Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a3a2f33322d313238203d3e20323633363134.roa
File:                     323830343a313030343a3a2f33322d313238203d3e20323633363134.roa (raw, json)
Hash identifier:          gP1+tV8PZpmWvFZx2ZokAC1/6/KG+6AUmXgUNlcQVn0=
Subject key identifier:   62:26:17:64:FD:6E:27:BE:32:CA:D8:10:A4:B0:4B:82:33:4D:98:F5
Certificate issuer:       /CN=E453E20A56024AF3442573067B74ACA8B5BA9A21
Certificate serial:       62EAD929EEAC314A2172C502794A97A3FC328680
Authority key identifier: E4:53:E2:0A:56:02:4A:F3:44:25:73:06:7B:74:AC:A8:B5:BA:9A:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a3a2f33322d313238203d3e20323633363134.roa
Signing time:             Wed 24 Sep 2025 14:18:03 +0000
ROA not before:           Wed 24 Sep 2025 14:13:03 +0000
ROA not after:            Wed 23 Sep 2026 14:18:03 +0000
asID:                     263614
IP address blocks:        2804:1004::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.crl
                          rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ea:d9:29:ee:ac:31:4a:21:72:c5:02:79:4a:97:a3:fc:32:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E453E20A56024AF3442573067B74ACA8B5BA9A21
        Validity
            Not Before: Sep 24 14:13:03 2025 GMT
            Not After : Sep 23 14:18:03 2026 GMT
        Subject: CN=62261764FD6E27BE32CAD810A4B04B82334D98F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:74:73:87:ee:d8:ca:8c:dd:1b:71:11:5c:
                    dd:1e:87:28:62:1c:7a:bd:24:ee:26:cd:10:cb:3c:
                    3e:9c:ad:49:72:18:08:ed:81:be:e7:b7:78:d5:e7:
                    12:ff:d4:b2:7b:97:49:f8:5f:eb:ee:7c:12:8a:5c:
                    43:65:33:1a:43:ca:51:6d:74:73:f2:6b:e3:02:95:
                    da:76:84:33:e1:27:ce:cb:62:41:19:a9:47:55:77:
                    df:cd:5a:ae:73:3a:07:3c:f9:b7:93:dd:57:db:a7:
                    bd:59:a3:e4:7e:3f:cc:4f:56:76:cb:89:0b:43:31:
                    43:83:32:1e:2b:87:eb:e0:c1:39:fd:e0:ee:b2:c6:
                    e0:79:ed:c2:08:c3:9a:78:5f:8e:26:de:75:b7:04:
                    29:fe:65:e6:86:0f:51:de:30:0a:4c:31:67:42:d5:
                    99:98:67:ba:f0:3f:5c:9a:e7:1e:db:5f:cb:51:57:
                    62:76:83:b3:0c:fe:3a:09:7c:e7:65:e3:1e:a8:28:
                    62:1c:a1:e0:37:4e:17:fd:f2:a8:43:c5:1c:81:33:
                    5e:53:dc:d6:08:03:c5:17:41:7a:dd:6c:bb:6a:4b:
                    73:d2:76:3d:9c:e4:26:95:c3:29:1c:b0:7e:d8:d4:
                    47:55:85:9a:72:c3:22:e5:4a:35:2d:f8:be:78:86:
                    40:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:26:17:64:FD:6E:27:BE:32:CA:D8:10:A4:B0:4B:82:33:4D:98:F5
            X509v3 Authority Key Identifier:
                keyid:E4:53:E2:0A:56:02:4A:F3:44:25:73:06:7B:74:AC:A8:B5:BA:9A:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a3a2f33322d313238203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1004::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:a0:21:c1:71:db:ae:20:78:2e:31:61:4f:3b:cc:cb:2d:a5:
         6c:1f:e4:61:99:e2:97:fa:8b:d2:08:32:4d:f3:09:89:f6:64:
         62:24:4c:06:ad:4e:5c:6b:6b:24:55:ca:de:3f:2c:b2:f8:95:
         37:7c:1a:41:f6:b6:e6:6a:3b:9d:a9:92:b6:54:68:d5:2f:7c:
         d2:0d:5a:3d:10:32:25:11:d1:9a:7e:0e:2e:f4:1d:8e:90:a4:
         a3:83:89:0c:7b:a0:ab:34:3e:ac:fb:05:04:04:2c:6f:d4:56:
         8f:ce:30:a5:01:ec:2b:40:51:2b:26:fb:37:25:0a:f3:cf:6c:
         e7:c6:e7:d0:2d:c8:00:7f:08:93:6f:29:a1:45:42:65:db:e4:
         49:2d:06:4f:9b:f6:f8:de:88:59:49:a7:92:27:a3:93:15:00:
         4e:79:c2:89:f8:d0:a6:ba:04:d1:80:83:7f:c7:35:4a:be:95:
         3d:3a:98:c2:a8:6b:bd:21:32:ee:13:cb:9b:8e:44:5f:d1:08:
         48:63:01:c7:8b:4b:16:40:97:78:2d:3d:ad:47:93:34:11:42:
         56:ae:6f:ae:a7:ed:b9:0e:40:f2:9c:cf:ae:33:a1:82:a2:b1:
         5a:7a:e2:a6:d6:91:14:a2:83:35:01:66:24:01:a6:05:b2:34:
         ce:9b:dc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:04 2025 by rpki-client