Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a3a2f33322d3332203d3e20323638393134.roa
File:                     323830343a356338383a3a2f33322d3332203d3e20323638393134.roa (raw, json)
Hash identifier:          Re5x05dLxjCTEtNzHSBBmwGF/6yvIetf05Wb/W9tCis=
Subject key identifier:   79:44:D4:98:CF:D9:90:6F:D3:CD:BA:1C:5A:0B:DB:4D:97:C7:AD:A9
Certificate issuer:       /CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
Certificate serial:       7FC43DE3BC60F26C4FD24A2E8F29D2AAAF199E40
Authority key identifier: 65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a3a2f33322d3332203d3e20323638393134.roa
Signing time:             Mon 20 Oct 2025 17:29:43 +0000
ROA not before:           Mon 20 Oct 2025 17:24:43 +0000
ROA not after:            Mon 19 Oct 2026 17:29:43 +0000
asID:                     268914
IP address blocks:        2804:5c88::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c4:3d:e3:bc:60:f2:6c:4f:d2:4a:2e:8f:29:d2:aa:af:19:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
        Validity
            Not Before: Oct 20 17:24:43 2025 GMT
            Not After : Oct 19 17:29:43 2026 GMT
        Subject: CN=7944D498CFD9906FD3CDBA1C5A0BDB4D97C7ADA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:07:68:24:e4:ec:94:b8:bf:80:b4:8d:2b:
                    e8:cf:28:28:35:7c:c2:3c:53:a0:91:5a:40:34:e8:
                    21:b8:6f:6a:ee:87:ad:94:7a:6a:55:a1:4f:ab:cb:
                    91:eb:16:a1:a1:f7:81:b8:54:49:94:a8:aa:3f:6c:
                    8f:1d:a6:9f:ac:89:c5:9a:d6:4f:7a:b8:47:50:bd:
                    5a:b0:41:88:65:94:c5:cf:0b:25:b8:cf:0c:12:bf:
                    b3:5d:1a:80:f9:43:55:f4:7c:d2:74:c8:c7:05:ef:
                    3f:a1:c4:ef:ea:f5:fa:ee:13:bb:0b:7a:23:fc:5b:
                    2e:34:b5:01:bf:3b:bc:f2:ae:e5:15:b9:5b:40:ec:
                    f5:0e:6a:b9:0b:90:ff:dd:b9:f5:2a:cf:90:45:42:
                    fd:9f:85:49:49:1a:d8:aa:4d:d4:c8:6e:0c:97:f7:
                    a6:63:00:d9:55:37:57:35:2b:4e:dd:e6:3e:a8:d1:
                    c4:14:65:cb:86:e2:46:95:4c:c4:a3:9a:a5:f3:34:
                    59:9e:14:d2:12:5f:05:da:a2:78:68:bb:d7:fe:38:
                    b1:c9:8e:79:7a:94:a9:8f:05:e2:e9:da:d3:06:e9:
                    1c:22:93:8f:dc:bb:34:73:8f:73:bb:f9:cf:b4:ae:
                    2b:a8:2b:9d:ea:35:19:ac:c6:4a:c4:6c:28:fb:68:
                    89:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:44:D4:98:CF:D9:90:6F:D3:CD:BA:1C:5A:0B:DB:4D:97:C7:AD:A9
            X509v3 Authority Key Identifier:
                keyid:65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/323830343a356338383a3a2f33322d3332203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c88::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:58:d8:a6:4d:7b:a7:3f:04:a2:e5:66:73:0b:84:39:88:8d:
         34:2d:e4:77:d9:bb:15:b1:33:8c:ca:c0:27:1e:ea:39:6f:4c:
         c8:3a:d1:c2:a1:00:49:2e:f8:c2:9b:be:a0:a5:0a:df:77:7b:
         72:1d:9b:17:b3:74:23:82:64:6b:22:a9:f6:f4:4b:04:5e:a6:
         7a:65:7c:a5:54:7f:a4:32:9b:fb:7a:b6:58:ff:f8:06:e5:15:
         e9:5f:b6:41:94:93:1a:33:59:07:69:ef:61:9d:fd:41:e0:ef:
         d8:64:3c:10:a9:ad:53:09:c4:16:13:2f:ce:23:47:6e:cb:0f:
         93:10:a2:56:f9:47:3f:0b:da:d9:b6:8a:4b:f6:62:dd:a4:dc:
         84:f2:19:53:76:56:0e:a7:cf:07:0e:88:ef:8e:cf:53:98:43:
         8d:09:cd:8c:cb:40:0a:a0:0b:17:f2:a4:81:3a:e9:2b:dc:88:
         9e:ff:50:82:6b:2b:d1:c5:5d:bc:21:2f:4a:cd:a6:c4:2c:2d:
         a6:9c:f6:59:0e:97:f3:34:83:5d:95:92:7e:05:15:d6:26:38:
         58:f0:2a:de:74:0b:13:55:3e:f3:02:4f:aa:3f:78:a4:be:89:
         cd:1b:a8:77:d2:83:d2:a6:52:64:22:68:69:00:6c:43:c4:72:
         81:64:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:04:38 2025 by rpki-client