Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a3a2f33322d3332203d3e20323634353530.roa
File:                     323830343a323135633a3a2f33322d3332203d3e20323634353530.roa (raw, json)
Hash identifier:          OW2+YnAs99zs3bC3l2nLvu4VOCw41slhQlvq6ceB5kI=
Subject key identifier:   BA:C9:CF:3C:51:9E:17:9E:5F:D6:27:9A:73:C8:3B:CD:0C:5E:95:64
Certificate issuer:       /CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
Certificate serial:       3300E0623D7A4BCBC15535A94BE141D49D515310
Authority key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a3a2f33322d3332203d3e20323634353530.roa
Signing time:             Tue 23 Sep 2025 00:06:03 +0000
ROA not before:           Tue 23 Sep 2025 00:01:03 +0000
ROA not after:            Tue 22 Sep 2026 00:06:03 +0000
asID:                     264550
IP address blocks:        2804:215c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:e0:62:3d:7a:4b:cb:c1:55:35:a9:4b:e1:41:d4:9d:51:53:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
        Validity
            Not Before: Sep 23 00:01:03 2025 GMT
            Not After : Sep 22 00:06:03 2026 GMT
        Subject: CN=BAC9CF3C519E179E5FD6279A73C83BCD0C5E9564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:78:6a:0f:34:ec:f1:45:7d:dd:b7:09:1a:4e:
                    e2:c5:9f:91:d5:1e:71:d2:ad:33:01:fc:72:75:dd:
                    2f:10:c2:73:d5:73:16:77:ce:a4:56:6b:21:97:43:
                    a4:43:54:88:da:bf:b1:ca:c0:12:b1:b0:20:76:dc:
                    51:05:b5:59:ab:17:0c:84:01:ce:2b:f6:04:57:6c:
                    0d:43:7e:f2:0d:c3:05:46:2e:c9:bc:40:34:40:9a:
                    94:e5:00:dd:da:c2:50:64:cb:58:e6:df:30:b9:06:
                    ce:d4:cd:f2:79:e7:9f:98:be:31:07:e5:1c:f6:aa:
                    ab:e2:82:e9:2f:6e:d0:bd:ef:8f:af:da:67:a3:5b:
                    04:7e:d7:7f:aa:ed:7b:fb:2a:7c:75:a0:5a:83:b3:
                    fa:e8:a4:23:11:5c:d4:64:0f:e0:b9:22:a8:f7:84:
                    31:d3:54:d4:e6:f9:70:82:5b:86:d4:e5:6e:7e:27:
                    a7:49:b7:04:14:dc:3d:ff:01:af:6d:b3:39:f4:c1:
                    92:13:2c:e1:e2:ec:12:cc:66:ca:1f:a5:65:ea:ec:
                    e8:cb:be:b2:c3:94:f4:ea:71:c5:cb:ea:0c:f7:11:
                    6e:b6:1c:cd:30:cc:24:06:31:15:a1:dd:07:31:45:
                    68:f0:bd:9e:78:13:a5:7c:39:97:30:d2:92:4d:53:
                    48:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C9:CF:3C:51:9E:17:9E:5F:D6:27:9A:73:C8:3B:CD:0C:5E:95:64
            X509v3 Authority Key Identifier:
                keyid:FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/323830343a323135633a3a2f33322d3332203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:215c::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:00:dd:31:18:45:cd:ae:d1:92:c6:83:4e:71:6b:11:bb:5d:
         a1:ca:84:0e:9c:4d:4f:a0:d5:6b:6a:c9:ff:d6:c3:a3:ea:86:
         f2:d2:7d:fc:ec:fe:82:23:a7:03:b4:10:1d:3c:3a:6c:27:fd:
         2e:8b:cb:44:d0:54:8a:a1:09:b1:82:0d:78:41:4a:0f:06:4c:
         bd:aa:f6:39:df:36:07:c7:59:a6:a4:7d:9b:ee:b0:2d:b3:ff:
         79:5d:d0:0b:e8:64:68:32:67:4c:30:98:4d:d1:ce:39:a9:31:
         ce:35:7f:6d:ca:e6:78:68:aa:0f:cd:05:33:b2:02:66:ea:26:
         d8:2c:3d:ab:a7:a9:1a:eb:9b:b8:06:c9:8b:7a:28:02:a3:37:
         38:bd:91:26:68:74:c7:d2:e7:78:e2:5c:65:ac:1a:ea:d3:d0:
         7a:6a:b5:88:76:1d:f5:29:48:bb:0c:27:a0:cf:2a:f6:72:b4:
         99:6c:3f:ef:e3:46:12:97:8a:19:49:b5:5a:7c:d1:71:0d:f7:
         5b:66:37:b4:f0:41:29:61:21:47:38:67:ed:15:20:58:37:df:
         e0:c5:78:66:ff:b3:8f:5f:74:4f:d4:59:78:07:b5:6f:08:4b:
         5a:95:b6:08:69:55:30:2c:fc:4c:76:72:51:fa:c8:c7:fc:5b:
         bf:3e:f8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:51:32 2025 by rpki-client