Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/323830343a326263303a3a2f33322d3332203d3e20323635313733.roa
File:                     323830343a326263303a3a2f33322d3332203d3e20323635313733.roa (raw, json)
Hash identifier:          qlnQpU73FbSXznUJHCT77htNnJtXlni/QbqOTtQBAV4=
Subject key identifier:   00:6A:19:16:93:5C:B5:C9:A7:7E:BE:C7:7F:C3:3A:D9:3C:B3:F1:E5
Certificate issuer:       /CN=F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA
Certificate serial:       21533E60FB2DC3E29F3A94D13F4E0758F51DF7C7
Authority key identifier: F3:0F:D2:44:C9:8A:98:EC:9B:A0:BD:ED:7B:EF:20:DD:31:ED:58:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/323830343a326263303a3a2f33322d3332203d3e20323635313733.roa
Signing time:             Thu 23 Oct 2025 18:27:06 +0000
ROA not before:           Thu 23 Oct 2025 18:22:06 +0000
ROA not after:            Thu 22 Oct 2026 18:27:06 +0000
asID:                     265173
IP address blocks:        2804:2bc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl
                          rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 21:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:53:3e:60:fb:2d:c3:e2:9f:3a:94:d1:3f:4e:07:58:f5:1d:f7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA
        Validity
            Not Before: Oct 23 18:22:06 2025 GMT
            Not After : Oct 22 18:27:06 2026 GMT
        Subject: CN=006A1916935CB5C9A77EBEC77FC33AD93CB3F1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a2:05:e2:c4:ec:7b:d2:e0:62:c9:02:32:25:
                    dc:99:db:8e:a2:25:f1:81:fa:c8:07:20:38:c9:03:
                    62:9c:85:f0:81:11:73:2b:a7:29:cc:7f:2a:d2:5f:
                    4b:9e:75:78:2d:33:4d:bf:6c:27:a9:e3:27:74:4a:
                    69:ac:d6:d9:84:d1:ba:ea:d6:ab:4a:fb:49:cc:fa:
                    ec:bd:9f:3c:5b:48:49:7f:62:00:ae:10:15:51:68:
                    b4:dc:7b:58:68:40:cc:28:0b:85:71:5c:5d:9d:62:
                    af:3b:6f:d0:96:46:f1:f0:15:df:98:fd:b5:0d:10:
                    06:1d:76:ad:b4:d7:91:b2:5f:9b:f5:63:8c:4f:78:
                    2e:c4:a1:2b:dd:85:94:0c:30:f4:b2:2f:6c:07:5e:
                    59:6d:d0:7e:6a:84:b5:6c:9f:8e:f9:75:9e:5e:15:
                    29:7c:53:7b:c7:f2:ee:d4:69:56:cb:a3:57:fd:ec:
                    61:eb:0a:9b:47:22:a4:ed:e5:bd:ac:9b:76:94:8e:
                    90:01:01:01:0a:d7:40:41:e8:d9:b8:f4:3a:5b:88:
                    a1:51:e9:52:f7:8f:fe:12:9b:77:d5:5d:17:a0:68:
                    9c:41:4c:83:e2:bd:ab:d8:ea:ca:05:a7:b6:59:25:
                    2d:21:5b:88:49:f2:5f:a3:67:ed:b6:fd:8e:39:e5:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6A:19:16:93:5C:B5:C9:A7:7E:BE:C7:7F:C3:3A:D9:3C:B3:F1:E5
            X509v3 Authority Key Identifier:
                keyid:F3:0F:D2:44:C9:8A:98:EC:9B:A0:BD:ED:7B:EF:20:DD:31:ED:58:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/323830343a326263303a3a2f33322d3332203d3e20323635313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:b7:0f:81:b7:bd:2b:f4:f1:9e:7d:9f:85:cf:85:bf:d0:fa:
         a7:35:70:e3:9c:e3:33:45:bf:5d:35:e4:23:e8:2f:13:8e:26:
         a0:23:52:72:e6:57:97:a7:39:09:76:71:71:90:ce:77:c5:39:
         0c:13:24:da:93:a2:52:a1:89:08:8c:12:de:47:f2:1f:fa:e8:
         db:bb:f0:48:d5:73:f0:ae:85:0e:33:10:9d:f6:35:03:b0:cf:
         40:53:47:c1:c0:65:73:b3:72:91:f0:68:7e:ce:9e:4e:7f:b0:
         34:55:ed:fd:7a:a8:76:dc:62:e2:7f:97:f9:5a:be:fe:60:58:
         b3:20:c6:91:1e:48:12:85:d6:a8:5e:e0:d7:1a:32:10:5a:7e:
         97:6b:67:19:28:f2:a5:75:77:cd:db:4b:64:e4:ed:f9:e2:34:
         a6:92:18:47:ff:6b:5f:f1:4c:3a:07:74:14:04:51:a3:e9:2e:
         bd:04:e1:e4:d9:fc:39:4f:0a:6a:da:76:9a:d1:c9:d9:a7:80:
         54:1a:b1:bb:3c:6e:e5:1e:c8:64:ee:cc:90:b8:af:8b:66:99:
         29:2a:5f:70:44:cc:bd:56:b5:45:50:73:ec:b4:1e:45:18:e7:
         89:fe:31:ea:27:75:bb:b1:d4:5a:b1:bf:49:f2:63:72:0d:8a:
         60:0e:6c:19
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUIVM+YPstw+KfOpTRP04HWPUd98cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMwRkQyNDRDOThBOThFQzlCQTBCREVEN0JFRjIwREQz
MUVENThDQTAeFw0yNTEwMjMxODIyMDZaFw0yNjEwMjIxODI3MDZaMDMxMTAvBgNV
BAMTKDAwNkExOTE2OTM1Q0I1QzlBNzdFQkVDNzdGQzMzQUQ5M0NCM0YxRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIogXixOx70uBiyQIyJdyZ246i
JfGB+sgHIDjJA2KchfCBEXMrpynMfyrSX0uedXgtM02/bCep4yd0Smms1tmE0brq
1qtK+0nM+uy9nzxbSEl/YgCuEBVRaLTce1hoQMwoC4VxXF2dYq87b9CWRvHwFd+Y
/bUNEAYddq2015GyX5v1Y4xPeC7EoSvdhZQMMPSyL2wHXllt0H5qhLVsn475dZ5e
FSl8U3vH8u7UaVbLo1f97GHrCptHIqTt5b2sm3aUjpABAQEK10BB6Nm49DpbiKFR
6VL3j/4Sm3fVXRegaJxBTIPivavY6soFp7ZZJS0hW4hJ8l+jZ+22/Y455dQfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUAGoZFpNctcmnfr7Hf8M62Tyz8eUwHwYDVR0j
BBgwFoAU8w/SRMmKmOyboL3te+8g3THtWMowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEJoZnZLZ0hwTWVoRVg3RFNucUtXelpoNlRCV1NhNXlzRFFLU1lVM2F1
cUUvMC9GMzBGRDI0NEM5OEE5OEVDOUJBMEJERUQ3QkVGMjBERDMxRUQ1OENBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzMEZEMjQ0Qzk4QTk4RUM5
QkEwQkRFRDdCRUYyMEREMzFFRDU4Q0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hCaGZ2S2dIcE1laEVYN0RTbnFLV3paaDZUQldTYTV5c0RRS1NZVTNhdXFFLzAv
MzIzODMwMzQzYTMyNjI2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM1
MzEzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQrwDANBgkqhkiG9w0BAQsFAAOCAQEAMrcPgbe9
K/Txnn2fhc+Fv9D6pzVw45zjM0W/XTXkI+gvE44moCNScuZXl6c5CXZxcZDOd8U5
DBMk2pOiUqGJCIwS3kfyH/ro27vwSNVz8K6FDjMQnfY1A7DPQFNHwcBlc7NykfBo
fs6eTn+wNFXt/Xqodtxi4n+X+Vq+/mBYsyDGkR5IEoXWqF7g1xoyEFp+l2tnGSjy
pXV3zdtLZOTt+eI0ppIYR/9rX/FMOgd0FARRo+kuvQTh5Nn8OU8Katp2mtHJ2aeA
VBqxuzxu5R7IZO7MkLivi2aZKSpfcETMvVa1RVBz7LQeRRjnif4x6id1u7HUWrG/
SfJjcg2KYA5sGQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:13:06 2025 by rpki-client