Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/323830343a326238383a383030303a3a2f33332d3333203d3e20323635313538.roa
File:                     323830343a326238383a383030303a3a2f33332d3333203d3e20323635313538.roa (raw, json)
Hash identifier:          dVUlyRLt7W3f7StkIgCbYBc62E37I503BiY4VJxFlSI=
Subject key identifier:   EE:70:2D:61:CB:A5:14:0A:59:9E:66:4F:39:F8:54:87:11:CB:99:BE
Certificate issuer:       /CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
Certificate serial:       799A817341F897EE788A44D5417EFF16D88BC709
Authority key identifier: FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/323830343a326238383a383030303a3a2f33332d3333203d3e20323635313538.roa
Signing time:             Thu 18 Sep 2025 12:24:00 +0000
ROA not before:           Thu 18 Sep 2025 12:19:00 +0000
ROA not after:            Thu 17 Sep 2026 12:24:00 +0000
asID:                     265158
IP address blocks:        2804:2b88:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl
                          rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9a:81:73:41:f8:97:ee:78:8a:44:d5:41:7e:ff:16:d8:8b:c7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
        Validity
            Not Before: Sep 18 12:19:00 2025 GMT
            Not After : Sep 17 12:24:00 2026 GMT
        Subject: CN=EE702D61CBA5140A599E664F39F8548711CB99BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ee:29:3b:d7:06:d2:42:76:9c:3b:20:47:9a:
                    d1:36:44:1f:ec:3f:df:52:3a:d3:67:6e:25:c8:15:
                    ef:84:e7:fc:7b:38:21:e9:1d:33:37:d6:70:8d:56:
                    5c:5d:c6:aa:56:dc:80:89:93:01:93:9d:c3:e3:73:
                    f0:95:6a:f5:ce:95:5c:1e:d1:6d:53:54:69:1d:2c:
                    1c:d2:ec:7d:44:c5:d6:37:7a:14:00:9d:f5:ec:ad:
                    75:8a:8c:98:47:0e:6a:40:75:d1:4f:a5:21:68:06:
                    78:96:0c:1a:6d:7c:31:5a:91:b9:c4:25:26:a6:e9:
                    9c:7f:1c:06:1b:92:2a:c1:87:fe:b3:b0:2a:ab:ff:
                    c7:a9:d6:5f:06:19:b8:92:0c:3d:a6:88:56:b9:a3:
                    fa:fb:d3:12:be:92:a5:84:02:f0:bf:71:75:36:ca:
                    85:b0:d8:ac:04:79:3a:8e:8b:85:91:36:49:57:45:
                    b7:c5:d7:0d:77:24:23:90:b2:bd:43:7f:be:1b:6a:
                    9d:56:3f:4a:85:e6:83:99:d2:9b:73:81:f8:74:70:
                    19:4b:52:f2:0e:8c:b3:82:34:b9:bb:b4:47:64:e1:
                    61:db:f0:ff:73:86:9a:85:d7:c0:fc:70:d5:76:13:
                    eb:c4:f4:66:f2:38:2f:8f:b2:ec:0a:78:13:d7:b0:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:70:2D:61:CB:A5:14:0A:59:9E:66:4F:39:F8:54:87:11:CB:99:BE
            X509v3 Authority Key Identifier:
                keyid:FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/323830343a326238383a383030303a3a2f33332d3333203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b88:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         11:57:8f:3b:25:05:f3:d3:04:02:a2:31:f8:60:12:09:b0:0a:
         67:31:d2:ee:30:2c:9f:70:90:ce:d3:20:c0:7a:35:cf:f8:50:
         56:38:6f:13:23:1d:1a:8b:1b:d0:25:22:dd:62:e9:b6:5d:4f:
         13:cb:1d:36:31:c5:96:b6:ea:bb:bc:03:8c:7c:bf:e4:0d:42:
         bb:62:47:d7:9d:87:7a:be:95:35:4d:3e:45:ce:2e:4d:ce:ed:
         26:d0:29:6a:cc:0f:d2:c1:f1:7f:ff:2d:10:f5:a6:1b:c6:dd:
         1e:9e:f6:bc:18:1e:f6:cf:96:25:87:6a:ef:76:e2:8d:12:20:
         34:6e:64:06:4c:50:53:1a:96:7a:b2:b4:2f:3a:a5:e8:27:1d:
         68:56:1e:82:49:6a:91:1b:26:69:9b:94:33:9a:9b:2c:d8:b9:
         b3:40:34:ee:c5:d5:6b:e7:ad:40:5d:46:30:22:c8:42:75:1e:
         64:74:9a:75:fb:e7:69:f1:df:1a:ae:69:02:83:2f:3e:72:5e:
         e5:c5:c9:b3:0e:ba:1b:b1:30:b7:cb:18:89:16:f3:24:ba:aa:
         b8:fd:7b:73:90:ef:84:0f:1b:1b:64:fd:2e:ec:1e:d9:58:e7:
         b8:e7:37:79:b7:ab:94:63:23:61:0e:f6:48:a0:36:fd:ec:11:
         2d:c4:a1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:58:50 2025 by rpki-client