Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/323830343a3431383a3a2f33322d313238203d3e20323632343135.roa
File:                     323830343a3431383a3a2f33322d313238203d3e20323632343135.roa (raw, json)
Hash identifier:          u9JF1Rdxiwfu7xkS/ClFi9dvx8+Z9l9CbDa97mv1Y8I=
Subject key identifier:   48:6C:38:41:A7:F8:F4:6D:AB:2F:91:04:2E:47:78:A0:B2:53:CE:A9
Certificate issuer:       /CN=EA616CE7F20E4B43377EB103CA139E5C8A6299DF
Certificate serial:       59FA8534603924A85D5DCEB82364CC2461342BD2
Authority key identifier: EA:61:6C:E7:F2:0E:4B:43:37:7E:B1:03:CA:13:9E:5C:8A:62:99:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/323830343a3431383a3a2f33322d313238203d3e20323632343135.roa
Signing time:             Tue 23 Sep 2025 19:52:06 +0000
ROA not before:           Tue 23 Sep 2025 19:47:06 +0000
ROA not after:            Tue 22 Sep 2026 19:52:06 +0000
asID:                     262415
IP address blocks:        2804:418::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.crl
                          rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Oct 2025 00:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fa:85:34:60:39:24:a8:5d:5d:ce:b8:23:64:cc:24:61:34:2b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA616CE7F20E4B43377EB103CA139E5C8A6299DF
        Validity
            Not Before: Sep 23 19:47:06 2025 GMT
            Not After : Sep 22 19:52:06 2026 GMT
        Subject: CN=486C3841A7F8F46DAB2F91042E4778A0B253CEA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a8:fa:ab:ee:09:85:60:8e:6a:ae:0e:eb:ce:
                    3d:0e:50:b8:1f:00:08:05:ad:b6:3d:e6:74:09:41:
                    5d:74:2d:97:58:aa:a5:e4:ba:98:4f:5a:ad:25:36:
                    79:1f:55:f6:43:db:31:9b:2a:b3:aa:90:c5:a5:3e:
                    c1:ef:25:bf:e0:74:80:e4:1b:d0:73:35:86:e5:09:
                    cc:c4:62:c1:da:5f:3b:e7:c2:58:a2:37:e6:0e:4d:
                    74:83:48:f5:70:44:20:cd:b3:3a:eb:4e:06:38:07:
                    60:3e:db:3e:cb:c3:ab:a3:07:2e:9d:64:8f:2d:73:
                    6f:5c:7d:ac:5d:03:0b:d5:c9:c9:28:2d:87:1d:69:
                    6f:a7:eb:94:d0:a4:1a:e9:a4:b2:9e:fb:51:20:50:
                    ea:cb:3a:88:9d:b6:89:0a:b7:8c:c3:51:2f:1d:da:
                    07:bd:b1:67:fa:a7:c5:ad:b6:b8:24:70:63:bb:cb:
                    f6:b7:48:88:f1:aa:b7:78:04:be:f0:f6:51:e1:b0:
                    06:e5:97:ab:fa:17:8a:d2:23:4d:f7:81:2a:31:44:
                    79:e9:c5:79:12:a2:1c:15:67:c4:94:04:0a:39:6d:
                    53:c5:b3:fd:82:10:94:14:25:d5:56:55:5a:9b:79:
                    34:23:da:ae:c0:57:25:11:c3:86:13:e5:ab:90:d9:
                    b4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6C:38:41:A7:F8:F4:6D:AB:2F:91:04:2E:47:78:A0:B2:53:CE:A9
            X509v3 Authority Key Identifier:
                keyid:EA:61:6C:E7:F2:0E:4B:43:37:7E:B1:03:CA:13:9E:5C:8A:62:99:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA616CE7F20E4B43377EB103CA139E5C8A6299DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xmBnVwCc3dtxMrAQVmQP35BJ2hnj4Ux1Wbhyfj9u7Dj/0/323830343a3431383a3a2f33322d313238203d3e20323632343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:418::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:03:8a:11:c7:dc:bb:54:18:bb:4c:c7:f3:ef:01:dd:54:79:
         09:47:d3:80:09:5b:40:db:f3:4b:73:ad:43:0c:9c:9f:2d:be:
         a1:a7:3a:cd:e2:42:18:42:d3:f1:d9:04:50:9c:72:91:60:65:
         65:c1:d0:31:fc:3b:63:04:ad:6b:f1:e8:1e:9a:78:4d:97:5b:
         cf:d2:82:07:d5:2b:34:ce:00:99:9d:18:f5:dc:cc:ce:3b:29:
         b8:89:db:20:3d:69:78:95:b7:a4:db:b3:bc:c9:bc:b5:cd:5c:
         c0:6d:b1:8f:a4:ca:80:b3:0c:e7:ab:e1:10:e6:4a:2d:c1:4b:
         93:a8:0a:b6:c7:98:5f:2b:bf:19:60:a0:9a:77:0b:ec:68:8f:
         45:f3:a2:c5:f2:81:cb:83:80:e0:18:fc:34:05:39:fe:4a:0b:
         c1:e1:ab:0d:39:26:7c:b9:0e:cb:c9:a4:5a:89:62:32:ab:01:
         79:cc:e8:28:ae:c9:c7:38:3f:77:9e:b2:f0:8d:ec:89:e5:fa:
         da:91:26:30:7d:c5:e6:f4:85:4e:2c:93:8e:19:40:10:82:02:
         a1:20:55:68:38:6e:52:41:05:58:4f:a1:0d:e5:99:36:90:93:
         10:b7:e7:35:00:d4:7e:82:92:4b:a0:9c:ba:1f:1f:78:e3:cb:
         9d:30:96:87
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUWfqFNGA5JKhdXc64I2TMJGE0K9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE2MTZDRTdGMjBFNEI0MzM3N0VCMTAzQ0ExMzlFNUM4
QTYyOTlERjAeFw0yNTA5MjMxOTQ3MDZaFw0yNjA5MjIxOTUyMDZaMDMxMTAvBgNV
BAMTKDQ4NkMzODQxQTdGOEY0NkRBQjJGOTEwNDJFNDc3OEEwQjI1M0NFQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLqPqr7gmFYI5qrg7rzj0OULgf
AAgFrbY95nQJQV10LZdYqqXkuphPWq0lNnkfVfZD2zGbKrOqkMWlPsHvJb/gdIDk
G9BzNYblCczEYsHaXzvnwliiN+YOTXSDSPVwRCDNszrrTgY4B2A+2z7Lw6ujBy6d
ZI8tc29cfaxdAwvVyckoLYcdaW+n65TQpBrppLKe+1EgUOrLOoidtokKt4zDUS8d
2ge9sWf6p8WttrgkcGO7y/a3SIjxqrd4BL7w9lHhsAbll6v6F4rSI033gSoxRHnp
xXkSohwVZ8SUBAo5bVPFs/2CEJQUJdVWVVqbeTQj2q7AVyURw4YT5auQ2bTBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUSGw4Qaf49G2rL5EELkd4oLJTzqkwHwYDVR0j
BBgwFoAU6mFs5/IOS0M3frEDyhOeXIpimd8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94bUJuVndDYzNkdHhNckFRVm1RUDM1QkoyaG5qNFV4MVdiaHlmajl1N0Rq
LzAvRUE2MTZDRTdGMjBFNEI0MzM3N0VCMTAzQ0ExMzlFNUM4QTYyOTlERi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FQTYxNkNFN0YyMEU0QjQzMzc3
RUIxMDNDQTEzOUU1QzhBNjI5OURGLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
bUJuVndDYzNkdHhNckFRVm1RUDM1QkoyaG5qNFV4MVdiaHlmajl1N0RqLzAvMzIz
ODMwMzQzYTM0MzEzODNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzIzNjMyMzQz
MTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKAQEGDANBgkqhkiG9w0BAQsFAAOCAQEAngOKEcfcu1QY
u0zH8+8B3VR5CUfTgAlbQNvzS3OtQwycny2+oac6zeJCGELT8dkEUJxykWBlZcHQ
Mfw7YwSta/HoHpp4TZdbz9KCB9UrNM4AmZ0Y9dzMzjspuInbID1peJW3pNuzvMm8
tc1cwG2xj6TKgLMM56vhEOZKLcFLk6gKtseYXyu/GWCgmncL7GiPRfOixfKBy4OA
4Bj8NAU5/koLweGrDTkmfLkOy8mkWoliMqsBeczoKK7Jxzg/d56y8I3sieX62pEm
MH3F5vSFTiyTjhlAEIICoSBVaDhuUkEFWE+hDeWZNpCTELfnNQDUfoKSS6Ccuh8f
eOPLnTCWhw==
-----END CERTIFICATE-----
Generated at Sat Oct 18 14:10:01 2025 by rpki-client