Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/323830343a383966383a3a2f33322d3438203d3e20323733363338.roa
File:                     323830343a383966383a3a2f33322d3438203d3e20323733363338.roa (raw, json)
Hash identifier:          nJ1jP8kWxROVlxgV42w6pt5bFCZlVe3bhWUcYiCCrio=
Subject key identifier:   0F:39:B4:8A:36:F1:9C:87:9F:F4:2A:B2:10:1C:2F:8D:23:C6:5D:2D
Certificate issuer:       /CN=5CEFAC68C13B3048507970843DFCA0B39E32C2F9
Certificate serial:       71B30A4FECAAA13F96FB0A90CEF13EE3A2C96E6F
Authority key identifier: 5C:EF:AC:68:C1:3B:30:48:50:79:70:84:3D:FC:A0:B3:9E:32:C2:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/323830343a383966383a3a2f33322d3438203d3e20323733363338.roa
Signing time:             Wed 01 Oct 2025 17:03:46 +0000
ROA not before:           Wed 01 Oct 2025 16:58:46 +0000
ROA not after:            Wed 30 Sep 2026 17:03:46 +0000
asID:                     273638
IP address blocks:        2804:89f8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.crl
                          rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b3:0a:4f:ec:aa:a1:3f:96:fb:0a:90:ce:f1:3e:e3:a2:c9:6e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CEFAC68C13B3048507970843DFCA0B39E32C2F9
        Validity
            Not Before: Oct  1 16:58:46 2025 GMT
            Not After : Sep 30 17:03:46 2026 GMT
        Subject: CN=0F39B48A36F19C879FF42AB2101C2F8D23C65D2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:09:b2:b5:3c:70:14:95:98:27:22:25:95:
                    c1:67:9c:19:b4:6f:ed:70:cf:f5:45:ae:5d:56:c8:
                    c9:0b:5a:a6:6c:a8:40:a6:33:86:7e:94:d2:68:ec:
                    d9:7b:8c:74:f4:e6:f2:5d:e8:99:37:e3:e8:84:db:
                    2f:26:50:0d:a0:37:6c:34:00:f3:3c:a6:8d:94:bb:
                    33:22:72:59:92:86:03:69:9e:4c:af:c6:77:f1:3f:
                    00:79:0e:10:38:5a:bf:f7:98:ff:00:6e:94:03:3d:
                    5b:ad:94:a2:b4:a6:97:d2:15:a7:a7:68:10:69:f1:
                    ce:eb:2d:20:92:22:45:dc:6f:9e:e2:10:0e:63:56:
                    41:8f:f9:3d:70:54:73:e2:c1:1c:a4:02:b0:77:89:
                    ee:35:f7:a8:86:1f:66:0d:b9:87:23:d6:13:23:46:
                    0b:1d:8d:9f:a6:4f:90:35:8b:e8:26:6a:1f:d6:8e:
                    bb:8d:dd:cf:76:38:ec:ef:19:6a:e7:60:9a:e5:49:
                    80:15:20:f1:ac:bd:8b:80:3f:2f:14:92:01:40:5e:
                    b8:74:39:83:22:82:02:4a:35:9a:0a:fc:0c:7b:17:
                    5c:28:8c:f8:87:b9:39:9e:a0:8b:e4:2a:3c:a3:02:
                    cd:4d:26:09:6f:44:f2:41:1c:77:4c:27:c5:1c:7f:
                    ab:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:39:B4:8A:36:F1:9C:87:9F:F4:2A:B2:10:1C:2F:8D:23:C6:5D:2D
            X509v3 Authority Key Identifier:
                keyid:5C:EF:AC:68:C1:3B:30:48:50:79:70:84:3D:FC:A0:B3:9E:32:C2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/323830343a383966383a3a2f33322d3438203d3e20323733363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:89f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:0b:de:dc:04:20:36:f3:0d:37:bf:18:d0:15:63:a5:15:04:
         29:72:3a:0a:bf:b1:d9:3b:9c:17:09:d5:b0:31:71:ec:18:51:
         37:bb:44:37:9a:bd:d7:8c:c2:50:48:77:4a:27:de:0d:4e:9b:
         d0:6f:10:7b:3c:8f:f5:9c:47:a1:37:b3:99:35:68:45:43:c1:
         a7:8e:83:be:bc:34:75:4d:e6:ba:c7:71:21:5f:a2:ee:71:1b:
         89:44:94:80:19:2b:03:ce:54:ea:7a:66:85:2d:0b:68:40:aa:
         26:c5:43:02:48:23:ad:c2:ce:e8:ce:1c:36:a4:8c:3a:ef:67:
         3a:54:d1:6e:aa:e1:f0:44:7c:9d:99:42:53:f4:77:37:3d:2c:
         39:07:ba:1c:4c:ec:d1:5a:b7:c8:f4:8e:47:41:96:cb:67:27:
         ec:af:69:ad:b5:f4:f9:72:bf:48:f8:5a:50:1f:9d:e0:e7:55:
         24:5c:02:90:f7:83:c3:da:40:41:97:a6:d0:9f:7e:18:2c:7a:
         47:fe:c6:bc:e4:07:86:f0:16:c8:92:1b:b6:b5:14:2a:6b:4b:
         d6:da:a6:d5:c4:cc:18:fa:de:4c:da:95:50:7e:5d:6b:23:94:
         59:72:a6:77:1b:5b:68:c9:bb:c4:e5:d7:54:94:03:62:b1:46:
         e8:1f:c1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:13 2025 by rpki-client