Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a3a2f33332d3333203d3e20323637323134.roa
File:                     323830343a346130383a3a2f33332d3333203d3e20323637323134.roa (raw, json)
Hash identifier:          wN0ptyUlUE9sXFGmJhdsB1ozAXtX+ViRUQddiQVv7WY=
Subject key identifier:   DA:41:FB:9C:35:67:2C:1E:62:68:C4:EC:A9:A4:F0:92:94:6E:9F:23
Certificate issuer:       /CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
Certificate serial:       561DE410F02BE989662B6FE78E1038558DD26C2D
Authority key identifier: B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a3a2f33332d3333203d3e20323637323134.roa
Signing time:             Wed 01 Oct 2025 15:01:41 +0000
ROA not before:           Wed 01 Oct 2025 14:56:41 +0000
ROA not after:            Wed 30 Sep 2026 15:01:41 +0000
asID:                     267214
IP address blocks:        2804:4a08::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl
                          rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1d:e4:10:f0:2b:e9:89:66:2b:6f:e7:8e:10:38:55:8d:d2:6c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
        Validity
            Not Before: Oct  1 14:56:41 2025 GMT
            Not After : Sep 30 15:01:41 2026 GMT
        Subject: CN=DA41FB9C35672C1E6268C4ECA9A4F092946E9F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6d:68:af:92:53:ef:8d:eb:26:7e:45:ae:69:
                    f5:83:7b:e1:aa:a1:86:c5:a8:e9:0b:b8:54:91:4a:
                    d9:a9:2a:02:1b:ef:68:a9:b6:f0:8a:31:7d:64:bd:
                    d7:e9:30:8f:2b:27:e8:48:ed:42:b3:64:67:ef:71:
                    b4:b1:37:81:54:7b:e8:72:1d:d4:69:0a:0c:05:8f:
                    5c:e5:f3:f2:db:54:ad:d1:7a:79:fb:b9:0f:2b:06:
                    c6:ab:55:f4:ad:44:d8:96:b3:93:5e:81:d1:5e:79:
                    65:8a:0c:e6:ed:3d:54:0f:a0:ab:f4:77:51:9f:84:
                    fc:5c:39:33:f3:f2:fe:66:ee:05:c4:2d:9e:94:68:
                    83:24:90:07:65:63:c9:b1:67:06:04:df:c1:ee:87:
                    91:54:04:0a:fb:db:31:75:aa:99:43:51:56:92:10:
                    61:4b:25:0e:fe:df:79:8b:70:2c:4c:84:35:4f:db:
                    b2:09:2b:9f:88:8f:5c:e6:da:31:b0:c4:51:ef:98:
                    04:5a:73:de:8c:35:81:f3:4e:31:9c:55:b4:06:cd:
                    2d:7c:75:10:71:3d:8c:d8:f2:08:36:44:c5:6c:1c:
                    5e:9b:f5:ce:47:b2:bb:be:f1:ce:4f:86:0c:96:bd:
                    6c:6b:5f:4d:f4:3d:f1:f0:0b:23:28:ec:65:26:7f:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:41:FB:9C:35:67:2C:1E:62:68:C4:EC:A9:A4:F0:92:94:6E:9F:23
            X509v3 Authority Key Identifier:
                keyid:B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a3a2f33332d3333203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a08::/33

    Signature Algorithm: sha256WithRSAEncryption
         47:e9:bb:ae:2f:cd:6e:56:4e:c2:51:cd:5b:05:e2:bf:81:a8:
         a5:a4:91:4d:a4:34:5b:18:58:0f:f2:8f:18:97:a8:db:c6:5a:
         bb:eb:b4:7b:86:e8:d0:e6:67:c1:cd:12:79:25:ad:11:dc:49:
         39:da:f7:2c:33:af:4f:d2:9a:0b:21:2d:69:e4:07:b1:11:90:
         95:57:60:5e:5d:16:dc:bb:55:94:59:d8:38:0f:b4:bc:ad:e6:
         aa:a5:3f:04:c9:bf:66:05:7c:43:5a:56:ca:f7:a7:05:f8:fe:
         dd:e8:f1:cd:a3:3e:ae:cd:24:a5:c4:0f:03:66:54:48:8b:e2:
         8f:36:a0:f2:35:3e:fd:ea:fb:c5:a4:96:c6:86:52:16:c4:d2:
         9a:e3:94:e0:0a:4b:0a:16:38:22:73:9e:c4:9d:fd:8e:0c:03:
         49:04:bc:65:10:63:dc:e4:01:6d:21:50:ff:7c:ba:f1:e4:1f:
         25:3b:cd:8a:1a:7e:a3:ee:d1:1e:b0:1f:df:2a:b5:96:49:47:
         55:5a:ff:b6:86:5f:f8:18:48:ed:ce:d5:72:ae:a4:66:c0:fa:
         6a:22:ec:f2:d6:85:fc:aa:7d:61:ac:1b:84:62:fd:b6:f2:95:
         b3:44:37:af:ba:5c:7b:4f:ca:bd:39:9a:f4:9e:10:55:9f:a2:
         ce:04:78:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:04:11 2025 by rpki-client