Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a343030303a3a2f33342d3334203d3e20323639303234.roa
File:                     323830343a356534633a343030303a3a2f33342d3334203d3e20323639303234.roa (raw, json)
Hash identifier:          m+cMH6BFt90y1XrgvS7CQy1uKsKUeQGCYU4c0lVmnnM=
Subject key identifier:   12:26:1E:BE:41:3E:90:72:91:3D:85:E2:1C:83:1C:FC:D1:B4:20:3C
Certificate issuer:       /CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
Certificate serial:       51B409DA8C4E6913D686617EB2A4A51E184FFA53
Authority key identifier: FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a343030303a3a2f33342d3334203d3e20323639303234.roa
Signing time:             Thu 25 Sep 2025 12:48:29 +0000
ROA not before:           Thu 25 Sep 2025 12:43:29 +0000
ROA not after:            Thu 24 Sep 2026 12:48:29 +0000
asID:                     269024
IP address blocks:        2804:5e4c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl
                          rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b4:09:da:8c:4e:69:13:d6:86:61:7e:b2:a4:a5:1e:18:4f:fa:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
        Validity
            Not Before: Sep 25 12:43:29 2025 GMT
            Not After : Sep 24 12:48:29 2026 GMT
        Subject: CN=12261EBE413E9072913D85E21C831CFCD1B4203C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:41:ae:d7:b4:b1:c9:4b:4a:2e:bc:07:04:b3:
                    dd:5e:e7:73:e3:c8:6a:b9:18:3d:83:47:1c:d2:a8:
                    44:60:61:5f:b1:d5:11:86:64:67:e0:72:01:22:43:
                    38:e0:db:87:ed:87:00:28:31:2e:17:a1:c5:f4:8e:
                    02:10:f0:e5:0b:d8:3f:67:41:de:a7:90:fb:1a:23:
                    0d:9d:71:fa:2a:05:43:7d:b6:59:20:f5:95:ac:0a:
                    25:4d:33:7f:31:51:f0:55:df:01:99:5a:d1:a1:4e:
                    87:88:cc:9e:de:bd:43:cd:36:79:1a:27:54:0f:eb:
                    7e:fd:07:87:ec:4d:20:7e:be:5d:64:2a:46:61:97:
                    b3:7f:ea:f3:86:2e:cc:7d:95:04:ab:1e:15:dc:f6:
                    6d:5c:64:1d:4b:87:12:11:cc:ee:5d:09:1d:eb:97:
                    07:76:9d:d9:e0:72:33:f4:19:55:21:c5:a7:81:cf:
                    bf:64:36:a6:c9:16:9d:36:07:3e:49:ce:8f:c9:f0:
                    7e:82:f6:76:38:07:db:3f:c5:cf:5f:ea:81:80:6b:
                    86:2e:14:6a:35:4c:95:85:64:8f:da:00:34:ef:77:
                    5f:a6:ef:bb:8e:2d:46:51:e2:05:03:23:2c:d1:cb:
                    a9:e0:7d:4b:c9:20:a8:ec:05:89:34:72:95:c0:90:
                    77:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:26:1E:BE:41:3E:90:72:91:3D:85:E2:1C:83:1C:FC:D1:B4:20:3C
            X509v3 Authority Key Identifier:
                keyid:FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a343030303a3a2f33342d3334203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e4c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7b:02:cb:98:65:5e:3b:a4:01:88:af:41:cb:f0:f8:0c:7a:3e:
         2a:c7:1b:7f:0b:c0:79:6e:7e:eb:5f:3b:3e:7d:9e:11:6a:7b:
         14:d0:c6:3e:36:c9:41:25:ad:be:7e:d6:9f:de:ac:70:e4:fa:
         44:07:f2:79:ad:10:36:9c:e2:a6:87:8e:7a:27:9c:08:b1:d0:
         3f:00:4a:9f:72:e2:f2:c9:0f:5e:af:38:fa:7a:62:3c:e1:4d:
         a0:0c:e4:c8:71:6b:5c:42:d5:7b:ad:76:86:0a:4e:1d:73:2d:
         f6:c9:d7:4a:52:25:2d:c1:2d:6c:d9:0a:7c:34:a8:cc:cf:7f:
         15:ec:59:01:6e:7c:7c:a6:71:9e:0b:04:91:51:c1:90:ca:7e:
         c0:e2:f6:0d:f5:2e:47:dc:85:c7:71:55:ef:bb:94:b8:9b:d9:
         4f:f0:87:a2:95:90:62:2b:c7:f3:10:9f:c6:7d:35:ee:02:d6:
         d6:bc:b7:b6:d8:27:24:24:c7:ee:fb:e4:3f:99:e0:03:2a:83:
         5c:93:6e:49:44:e5:5f:2e:ca:d9:41:3c:c8:ce:c6:44:c4:8b:
         7b:3e:1f:04:f5:9d:78:c0:13:4b:a0:06:e9:91:48:d3:fb:90:
         0f:f5:2a:ff:f0:3e:92:67:91:15:2c:68:65:41:6a:36:5d:df:
         17:b4:05:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:53 2025 by rpki-client