Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/323830343a393636343a3a2f33322d3334203d3e20323734333334.roa
File:                     323830343a393636343a3a2f33322d3334203d3e20323734333334.roa (raw, json)
Hash identifier:          BON1vMPP4y5ygRUwN4IewX4Z2RB3UA2Bse05ZUhz+8I=
Subject key identifier:   EA:32:A5:13:B1:66:3C:3B:8F:5D:AA:3F:DD:FF:B2:28:41:2A:F4:0B
Certificate issuer:       /CN=9DE32C9C96D6323358BE054E570FF9A96BD5E071
Certificate serial:       5504667FF1564B8ACAC3D35B63BF9DC5563EB15F
Authority key identifier: 9D:E3:2C:9C:96:D6:32:33:58:BE:05:4E:57:0F:F9:A9:6B:D5:E0:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE32C9C96D6323358BE054E570FF9A96BD5E071.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/323830343a393636343a3a2f33322d3334203d3e20323734333334.roa
Signing time:             Mon 03 Nov 2025 17:33:43 +0000
ROA not before:           Mon 03 Nov 2025 17:28:43 +0000
ROA not after:            Mon 02 Nov 2026 17:33:43 +0000
asID:                     274334
IP address blocks:        2804:9664::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.crl
                          rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE32C9C96D6323358BE054E570FF9A96BD5E071.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:04:66:7f:f1:56:4b:8a:ca:c3:d3:5b:63:bf:9d:c5:56:3e:b1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DE32C9C96D6323358BE054E570FF9A96BD5E071
        Validity
            Not Before: Nov  3 17:28:43 2025 GMT
            Not After : Nov  2 17:33:43 2026 GMT
        Subject: CN=EA32A513B1663C3B8F5DAA3FDDFFB228412AF40B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:e5:df:80:d4:f3:dd:0f:41:01:dc:d8:c0:
                    f9:38:49:26:49:b3:af:76:67:cd:5c:f3:54:4c:0b:
                    c5:6d:e2:0a:84:c0:6c:ee:03:21:3f:a5:46:e7:e5:
                    4a:39:2a:ab:4c:ba:41:e0:2b:22:ed:65:02:41:18:
                    73:d3:56:a0:83:27:4d:a5:4b:66:10:bc:8b:2f:89:
                    dd:8f:03:6b:3c:39:76:e6:3f:60:f1:5b:f1:5a:50:
                    0a:cf:59:44:d4:66:b1:95:d8:99:81:ac:ee:82:3c:
                    2c:31:ad:b1:07:2f:ee:21:ce:b9:89:0f:5b:42:e3:
                    5c:8a:05:4a:60:0c:a4:6d:3f:c5:89:df:23:c0:89:
                    6f:9d:ce:18:0f:68:f1:b2:ae:37:85:4e:44:de:f5:
                    0e:2d:d6:35:74:cc:79:74:d0:3f:99:b1:3e:92:0f:
                    43:bc:5a:76:50:38:79:03:c7:5c:00:d3:d7:01:30:
                    c4:0c:e8:70:1c:55:4d:1c:60:e9:29:bf:f1:92:8e:
                    e1:9f:8d:f1:df:51:1b:bd:47:70:dc:0e:80:d9:be:
                    a8:fb:46:55:f6:34:03:10:c7:70:4f:b9:6f:86:fc:
                    56:63:01:70:22:3a:48:70:d0:f9:bd:df:0d:ce:38:
                    1b:94:37:c9:06:3a:cd:eb:5f:51:5d:7c:30:c1:db:
                    20:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:32:A5:13:B1:66:3C:3B:8F:5D:AA:3F:DD:FF:B2:28:41:2A:F4:0B
            X509v3 Authority Key Identifier:
                keyid:9D:E3:2C:9C:96:D6:32:33:58:BE:05:4E:57:0F:F9:A9:6B:D5:E0:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/9DE32C9C96D6323358BE054E570FF9A96BD5E071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE32C9C96D6323358BE054E570FF9A96BD5E071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDMSs9HdJg3f9jtHSTDkveeC8idrh8Pj8iei6XR4qjK7/0/323830343a393636343a3a2f33322d3334203d3e20323734333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9664::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:82:4c:fc:30:3c:4c:28:99:09:92:2d:f0:c3:4b:a9:1b:c3:
         0c:5d:52:d0:f5:43:93:fd:5f:90:b1:a2:91:4c:b8:76:85:37:
         c7:16:f9:bf:97:7e:c6:44:93:1e:79:d2:23:77:13:2c:5f:cf:
         88:8b:a7:84:fd:cf:20:1c:16:a6:92:99:ae:a6:3a:8d:95:68:
         3f:7d:5f:8c:b2:e7:7a:00:d6:9a:12:70:a5:be:59:2a:2b:d2:
         33:f6:f8:dc:eb:86:b7:16:ee:02:4b:42:37:ad:be:0e:ea:68:
         68:33:12:48:7b:6f:f7:3a:be:f0:b6:03:a1:2c:39:5f:ad:fe:
         a2:01:a6:14:ae:fa:a3:28:67:0e:04:8a:b5:a9:d5:2b:59:4f:
         b1:cb:c8:a2:1b:59:ce:f9:04:36:8b:bb:cf:38:3d:5c:21:eb:
         71:44:5c:3c:db:9f:78:a5:c7:a2:f4:d5:21:81:f8:47:dc:16:
         74:46:dd:95:69:42:1e:56:28:e7:e3:82:62:87:af:ab:44:e5:
         b4:de:dd:b8:ba:f3:f7:7c:0e:3c:d6:58:6e:86:ca:8a:df:50:
         e1:bf:49:1d:43:fe:27:cd:4e:6c:ff:74:34:b1:c4:ed:8c:e0:
         01:43:05:d2:0d:f5:47:6f:20:eb:82:0d:18:3f:6b:f2:9f:59:
         63:af:68:ee
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVQRmf/FWS4rKw9NbY7+dxVY+sV8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURFMzJDOUM5NkQ2MzIzMzU4QkUwNTRFNTcwRkY5QTk2
QkQ1RTA3MTAeFw0yNTExMDMxNzI4NDNaFw0yNjExMDIxNzMzNDNaMDMxMTAvBgNV
BAMTKEVBMzJBNTEzQjE2NjNDM0I4RjVEQUEzRkRERkZCMjI4NDEyQUY0MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDqeXfgNTz3Q9BAdzYwPk4SSZJ
s692Z81c81RMC8Vt4gqEwGzuAyE/pUbn5Uo5KqtMukHgKyLtZQJBGHPTVqCDJ02l
S2YQvIsvid2PA2s8OXbmP2DxW/FaUArPWUTUZrGV2JmBrO6CPCwxrbEHL+4hzrmJ
D1tC41yKBUpgDKRtP8WJ3yPAiW+dzhgPaPGyrjeFTkTe9Q4t1jV0zHl00D+ZsT6S
D0O8WnZQOHkDx1wA09cBMMQM6HAcVU0cYOkpv/GSjuGfjfHfURu9R3DcDoDZvqj7
RlX2NAMQx3BPuW+G/FZjAXAiOkhw0Pm93w3OOBuUN8kGOs3rX1FdfDDB2yDxAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU6jKlE7FmPDuPXao/3f+yKEEq9AswHwYDVR0j
BBgwFoAUneMsnJbWMjNYvgVOVw/5qWvV4HEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkRNU3M5SGRKZzNmOWp0SFNURGt2ZWVDOGlkcmg4UGo4aWVpNlhSNHFq
SzcvMC85REUzMkM5Qzk2RDYzMjMzNThCRTA1NEU1NzBGRjlBOTZCRDVFMDcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlERTMyQzlDOTZENjMyMzM1
OEJFMDU0RTU3MEZGOUE5NkJENUUwNzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JETVNzOUhkSmczZjlqdEhTVERrdmVlQzhpZHJoOFBqOGllaTZYUjRxaks3LzAv
MzIzODMwMzQzYTM5MzYzNjM0M2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNzM0
MzMzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASWZDANBgkqhkiG9w0BAQsFAAOCAQEAhIJM/DA8
TCiZCZIt8MNLqRvDDF1S0PVDk/1fkLGikUy4doU3xxb5v5d+xkSTHnnSI3cTLF/P
iIunhP3PIBwWppKZrqY6jZVoP31fjLLnegDWmhJwpb5ZKivSM/b43OuGtxbuAktC
N62+DupoaDMSSHtv9zq+8LYDoSw5X63+ogGmFK76oyhnDgSKtanVK1lPscvIohtZ
zvkENou7zzg9XCHrcURcPNufeKXHovTVIYH4R9wWdEbdlWlCHlYo5+OCYoevq0Tl
tN7duLrz93wOPNZYbobKit9Q4b9JHUP+J81ObP90NLHE7YzgAUMF0g31R28g64IN
GD9r8p9ZY69o7g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:54:17 2025 by rpki-client