Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33322d3332203d3e20323639303234.roa
File:                     323830343a356534633a3a2f33322d3332203d3e20323639303234.roa (raw, json)
Hash identifier:          StP+SR7mPYoBr5LmHYn+JRFlddpB6Xyb/HKMUXSImak=
Subject key identifier:   64:14:1D:1B:D1:5B:44:2D:80:8A:D6:F8:6B:7E:EF:C0:35:51:6C:56
Certificate issuer:       /CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
Certificate serial:       7BF420B4BB6F7B81EF13D0D6C015A409440E904C
Authority key identifier: FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33322d3332203d3e20323639303234.roa
Signing time:             Thu 25 Sep 2025 12:48:30 +0000
ROA not before:           Thu 25 Sep 2025 12:43:30 +0000
ROA not after:            Thu 24 Sep 2026 12:48:30 +0000
asID:                     269024
IP address blocks:        2804:5e4c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl
                          rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f4:20:b4:bb:6f:7b:81:ef:13:d0:d6:c0:15:a4:09:44:0e:90:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2319FC1036B0766234A53A5A9BB64CDEF6D744
        Validity
            Not Before: Sep 25 12:43:30 2025 GMT
            Not After : Sep 24 12:48:30 2026 GMT
        Subject: CN=64141D1BD15B442D808AD6F86B7EEFC035516C56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:5f:a2:ce:0a:cb:74:35:0b:13:f5:5d:6a:
                    0f:17:af:cd:82:e4:92:59:db:6c:ed:ff:7b:de:06:
                    9e:db:a4:12:92:8f:cf:12:85:28:e5:e0:93:d1:c9:
                    cd:d3:f8:b4:cb:35:3a:75:ec:ba:5b:08:0c:64:77:
                    bf:ef:b8:b6:02:29:95:6a:be:db:d0:2a:e2:7b:95:
                    c5:6b:c0:ee:6b:d4:d0:2e:ec:26:4d:e5:8b:2e:31:
                    b6:ba:d3:d6:4c:f6:f4:be:90:1f:5e:29:2f:7c:8d:
                    40:d6:05:2f:2e:20:35:28:fb:2d:3e:ac:cd:9c:a7:
                    81:53:f5:1b:dd:d0:1a:3d:2d:96:5b:4a:5a:4a:69:
                    81:bc:b0:e5:82:c9:c3:b8:4d:18:7f:08:45:8e:b0:
                    8c:4a:7e:79:0b:ac:c3:44:0f:b3:a3:8b:1a:a6:37:
                    5c:f4:ea:00:ea:27:26:ec:d9:68:ff:67:22:7a:9d:
                    5d:96:7c:79:fd:10:d2:c9:16:47:2a:64:0d:40:a8:
                    e0:b6:10:8c:ad:fb:29:e6:b0:1f:42:98:15:58:70:
                    f9:cb:c7:55:02:94:3d:24:f0:50:5f:26:01:56:ee:
                    7f:ad:24:17:e9:28:2c:6d:c3:0f:58:24:a0:76:43:
                    fa:60:6e:95:25:94:26:06:73:9e:87:5a:cc:ca:f6:
                    59:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:14:1D:1B:D1:5B:44:2D:80:8A:D6:F8:6B:7E:EF:C0:35:51:6C:56
            X509v3 Authority Key Identifier:
                keyid:FE:23:19:FC:10:36:B0:76:62:34:A5:3A:5A:9B:B6:4C:DE:F6:D7:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2319FC1036B0766234A53A5A9BB64CDEF6D744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33322d3332203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:52:ae:c5:43:ef:7e:1b:d8:c4:13:41:14:f5:45:15:5f:cd:
         6f:86:e2:2a:03:c0:08:14:4c:a1:d4:e5:97:80:32:89:4c:4d:
         37:2f:c7:10:1e:94:51:0a:85:9c:66:db:ec:4c:51:55:f0:76:
         b5:dc:6d:8e:a4:98:cc:a7:59:e7:0b:45:02:ba:74:b9:91:96:
         ae:49:13:71:c5:e5:8d:e3:b2:d7:31:61:8d:b9:78:26:97:a9:
         2b:b4:d4:a6:09:b6:17:68:e2:03:c6:ef:3c:6a:09:62:11:6f:
         5f:96:8d:ab:08:23:63:19:d9:f9:c4:89:eb:5e:67:29:15:b3:
         35:a7:61:05:86:65:ab:be:59:ed:c1:26:d8:8f:b2:d9:8d:39:
         57:ac:4f:24:c7:1f:74:c9:ce:df:8c:e2:f9:11:48:b5:fe:cc:
         f4:6d:4a:f2:94:30:1b:79:42:0c:c6:37:20:fb:b1:cf:23:ec:
         89:01:1f:b8:1b:34:71:fc:66:be:6c:6b:ef:b6:8f:3a:27:42:
         9c:b1:a9:60:79:11:01:04:5a:8d:cd:6d:3e:ac:6b:52:98:90:
         18:e9:02:bd:22:48:62:5c:c9:96:a9:a1:0a:22:0a:8a:c8:a9:
         44:71:c6:b3:b5:cc:31:4d:54:23:b7:b6:ed:a9:50:e3:d2:b3:
         81:5f:cb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:49 2025 by rpki-client