Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33342d3334203d3e20323639303234.roa
File:                     323830343a356534633a383030303a3a2f33342d3334203d3e20323639303234.roa (raw, json)
Hash identifier:          3zz9b9+Euh37noKJcPHhp/vqxXXAb7NzA7LEyRJ67sc=
Subject key identifier:   71:35:3B:8E:05:3D:0F:96:4C:22:F5:98:8B:F2:6C:EA:4B:2C:D2:53
Certificate issuer:       /CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
Certificate serial:       3D9912C54CB0674F8533F8C11D5ECACD7611D55F
Authority key identifier: FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33342d3334203d3e20323639303234.roa
Signing time:             Thu 25 Sep 2025 12:48:28 +0000
ROA not before:           Thu 25 Sep 2025 12:43:28 +0000
ROA not after:            Thu 24 Sep 2026 12:48:28 +0000
asID:                     269024
IP address blocks:        2804:5e4c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl
                          rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:99:12:c5:4c:b0:67:4f:85:33:f8:c1:1d:5e:ca:cd:76:11:d5:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
        Validity
            Not Before: Sep 25 12:43:28 2025 GMT
            Not After : Sep 24 12:48:28 2026 GMT
        Subject: CN=71353B8E053D0F964C22F5988BF26CEA4B2CD253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:fc:7b:3f:35:75:6f:86:36:5a:f7:9f:c6:
                    4e:45:e1:9b:d0:11:b4:bd:56:cc:8c:ec:f4:81:a3:
                    42:28:4c:0c:d6:3c:94:c4:df:82:d3:fe:0b:b8:94:
                    fb:8b:ed:e9:a9:b7:0b:e9:06:27:1d:1e:a9:55:58:
                    46:02:69:93:0d:a1:56:cb:2f:ed:d5:9e:0b:20:ea:
                    36:51:e7:42:ed:c4:8c:e7:bb:cd:42:e0:1a:ba:ca:
                    8c:39:de:49:a9:14:15:2b:34:1f:fb:b8:c3:b8:2a:
                    25:de:45:a3:e8:39:f4:a6:f2:81:66:df:a0:83:53:
                    0d:f7:3a:8e:d8:6a:ee:05:11:4d:13:b6:b0:2f:8b:
                    c0:c8:e3:61:32:0d:e7:96:80:ca:41:9d:db:26:62:
                    81:00:e8:bc:97:f5:da:8f:80:72:02:f8:2d:56:e1:
                    c0:2d:3a:cd:5c:49:a0:83:44:e9:6c:40:46:4e:73:
                    69:53:fe:ae:fb:bb:3d:c2:33:27:ca:a4:ad:71:46:
                    2c:41:0f:48:e5:29:4a:5b:18:c6:22:92:a9:83:ba:
                    57:25:76:af:04:43:ab:56:5b:3f:33:40:ce:61:15:
                    cf:26:53:47:69:b9:19:f0:5e:42:ef:a6:5c:34:5b:
                    67:cc:40:d4:1d:12:7d:e0:3d:a0:d7:93:03:89:4f:
                    6c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:35:3B:8E:05:3D:0F:96:4C:22:F5:98:8B:F2:6C:EA:4B:2C:D2:53
            X509v3 Authority Key Identifier:
                keyid:FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33342d3334203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e4c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1d:f8:79:a5:67:ab:60:f1:5c:31:84:d4:cf:40:af:df:8e:de:
         b6:bd:df:de:f0:d1:10:b1:03:9c:1c:7c:18:23:5b:b5:86:89:
         f3:e6:12:16:51:dc:50:7c:87:73:1b:97:2f:fd:51:be:64:f8:
         fd:25:d8:58:54:9c:fc:5b:eb:9f:e0:3d:5c:1e:8c:dc:97:07:
         57:7f:0c:af:5d:d2:aa:66:f7:2f:50:b1:9c:e8:ec:fa:42:cd:
         90:d4:4b:dc:24:cc:38:14:e1:2e:43:fd:c8:e3:4a:5d:0f:66:
         30:5b:50:63:5c:76:4e:de:e9:92:47:e6:84:71:75:b6:54:b4:
         c4:54:51:82:c7:11:ca:f9:8e:b7:7c:66:2e:96:49:78:18:c1:
         67:b8:55:bf:fc:c6:92:ed:e9:32:07:10:bd:2a:d6:b7:76:93:
         60:21:cf:96:45:8a:91:21:68:fe:06:99:18:aa:ed:7f:6f:b9:
         38:99:f6:71:8e:ae:6f:23:1a:01:34:0c:95:27:7a:c6:24:4c:
         8e:f5:e8:d4:11:dd:ca:bf:44:c0:8b:6e:ff:50:04:94:f0:61:
         6f:cc:85:fa:c7:a0:49:cb:cd:ed:a8:e3:0c:87:f6:72:ca:10:
         19:e1:bc:ea:b7:fd:1b:44:fa:59:f2:de:0a:98:59:36:d0:cd:
         bc:31:a5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:15:18 2025 by rpki-client