Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/323830343a353637303a3a2f33322d3332203d3e20323637393938.roa
File:                     323830343a353637303a3a2f33322d3332203d3e20323637393938.roa (raw, json)
Hash identifier:          +cUVgKxn4mOXd+cHhmjCT1WiUS3lOZJTsD6ZtKdpHUU=
Subject key identifier:   C8:4C:3B:A4:D4:60:A0:3A:8A:B6:A2:FB:9E:AE:54:B5:36:47:83:28
Certificate issuer:       /CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
Certificate serial:       55DE3C37F965707249B43EAACDBD257E1CF13A07
Authority key identifier: 11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/323830343a353637303a3a2f33322d3332203d3e20323637393938.roa
Signing time:             Tue 23 Sep 2025 21:08:16 +0000
ROA not before:           Tue 23 Sep 2025 21:03:16 +0000
ROA not after:            Tue 22 Sep 2026 21:08:16 +0000
asID:                     267998
IP address blocks:        2804:5670::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl
                          rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 17:43:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:de:3c:37:f9:65:70:72:49:b4:3e:aa:cd:bd:25:7e:1c:f1:3a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11FB1ED5A8894DA749A7F5AD4F10E80C944D421C
        Validity
            Not Before: Sep 23 21:03:16 2025 GMT
            Not After : Sep 22 21:08:16 2026 GMT
        Subject: CN=C84C3BA4D460A03A8AB6A2FB9EAE54B536478328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5d:79:f4:c2:53:1a:a4:1b:1c:01:fa:e7:4a:
                    f1:93:9f:24:dd:bf:0a:35:62:7b:2f:a4:8c:c4:7f:
                    e8:d3:0f:74:f1:4b:5e:10:79:81:65:18:10:6b:1a:
                    21:e7:85:ea:fd:0e:c6:bd:bc:e0:05:12:11:6e:7f:
                    65:af:b2:f6:16:b0:b8:bb:b4:33:be:47:39:a1:51:
                    c6:05:85:09:95:e8:63:16:df:db:85:82:7c:a8:99:
                    c3:94:62:75:dc:36:7b:73:1d:ba:42:ed:d3:06:1c:
                    48:e0:69:4e:33:bb:c2:95:da:19:af:a6:2d:b0:de:
                    14:e8:73:a7:57:84:5b:6c:a7:a3:b4:c7:ab:6c:b0:
                    59:29:38:91:eb:64:89:6a:10:5b:e7:ce:27:e6:d3:
                    43:98:2b:6b:e9:a9:ac:e4:53:6a:bd:98:92:d0:b0:
                    76:cc:7e:b0:3c:66:79:bb:fe:24:f3:23:47:70:c3:
                    8c:80:3c:fe:a3:86:e6:e0:15:a8:46:1d:9d:8b:71:
                    af:ca:8a:4b:f2:ee:ca:1c:19:cd:cf:96:7a:f7:b8:
                    49:8c:52:d1:d0:ef:cf:2e:71:f6:33:e2:b9:92:5e:
                    08:3a:e2:15:92:c4:61:64:29:a4:48:4b:99:43:67:
                    ef:27:d4:6a:09:40:2c:7c:6a:f8:fd:36:01:f1:09:
                    3c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4C:3B:A4:D4:60:A0:3A:8A:B6:A2:FB:9E:AE:54:B5:36:47:83:28
            X509v3 Authority Key Identifier:
                keyid:11:FB:1E:D5:A8:89:4D:A7:49:A7:F5:AD:4F:10:E8:0C:94:4D:42:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FB1ED5A8894DA749A7F5AD4F10E80C944D421C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/323830343a353637303a3a2f33322d3332203d3e20323637393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5670::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:2a:8e:84:7b:ba:ec:e7:c5:b9:7b:c7:0a:34:f3:b9:3f:9b:
         f9:18:b9:8f:48:ad:2a:e5:fc:81:85:83:bf:5b:99:1e:2e:89:
         33:c5:d2:a0:1e:7e:6d:f6:d9:a9:04:c8:c0:6e:da:c7:0e:99:
         6a:b9:0f:3c:b0:b9:db:a6:f0:63:fa:5e:85:08:18:62:de:80:
         e4:d6:4e:10:48:e0:4c:be:69:2f:e8:82:af:07:d9:46:8d:18:
         73:0f:b0:71:de:e3:b4:d8:57:90:c5:24:4e:79:02:85:ce:f3:
         07:e9:c1:ae:7a:20:1b:b1:fe:44:4d:96:40:07:a7:a2:2c:d3:
         8a:a1:6d:20:e5:23:3e:a5:8b:37:45:de:a2:ec:cf:cc:04:b4:
         06:5a:10:c0:3e:0f:b0:fb:5f:e7:d2:01:ba:7c:02:2c:21:d5:
         97:c0:a5:cd:82:62:d8:50:7f:43:e5:2b:0a:04:d2:b3:cd:f9:
         fc:cc:42:6c:1f:f3:ef:d2:00:0c:e6:a2:14:30:a4:02:11:cd:
         85:a0:4b:15:1b:a0:f9:8d:0b:48:c4:c7:da:f4:fe:98:55:7e:
         41:84:fb:5b:de:f7:50:1c:06:1c:47:79:98:9b:55:48:ec:a8:
         65:f6:ad:d7:aa:8b:59:6f:be:fc:d3:0a:03:5c:e3:74:96:a0:
         de:95:54:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:12:32 2025 by rpki-client