Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/323830343a316439303a3a2f33322d3438203d3e20323634333738.roa
File:                     323830343a316439303a3a2f33322d3438203d3e20323634333738.roa (raw, json)
Hash identifier:          ZNpFXSKgaV6jUOSCneW4uom6L0uJ84t6O2fl2OUay/w=
Subject key identifier:   D8:F4:2D:9A:7A:4C:41:8E:03:3B:2A:63:4B:22:D1:4D:C4:FB:82:21
Certificate issuer:       /CN=BCF164423C31F706BBCFAC64A8699B70E19DE775
Certificate serial:       751885E7CF58BAF4CD63D0444A1A39C6F3B5400B
Authority key identifier: BC:F1:64:42:3C:31:F7:06:BB:CF:AC:64:A8:69:9B:70:E1:9D:E7:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF164423C31F706BBCFAC64A8699B70E19DE775.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/323830343a316439303a3a2f33322d3438203d3e20323634333738.roa
Signing time:             Fri 03 Oct 2025 20:24:59 +0000
ROA not before:           Fri 03 Oct 2025 20:19:59 +0000
ROA not after:            Fri 02 Oct 2026 20:24:59 +0000
asID:                     264378
IP address blocks:        2804:1d90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/BCF164423C31F706BBCFAC64A8699B70E19DE775.crl
                          rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/BCF164423C31F706BBCFAC64A8699B70E19DE775.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF164423C31F706BBCFAC64A8699B70E19DE775.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:43:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:18:85:e7:cf:58:ba:f4:cd:63:d0:44:4a:1a:39:c6:f3:b5:40:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCF164423C31F706BBCFAC64A8699B70E19DE775
        Validity
            Not Before: Oct  3 20:19:59 2025 GMT
            Not After : Oct  2 20:24:59 2026 GMT
        Subject: CN=D8F42D9A7A4C418E033B2A634B22D14DC4FB8221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:97:b7:c9:2d:52:6b:3b:bc:bc:bb:be:4c:
                    5c:7c:90:ce:95:db:2c:da:ce:96:26:a2:de:7b:44:
                    92:10:75:35:be:70:10:c7:e4:b7:0f:64:8e:43:2c:
                    7a:a3:a8:d6:8a:9e:fc:5d:94:ff:ee:29:76:97:c3:
                    c3:59:fc:d5:d9:48:55:0d:5a:ce:5c:28:a7:bb:5a:
                    3f:5b:be:69:fe:08:c6:64:0b:54:9a:7b:bc:82:9a:
                    06:ef:85:fe:1c:c5:4f:61:ce:3c:0f:b2:e2:78:8a:
                    ea:f0:fe:e2:c9:cc:1d:a3:d5:91:52:fc:81:8b:bd:
                    4d:e8:9a:ed:2e:2c:c4:23:c4:96:1e:e3:1b:ec:19:
                    55:20:a9:d1:03:31:83:f7:5e:fc:e1:fb:45:84:68:
                    74:cb:b2:60:a2:95:05:5c:a8:19:e7:b5:05:76:4f:
                    22:e6:90:20:32:f6:5a:a9:24:ed:08:59:3a:d7:1b:
                    6d:de:bc:00:82:d3:e0:56:a8:82:4e:45:19:db:06:
                    57:ed:55:1a:c0:a7:dd:e4:3d:c0:b7:11:34:30:9b:
                    5a:c2:73:9f:79:e1:1c:dc:66:57:ae:67:ea:d5:d6:
                    1f:9c:36:ce:77:4e:22:45:ea:f8:80:b5:c8:fc:40:
                    10:ad:2a:f1:a6:60:df:78:d3:85:07:3b:de:ba:04:
                    f3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F4:2D:9A:7A:4C:41:8E:03:3B:2A:63:4B:22:D1:4D:C4:FB:82:21
            X509v3 Authority Key Identifier:
                keyid:BC:F1:64:42:3C:31:F7:06:BB:CF:AC:64:A8:69:9B:70:E1:9D:E7:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/BCF164423C31F706BBCFAC64A8699B70E19DE775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF164423C31F706BBCFAC64A8699B70E19DE775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/323830343a316439303a3a2f33322d3438203d3e20323634333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:7a:2a:1f:f0:b7:51:a9:82:42:4f:f9:03:10:15:a7:56:af:
         90:94:8a:8c:78:0d:3a:85:e8:33:25:e8:06:63:83:7c:6f:83:
         a7:7d:0d:43:57:bc:df:1d:24:26:50:01:d1:c4:72:a7:aa:84:
         ba:a9:b6:e9:7b:f1:c0:8d:72:a9:65:45:9e:61:c0:66:f2:9c:
         5a:88:8b:75:7a:29:ed:06:86:e7:e9:c2:18:7a:7d:bf:35:a4:
         66:c5:5e:0d:28:79:f6:f8:40:ab:93:c5:81:55:3c:1d:b5:bd:
         a5:2b:c1:d9:31:58:c5:f6:6b:e3:4f:42:71:5b:bb:a9:e3:e8:
         d4:6c:4a:49:d3:39:ff:b3:bf:28:93:a9:80:7e:4e:ba:a1:d8:
         76:f0:a5:63:8e:99:3e:32:a4:20:c6:28:d8:8e:34:08:34:33:
         4f:96:50:18:09:70:d9:5e:8a:37:02:44:17:c7:54:a6:7a:6c:
         a1:1d:d8:f6:a3:8a:86:d9:9b:31:21:38:2e:cc:21:11:c2:07:
         71:f5:f5:cb:90:e0:de:7e:a6:3d:e3:fc:b0:0b:01:a0:1a:5e:
         3a:8a:b4:49:f4:a6:9d:ac:3e:7e:99:45:2d:e1:77:67:86:38:
         1d:9e:c1:e6:0d:f2:99:24:35:b4:e0:e6:ab:00:5f:90:e1:06:
         42:7d:10:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:32:48 2025 by rpki-client