Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/323830343a6531343a3a2f33322d313238203d3e203532353433.roa
File:                     323830343a6531343a3a2f33322d313238203d3e203532353433.roa (raw, json)
Hash identifier:          yRVxVcYQWXu1XpnmBwS2BEF6k+yvabfi2twGE6YRzzM=
Subject key identifier:   9B:A9:A7:1D:D3:56:6E:8F:C8:C4:0A:FD:05:EC:4B:1A:37:E5:E2:B9
Certificate issuer:       /CN=BB0FAB401037F6EE8BF30D559ABDD44972C40995
Certificate serial:       1B43243E4386A68D0EA12486D77FE9C1E8E66937
Authority key identifier: BB:0F:AB:40:10:37:F6:EE:8B:F3:0D:55:9A:BD:D4:49:72:C4:09:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0FAB401037F6EE8BF30D559ABDD44972C40995.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/323830343a6531343a3a2f33322d313238203d3e203532353433.roa
Signing time:             Sat 11 Oct 2025 20:07:35 +0000
ROA not before:           Sat 11 Oct 2025 20:02:35 +0000
ROA not after:            Sat 10 Oct 2026 20:07:35 +0000
asID:                     52543
IP address blocks:        2804:e14::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/BB0FAB401037F6EE8BF30D559ABDD44972C40995.crl
                          rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/BB0FAB401037F6EE8BF30D559ABDD44972C40995.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0FAB401037F6EE8BF30D559ABDD44972C40995.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 17:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:43:24:3e:43:86:a6:8d:0e:a1:24:86:d7:7f:e9:c1:e8:e6:69:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0FAB401037F6EE8BF30D559ABDD44972C40995
        Validity
            Not Before: Oct 11 20:02:35 2025 GMT
            Not After : Oct 10 20:07:35 2026 GMT
        Subject: CN=9BA9A71DD3566E8FC8C40AFD05EC4B1A37E5E2B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:8e:14:6a:c7:2d:53:91:e2:d2:a6:19:ed:
                    57:4f:61:60:1f:33:d3:57:c8:c8:c1:d1:6c:cd:12:
                    8a:23:d0:59:e0:16:3a:61:5a:83:3f:9a:24:ce:be:
                    eb:9f:ca:ec:5b:e9:2d:7c:a0:ab:9b:70:39:fb:6f:
                    55:a2:82:0c:9c:57:44:43:76:46:85:67:8e:40:35:
                    34:89:67:c9:dd:1c:f9:dd:26:1b:75:9a:36:4b:3b:
                    78:54:24:0b:49:33:e5:eb:cb:14:cc:fb:78:79:3a:
                    04:a0:46:e5:97:22:a7:aa:b5:a4:4d:2e:a6:ca:c5:
                    2b:67:49:d8:5d:74:20:54:23:d6:fb:33:5c:86:36:
                    54:5e:1c:18:23:f1:26:e8:7b:51:91:e4:19:b7:b4:
                    b8:4f:71:1a:8b:aa:64:7a:b7:73:fd:53:d1:4a:de:
                    ef:7a:da:b5:be:b4:78:28:90:fc:df:87:13:6a:05:
                    c1:0a:5f:b5:f6:de:27:7b:7e:52:95:a0:0f:fa:71:
                    f8:31:43:0c:6e:a1:9d:54:52:5c:60:b6:22:75:28:
                    3b:00:9e:f0:a0:d4:a4:13:9a:be:42:78:c9:1a:de:
                    45:dc:4b:b2:be:fb:3d:7a:68:f1:2d:7f:05:21:bf:
                    25:ec:97:76:2c:63:70:3e:3b:3e:7a:a4:4c:3c:e6:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A9:A7:1D:D3:56:6E:8F:C8:C4:0A:FD:05:EC:4B:1A:37:E5:E2:B9
            X509v3 Authority Key Identifier:
                keyid:BB:0F:AB:40:10:37:F6:EE:8B:F3:0D:55:9A:BD:D4:49:72:C4:09:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/BB0FAB401037F6EE8BF30D559ABDD44972C40995.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0FAB401037F6EE8BF30D559ABDD44972C40995.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/323830343a6531343a3a2f33322d313238203d3e203532353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e14::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:96:4c:70:71:d9:6e:96:67:7a:51:5d:de:8b:47:f5:e8:13:
         c3:f0:5c:48:e7:ad:00:3d:9f:8b:71:5d:f1:99:68:5a:95:6a:
         b2:ae:c6:e5:df:79:c3:64:83:e5:ee:26:72:34:e5:7e:c3:ad:
         4c:a2:29:f3:3f:70:0a:66:47:5f:b7:1d:2b:62:ae:f6:0d:04:
         f6:23:34:d8:28:e0:36:bd:f7:39:ef:da:03:d6:84:56:27:f0:
         19:dc:14:d8:1e:7b:a2:80:d0:18:3e:3d:41:b9:67:ef:00:4d:
         55:6a:45:ac:ac:eb:d3:3f:ce:c5:cc:66:42:f8:37:21:20:bf:
         76:c3:be:8d:1e:98:52:9b:33:01:74:8f:aa:14:05:fb:58:11:
         23:fd:ec:aa:60:91:63:c3:17:d8:6b:b3:2e:cd:eb:d1:8f:58:
         0d:c7:d7:cc:45:8d:57:62:58:a5:a5:47:f3:f4:c1:ec:ed:0c:
         b5:17:3b:de:68:86:35:40:0c:f4:ce:ef:ec:a0:d0:8e:cf:af:
         e2:0c:6a:7f:9d:02:fe:51:88:cc:b4:21:42:34:e6:64:8f:03:
         14:66:36:c1:86:7e:e7:a3:cf:49:1f:17:63:fa:db:12:1f:7b:
         08:f6:db:c1:43:05:65:b8:db:d9:c6:fc:96:e3:06:f5:b8:6a:
         ac:a0:06:0a
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUG0MkPkOGpo0OoSSG13/pwejmaTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIwRkFCNDAxMDM3RjZFRThCRjMwRDU1OUFCREQ0NDk3
MkM0MDk5NTAeFw0yNTEwMTEyMDAyMzVaFw0yNjEwMTAyMDA3MzVaMDMxMTAvBgNV
BAMTKDlCQTlBNzFERDM1NjZFOEZDOEM0MEFGRDA1RUM0QjFBMzdFNUUyQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQ44UasctU5Hi0qYZ7VdPYWAf
M9NXyMjB0WzNEooj0FngFjphWoM/miTOvuufyuxb6S18oKubcDn7b1WiggycV0RD
dkaFZ45ANTSJZ8ndHPndJht1mjZLO3hUJAtJM+XryxTM+3h5OgSgRuWXIqeqtaRN
LqbKxStnSdhddCBUI9b7M1yGNlReHBgj8Sboe1GR5Bm3tLhPcRqLqmR6t3P9U9FK
3u962rW+tHgokPzfhxNqBcEKX7X23id7flKVoA/6cfgxQwxuoZ1UUlxgtiJ1KDsA
nvCg1KQTmr5CeMka3kXcS7K++z16aPEtfwUhvyXsl3YsY3A+Oz56pEw85vnZAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUm6mnHdNWbo/IxAr9BexLGjfl4rkwHwYDVR0j
BBgwFoAUuw+rQBA39u6L8w1Vmr3USXLECZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTZIdG1RaTI5U3FRazh2dDdSNmhKOTc3VFBYQUNXbjRCdVhFY2FjRGpw
cTkvMC9CQjBGQUI0MDEwMzdGNkVFOEJGMzBENTU5QUJERDQ0OTcyQzQwOTk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JCMEZBQjQwMTAzN0Y2RUU4
QkYzMEQ1NTlBQkRENDQ5NzJDNDA5OTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E2SHRtUWkyOVNxUWs4dnQ3UjZoSjk3N1RQWEFDV240QnVYRWNhY0RqcHE5LzAv
MzIzODMwMzQzYTY1MzEzNDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIwMzUzMjM1
MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEDhQwDQYJKoZIhvcNAQELBQADggEBAEaWTHBx2W6W
Z3pRXd6LR/XoE8PwXEjnrQA9n4txXfGZaFqVarKuxuXfecNkg+XuJnI05X7DrUyi
KfM/cApmR1+3HStirvYNBPYjNNgo4Da99znv2gPWhFYn8BncFNgee6KA0Bg+PUG5
Z+8ATVVqRays69M/zsXMZkL4NyEgv3bDvo0emFKbMwF0j6oUBftYESP97KpgkWPD
F9hrsy7N69GPWA3H18xFjVdiWKWlR/P0weztDLUXO95ohjVADPTO7+yg0I7Pr+IM
an+dAv5RiMy0IUI05mSPAxRmNsGGfuejz0kfF2P62xIfewj228FDBWW429nG/Jbj
BvW4aqygBgo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:20:27 2025 by rpki-client