Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/323830343a356237633a3a2f33322d3438203d3e20323638383438.roa
File:                     323830343a356237633a3a2f33322d3438203d3e20323638383438.roa (raw, json)
Hash identifier:          Jl9QHifEsvuZQK2uT1+jBvZxEVH011ywanvQWUZ5Hwc=
Subject key identifier:   B0:EA:C5:A6:B5:C6:8D:5D:D9:48:73:16:C6:EB:4B:FB:F9:57:0A:F8
Certificate issuer:       /CN=75A5078D41E4C1C7E37424F8948507D935297BBD
Certificate serial:       68AB9CF63E914E151AF66C2CD3D72D2763B6C080
Authority key identifier: 75:A5:07:8D:41:E4:C1:C7:E3:74:24:F8:94:85:07:D9:35:29:7B:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A5078D41E4C1C7E37424F8948507D935297BBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/323830343a356237633a3a2f33322d3438203d3e20323638383438.roa
Signing time:             Mon 29 Sep 2025 16:54:58 +0000
ROA not before:           Mon 29 Sep 2025 16:49:58 +0000
ROA not after:            Mon 28 Sep 2026 16:54:58 +0000
asID:                     268848
IP address blocks:        2804:5b7c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/75A5078D41E4C1C7E37424F8948507D935297BBD.crl
                          rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/75A5078D41E4C1C7E37424F8948507D935297BBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A5078D41E4C1C7E37424F8948507D935297BBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ab:9c:f6:3e:91:4e:15:1a:f6:6c:2c:d3:d7:2d:27:63:b6:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75A5078D41E4C1C7E37424F8948507D935297BBD
        Validity
            Not Before: Sep 29 16:49:58 2025 GMT
            Not After : Sep 28 16:54:58 2026 GMT
        Subject: CN=B0EAC5A6B5C68D5DD9487316C6EB4BFBF9570AF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:af:cd:74:1f:6f:ee:77:7f:62:ac:0f:96:
                    22:c3:28:69:2c:2b:96:0b:10:33:da:f3:ec:ec:37:
                    33:84:6e:e0:4b:85:c0:95:28:2b:24:d6:7a:a9:8f:
                    81:c3:3f:b8:e1:93:ff:f3:90:ce:34:7c:fc:c9:4e:
                    c1:26:6f:21:89:9d:5c:26:ec:08:b1:71:58:c4:d5:
                    27:d5:14:78:19:71:b2:0e:98:88:96:6c:aa:dd:7a:
                    85:9e:e6:de:28:78:52:ec:1b:d2:20:eb:33:a6:1e:
                    e2:57:c2:f6:3e:25:c3:ff:32:03:16:7d:c7:61:30:
                    3f:7d:bd:4a:5f:cc:f8:c2:c6:93:ca:f4:84:5f:bd:
                    7a:e4:88:80:de:5b:ce:f7:29:6e:17:7e:59:20:f6:
                    f5:64:c8:76:b6:e2:10:ec:5c:3f:a0:08:ef:aa:a9:
                    c5:fd:37:2a:90:a5:f1:a4:66:c7:e5:cc:36:ea:5f:
                    f0:bb:48:a2:e1:60:ff:db:1c:79:df:13:3d:fe:70:
                    83:da:3d:bd:5d:52:cf:a5:12:e0:20:15:e1:26:64:
                    5e:cf:f3:4d:b7:af:c0:14:f7:9b:be:2f:84:47:e7:
                    27:8a:c8:4a:e3:ea:61:42:04:15:5a:78:b2:8b:7c:
                    ff:88:32:14:73:78:f1:0e:58:b7:29:c4:72:68:72:
                    f4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EA:C5:A6:B5:C6:8D:5D:D9:48:73:16:C6:EB:4B:FB:F9:57:0A:F8
            X509v3 Authority Key Identifier:
                keyid:75:A5:07:8D:41:E4:C1:C7:E3:74:24:F8:94:85:07:D9:35:29:7B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/75A5078D41E4C1C7E37424F8948507D935297BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A5078D41E4C1C7E37424F8948507D935297BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Wx91dLKHnWXWey8tuaz9RcJ9rg8ZuU9Yer5pnn6mtvC/0/323830343a356237633a3a2f33322d3438203d3e20323638383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:7b:95:98:6e:43:f6:c6:69:82:1b:af:4b:94:5f:c6:c4:d7:
         dc:fd:b3:62:c0:f5:f9:a8:58:f2:17:6d:a5:bc:63:e8:ce:32:
         16:de:f4:05:80:cb:2f:95:ea:d1:5b:6c:f9:9a:1f:12:da:d5:
         32:96:c0:d7:b1:1a:a6:93:75:fb:99:c3:cf:c5:b5:35:4d:60:
         3a:e1:56:60:d4:ca:d7:ff:1a:03:08:64:9d:9e:2e:ed:29:c6:
         95:39:49:40:15:87:58:f3:5b:38:90:15:f8:c4:a7:91:09:cc:
         aa:9d:ee:f2:bc:9e:1d:b4:ab:40:4f:03:7e:92:c6:c1:11:36:
         36:41:ba:5c:08:8a:7f:39:ed:d3:4b:77:82:b6:61:89:39:35:
         b3:6f:c7:e3:e9:70:b6:15:76:1a:1a:cd:11:d3:80:2b:5d:77:
         1e:34:1e:f1:61:fc:90:93:13:3f:8d:9c:9b:0c:4d:58:4a:1a:
         ec:82:75:94:6d:47:41:c3:ec:70:12:99:cb:bf:df:ef:79:17:
         65:e3:5a:80:52:8d:d4:94:39:e9:dc:d9:13:af:1f:f6:37:68:
         71:73:74:26:63:60:7b:71:57:c2:2e:d0:ca:22:93:07:50:33:
         67:c3:f6:33:f0:15:88:bd:49:5f:8c:fc:17:1d:33:20:6f:d3:
         18:ce:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:30:03 2025 by rpki-client