Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/323830343a373265343a3a2f33322d313238203d3e20323730383832.roa
File:                     323830343a373265343a3a2f33322d313238203d3e20323730383832.roa (raw, json)
Hash identifier:          MEm/5dKIeBrEq3l6vgCnFC/32ZkD7qlTzzc5m/X3sOA=
Subject key identifier:   EB:02:D7:E4:46:7E:94:39:82:F3:64:97:5F:D4:E8:55:F2:6B:B6:CD
Certificate issuer:       /CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
Certificate serial:       3CE4554502BBD46512BF7F80EFD36241B3BF62CE
Authority key identifier: 6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/323830343a373265343a3a2f33322d313238203d3e20323730383832.roa
Signing time:             Thu 09 Oct 2025 14:32:40 +0000
ROA not before:           Thu 09 Oct 2025 14:27:40 +0000
ROA not after:            Thu 08 Oct 2026 14:32:40 +0000
asID:                     270882
IP address blocks:        2804:72e4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl
                          rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e4:55:45:02:bb:d4:65:12:bf:7f:80:ef:d3:62:41:b3:bf:62:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F953373CAE106CAA73E59A84AFD822C6A2C1290
        Validity
            Not Before: Oct  9 14:27:40 2025 GMT
            Not After : Oct  8 14:32:40 2026 GMT
        Subject: CN=EB02D7E4467E943982F364975FD4E855F26BB6CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:e7:24:12:c3:c4:fe:c7:04:be:a8:f0:1b:
                    be:1c:62:f9:37:ea:00:0e:ad:24:e0:6c:8b:77:ad:
                    87:17:e9:cf:38:64:01:21:84:c2:5c:87:d0:10:ac:
                    5b:42:33:ba:64:55:37:32:83:cd:53:5e:b7:11:b9:
                    25:29:10:ad:2a:0b:ef:74:b7:04:3e:ef:32:14:f2:
                    b0:a1:bb:04:06:c9:5f:56:4b:f8:95:2a:69:49:75:
                    d0:f6:43:a2:dc:e9:f6:3d:ac:58:2d:f2:5c:6e:71:
                    a2:c8:15:8d:75:bb:b1:03:e5:95:b5:dd:65:dc:e7:
                    92:5c:1f:2a:89:cd:b9:48:b3:83:12:34:3d:c3:db:
                    bf:60:0b:40:14:38:10:d7:07:3b:65:b2:6f:69:cd:
                    16:dd:2c:c1:b5:57:6b:4b:55:bb:0f:4a:7f:34:65:
                    05:fd:84:a5:1e:27:78:e8:60:a0:b9:40:0c:d9:b9:
                    97:05:03:a8:8d:83:26:a5:8c:41:cd:4a:38:d6:d1:
                    04:2c:e3:26:05:09:b9:1d:58:85:80:15:59:d4:53:
                    d2:be:32:a9:ed:2c:ef:aa:fd:92:6a:70:04:8f:be:
                    14:36:f1:02:07:fd:5b:77:de:81:c6:da:e2:bd:e1:
                    87:14:d7:56:b5:f5:03:02:a6:9b:d3:d3:8a:aa:d0:
                    36:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:02:D7:E4:46:7E:94:39:82:F3:64:97:5F:D4:E8:55:F2:6B:B6:CD
            X509v3 Authority Key Identifier:
                keyid:6F:95:33:73:CA:E1:06:CA:A7:3E:59:A8:4A:FD:82:2C:6A:2C:12:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/6F953373CAE106CAA73E59A84AFD822C6A2C1290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F953373CAE106CAA73E59A84AFD822C6A2C1290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/0/323830343a373265343a3a2f33322d313238203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:69:e3:0f:65:83:e1:ac:28:ed:e3:32:c5:da:3b:b8:07:e0:
         e9:ba:ee:48:b8:32:d6:79:24:d5:55:1a:ac:e8:98:89:b1:91:
         3c:4d:36:6b:4e:86:78:80:03:eb:0c:98:33:d5:d8:92:39:fe:
         3d:78:67:48:27:18:85:06:0d:34:9f:81:00:85:d1:ff:15:95:
         d4:9b:92:0d:1f:1a:f3:65:1e:2c:4e:bf:25:58:8a:bc:fc:d9:
         b1:79:6f:1a:75:c3:a4:7d:eb:f8:55:8a:3c:8b:4a:47:36:75:
         ad:0c:f8:6c:4c:c2:47:08:4f:62:15:34:f8:03:05:d6:1d:08:
         35:10:57:ff:ec:d3:14:09:8f:8f:8e:12:e3:ea:16:40:8a:76:
         c1:91:b0:c4:20:a7:2b:21:ce:c0:89:2b:3e:bd:4c:79:69:de:
         75:65:d2:1b:08:44:4f:59:2d:83:e6:a7:98:da:da:25:63:f5:
         fb:a2:a2:a8:a6:fa:d9:fe:32:81:b9:40:e6:ed:da:38:50:78:
         26:bc:15:c0:38:ba:f7:5c:2c:bd:4e:a4:91:2b:f9:b4:3c:7e:
         8e:51:f8:6c:cc:54:73:ad:87:75:4a:50:90:82:59:4d:77:9e:
         bc:22:fc:f8:e0:13:b0:02:b3:20:40:11:96:75:24:7a:2a:26:
         e1:b7:40:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:50:58 2025 by rpki-client