Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a3a2f33332d3333203d3e20323634303232.roa
File:                     323830343a323939303a3a2f33332d3333203d3e20323634303232.roa (raw, json)
Hash identifier:          UcLft+TORZbY7qfynursfqierURBXiCbnQdQ61bG6pw=
Subject key identifier:   53:20:2F:12:AE:D2:7F:D8:55:1A:90:77:65:BC:15:A1:50:66:55:05
Certificate issuer:       /CN=F63047CFCA73277026C41BFD930CC304F5F342B7
Certificate serial:       064BA7E222B28120C9E7BC9EC352C026DDE5A56D
Authority key identifier: F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a3a2f33332d3333203d3e20323634303232.roa
Signing time:             Tue 14 Oct 2025 15:16:09 +0000
ROA not before:           Tue 14 Oct 2025 15:11:09 +0000
ROA not after:            Tue 13 Oct 2026 15:16:09 +0000
asID:                     264022
IP address blocks:        2804:2990::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl
                          rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4b:a7:e2:22:b2:81:20:c9:e7:bc:9e:c3:52:c0:26:dd:e5:a5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63047CFCA73277026C41BFD930CC304F5F342B7
        Validity
            Not Before: Oct 14 15:11:09 2025 GMT
            Not After : Oct 13 15:16:09 2026 GMT
        Subject: CN=53202F12AED27FD8551A907765BC15A150665505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:08:38:9d:8a:04:a9:b9:be:ba:0d:38:01:
                    ae:a7:47:30:c7:39:e2:fd:29:a4:23:04:b2:b9:a4:
                    b5:34:32:9c:46:5b:d3:1e:90:b4:d8:36:21:f5:36:
                    85:53:75:25:60:2b:ab:f0:8d:39:01:e3:da:f7:b8:
                    fc:16:23:75:73:22:68:9a:3b:88:99:8d:66:9a:de:
                    cc:11:02:0f:3f:03:ef:ab:fe:1a:2f:cb:1a:b9:fc:
                    ec:34:2c:91:23:cf:a2:ad:0e:61:5c:e5:95:4b:cf:
                    48:a3:04:53:a0:c9:39:be:7e:d0:8e:8a:48:51:c6:
                    9b:bc:cb:b8:72:80:50:c0:a2:f2:8e:1f:2a:32:6f:
                    2c:29:58:1d:b4:2b:9c:3b:2f:d4:2e:b5:f7:47:74:
                    71:5b:1e:37:d6:d9:a8:fd:80:17:0d:28:b3:a5:06:
                    d1:2a:a4:bd:01:83:b2:a9:5a:6c:1c:f9:5a:31:5a:
                    df:73:7a:97:92:ac:56:27:0f:36:34:9b:eb:ab:ba:
                    35:08:58:c9:eb:9a:6a:3e:0b:7c:c7:88:00:af:03:
                    4c:05:4e:0e:83:e2:3f:11:fb:47:d2:68:94:7a:5b:
                    e6:ec:d2:7b:8d:ba:2b:2e:91:bb:25:c8:90:01:de:
                    7b:5f:1d:68:f9:50:7b:d1:94:ce:fa:54:72:6e:cf:
                    7c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:20:2F:12:AE:D2:7F:D8:55:1A:90:77:65:BC:15:A1:50:66:55:05
            X509v3 Authority Key Identifier:
                keyid:F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a3a2f33332d3333203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990::/33

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:1f:d2:ff:d3:5d:54:f9:bb:fd:60:47:a4:67:7c:a4:70:
         fa:ba:ea:fd:4a:d0:f0:9f:f2:1b:7c:cb:c6:36:ff:8b:02:cf:
         e4:89:61:64:2a:7e:39:dc:f5:39:9e:ee:c4:1b:58:48:18:a5:
         77:39:d0:11:37:38:da:2e:6c:e8:d7:35:5d:a9:32:c1:43:49:
         c6:ac:0f:16:65:9e:d1:31:4f:2e:37:c4:02:cb:ef:9d:e5:ab:
         ee:e4:78:94:39:fa:fa:ee:ff:35:e0:4b:ba:3f:cf:30:ce:fd:
         3e:27:ba:df:bc:38:37:ae:ab:dc:a1:f2:53:7d:5a:63:18:4a:
         53:ac:21:36:bd:bc:eb:47:4b:a2:51:3a:cc:5f:c8:35:61:63:
         5a:91:2d:8e:81:4c:a5:56:33:96:d4:13:ee:54:fe:05:c8:0e:
         db:92:6c:3c:a5:92:ac:dc:20:2b:55:7f:fe:73:ff:c8:ec:0c:
         6e:25:f5:2c:c9:f1:b6:4e:69:42:40:b2:de:99:2c:e1:4b:40:
         c6:d5:54:a9:46:1f:2b:01:b1:6e:41:ad:0e:f9:4e:eb:ee:34:
         ac:54:d9:ac:33:5b:ca:b0:47:4f:c9:bd:cd:d1:a4:19:ea:70:
         32:b6:6c:c2:3d:e5:54:9e:92:c6:1a:7e:6b:c1:ab:15:fd:b0:
         db:92:ab:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:02:48 2025 by rpki-client