Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5NyvyKVL82cxVsk9iq8u43a3dfWtXHX4A7c5cm1A3TrP/0/323830343a336165633a3a2f33322d313238203d3e20323636313138.roa
File:                     323830343a336165633a3a2f33322d313238203d3e20323636313138.roa (raw, json)
Hash identifier:          8dqn1ua8/XaaVtMgf+jZicrsvMtzbjuTegTP9K6rHn0=
Subject key identifier:   1D:C5:17:F7:94:DD:24:CA:EA:01:7B:17:32:26:2E:48:B8:F5:F3:A5
Certificate issuer:       /CN=6B68B8C33AF16D3626625A435B03FEAA41F83B1C
Certificate serial:       0829ACAE0DEE91837C97D99C3B3A87CEE4E570A7
Authority key identifier: 6B:68:B8:C3:3A:F1:6D:36:26:62:5A:43:5B:03:FE:AA:41:F8:3B:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B68B8C33AF16D3626625A435B03FEAA41F83B1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5NyvyKVL82cxVsk9iq8u43a3dfWtXHX4A7c5cm1A3TrP/0/323830343a336165633a3a2f33322d313238203d3e20323636313138.roa
Signing time:             Wed 15 Oct 2025 15:31:15 +0000
ROA not before:           Wed 15 Oct 2025 15:26:15 +0000
ROA not after:            Wed 14 Oct 2026 15:31:15 +0000
asID:                     266118
IP address blocks:        2804:3aec::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5NyvyKVL82cxVsk9iq8u43a3dfWtXHX4A7c5cm1A3TrP/0/6B68B8C33AF16D3626625A435B03FEAA41F83B1C.crl
                          rsync://rpki-repo.registro.br/repo/5NyvyKVL82cxVsk9iq8u43a3dfWtXHX4A7c5cm1A3TrP/0/6B68B8C33AF16D3626625A435B03FEAA41F83B1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B68B8C33AF16D3626625A435B03FEAA41F83B1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:29:ac:ae:0d:ee:91:83:7c:97:d9:9c:3b:3a:87:ce:e4:e5:70:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B68B8C33AF16D3626625A435B03FEAA41F83B1C
        Validity
            Not Before: Oct 15 15:26:15 2025 GMT
            Not After : Oct 14 15:31:15 2026 GMT
        Subject: CN=1DC517F794DD24CAEA017B1732262E48B8F5F3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:08:53:95:aa:62:ce:0b:7f:36:69:b2:c2:
                    88:d3:fd:8e:e2:89:2b:00:e3:f1:de:5f:e6:e2:3a:
                    c7:2e:9e:00:14:bc:5b:9f:81:04:9d:43:9e:db:8e:
                    31:ec:da:ed:aa:a2:d8:aa:cf:1d:06:41:7e:26:d1:
                    7e:27:cf:4e:56:aa:1e:05:4f:30:58:6c:42:78:a3:
                    34:17:b6:69:3c:db:00:f3:47:af:90:7e:5a:33:86:
                    39:67:e7:d6:f4:74:13:73:55:80:fd:96:ce:64:be:
                    03:f0:eb:91:73:64:93:e9:56:1e:35:31:dd:b0:2b:
                    a4:76:00:3a:c9:77:ec:b6:5d:52:13:91:18:ee:e6:
                    c9:19:98:f4:b4:a6:78:5f:29:bc:78:fe:ed:3c:79:
                    f2:dc:bd:e4:a5:26:0d:08:fa:87:39:e1:ff:2d:d4:
                    75:4d:c7:49:44:ab:1b:47:e1:66:10:f5:f9:4a:e0:
                    ad:f0:40:2f:e9:53:80:13:c2:b2:0c:6b:22:42:b9:
                    e3:26:b2:27:22:4e:58:70:cf:03:46:e6:5f:f1:f5:
                    64:22:8e:91:05:19:65:ee:86:c9:d8:ee:8b:63:6d:
                    76:07:40:23:0c:10:b7:15:43:59:59:b3:53:8c:10:
                    e3:d1:b4:6c:a2:d5:c2:69:eb:7d:04:b0:af:a7:d0:
                    d8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C5:17:F7:94:DD:24:CA:EA:01:7B:17:32:26:2E:48:B8:F5:F3:A5
            X509v3 Authority Key Identifier:
                keyid:6B:68:B8:C3:3A:F1:6D:36:26:62:5A:43:5B:03:FE:AA:41:F8:3B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5NyvyKVL82cxVsk9iq8u43a3dfWtXHX4A7c5cm1A3TrP/0/6B68B8C33AF16D3626625A435B03FEAA41F83B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B68B8C33AF16D3626625A435B03FEAA41F83B1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NyvyKVL82cxVsk9iq8u43a3dfWtXHX4A7c5cm1A3TrP/0/323830343a336165633a3a2f33322d313238203d3e20323636313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3aec::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:fe:2b:d8:7d:de:83:dc:fc:9b:12:75:e9:b3:47:8f:bd:6e:
         4f:a5:d6:a3:63:ab:2b:c5:5d:d1:3e:da:c8:2c:01:bf:84:a7:
         45:43:8a:a4:bb:98:cf:43:06:40:3e:24:52:ec:a8:0e:2a:34:
         4a:b1:6a:69:32:1f:57:18:9c:5b:40:f1:0f:9a:1d:21:0a:79:
         8a:5a:65:25:6f:8d:5b:92:86:98:bd:b2:3d:55:1b:be:97:f2:
         2d:fd:2e:c9:d4:35:c6:fb:1a:a3:6c:90:75:cd:f6:fb:ff:c9:
         21:55:1a:47:b9:c7:85:8a:81:2c:f7:ac:2d:96:4a:41:c2:f4:
         83:73:79:d5:a3:6b:0e:ab:95:5e:a8:2e:1a:f2:ff:4e:f1:77:
         0a:74:58:64:4d:bc:ff:8c:3b:ff:ca:bf:fb:9b:2e:88:ea:bb:
         a9:08:6b:80:c6:86:1f:a9:a7:13:de:a0:9b:fc:f5:21:16:88:
         58:54:96:e6:69:c7:17:a1:1d:46:d5:07:7d:ec:59:01:e2:de:
         b9:36:72:a9:8b:aa:bd:68:5d:4e:93:00:a2:df:ad:3c:34:75:
         23:59:23:1e:1a:5f:11:67:cc:c5:a7:d7:db:32:64:4e:58:27:
         23:f4:dd:b0:0b:0d:d0:f0:98:36:7f:de:8e:31:56:6c:92:0f:
         2a:37:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:26:00 2025 by rpki-client