Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/323830343a363135343a3a2f33322d3438203d3e20323639323238.roa
File:                     323830343a363135343a3a2f33322d3438203d3e20323639323238.roa (raw, json)
Hash identifier:          vyGmFXTs4h1lq4SeIeMGMc79Jv6HDKCiHSONkYlFNsA=
Subject key identifier:   67:42:7B:3B:AD:E1:FD:8A:C6:5B:33:42:EF:34:F8:F1:80:35:5E:02
Certificate issuer:       /CN=E430529EE7A72E95EA5AAB0120C531BD4CDC79DF
Certificate serial:       579440A8A62CD22AF7E02D24F247052EE96BEE31
Authority key identifier: E4:30:52:9E:E7:A7:2E:95:EA:5A:AB:01:20:C5:31:BD:4C:DC:79:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/323830343a363135343a3a2f33322d3438203d3e20323639323238.roa
Signing time:             Tue 14 Oct 2025 02:24:46 +0000
ROA not before:           Tue 14 Oct 2025 02:19:46 +0000
ROA not after:            Tue 13 Oct 2026 02:24:46 +0000
asID:                     269228
IP address blocks:        2804:6154::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.crl
                          rsync://rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:94:40:a8:a6:2c:d2:2a:f7:e0:2d:24:f2:47:05:2e:e9:6b:ee:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E430529EE7A72E95EA5AAB0120C531BD4CDC79DF
        Validity
            Not Before: Oct 14 02:19:46 2025 GMT
            Not After : Oct 13 02:24:46 2026 GMT
        Subject: CN=67427B3BADE1FD8AC65B3342EF34F8F180355E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:71:b9:03:2c:d5:76:e8:0a:6b:dc:36:fb:
                    31:68:50:f8:ec:5b:0d:62:ef:5d:be:6f:8d:78:e4:
                    27:be:d4:2a:3d:e0:9e:7e:e0:d2:69:37:8a:b0:fd:
                    8a:30:c4:18:3b:2c:9c:bb:84:a8:e2:87:7f:71:7b:
                    47:f5:f9:66:8a:2d:a0:67:37:5b:79:f2:81:5f:23:
                    d5:d1:8e:86:de:19:51:98:5c:b1:1a:86:29:6a:5b:
                    e5:fd:9b:10:51:f7:b3:f8:f6:ec:5d:7d:e0:bc:ee:
                    29:04:5a:29:bd:08:a4:94:21:7c:eb:29:e8:01:e5:
                    4a:ab:7a:c5:e1:ea:2a:b9:71:bf:95:3f:39:d5:11:
                    0e:c1:c0:fd:dc:55:bc:ad:32:33:76:bc:b1:b7:8b:
                    e8:3d:f5:0f:3b:76:39:5f:dd:0e:80:ea:91:b4:62:
                    4c:07:ba:29:65:ce:50:95:df:1c:24:7c:28:2e:fc:
                    92:40:46:ff:8b:18:74:e5:32:64:53:7b:74:8a:40:
                    9c:2d:18:62:7e:d4:e0:10:ef:ce:75:00:84:81:3a:
                    1e:dd:1d:02:e9:54:39:dd:64:32:8c:da:cb:28:04:
                    90:65:ff:8d:e8:fc:f3:4e:53:6b:1a:b6:99:0d:73:
                    cc:de:01:b7:64:62:57:84:5e:d8:8d:47:a0:0e:6e:
                    f3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:42:7B:3B:AD:E1:FD:8A:C6:5B:33:42:EF:34:F8:F1:80:35:5E:02
            X509v3 Authority Key Identifier:
                keyid:E4:30:52:9E:E7:A7:2E:95:EA:5A:AB:01:20:C5:31:BD:4C:DC:79:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E430529EE7A72E95EA5AAB0120C531BD4CDC79DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2y91LDns7dY41mn2rNYtE5o7VESA25U7CmUQs1QBwjaE/0/323830343a363135343a3a2f33322d3438203d3e20323639323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6154::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:95:e8:01:de:43:f4:da:05:a9:79:bc:34:ac:f9:c0:dd:
         80:bb:61:c1:0d:f1:86:bd:28:60:97:e2:c1:d5:42:4e:1c:e0:
         19:31:1c:6f:30:b2:01:2e:a7:0f:7b:16:f4:7e:e0:ba:91:3c:
         bf:2f:63:f6:68:c5:c4:50:40:d8:b0:90:05:a6:21:5e:20:3b:
         2b:aa:f8:17:d1:72:be:0c:66:77:43:4b:8c:2f:d0:10:f2:d7:
         15:7b:7c:6e:45:06:b4:f6:39:f5:e4:dc:eb:43:83:46:1c:81:
         55:6e:f9:29:60:6e:a8:22:bd:26:e0:af:fc:e6:d8:6e:17:25:
         7f:b0:d5:6c:7b:2c:d1:52:0d:aa:6d:75:b4:bc:3b:c0:21:af:
         0d:fe:58:62:1f:84:d6:f2:88:0c:f3:3c:06:bf:fe:ac:78:4d:
         d6:c6:4d:b0:f3:8e:91:9e:44:cb:dc:12:21:28:b7:26:eb:5a:
         b4:9f:40:e1:08:f6:26:5e:a3:01:13:e9:63:3b:bc:69:71:b1:
         ae:fa:c7:63:ff:3f:1b:dd:46:70:b6:0a:f0:a7:6a:bd:35:65:
         f9:09:b8:e9:cd:51:32:4d:7a:b8:f4:05:ff:d5:d6:10:bc:a1:
         14:8b:3b:a8:28:36:4b:1d:b6:b3:9e:5a:ca:66:89:2d:2b:e8:
         dc:f3:42:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:27 2025 by rpki-client