbXuxv6A2ERP9GaJjoJ+pd6fkY7cLqiI
Px9jOi/oXHpf5NBPBLvTzGMOxz4dw14x+JS3RRPKqjN7FvK2dM3eo//JB+LWdSdq
e8xjTIL2R+lBCves4yDSYzTJHXyKSmqqN3r3oOiorrThGSlkdmdvurKFQ2vpsqtW
NOvvac8lUQ7rXjfA+DM7zL82ExD4RLi5EzSOWfErwvLpBrEenvEl/x/NCWAoieoP
wH8QMAnz6dzCFb4QORwQozDpJdeackOBc7vVUAkXFqFBBPh4BPirzx3s16zfAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUxVVdPhDG6hNE0GWWPzhSVE6aKaYwHwYDVR0j
BBgwFoAUAttwj6oDXzfpxNOW4sRZpvN5yDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG9XVGJVR1BYS1hzN1FQQ2FEY1ZYQ1hYcGhzdlRmc1pDbXBSaXVxWk1r
WTQvMC8wMkRCNzA4RkFBMDM1RjM3RTlDNEQzOTZFMkM0NTlBNkYzNzlDODM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyREI3MDhGQUEwMzVGMzdF
OUM0RDM5NkUyQzQ1OUE2RjM3OUM4MzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hvV1RiVUdQWEtYczdRUENhRGNWWENYWHBoc3ZUZnNaQ21wUml1cVpNa1k0LzAv
MzIzODMwMzQzYTMzMzc2NDYzM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzYzNDM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBDfcMA0GCSqGSIb3DQEBCwUAA4IBAQCECx3h
eLAOcdHWFKH4JNKWeNPERwltntasSTJIlSVt4uG6pjOPrKqcw0drMNmIMGzJ+lnt
aWlvVVUtcIRIokEJttgZ0eE+puua1SIe/R5P+EeyNckn2R5I6h+fdUPSmN1cB9g9
UuMYAzoNXcxPkqwhUYMKihvhHETWu1vLVJxcOfd8rdeH5l949saBFqIti6lvWv51
0YsvRU4E9ynV26HnVzxhmYKDFdbgh7v1jlRpLqv51LN1A9QwcLacUbY9C67stY6j
xt/eEGHP8+phxD3oXLJsxeUUROCOJZWyips/EL5vgwKjo+WjQTFk5lis/GQmhf03
MdqAYcKJ3fJuNu+K
-----END CERTIFICATE-----
Generated at Mon Nov 3 19:16:18 2025 by rpki-client