Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/323830343a6565303a3a2f33322d3530203d3e20323633353535.roa
File:                     323830343a6565303a3a2f33322d3530203d3e20323633353535.roa (raw, json)
Hash identifier:          1TJDZrzjlcPZhvF7FpVcCzGHw819m8Ai/0Ml1jpR+gM=
Subject key identifier:   D3:E9:ED:C5:91:B4:EE:11:2A:D4:BB:4B:C3:B5:D2:22:73:F4:02:49
Certificate issuer:       /CN=2028B4F00526FFD4A6479245C26F87EECD0F5352
Certificate serial:       646A25ED6ADAD4F8B7EDD27452364B54D4E7F440
Authority key identifier: 20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/323830343a6565303a3a2f33322d3530203d3e20323633353535.roa
Signing time:             Wed 01 Oct 2025 14:18:34 +0000
ROA not before:           Wed 01 Oct 2025 14:13:34 +0000
ROA not after:            Wed 30 Sep 2026 14:18:34 +0000
asID:                     263555
IP address blocks:        2804:ee0::/32 maxlen: 50
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl
                          rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 03:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:6a:25:ed:6a:da:d4:f8:b7:ed:d2:74:52:36:4b:54:d4:e7:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2028B4F00526FFD4A6479245C26F87EECD0F5352
        Validity
            Not Before: Oct  1 14:13:34 2025 GMT
            Not After : Sep 30 14:18:34 2026 GMT
        Subject: CN=D3E9EDC591B4EE112AD4BB4BC3B5D22273F40249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0d:81:ff:32:6d:fc:fd:14:d6:64:ec:71:2e:
                    ed:6a:98:bd:d4:a2:b3:c9:65:25:4d:f0:4c:cc:d7:
                    22:61:91:b9:57:88:5f:a5:10:9f:34:fc:07:1c:fe:
                    cc:84:db:cd:66:f7:ce:e1:bd:64:d3:68:05:4e:fc:
                    eb:8a:d4:75:d3:b3:fe:c7:58:48:1d:60:8f:fb:b0:
                    ab:ad:aa:31:3c:fa:29:80:17:51:f7:83:76:fa:4a:
                    ca:4d:ae:0c:53:97:47:60:95:a8:df:d2:32:9b:e4:
                    09:8c:27:e6:a9:5f:cf:57:c7:f1:8c:85:be:d1:e7:
                    7c:e4:10:f4:9a:ac:b8:f1:e6:05:3c:56:db:d6:f2:
                    db:a2:b9:eb:3c:fe:8d:bf:af:e9:ca:ec:b2:72:19:
                    ab:dc:35:d5:c5:e7:32:81:56:9f:6f:3a:a2:fe:cd:
                    18:d9:41:82:5b:7e:2a:20:cd:24:d6:6d:be:69:90:
                    10:79:cf:f8:21:da:c9:20:ed:36:14:cb:1e:99:bb:
                    08:ee:40:2c:8c:09:ab:42:20:1e:ee:4a:59:83:c2:
                    61:16:42:69:52:7d:a4:f6:3a:58:56:e4:bd:d9:2e:
                    96:aa:8c:91:fc:da:1b:7a:cf:4f:85:c8:27:ed:62:
                    25:2d:a9:dd:5c:aa:01:3e:e7:19:67:98:d2:20:83:
                    fa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E9:ED:C5:91:B4:EE:11:2A:D4:BB:4B:C3:B5:D2:22:73:F4:02:49
            X509v3 Authority Key Identifier:
                keyid:20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/323830343a6565303a3a2f33322d3530203d3e20323633353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:94:10:bc:8d:c4:50:b2:28:c9:b3:cd:59:90:c7:95:60:59:
         5b:80:75:ce:e7:13:b7:45:fa:93:a7:3c:c6:c1:68:46:c7:bc:
         69:09:72:75:43:a5:2e:9c:f3:4d:2a:f8:a6:60:02:b4:33:21:
         00:28:56:30:7d:c0:da:3b:77:2f:64:78:57:f9:b1:df:fc:81:
         1c:36:c6:85:05:5c:e7:0a:fe:78:d5:99:77:c6:02:18:32:40:
         cc:dc:79:d2:ea:60:c0:80:f0:20:e0:d5:77:c1:88:4e:bd:f5:
         94:76:ce:df:7e:37:35:32:28:10:58:ef:ff:9e:2c:3c:cc:63:
         cb:0b:95:93:27:88:b2:66:b3:fb:bb:ca:ba:b5:b7:3f:a1:d6:
         8e:6a:a9:e2:a8:ed:73:3e:06:65:fd:91:8c:7c:0c:8c:15:14:
         13:55:45:4a:fc:9e:4f:5e:39:45:6d:0f:26:17:60:b8:7f:61:
         08:b9:a4:64:b0:90:61:fd:7f:3a:79:2a:1c:37:b0:67:23:35:
         a0:5a:eb:2b:0d:b7:16:34:b5:1f:ff:e1:96:32:96:c3:84:ce:
         53:1f:dc:2e:61:5c:82:2a:79:4d:bb:47:f2:fa:53:74:dd:94:
         57:38:4a:37:ad:88:c1:c9:10:9f:ba:79:5d:29:13:3b:5a:30:
         44:30:ef:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:11:21 2025 by rpki-client