Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a383630303a3a2f34302d3430203d3e203238333532.roa
File:                     323830343a6165303a383630303a3a2f34302d3430203d3e203238333532.roa (raw, json)
Hash identifier:          FgorEri9clhyKtwB2IC5BFTJPoFYWiOR9lnpGN+d4vM=
Subject key identifier:   46:71:E4:20:01:05:8E:1E:A5:AD:EC:F9:EF:EA:29:15:74:86:7D:7E
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       65C255CC88986A029989BE5FC37FB368178C4D05
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a383630303a3a2f34302d3430203d3e203238333532.roa
Signing time:             Tue 07 Oct 2025 13:48:12 +0000
ROA not before:           Tue 07 Oct 2025 13:43:12 +0000
ROA not after:            Tue 06 Oct 2026 13:48:12 +0000
asID:                     28352
IP address blocks:        2804:ae0:8600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c2:55:cc:88:98:6a:02:99:89:be:5f:c3:7f:b3:68:17:8c:4d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Oct  7 13:43:12 2025 GMT
            Not After : Oct  6 13:48:12 2026 GMT
        Subject: CN=4671E42001058E1EA5ADECF9EFEA291574867D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:d1:98:37:20:77:d3:3a:e9:fe:b9:54:17:
                    aa:57:8c:38:f6:00:e7:26:68:d7:8f:0c:68:2d:f8:
                    b2:c2:86:69:73:f5:2f:4b:75:81:e1:3b:45:e6:1a:
                    27:ef:d8:ca:8a:93:1e:75:a2:d7:a7:c8:93:2d:b5:
                    fe:f4:0b:48:d5:89:de:b3:3b:c2:4e:fc:46:87:cc:
                    64:fc:46:23:c8:50:51:47:93:ed:66:8c:18:65:ac:
                    4d:66:f4:ed:d1:27:60:9e:35:41:a4:13:9d:8e:2c:
                    23:3e:15:f1:cb:58:22:cd:ea:9c:31:6f:80:dd:8a:
                    7f:d3:d3:20:1d:80:5e:07:3c:77:bd:4e:51:f0:71:
                    0b:b4:2c:6d:1d:a2:ae:e5:34:8e:ab:0b:17:f7:8a:
                    65:6b:2e:c3:94:da:6a:e6:c4:a2:ec:3a:af:8d:af:
                    fa:02:48:85:29:2e:ac:b8:39:e2:35:b0:9f:9f:65:
                    0d:73:96:bf:af:bb:0e:1a:81:71:7e:4b:1b:b2:3f:
                    23:40:ee:1b:ba:16:ef:cd:14:19:18:c9:0c:28:62:
                    99:83:8a:38:7e:26:e4:92:5c:10:6e:2d:64:1c:89:
                    3a:52:15:53:5b:e7:5e:35:92:0f:05:40:fb:82:79:
                    f8:db:93:c9:3b:de:95:fb:ed:c3:89:f8:59:57:2c:
                    2d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:71:E4:20:01:05:8E:1E:A5:AD:EC:F9:EF:EA:29:15:74:86:7D:7E
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a383630303a3a2f34302d3430203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ae0:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:ec:16:ab:03:74:75:ab:b0:03:cc:d7:88:fd:99:18:24:20:
         e5:c0:28:02:b6:c7:9e:e6:29:17:7a:b8:4f:8a:6f:42:42:8a:
         95:a4:03:9f:48:c8:42:08:f2:e2:51:d7:16:e4:df:87:fd:d4:
         03:ea:17:b3:2e:43:e6:a3:7e:dc:39:92:27:7d:26:2c:b9:a2:
         60:cb:0f:10:24:a8:db:66:8d:59:bf:0a:89:58:ae:8e:91:22:
         8a:b6:9d:a2:13:c5:d5:c1:3a:70:41:11:ba:28:0d:03:58:26:
         3f:71:9d:0d:5e:d4:b6:99:e8:7a:84:37:5e:75:2e:f8:a5:2c:
         a5:2c:0f:f7:86:9c:73:f6:c8:d9:8b:3f:90:e3:7a:e8:60:50:
         0f:dc:2a:d3:02:e3:f0:99:58:95:da:ee:bf:4c:28:c2:80:2a:
         37:58:b8:b2:91:58:5e:bd:d5:18:11:b0:9a:57:96:88:1c:e2:
         a4:82:c4:4d:80:2f:d9:39:eb:08:03:54:1c:c2:14:be:04:3b:
         b6:40:94:9a:3a:6f:f8:0a:6a:a5:43:ba:17:88:ff:49:4b:e3:
         bf:8a:fe:2d:b1:0d:fe:c0:9c:44:34:ca:fa:54:a2:06:8f:67:
         81:03:cd:0a:7e:5f:a8:12:5c:1d:96:28:1e:aa:3a:b5:b6:da:
         c6:72:e5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:24 2025 by rpki-client