Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a3a2f33332d3333203d3e20323634313337.roa
File:                     323830343a323330343a3a2f33332d3333203d3e20323634313337.roa (raw, json)
Hash identifier:          HNOchUU0Fjcqj8QeYD4T2ExldIQOykfQxLiYJsttSTc=
Subject key identifier:   31:FA:F8:E4:E5:17:50:16:37:3D:60:21:24:3B:1A:56:36:5C:68:7D
Certificate issuer:       /CN=4D619024AD8A4913FDD5314422929A34F6B4B740
Certificate serial:       04E4D56C6572989E707A29D6823E37A69EDF8745
Authority key identifier: 4D:61:90:24:AD:8A:49:13:FD:D5:31:44:22:92:9A:34:F6:B4:B7:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D619024AD8A4913FDD5314422929A34F6B4B740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a3a2f33332d3333203d3e20323634313337.roa
Signing time:             Tue 04 Nov 2025 12:18:35 +0000
ROA not before:           Tue 04 Nov 2025 12:13:35 +0000
ROA not after:            Tue 03 Nov 2026 12:18:35 +0000
asID:                     264137
IP address blocks:        2804:2304::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/4D619024AD8A4913FDD5314422929A34F6B4B740.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/4D619024AD8A4913FDD5314422929A34F6B4B740.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D619024AD8A4913FDD5314422929A34F6B4B740.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 15:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e4:d5:6c:65:72:98:9e:70:7a:29:d6:82:3e:37:a6:9e:df:87:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D619024AD8A4913FDD5314422929A34F6B4B740
        Validity
            Not Before: Nov  4 12:13:35 2025 GMT
            Not After : Nov  3 12:18:35 2026 GMT
        Subject: CN=31FAF8E4E5175016373D6021243B1A56365C687D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e0:d8:a8:72:15:54:33:00:58:38:00:4b:fa:
                    20:23:86:9b:38:d8:14:d8:21:92:d2:55:8d:fb:cd:
                    01:c6:78:b8:ac:04:7a:69:07:f5:fd:98:ef:c7:52:
                    08:c1:77:44:3f:9b:d2:7d:ff:a7:07:25:e2:4b:ec:
                    7d:26:7e:87:90:a5:a6:6c:50:00:ba:45:06:db:4d:
                    9a:48:05:28:db:b2:9e:c4:b5:15:ce:97:a5:43:11:
                    38:42:d0:85:33:8b:fd:98:93:78:e1:24:85:b6:32:
                    6b:80:69:22:cf:3d:b6:de:8c:85:c7:4c:40:d9:26:
                    8c:74:22:a1:98:8a:ad:e3:6c:65:75:0c:b2:a2:f5:
                    be:20:86:b6:e9:4e:60:c5:aa:a7:61:e5:5b:62:5c:
                    42:6e:e4:af:51:84:79:35:7f:72:8a:48:1e:35:6f:
                    60:01:ac:cd:2d:8e:36:75:00:be:96:8b:16:92:7e:
                    10:d6:e0:0c:9c:15:02:04:80:0b:03:1f:0d:d1:6c:
                    79:b8:77:ec:64:17:19:8c:0d:ae:b0:eb:f2:92:24:
                    b1:d0:ba:b8:34:6d:e9:b8:8b:19:e2:b9:fc:63:ec:
                    75:b2:f7:b3:ef:f8:d8:bc:c8:44:ce:ac:e4:a2:8a:
                    df:0f:8c:8f:e4:f6:ec:3d:c6:df:93:90:f7:6d:75:
                    d1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FA:F8:E4:E5:17:50:16:37:3D:60:21:24:3B:1A:56:36:5C:68:7D
            X509v3 Authority Key Identifier:
                keyid:4D:61:90:24:AD:8A:49:13:FD:D5:31:44:22:92:9A:34:F6:B4:B7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/4D619024AD8A4913FDD5314422929A34F6B4B740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D619024AD8A4913FDD5314422929A34F6B4B740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a3a2f33332d3333203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304::/33

    Signature Algorithm: sha256WithRSAEncryption
         79:57:13:66:8e:10:ce:7f:d6:05:f1:44:79:83:2f:2a:fc:2f:
         f1:35:f1:9c:97:59:cd:be:f9:24:a0:d6:97:c1:71:57:9f:08:
         4e:56:8e:59:63:be:47:e8:2d:56:3e:35:da:fe:b9:b1:00:34:
         7a:49:f5:64:17:9d:4a:7e:bd:36:be:53:32:a3:09:30:ca:09:
         eb:5f:66:40:30:c4:06:ac:1a:d9:4f:a9:0f:0a:2a:39:03:7e:
         2b:66:ec:9c:7f:1f:db:c7:cd:0a:a6:97:aa:13:0a:99:c5:ae:
         0d:a1:4d:91:2d:50:03:ea:8c:f1:2e:f4:ca:26:c8:da:3d:f3:
         5f:ad:4d:ff:03:13:d3:9e:7e:73:0e:c0:69:77:d4:3e:b7:e3:
         68:8b:ef:ea:e5:17:19:0d:90:62:38:3a:7e:77:ab:12:a6:51:
         52:bd:9e:bb:92:bf:7d:91:77:7d:c6:93:82:6d:76:2c:45:53:
         35:dc:1d:c7:19:73:53:af:3b:2f:84:cc:7a:b0:00:d0:35:b0:
         2c:28:e8:3d:5c:e9:d4:98:97:23:bd:0e:27:14:27:e7:18:a8:
         c0:f4:9a:b0:fe:2c:ad:85:e9:f2:1a:be:04:e5:ab:1d:2a:d6:
         19:1c:9e:1d:55:b1:12:e8:57:d8:d9:78:5e:96:29:6c:df:b0:
         a1:83:5c:cb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBOTVbGVymJ5weinWgj43pp7fh0UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ2MTkwMjRBRDhBNDkxM0ZERDUzMTQ0MjI5MjlBMzRG
NkI0Qjc0MDAeFw0yNTExMDQxMjEzMzVaFw0yNjExMDMxMjE4MzVaMDMxMTAvBgNV
BAMTKDMxRkFGOEU0RTUxNzUwMTYzNzNENjAyMTI0M0IxQTU2MzY1QzY4N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR4NiochVUMwBYOABL+iAjhps4
2BTYIZLSVY37zQHGeLisBHppB/X9mO/HUgjBd0Q/m9J9/6cHJeJL7H0mfoeQpaZs
UAC6RQbbTZpIBSjbsp7EtRXOl6VDEThC0IUzi/2Yk3jhJIW2MmuAaSLPPbbejIXH
TEDZJox0IqGYiq3jbGV1DLKi9b4ghrbpTmDFqqdh5VtiXEJu5K9RhHk1f3KKSB41
b2ABrM0tjjZ1AL6WixaSfhDW4AycFQIEgAsDHw3RbHm4d+xkFxmMDa6w6/KSJLHQ
urg0bem4ixniufxj7HWy97Pv+Ni8yETOrOSiit8PjI/k9uw9xt+TkPdtddHtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMfr45OUXUBY3PWAhJDsaVjZcaH0wHwYDVR0j
BBgwFoAUTWGQJK2KSRP91TFEIpKaNPa0t0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE5RdVhBWFcxN3hSODQxdjlCYzVRbTVGZTZYRkNwQ3hjblllc3FhRm10
WXQvMC80RDYxOTAyNEFEOEE0OTEzRkRENTMxNDQyMjkyOUEzNEY2QjRCNzQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRENjE5MDI0QUQ4QTQ5MTNG
REQ1MzE0NDIyOTI5QTM0RjZCNEI3NDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ROUXVYQVhXMTd4Ujg0MXY5QmM1UW01RmU2WEZDcEN4Y25ZZXNxYUZtdFl0LzAv
MzIzODMwMzQzYTMyMzMzMDM0M2EzYTJmMzMzMzJkMzMzMzIwM2QzZTIwMzIzNjM0
MzEzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYHKAQjBAAwDQYJKoZIhvcNAQELBQADggEBAHlXE2aO
EM5/1gXxRHmDLyr8L/E18ZyXWc2++SSg1pfBcVefCE5WjlljvkfoLVY+Ndr+ubEA
NHpJ9WQXnUp+vTa+UzKjCTDKCetfZkAwxAasGtlPqQ8KKjkDfitm7Jx/H9vHzQqm
l6oTCpnFrg2hTZEtUAPqjPEu9MomyNo981+tTf8DE9OefnMOwGl31D6342iL7+rl
FxkNkGI4On53qxKmUVK9nruSv32Rd33Gk4JtdixFUzXcHccZc1OvOy+EzHqwANA1
sCwo6D1c6dSYlyO9DicUJ+cYqMD0mrD+LK2F6fIavgTlqx0q1hkcnh1VsRLoV9jZ
eF6WKWzfsKGDXMs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:22:16 2025 by rpki-client