Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/323830343a363234383a353030303a3a2f33382d3338203d3e20323639323838.roa
File:                     323830343a363234383a353030303a3a2f33382d3338203d3e20323639323838.roa (raw, json)
Hash identifier:          +VdQ3er5Av62lFRjCIOwCrakBNaeL3MKZeRzpYfNzn8=
Subject key identifier:   1F:8B:81:CF:02:FA:9C:57:3D:0F:A6:C8:C1:D3:91:AF:C3:DA:BE:BD
Certificate issuer:       /CN=C5423CDD002348905AC2D36D7816B81D97846978
Certificate serial:       3578DCD05741914971F2AD7FF072A00005C14809
Authority key identifier: C5:42:3C:DD:00:23:48:90:5A:C2:D3:6D:78:16:B8:1D:97:84:69:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/323830343a363234383a353030303a3a2f33382d3338203d3e20323639323838.roa
Signing time:             Thu 09 Oct 2025 12:41:06 +0000
ROA not before:           Thu 09 Oct 2025 12:36:06 +0000
ROA not after:            Thu 08 Oct 2026 12:41:06 +0000
asID:                     269288
IP address blocks:        2804:6248:5000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.crl
                          rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:78:dc:d0:57:41:91:49:71:f2:ad:7f:f0:72:a0:00:05:c1:48:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5423CDD002348905AC2D36D7816B81D97846978
        Validity
            Not Before: Oct  9 12:36:06 2025 GMT
            Not After : Oct  8 12:41:06 2026 GMT
        Subject: CN=1F8B81CF02FA9C573D0FA6C8C1D391AFC3DABEBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:51:2d:64:f9:dc:57:e1:2d:f7:7b:e6:ae:
                    3d:95:95:46:1c:a9:76:28:55:5d:55:a0:8d:0a:92:
                    58:7a:3e:ff:a9:cf:12:d5:46:50:59:7e:8e:27:ab:
                    f5:b5:a5:3f:2d:e3:d5:05:8d:f6:ec:a2:6f:5a:54:
                    09:e9:26:21:e8:99:e2:ea:ae:92:5c:de:02:a9:be:
                    3f:59:e9:21:9c:c7:e8:60:d0:c6:cf:48:b2:aa:f5:
                    e3:af:d9:f4:3d:11:91:fa:ab:7a:e9:2b:f0:14:9c:
                    21:ed:bb:40:dc:81:e3:be:be:60:75:02:ef:1b:54:
                    99:ca:64:10:08:bc:d0:94:49:a1:ca:ee:bb:72:ff:
                    35:59:1f:1a:db:d3:4f:31:0b:10:d0:59:30:28:43:
                    fc:da:fb:7b:0f:ef:5c:17:1d:3d:70:af:3d:88:d6:
                    13:13:05:8c:05:c9:03:d1:89:24:d1:38:ff:5a:99:
                    ce:8b:a5:1a:be:ea:c1:1c:8a:1d:e7:3f:bf:ec:95:
                    69:41:ec:1c:be:94:b1:fc:08:c0:c9:be:b4:81:9f:
                    cd:4c:e7:a0:b4:00:19:1f:eb:6b:a9:28:23:5d:a6:
                    70:4c:2b:3f:04:56:a7:b2:71:31:ab:b5:a2:54:e7:
                    1c:64:7d:70:3e:fd:f4:22:23:05:dc:6c:c3:f2:62:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8B:81:CF:02:FA:9C:57:3D:0F:A6:C8:C1:D3:91:AF:C3:DA:BE:BD
            X509v3 Authority Key Identifier:
                keyid:C5:42:3C:DD:00:23:48:90:5A:C2:D3:6D:78:16:B8:1D:97:84:69:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/C5423CDD002348905AC2D36D7816B81D97846978.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5423CDD002348905AC2D36D7816B81D97846978.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/323830343a363234383a353030303a3a2f33382d3338203d3e20323639323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6248:5000::/38

    Signature Algorithm: sha256WithRSAEncryption
         a9:0f:67:62:8d:93:19:c4:2a:eb:54:42:00:82:af:00:77:c8:
         81:29:f6:75:27:ac:60:19:6c:6c:24:10:74:9d:57:57:8d:6e:
         04:bc:aa:3b:77:d3:47:3c:9f:b1:c6:c4:5c:1a:52:0c:eb:d6:
         c8:62:f8:4c:78:09:6b:53:54:4e:7d:da:ac:84:90:85:ba:8a:
         fc:16:b6:bc:2f:aa:02:4c:27:e9:6f:e0:cd:1c:52:49:a2:37:
         1f:0a:b8:70:a7:b7:e1:68:1f:96:ba:7c:ca:30:b7:00:63:76:
         c7:c7:53:3d:4f:d1:80:1c:da:83:f3:5b:46:e0:82:58:b8:86:
         e8:87:68:47:7c:96:a4:35:4b:ce:ed:f7:d9:52:c0:c7:0c:ca:
         5f:e0:cc:c9:a7:44:ee:3d:a8:74:6a:ab:6f:1e:bc:ab:a7:a6:
         36:ec:21:b6:d6:0d:b0:28:96:e8:04:d4:fb:5f:f8:61:7e:d3:
         d7:35:d2:2f:e9:00:7b:d3:da:ae:67:47:04:ef:0d:28:fb:10:
         0e:f6:3d:24:fc:af:99:fd:f6:66:a9:7a:89:8d:ec:7b:09:a5:
         e4:23:33:6b:27:c6:bb:69:f6:42:c5:ce:ee:95:55:bd:a7:2f:
         2a:ae:cd:b7:5c:da:40:fc:0f:c6:49:9c:e7:eb:ca:72:a9:4b:
         8d:ab:0c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:16:14 2025 by rpki-client