Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/323830343a363731633a3a2f33322d3333203d3e20323639363034.roa
File:                     323830343a363731633a3a2f33322d3333203d3e20323639363034.roa (raw, json)
Hash identifier:          U3APey+08IX0MBTenYQ3UFri8HFyKIkcphSu8xwZwsQ=
Subject key identifier:   DD:18:C5:AF:86:D8:B0:65:3B:46:72:34:62:CE:17:27:E9:38:39:B3
Certificate issuer:       /CN=6F25AF9CA689C86F1DC896A112F59460C7D84FC2
Certificate serial:       05EF29DE5D115503969BE2BB1392567683218F09
Authority key identifier: 6F:25:AF:9C:A6:89:C8:6F:1D:C8:96:A1:12:F5:94:60:C7:D8:4F:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F25AF9CA689C86F1DC896A112F59460C7D84FC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/323830343a363731633a3a2f33322d3333203d3e20323639363034.roa
Signing time:             Wed 08 Oct 2025 18:33:03 +0000
ROA not before:           Wed 08 Oct 2025 18:28:03 +0000
ROA not after:            Wed 07 Oct 2026 18:33:03 +0000
asID:                     269604
IP address blocks:        2804:671c::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/6F25AF9CA689C86F1DC896A112F59460C7D84FC2.crl
                          rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/6F25AF9CA689C86F1DC896A112F59460C7D84FC2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F25AF9CA689C86F1DC896A112F59460C7D84FC2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 20:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ef:29:de:5d:11:55:03:96:9b:e2:bb:13:92:56:76:83:21:8f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F25AF9CA689C86F1DC896A112F59460C7D84FC2
        Validity
            Not Before: Oct  8 18:28:03 2025 GMT
            Not After : Oct  7 18:33:03 2026 GMT
        Subject: CN=DD18C5AF86D8B0653B46723462CE1727E93839B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c5:14:fd:15:6e:98:cb:76:27:ed:a0:1f:00:
                    01:e8:ff:eb:c1:10:99:da:81:99:77:a0:f7:16:66:
                    88:b8:40:ef:48:b0:22:ab:4a:3b:91:bf:b4:a4:32:
                    bc:fe:53:a1:af:fc:26:b2:ca:53:eb:4e:04:71:40:
                    31:40:14:ae:d5:df:94:4d:f9:dc:72:0f:5d:f2:e3:
                    f5:1a:1d:b3:03:29:e4:95:7b:7f:6b:9f:7d:8d:fb:
                    13:ec:a4:17:9e:85:75:2a:50:ce:16:b4:e9:e8:d6:
                    fc:0d:b0:70:2e:0e:9c:2a:6c:5b:81:34:4f:b3:ba:
                    65:eb:75:6a:cd:5e:b2:97:19:78:74:1d:30:0a:84:
                    bc:ce:d0:ed:b9:27:d8:82:68:c2:65:79:1b:6c:25:
                    98:b5:07:bd:b2:c3:c8:34:11:0f:2e:7d:44:67:cb:
                    da:42:1e:c0:21:20:53:70:62:a1:91:2c:05:1a:32:
                    b5:57:0d:01:05:39:dc:0f:f9:25:e2:f7:8b:e5:66:
                    bf:15:ae:0e:89:71:7a:74:09:e7:fd:59:ca:d7:3b:
                    c1:c8:01:1a:93:c4:14:e2:5e:be:0e:6c:26:82:c3:
                    84:09:fb:0d:0c:35:4e:ba:cd:c2:76:0c:d7:66:1b:
                    da:52:f4:f0:6b:7e:a1:4c:a3:c9:f6:67:bf:40:03:
                    17:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:18:C5:AF:86:D8:B0:65:3B:46:72:34:62:CE:17:27:E9:38:39:B3
            X509v3 Authority Key Identifier:
                keyid:6F:25:AF:9C:A6:89:C8:6F:1D:C8:96:A1:12:F5:94:60:C7:D8:4F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/6F25AF9CA689C86F1DC896A112F59460C7D84FC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F25AF9CA689C86F1DC896A112F59460C7D84FC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nYob2zryPbySzdA1s9prrVJfK8F3MUMgtcKbu7d5oGG/0/323830343a363731633a3a2f33322d3333203d3e20323639363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:671c::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:c2:77:8b:85:f4:7b:36:95:91:6c:d4:0d:7b:fd:69:5a:bb:
         5b:a6:45:28:ad:34:0e:17:dc:71:e5:cd:bb:26:7e:ff:a9:20:
         ef:33:e4:0f:0f:c6:56:10:23:44:36:1e:0f:49:42:02:6c:77:
         e7:25:50:91:0d:14:b4:6c:d2:1a:a8:59:64:cf:dd:c6:1c:7e:
         0b:cf:c2:09:97:ff:af:fe:eb:73:6a:e2:08:4c:8a:49:a3:ef:
         2f:a6:cb:74:ee:c9:a0:10:cf:8b:7c:85:7c:ff:dd:9e:6d:38:
         a8:bd:25:9b:20:e8:8f:dd:40:70:30:a8:49:db:4d:d4:d4:9b:
         5a:f3:f3:1a:0a:ed:2d:70:31:05:e1:87:4c:23:d8:d0:9c:bc:
         b5:67:77:13:5b:a4:b8:64:c7:74:f2:cc:ca:7b:d9:d4:d2:8d:
         0d:1b:28:60:aa:15:c5:4e:9e:9c:fd:d9:56:0e:a1:c9:c9:91:
         e1:31:79:00:12:dc:19:cb:1c:4e:24:9b:be:bb:db:6d:7d:eb:
         9c:c2:df:7e:62:b4:0a:f8:f7:47:51:af:ff:b5:74:89:18:26:
         11:12:37:e3:d0:0d:7d:1f:23:bc:d0:4c:2c:07:bb:a1:49:75:
         88:84:ee:0c:12:5d:09:5e:04:6e:5c:74:b2:4c:22:9a:88:73:
         92:eb:b1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:15 2025 by rpki-client