Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a3a2f33322d3332203d3e20323638303039.roa
File:                     323830343a353639303a3a2f33322d3332203d3e20323638303039.roa (raw, json)
Hash identifier:          oacoKmnt520hNKgikcishrvAI0PBO7HFIN0a/mGapXw=
Subject key identifier:   D2:9B:6B:36:70:22:12:F0:4D:C0:AD:E8:E2:83:A1:21:0F:B3:A3:A9
Certificate issuer:       /CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
Certificate serial:       0ACAA896967ACD59FA0F86D173C7CBDD0FCE7136
Authority key identifier: 7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a3a2f33322d3332203d3e20323638303039.roa
Signing time:             Mon 06 Oct 2025 15:08:07 +0000
ROA not before:           Mon 06 Oct 2025 15:03:07 +0000
ROA not after:            Mon 05 Oct 2026 15:08:07 +0000
asID:                     268009
IP address blocks:        2804:5690::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 04:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ca:a8:96:96:7a:cd:59:fa:0f:86:d1:73:c7:cb:dd:0f:ce:71:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
        Validity
            Not Before: Oct  6 15:03:07 2025 GMT
            Not After : Oct  5 15:08:07 2026 GMT
        Subject: CN=D29B6B36702212F04DC0ADE8E283A1210FB3A3A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:ff:63:d3:62:6d:0e:c0:92:25:95:b7:3e:
                    22:db:10:ad:5a:2e:06:ce:02:75:24:b0:e8:6b:43:
                    3a:ae:3e:1a:04:b8:56:a9:df:51:a6:4c:c1:f2:37:
                    bf:b8:10:9f:4c:e2:94:fc:99:3e:f1:59:5a:70:1e:
                    30:91:77:cd:26:7b:e5:b9:2e:4f:f2:d4:87:77:11:
                    cc:a0:61:4f:01:6e:07:78:83:0e:9b:c2:d9:97:59:
                    9b:85:09:8f:fa:eb:b8:ad:04:6f:bc:db:49:5d:47:
                    19:6a:1a:fb:1e:92:f0:96:93:25:8f:43:24:4c:79:
                    2f:a3:32:79:25:dd:46:42:5a:3b:cf:ea:36:2e:d7:
                    26:c6:fe:bf:d3:0d:1f:32:5a:3a:1d:56:04:c3:d8:
                    12:a4:1e:27:37:d8:72:96:df:fb:24:f7:9d:5d:a4:
                    b7:07:1a:36:5f:08:47:14:02:a3:af:30:e0:f5:17:
                    be:92:77:51:91:df:b2:32:13:57:5e:ee:4d:b6:25:
                    74:74:a6:81:98:d5:f9:7e:3e:fa:ee:86:9f:ed:61:
                    1d:9d:a7:bf:d3:b8:06:85:7c:61:e5:07:25:e3:02:
                    4a:8b:6f:2b:77:d6:2a:db:5a:29:67:7c:71:e9:af:
                    a7:78:84:fe:46:fb:cf:44:6a:2f:c0:70:1a:ff:86:
                    88:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9B:6B:36:70:22:12:F0:4D:C0:AD:E8:E2:83:A1:21:0F:B3:A3:A9
            X509v3 Authority Key Identifier:
                keyid:7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a3a2f33322d3332203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:5d:52:26:43:18:84:88:01:0c:0d:38:03:00:f2:c3:f5:
         d7:14:a9:09:7a:62:ed:f4:fe:c6:02:c7:4a:6f:a5:b6:b7:87:
         a7:b4:8a:95:b9:52:37:bb:ae:c3:bf:17:37:7e:c4:d1:a0:20:
         83:b5:71:9b:82:50:fd:db:1b:04:0a:1d:2b:70:51:87:1f:37:
         92:7e:2d:c4:96:31:2f:bb:3e:62:b3:f5:cd:a1:b4:d0:e1:b6:
         32:8b:21:38:e3:c7:e0:58:9d:d7:bb:5e:9f:36:54:66:f7:e1:
         68:8f:46:4d:c5:3d:38:1d:73:72:50:a9:d2:80:ee:f7:a7:a4:
         bc:37:0f:5e:14:fb:37:f4:e2:92:c8:00:53:0f:6c:93:a4:f8:
         92:d1:28:29:f5:28:17:b9:ed:f2:58:b5:f3:ca:94:4f:49:f0:
         bd:3c:18:96:83:c5:d4:ee:2c:da:53:ed:be:c5:cf:1c:cb:b9:
         61:3e:3a:db:e6:66:49:fa:ff:aa:e8:43:3e:b4:bf:3c:0a:fe:
         8d:54:e9:21:4a:84:c3:a0:5b:0a:b5:81:58:9c:1a:f4:c2:28:
         95:8d:df:2c:0e:e4:6e:a3:49:ab:8b:b9:a1:02:e6:fd:f1:27:
         90:05:32:6c:f0:da:96:e8:75:05:71:00:64:e4:7d:e4:3d:9d:
         18:29:6f:7a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCsqolpZ6zVn6D4bRc8fL3Q/OcTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JEMjAwNTk1OEEwRDdEOUZEMkY2REQzQUZBREQyNzFE
NjJDRDU2ODAeFw0yNTEwMDYxNTAzMDdaFw0yNjEwMDUxNTA4MDdaMDMxMTAvBgNV
BAMTKEQyOUI2QjM2NzAyMjEyRjA0REMwQURFOEUyODNBMTIxMEZCM0EzQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4dP9j02JtDsCSJZW3PiLbEK1a
LgbOAnUksOhrQzquPhoEuFap31GmTMHyN7+4EJ9M4pT8mT7xWVpwHjCRd80me+W5
Lk/y1Id3EcygYU8Bbgd4gw6bwtmXWZuFCY/667itBG+820ldRxlqGvsekvCWkyWP
QyRMeS+jMnkl3UZCWjvP6jYu1ybG/r/TDR8yWjodVgTD2BKkHic32HKW3/sk951d
pLcHGjZfCEcUAqOvMOD1F76Sd1GR37IyE1de7k22JXR0poGY1fl+Pvruhp/tYR2d
p7/TuAaFfGHlByXjAkqLbyt31irbWilnfHHpr6d4hP5G+89Eai/AcBr/hoi7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU0ptrNnAiEvBNwK3o4oOhIQ+zo6kwHwYDVR0j
BBgwFoAUe9IAWVig19n9L23Tr63ScdYs1WgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHFkZXZYaHRaenpkYVZpa0hkVG5jdVpuRURDUFdCYWM1Ym1YRVhBcTd5
NDMvMC83QkQyMDA1OTU4QTBEN0Q5RkQyRjZERDNBRkFERDI3MUQ2MkNENTY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCRDIwMDU5NThBMEQ3RDlG
RDJGNkREM0FGQUREMjcxRDYyQ0Q1NjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhxZGV2WGh0Wnp6ZGFWaWtIZFRuY3VabkVEQ1BXQmFjNWJtWEVYQXE3eTQzLzAv
MzIzODMwMzQzYTM1MzYzOTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzAzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARWkDANBgkqhkiG9w0BAQsFAAOCAQEAZfhdUiZD
GISIAQwNOAMA8sP11xSpCXpi7fT+xgLHSm+ltreHp7SKlblSN7uuw78XN37E0aAg
g7Vxm4JQ/dsbBAodK3BRhx83kn4txJYxL7s+YrP1zaG00OG2MoshOOPH4Fid17te
nzZUZvfhaI9GTcU9OB1zclCp0oDu96ekvDcPXhT7N/TiksgAUw9sk6T4ktEoKfUo
F7nt8li188qUT0nwvTwYloPF1O4s2lPtvsXPHMu5YT462+ZmSfr/quhDPrS/PAr+
jVTpIUqEw6BbCrWBWJwa9MIolY3fLA7kbqNJq4u5oQLm/fEnkAUybPDaluh1BXEA
ZOR95D2dGClveg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:36:59 2025 by rpki-client