Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/323830343a333764343a3a2f33322d3332203d3e20323636343338.roa
File:                     323830343a333764343a3a2f33322d3332203d3e20323636343338.roa (raw, json)
Hash identifier:          AfpHda4xEc+NoTn8Vz/aFanu82GE8ctz43YffJPthiM=
Subject key identifier:   C8:05:40:B7:7F:B1:30:2D:EF:2E:88:C2:8B:63:9A:7F:5C:DF:DB:FA
Certificate issuer:       /CN=ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5
Certificate serial:       72B1DBF1AA14E98E7B434858FC953279665E34D8
Authority key identifier: AC:D4:8B:6E:7C:51:9F:43:E7:54:0B:9C:98:95:DC:4F:5E:B6:C3:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/323830343a333764343a3a2f33322d3332203d3e20323636343338.roa
Signing time:             Wed 22 Oct 2025 21:43:24 +0000
ROA not before:           Wed 22 Oct 2025 21:38:24 +0000
ROA not after:            Wed 21 Oct 2026 21:43:24 +0000
asID:                     266438
IP address blocks:        2804:37d4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.crl
                          rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 01:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b1:db:f1:aa:14:e9:8e:7b:43:48:58:fc:95:32:79:66:5e:34:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5
        Validity
            Not Before: Oct 22 21:38:24 2025 GMT
            Not After : Oct 21 21:43:24 2026 GMT
        Subject: CN=C80540B77FB1302DEF2E88C28B639A7F5CDFDBFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:e6:41:d3:b5:28:bd:d6:7b:6c:16:2c:48:
                    03:91:ae:2d:52:d9:f0:fa:c0:ab:89:d5:8d:5f:fb:
                    38:20:24:b5:79:3b:42:91:4d:9a:79:b7:3a:72:8b:
                    d1:9e:34:5a:b6:90:44:15:e7:45:73:ac:e7:27:bd:
                    c3:d8:6d:68:80:1c:cb:03:e1:af:94:7e:a3:5c:e9:
                    e6:c9:dc:a5:71:32:bd:aa:55:04:ef:a5:1f:ae:6d:
                    73:00:81:f8:9a:dc:c3:2d:23:f8:93:7f:43:76:5f:
                    b1:7f:c6:32:d2:c1:61:5d:d0:12:ec:37:a2:28:07:
                    66:f5:15:2b:8c:55:53:60:d4:a6:64:25:89:00:26:
                    34:6e:67:77:39:1a:b4:20:fe:f7:4d:9b:50:07:f4:
                    2f:70:a6:ec:ea:de:1a:04:16:8f:43:f6:7d:a7:d7:
                    c7:03:2b:de:4a:80:07:bf:e5:2e:91:68:f7:0b:02:
                    2a:d9:d0:90:b3:41:f4:63:84:18:78:9e:90:d8:15:
                    f0:52:54:ae:b0:79:81:e7:13:03:f7:07:e5:32:77:
                    bf:13:e3:4d:6b:7b:d6:d2:11:bc:61:45:86:bf:44:
                    ac:7b:5c:7e:39:3a:27:7a:59:29:72:af:34:f7:b3:
                    6b:26:26:67:f8:b3:b0:7d:ca:25:59:eb:3c:21:74:
                    6b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:05:40:B7:7F:B1:30:2D:EF:2E:88:C2:8B:63:9A:7F:5C:DF:DB:FA
            X509v3 Authority Key Identifier:
                keyid:AC:D4:8B:6E:7C:51:9F:43:E7:54:0B:9C:98:95:DC:4F:5E:B6:C3:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACD48B6E7C519F43E7540B9C9895DC4F5EB6C3B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiEp7N6JaFdddC5PcZ6KB9kLUM9PtZ1VDR5bfTaZQyLv/0/323830343a333764343a3a2f33322d3332203d3e20323636343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:af:5f:8e:34:04:30:fd:29:6a:7b:0c:db:4f:d1:f6:83:69:
         cf:2d:c3:a7:3e:ef:16:c5:7f:cc:ca:eb:6c:a4:0a:af:b1:23:
         80:dd:90:fb:6d:e8:ec:27:01:db:16:92:97:60:9c:7f:49:6d:
         83:fa:e0:ca:8f:2e:c6:44:e1:46:7d:9c:7b:02:8c:51:43:0b:
         48:a1:92:ea:32:b3:7f:13:54:fc:92:f4:33:20:7c:c7:99:57:
         44:fb:3b:f3:b8:8c:a3:39:60:17:d5:7d:d8:22:e6:1a:dc:9c:
         24:a0:9e:ba:74:b9:dc:01:be:a3:4d:e2:62:e3:cb:83:04:b8:
         43:2b:41:75:5d:76:c6:e4:14:2f:bf:64:41:3d:52:db:c3:76:
         29:06:18:72:42:ec:80:71:7d:ee:e2:68:12:d6:eb:d3:50:4e:
         4e:d9:d9:75:fb:4d:34:06:a7:fa:74:c6:4d:84:d3:7e:fc:d3:
         d8:b7:80:1e:8b:0f:d5:12:73:75:b0:49:1a:62:f3:cb:89:c5:
         26:ee:6d:b3:c7:1c:07:fb:27:4a:0b:6b:71:dc:0f:0b:6a:e5:
         1e:c4:d3:19:e3:d2:76:60:4f:19:88:bf:1e:27:d7:c2:79:fb:
         3d:42:43:f0:fc:38:df:d7:85:45:2a:e6:ca:be:0d:fa:c2:2d:
         6c:a0:36:0b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcrHb8aoU6Y57Q0hY/JUyeWZeNNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNENDhCNkU3QzUxOUY0M0U3NTQwQjlDOTg5NURDNEY1
RUI2QzNCNTAeFw0yNTEwMjIyMTM4MjRaFw0yNjEwMjEyMTQzMjRaMDMxMTAvBgNV
BAMTKEM4MDU0MEI3N0ZCMTMwMkRFRjJFODhDMjhCNjM5QTdGNUNERkRCRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChe+ZB07UovdZ7bBYsSAORri1S
2fD6wKuJ1Y1f+zggJLV5O0KRTZp5tzpyi9GeNFq2kEQV50VzrOcnvcPYbWiAHMsD
4a+UfqNc6ebJ3KVxMr2qVQTvpR+ubXMAgfia3MMtI/iTf0N2X7F/xjLSwWFd0BLs
N6IoB2b1FSuMVVNg1KZkJYkAJjRuZ3c5GrQg/vdNm1AH9C9wpuzq3hoEFo9D9n2n
18cDK95KgAe/5S6RaPcLAirZ0JCzQfRjhBh4npDYFfBSVK6weYHnEwP3B+Uyd78T
401re9bSEbxhRYa/RKx7XH45Oid6WSlyrzT3s2smJmf4s7B9yiVZ6zwhdGvlAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUyAVAt3+xMC3vLojCi2Oaf1zf2/owHwYDVR0j
BBgwFoAUrNSLbnxRn0PnVAucmJXcT162w7UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmlFcDdONkphRmRkZEM1UGNaNktCOWtMVU05UHRaMVZEUjViZlRhWlF5
THYvMC9BQ0Q0OEI2RTdDNTE5RjQzRTc1NDBCOUM5ODk1REM0RjVFQjZDM0I1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDRDQ4QjZFN0M1MTlGNDNF
NzU0MEI5Qzk4OTVEQzRGNUVCNkMzQjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZpRXA3TjZKYUZkZGRDNVBjWjZLQjlrTFVNOVB0WjFWRFI1YmZUYVpReUx2LzAv
MzIzODMwMzQzYTMzMzc2NDM0M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzQzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ31DANBgkqhkiG9w0BAQsFAAOCAQEAlK9fjjQE
MP0pansM20/R9oNpzy3Dpz7vFsV/zMrrbKQKr7EjgN2Q+23o7CcB2xaSl2Ccf0lt
g/rgyo8uxkThRn2cewKMUUMLSKGS6jKzfxNU/JL0MyB8x5lXRPs787iMozlgF9V9
2CLmGtycJKCeunS53AG+o03iYuPLgwS4QytBdV12xuQUL79kQT1S28N2KQYYckLs
gHF97uJoEtbr01BOTtnZdftNNAan+nTGTYTTfvzT2LeAHosP1RJzdbBJGmLzy4nF
Ju5ts8ccB/snSgtrcdwPC2rlHsTTGePSdmBPGYi/HifXwnn7PUJD8Pw439eFRSrm
yr4N+sItbKA2Cw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:21:46 2025 by rpki-client