Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/323830343a363531343a3a2f33322d313238203d3e20323639343637.roa
File:                     323830343a363531343a3a2f33322d313238203d3e20323639343637.roa (raw, json)
Hash identifier:          iMxyF+rnTj13Rs8BT7ldut1vfFBm4OhfJjlSc8T5pbw=
Subject key identifier:   CA:5F:F0:2A:D5:79:9E:D0:C3:51:6A:D8:2E:DC:E7:7E:22:8E:5A:5B
Certificate issuer:       /CN=FB85EAC0611AB7D8E2431317BF5D75C53E806B13
Certificate serial:       7DA5B5683BE7064BC83F39DFEEF2EF6544174B35
Authority key identifier: FB:85:EA:C0:61:1A:B7:D8:E2:43:13:17:BF:5D:75:C5:3E:80:6B:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB85EAC0611AB7D8E2431317BF5D75C53E806B13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/323830343a363531343a3a2f33322d313238203d3e20323639343637.roa
Signing time:             Thu 09 Oct 2025 19:16:59 +0000
ROA not before:           Thu 09 Oct 2025 19:11:59 +0000
ROA not after:            Thu 08 Oct 2026 19:16:59 +0000
asID:                     269467
IP address blocks:        2804:6514::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/FB85EAC0611AB7D8E2431317BF5D75C53E806B13.crl
                          rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/FB85EAC0611AB7D8E2431317BF5D75C53E806B13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB85EAC0611AB7D8E2431317BF5D75C53E806B13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a5:b5:68:3b:e7:06:4b:c8:3f:39:df:ee:f2:ef:65:44:17:4b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB85EAC0611AB7D8E2431317BF5D75C53E806B13
        Validity
            Not Before: Oct  9 19:11:59 2025 GMT
            Not After : Oct  8 19:16:59 2026 GMT
        Subject: CN=CA5FF02AD5799ED0C3516AD82EDCE77E228E5A5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2f:3b:1b:b7:1f:62:d9:c5:00:84:a9:9f:1f:
                    05:62:f6:cb:e3:a1:c7:21:3d:99:0d:6e:d7:24:89:
                    2b:59:a8:93:14:6b:bd:5e:23:cb:85:ec:d7:85:77:
                    b4:96:99:67:91:38:5a:e1:57:c9:d6:cb:38:24:2e:
                    81:1b:bc:d2:b4:1c:41:44:41:f3:5a:61:7e:3c:cc:
                    63:1b:6d:31:fc:fc:1d:bd:9b:de:db:cc:d0:62:92:
                    a5:1a:75:7a:51:32:ce:54:0e:b7:94:68:82:d3:cd:
                    e6:c9:d7:11:5e:0b:dc:61:99:35:f3:6e:29:bb:f3:
                    fa:9b:4a:91:34:0f:ae:6b:fe:0c:7d:09:85:28:2e:
                    cf:80:28:8b:81:20:9d:e9:74:e8:2b:1a:0f:d5:08:
                    78:d0:4a:9f:88:83:47:6f:3b:08:5a:35:50:54:5e:
                    3e:83:98:cd:91:ad:33:b5:6e:21:db:3e:2b:45:80:
                    1b:23:3e:b3:64:e0:35:9e:7a:73:7e:4a:a9:85:e9:
                    8d:48:35:5f:7b:40:e7:5b:de:65:e5:3c:3e:5d:55:
                    9f:1a:c4:ce:f6:f3:3a:a2:a7:21:f4:97:bd:47:78:
                    8f:b0:10:e3:18:07:2e:d2:4c:52:44:0f:52:8f:1f:
                    a6:ed:85:85:19:6d:75:49:33:85:01:94:fb:7b:3c:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5F:F0:2A:D5:79:9E:D0:C3:51:6A:D8:2E:DC:E7:7E:22:8E:5A:5B
            X509v3 Authority Key Identifier:
                keyid:FB:85:EA:C0:61:1A:B7:D8:E2:43:13:17:BF:5D:75:C5:3E:80:6B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/FB85EAC0611AB7D8E2431317BF5D75C53E806B13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB85EAC0611AB7D8E2431317BF5D75C53E806B13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7c2sAVHYvBxnNpVDAA28eanmJ9oegSYCXUG75KPGHuwk/0/323830343a363531343a3a2f33322d313238203d3e20323639343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6514::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:72:82:ea:48:49:a9:e9:cd:88:f7:59:4d:bd:ae:23:b9:fa:
         6c:1a:92:50:f6:ea:bc:b3:3c:ab:3f:23:b7:d2:db:f2:c1:2e:
         8d:01:c9:25:ea:de:02:80:72:58:ae:f4:e3:3a:c7:15:b8:c5:
         0f:11:86:1a:dc:a3:7c:37:eb:02:ea:46:b1:a6:9f:43:10:af:
         1d:d1:9d:e9:72:59:68:fd:33:b3:e0:88:d5:f1:0d:d7:ca:db:
         ed:70:0b:f1:8a:50:75:39:4c:34:d0:fc:c8:c6:b0:58:f1:47:
         d4:7c:ea:d1:cf:65:db:f1:6a:42:80:9b:5b:c5:0b:24:c1:5b:
         87:d2:0f:78:89:f2:63:73:c0:f1:5c:96:33:0e:9e:3a:53:55:
         00:ba:be:2d:1b:af:b3:59:df:7b:b4:a3:9b:ad:42:4e:c0:b7:
         1b:ce:be:fc:e1:a8:70:39:60:55:07:70:73:e0:49:f7:05:97:
         84:e8:21:81:be:b0:0c:ad:c8:9e:bb:83:91:e7:74:5c:17:26:
         be:59:40:b9:42:43:7c:db:37:bc:f4:17:c1:e2:fe:74:22:f0:
         24:45:6c:55:5d:22:c4:3e:5b:c7:4f:29:64:ba:32:1c:de:b5:
         dc:55:8a:bc:d2:5f:78:1d:ec:07:5e:37:e3:c0:56:41:6f:6a:
         1b:8b:5e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:37:25 2025 by rpki-client