Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/323830343a326533303a3a2f33322d313238203d3e20323635333330.roa
File:                     323830343a326533303a3a2f33322d313238203d3e20323635333330.roa (raw, json)
Hash identifier:          dsrZJxpUZ+mQluA8cNN8xre+OrD71i6G4Ht5EyGTyAw=
Subject key identifier:   8C:07:75:91:F6:9E:0C:C6:60:F1:A5:53:18:3F:E8:D9:70:98:5C:6F
Certificate issuer:       /CN=300051EF302B34E03DB98212D978869E349107D6
Certificate serial:       1C7655EBB530B120B3E3615E25BB8FE65BAA9D3D
Authority key identifier: 30:00:51:EF:30:2B:34:E0:3D:B9:82:12:D9:78:86:9E:34:91:07:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/300051EF302B34E03DB98212D978869E349107D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/323830343a326533303a3a2f33322d313238203d3e20323635333330.roa
Signing time:             Sat 18 Oct 2025 19:58:47 +0000
ROA not before:           Sat 18 Oct 2025 19:53:47 +0000
ROA not after:            Sat 17 Oct 2026 19:58:47 +0000
asID:                     265330
IP address blocks:        2804:2e30::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/300051EF302B34E03DB98212D978869E349107D6.crl
                          rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/300051EF302B34E03DB98212D978869E349107D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/300051EF302B34E03DB98212D978869E349107D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:76:55:eb:b5:30:b1:20:b3:e3:61:5e:25:bb:8f:e6:5b:aa:9d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=300051EF302B34E03DB98212D978869E349107D6
        Validity
            Not Before: Oct 18 19:53:47 2025 GMT
            Not After : Oct 17 19:58:47 2026 GMT
        Subject: CN=8C077591F69E0CC660F1A553183FE8D970985C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:90:d8:1e:65:11:e5:d3:5a:90:53:18:64:60:
                    6f:0d:9e:7a:41:d9:57:e8:d6:ff:09:56:6b:a6:7e:
                    d3:16:ec:4d:9a:58:0e:0e:9e:b7:58:42:d6:a2:9b:
                    60:ae:40:db:e9:84:a2:94:26:45:5b:8c:b9:b9:91:
                    74:a7:7e:41:17:14:91:d0:60:02:aa:9b:5a:65:14:
                    ca:6b:88:16:5f:7e:e3:28:be:8a:ae:34:68:66:79:
                    72:92:6c:6b:44:d2:44:49:43:2b:ee:b4:0d:23:39:
                    b9:1e:80:93:54:17:69:1e:cc:b4:fd:3a:09:3a:41:
                    40:c1:e5:ea:34:76:f5:fa:d0:ae:58:f0:65:ac:ae:
                    98:2e:f8:ed:be:74:ff:b4:15:1a:4a:d5:60:b3:e2:
                    4a:43:99:a7:e7:25:e0:32:5d:28:11:80:59:ce:d8:
                    c4:a5:84:ae:77:1e:5e:b6:be:7d:f2:5b:dc:c0:36:
                    36:58:89:b2:08:91:6e:c0:07:29:e0:db:c5:16:62:
                    c3:0c:32:bf:8e:32:3a:72:5f:74:a6:75:81:b7:13:
                    0c:bb:d1:c5:5a:07:9c:28:c5:c8:5a:08:9d:e7:d1:
                    94:db:6c:aa:ca:d7:7f:ce:ee:ff:1d:2c:2e:13:77:
                    da:08:d8:51:66:69:f8:1b:72:1a:af:a3:c5:3c:00:
                    92:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:07:75:91:F6:9E:0C:C6:60:F1:A5:53:18:3F:E8:D9:70:98:5C:6F
            X509v3 Authority Key Identifier:
                keyid:30:00:51:EF:30:2B:34:E0:3D:B9:82:12:D9:78:86:9E:34:91:07:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/300051EF302B34E03DB98212D978869E349107D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/300051EF302B34E03DB98212D978869E349107D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5guzYu9DqsnkfpYJ4x1B67yxAirPCJQtAm77QWD13m1y/0/323830343a326533303a3a2f33322d313238203d3e20323635333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e30::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:af:25:e6:a7:7b:bd:71:5e:23:d4:21:a2:33:54:1b:4d:a8:
         a5:74:ee:d8:70:ce:6b:cc:46:e3:56:ad:89:56:ef:75:9c:49:
         4b:76:5b:c4:af:3a:c0:f1:5f:3d:89:89:5f:01:18:38:b5:5c:
         86:a0:e2:d2:8d:34:c2:fe:bc:4a:aa:c3:b8:57:2c:36:60:1c:
         ac:54:0c:eb:9d:53:58:40:2c:c9:48:c9:49:b1:e9:89:cb:81:
         ef:9d:73:6e:4f:a3:ed:a9:8d:a1:44:de:dd:63:eb:41:44:db:
         b4:ac:29:96:08:64:d2:50:03:1a:7d:d8:66:cb:3c:af:47:f4:
         4a:4e:d2:e5:4a:c0:dd:d7:25:b6:8c:3d:8c:f3:ce:d0:83:51:
         50:c9:5a:ef:f4:14:0a:28:83:c9:d6:86:f9:07:91:7b:64:b9:
         e1:8f:51:88:dc:be:39:58:0f:cc:c4:18:d1:52:cf:f7:60:8f:
         c8:eb:b9:50:4c:4f:c8:72:6c:60:6a:ee:c2:6c:41:29:73:43:
         12:94:5f:76:c0:d3:a5:3e:1e:e1:eb:ec:63:55:b2:a8:14:2c:
         a2:38:50:f7:62:70:b9:31:af:49:5d:cc:0a:6a:2b:5e:cc:0a:
         54:1a:a6:71:af:c2:4b:a7:c2:72:9c:55:b3:33:2c:20:38:00:
         be:64:6c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:03:48 2025 by rpki-client