Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa
File:                     323830343a333536633a3a2f33322d3332203d3e20323636323835.roa (raw, json)
Hash identifier:          QOy8TTZAZf+2a7D17lhq0HLXE5t3B7z+l7KT3DFDkYY=
Subject key identifier:   10:B2:D3:F6:E0:D2:80:5E:65:EC:CB:A8:38:37:95:F6:E5:44:78:04
Certificate issuer:       /CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
Certificate serial:       0842A84A3A9892F6A1857F1ACEA0CAB5A1C39BAC
Authority key identifier: 4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa
Signing time:             Wed 05 Nov 2025 12:07:36 +0000
ROA not before:           Wed 05 Nov 2025 12:02:36 +0000
ROA not after:            Wed 04 Nov 2026 12:07:36 +0000
asID:                     266285
IP address blocks:        2804:356c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl
                          rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 16:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:42:a8:4a:3a:98:92:f6:a1:85:7f:1a:ce:a0:ca:b5:a1:c3:9b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
        Validity
            Not Before: Nov  5 12:02:36 2025 GMT
            Not After : Nov  4 12:07:36 2026 GMT
        Subject: CN=10B2D3F6E0D2805E65ECCBA8383795F6E5447804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ac:79:05:0c:be:34:60:3d:b8:a1:bd:96:da:
                    8a:54:d8:fc:ba:01:cf:bf:59:e4:e5:91:22:70:15:
                    06:1b:ad:d2:6c:fd:9c:6e:f4:f0:1c:f1:a7:56:da:
                    e0:29:38:e8:5d:e2:ab:59:0d:fd:0d:e3:fa:b9:45:
                    17:d6:50:6c:db:af:d6:cf:66:34:5b:cb:b8:9c:12:
                    b8:a6:ec:42:ae:66:fc:fd:68:de:92:cd:c7:d2:7e:
                    a1:9d:18:0d:ca:59:b1:8f:50:e4:ec:dc:7c:35:cd:
                    95:38:fd:ef:ce:0b:f6:9d:d5:9f:c6:df:e1:86:dd:
                    d5:eb:f8:59:c3:10:54:92:24:cf:31:c3:a4:7c:21:
                    19:43:9a:c2:04:80:43:c1:73:ae:59:f4:16:ae:70:
                    c1:42:0b:b0:e1:5b:31:db:ac:85:98:92:14:57:39:
                    9c:12:73:a0:6f:95:f2:2a:45:6b:ef:6b:27:4f:4a:
                    d2:2c:39:be:37:c4:01:3d:ff:85:58:2a:69:7f:90:
                    b3:a1:23:a7:41:b6:5f:91:5f:03:c2:c4:5d:c1:17:
                    21:3e:d1:52:ce:1a:25:87:7e:bf:98:a1:d5:ff:bb:
                    dd:85:a7:69:93:ee:f2:f4:d0:b7:65:05:a5:f8:d0:
                    d6:e6:14:b7:a1:7c:b4:01:f2:7d:0e:ee:1f:1a:a4:
                    c9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B2:D3:F6:E0:D2:80:5E:65:EC:CB:A8:38:37:95:F6:E5:44:78:04
            X509v3 Authority Key Identifier:
                keyid:4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:356c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:c4:9b:35:99:d5:fd:63:82:0e:5b:1c:27:67:00:f0:81:81:
         2a:77:13:31:92:c0:43:28:e0:31:9b:27:9a:1e:96:c0:d5:98:
         f7:14:4e:fe:35:1d:ee:87:9f:c3:1f:19:87:fa:77:ff:96:28:
         79:e9:6a:57:12:9a:99:19:8a:6a:c9:79:09:9e:c2:82:b9:c0:
         c4:05:ff:ab:31:5e:78:8d:7e:6b:48:cb:55:97:bf:13:60:58:
         93:b1:8c:7d:23:f0:20:de:dd:8d:3e:50:26:da:97:a4:b9:cf:
         08:a9:48:eb:65:1e:25:00:a5:fc:eb:1f:70:66:b5:97:88:95:
         19:13:43:7c:a2:83:b4:89:fb:47:35:d7:48:d0:9b:70:47:5e:
         b8:f0:c5:92:0f:31:86:36:4f:b4:8e:95:3e:de:c0:e4:2c:6a:
         a7:3c:c8:8d:5a:6c:0e:c2:7c:16:09:09:4a:5b:88:43:44:09:
         cb:91:4f:ed:37:11:bc:90:42:92:01:e8:1e:3f:f4:da:27:64:
         25:67:ed:75:f9:60:c2:ac:9d:de:f8:f9:bc:2b:4c:92:32:9c:
         42:08:85:f9:95:f3:0c:6e:4d:b3:96:07:a7:13:de:c1:4c:95:
         d1:71:89:b6:f1:3a:b9:a1:96:b4:56:4c:93:8b:23:7d:c5:a6:
         84:90:f1:7e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCEKoSjqYkvahhX8azqDKtaHDm6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVDQjlCMEIxQjBERkJDQTAxOTc0ODExMDhCMDY4RkY4
NDU2NTVDNjAeFw0yNTExMDUxMjAyMzZaFw0yNjExMDQxMjA3MzZaMDMxMTAvBgNV
BAMTKDEwQjJEM0Y2RTBEMjgwNUU2NUVDQ0JBODM4Mzc5NUY2RTU0NDc4MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrHkFDL40YD24ob2W2opU2Py6
Ac+/WeTlkSJwFQYbrdJs/Zxu9PAc8adW2uApOOhd4qtZDf0N4/q5RRfWUGzbr9bP
ZjRby7icErim7EKuZvz9aN6SzcfSfqGdGA3KWbGPUOTs3Hw1zZU4/e/OC/ad1Z/G
3+GG3dXr+FnDEFSSJM8xw6R8IRlDmsIEgEPBc65Z9BaucMFCC7DhWzHbrIWYkhRX
OZwSc6BvlfIqRWvvaydPStIsOb43xAE9/4VYKml/kLOhI6dBtl+RXwPCxF3BFyE+
0VLOGiWHfr+YodX/u92Fp2mT7vL00LdlBaX40NbmFLehfLQB8n0O7h8apMmbAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUELLT9uDSgF5l7MuoODeV9uVEeAQwHwYDVR0j
BBgwFoAUTsubCxsN+8oBl0gRCLBo/4RWVcYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VGYU02VHMyN1pBZEpmcm9nUHljcjRUTUdyU1g4cHg0Y0hkM3M2dmFK
VW0vMC80RUNCOUIwQjFCMERGQkNBMDE5NzQ4MTEwOEIwNjhGRjg0NTY1NUM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFQ0I5QjBCMUIwREZCQ0Ew
MTk3NDgxMTA4QjA2OEZGODQ1NjU1QzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFRmFNNlRzMjdaQWRKZnJvZ1B5Y3I0VE1HclNYOHB4NGNIZDNzNnZhSlVtLzAv
MzIzODMwMzQzYTMzMzUzNjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzIzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQ1bDANBgkqhkiG9w0BAQsFAAOCAQEAHMSbNZnV
/WOCDlscJ2cA8IGBKncTMZLAQyjgMZsnmh6WwNWY9xRO/jUd7oefwx8Zh/p3/5Yo
eelqVxKamRmKasl5CZ7CgrnAxAX/qzFeeI1+a0jLVZe/E2BYk7GMfSPwIN7djT5Q
JtqXpLnPCKlI62UeJQCl/OsfcGa1l4iVGRNDfKKDtIn7RzXXSNCbcEdeuPDFkg8x
hjZPtI6VPt7A5CxqpzzIjVpsDsJ8FgkJSluIQ0QJy5FP7TcRvJBCkgHoHj/02idk
JWftdflgwqyd3vj5vCtMkjKcQgiF+ZXzDG5Ns5YHpxPewUyV0XGJtvE6uaGWtFZM
k4sjfcWmhJDxfg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:10 2025 by rpki-client