Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/323830343a363535343a3a2f33322d3438203d3e20323639343833.roa
File:                     323830343a363535343a3a2f33322d3438203d3e20323639343833.roa (raw, json)
Hash identifier:          TZWtfH5ij650ijLBJ9vtX7taN3u/arKIvGUt+j4npdE=
Subject key identifier:   E6:A2:40:48:11:E2:49:92:B9:23:59:3B:E8:AD:AF:B7:8C:68:F7:D7
Certificate issuer:       /CN=CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1
Certificate serial:       32D5909856DE794CA666A1012208B39F861BD021
Authority key identifier: CB:22:4E:C9:F8:B4:CE:EA:2F:2D:6E:2F:B6:E2:FD:AD:B6:AA:C8:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/323830343a363535343a3a2f33322d3438203d3e20323639343833.roa
Signing time:             Wed 24 Sep 2025 12:07:32 +0000
ROA not before:           Wed 24 Sep 2025 12:02:32 +0000
ROA not after:            Wed 23 Sep 2026 12:07:32 +0000
asID:                     269483
IP address blocks:        2804:6554::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.crl
                          rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d5:90:98:56:de:79:4c:a6:66:a1:01:22:08:b3:9f:86:1b:d0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1
        Validity
            Not Before: Sep 24 12:02:32 2025 GMT
            Not After : Sep 23 12:07:32 2026 GMT
        Subject: CN=E6A2404811E24992B923593BE8ADAFB78C68F7D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:ee:aa:7b:8d:c2:74:df:cc:c6:a9:09:40:
                    1c:cd:ee:cd:c5:41:44:8c:84:88:a9:2e:4e:e4:2b:
                    ec:58:9d:b0:6e:ce:87:2d:b7:46:a4:d1:e2:6f:0c:
                    12:65:71:16:8f:3d:75:61:f9:95:79:ad:6b:a8:60:
                    eb:94:e4:64:60:ac:23:ba:94:c3:bf:c3:73:c5:f8:
                    b9:74:f8:af:54:56:3f:8b:f4:72:48:5a:58:c5:4d:
                    27:35:71:56:b5:d9:bf:9e:d8:c2:67:36:23:cc:84:
                    27:86:6b:e5:dd:15:b9:cb:a2:1c:bf:0a:03:65:0c:
                    18:50:4e:cd:7c:d2:c0:c5:72:c8:a2:09:f1:4a:cf:
                    e6:0b:ff:25:3d:48:09:55:24:9e:41:56:80:b3:70:
                    b0:f6:a1:23:de:32:28:99:43:4a:c1:20:9b:8a:bc:
                    95:03:44:5b:d9:4e:a9:e6:3a:88:69:b7:32:31:01:
                    9f:21:a9:25:98:12:95:92:db:0e:2b:d9:a8:50:f6:
                    55:c0:29:74:de:c3:52:ab:46:2f:94:46:bb:89:6d:
                    0a:e7:95:f1:6c:8f:73:ee:76:7e:60:9e:1d:ac:9e:
                    e6:41:0a:ed:63:00:88:19:6f:0f:cf:91:18:9c:cc:
                    6d:c9:72:33:30:58:4b:3c:36:49:8f:a8:8f:1e:be:
                    62:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A2:40:48:11:E2:49:92:B9:23:59:3B:E8:AD:AF:B7:8C:68:F7:D7
            X509v3 Authority Key Identifier:
                keyid:CB:22:4E:C9:F8:B4:CE:EA:2F:2D:6E:2F:B6:E2:FD:AD:B6:AA:C8:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB224EC9F8B4CEEA2F2D6E2FB6E2FDADB6AAC8A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7poKX9N8dcuVV79vR2f6w85cj3tpBzAs2jA7qi9TcBvk/0/323830343a363535343a3a2f33322d3438203d3e20323639343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6554::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:8b:c0:11:ba:70:c6:3b:62:ec:0c:be:dc:cd:66:73:eb:4b:
         88:a6:fc:8e:d7:a3:1f:05:00:f6:89:0b:56:9d:41:b3:70:ef:
         a4:d9:a3:19:ba:70:33:7f:44:72:20:7f:45:19:64:97:c6:4a:
         e8:73:2b:80:e4:59:35:29:eb:0e:9d:86:85:74:78:2a:00:6a:
         b3:7e:5e:a6:f0:67:33:07:74:16:f9:24:7c:1f:02:83:30:3d:
         98:15:dd:5e:49:e4:03:fd:11:8e:04:22:6c:21:e7:50:57:14:
         f3:34:1a:dc:62:79:19:d6:c0:4a:ab:f0:50:ff:4b:02:56:33:
         0b:3b:0d:fe:6f:98:95:c4:f7:94:47:66:c1:dd:7c:d0:8b:bb:
         47:3f:30:80:0d:42:6f:e3:9e:28:59:07:38:5f:01:98:44:0f:
         20:f8:64:b1:b4:2b:cd:13:48:a1:3c:6f:73:a1:33:65:a8:3a:
         6d:44:0e:71:52:d9:95:a4:8a:a0:bf:ea:0e:38:bd:4d:ff:57:
         d1:43:b0:da:36:16:b9:26:6b:c5:bc:50:1b:2f:11:4f:e4:e7:
         39:65:e4:e1:95:71:83:40:99:1c:39:f8:46:ae:98:b1:c8:1e:
         21:c6:ca:9c:1f:af:a6:1c:29:3f:d6:b2:8b:a8:92:f0:8e:6d:
         3e:88:64:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:49:11 2025 by rpki-client