Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/323830343a363266343a3a2f33322d313238203d3e20323639333330.roa
File:                     323830343a363266343a3a2f33322d313238203d3e20323639333330.roa (raw, json)
Hash identifier:          eerZdowkSFe4u7tM6wj9rD63OxfKHbRgte4SQ7R6lV0=
Subject key identifier:   EA:2F:F5:DA:D3:E6:11:30:7B:01:4B:52:9C:9C:F7:13:53:A3:9F:86
Certificate issuer:       /CN=6545F594C81E03CA80107611F7A05BD2E940F666
Certificate serial:       438320FFCAB75E6C6E0E9B987AA11CAFD62C5FA4
Authority key identifier: 65:45:F5:94:C8:1E:03:CA:80:10:76:11:F7:A0:5B:D2:E9:40:F6:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6545F594C81E03CA80107611F7A05BD2E940F666.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/323830343a363266343a3a2f33322d313238203d3e20323639333330.roa
Signing time:             Sat 27 Sep 2025 23:01:22 +0000
ROA not before:           Sat 27 Sep 2025 22:56:22 +0000
ROA not after:            Sat 26 Sep 2026 23:01:22 +0000
asID:                     269330
IP address blocks:        2804:62f4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/6545F594C81E03CA80107611F7A05BD2E940F666.crl
                          rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/6545F594C81E03CA80107611F7A05BD2E940F666.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6545F594C81E03CA80107611F7A05BD2E940F666.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 22:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:83:20:ff:ca:b7:5e:6c:6e:0e:9b:98:7a:a1:1c:af:d6:2c:5f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6545F594C81E03CA80107611F7A05BD2E940F666
        Validity
            Not Before: Sep 27 22:56:22 2025 GMT
            Not After : Sep 26 23:01:22 2026 GMT
        Subject: CN=EA2FF5DAD3E611307B014B529C9CF71353A39F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:67:05:e5:03:21:e3:7b:3c:c5:76:bf:2d:51:
                    de:8f:e7:ab:10:23:ca:80:3e:ea:f3:ce:36:68:54:
                    6c:61:92:9e:f5:8f:91:2e:27:0d:51:1d:e8:5b:84:
                    82:d7:13:f0:8f:ac:4f:18:d0:4d:f5:3f:61:cd:39:
                    1a:2d:9d:29:e9:a2:ea:41:14:2e:ea:a5:c7:87:f4:
                    c9:32:81:04:9f:19:ae:6b:6a:3f:76:bc:5c:d1:00:
                    ef:73:1e:30:70:9e:a3:43:c6:2b:b4:c2:f8:bf:93:
                    90:a0:60:4f:f9:f0:60:4e:80:53:54:7e:d6:19:68:
                    f1:6e:84:75:ca:1d:2f:47:3c:6f:af:e2:42:ee:4e:
                    51:c6:e3:5e:60:78:2d:75:3b:a1:ea:03:02:24:9b:
                    64:c1:20:a6:8b:32:03:80:e7:ca:63:f5:b5:a6:20:
                    8d:82:23:93:7d:dc:88:93:f9:f6:95:81:62:52:eb:
                    9c:c6:0c:3a:0e:22:c9:d8:ad:bd:a5:93:5f:a6:af:
                    58:6e:79:ce:04:69:64:18:7c:42:a6:2a:56:a1:c9:
                    40:15:ce:f4:72:bf:2b:83:31:38:09:b5:78:0a:63:
                    40:d9:b5:64:a5:c5:d8:b1:3e:da:1f:1e:6d:d7:ac:
                    92:6b:57:e4:8b:b3:76:9f:65:b9:b7:d6:01:86:af:
                    1a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2F:F5:DA:D3:E6:11:30:7B:01:4B:52:9C:9C:F7:13:53:A3:9F:86
            X509v3 Authority Key Identifier:
                keyid:65:45:F5:94:C8:1E:03:CA:80:10:76:11:F7:A0:5B:D2:E9:40:F6:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/6545F594C81E03CA80107611F7A05BD2E940F666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6545F594C81E03CA80107611F7A05BD2E940F666.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wWUpSWkkVyjFvTR3vxSrjJUJm3rNAGh5hXB2TDfHipX/0/323830343a363266343a3a2f33322d313238203d3e20323639333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:2a:cd:07:e5:5c:18:8a:0a:ab:43:31:ab:73:ba:a2:a3:2d:
         d9:f3:b8:b1:1e:5d:3b:8b:18:51:c5:a5:68:a2:54:59:d8:02:
         2b:7d:2d:39:46:2e:61:15:e1:2e:97:fc:2f:b6:c2:81:96:11:
         4a:84:6f:ac:40:91:48:54:07:2f:d9:29:1d:8a:7e:f1:9a:97:
         bb:a8:ca:f7:79:73:7d:0b:d9:45:e8:53:49:fb:6e:b4:b6:5b:
         37:f8:0d:c6:c4:53:50:36:e9:90:39:1e:b3:93:26:fc:26:19:
         02:da:bb:85:15:6b:f7:ef:fd:6f:9d:cd:56:68:8b:15:3f:8d:
         74:db:15:99:79:20:6f:ca:2d:9e:04:7a:75:f4:1f:86:e7:75:
         d0:c1:53:91:09:af:ee:ae:ba:db:87:8e:ff:85:15:c5:75:81:
         b5:0a:b0:df:bb:03:ed:d2:61:ea:44:f4:bd:d2:99:fc:dd:21:
         b8:e6:ed:08:38:9e:5b:32:6d:07:ee:f8:bf:b1:28:a1:55:f7:
         02:1b:9b:53:6b:30:1b:33:9f:7a:d6:6e:4b:e3:54:b5:4c:b8:
         27:11:30:e4:ea:e5:b9:54:f8:ea:8a:bc:90:3a:46:f2:53:14:
         d2:8c:ed:d8:43:c6:0d:05:d3:ba:b6:55:1e:28:48:9c:7c:c4:
         c3:45:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:04:03 2025 by rpki-client