Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/323830343a376635633a3a2f33322d3438203d3e20323731363833.roa
File:                     323830343a376635633a3a2f33322d3438203d3e20323731363833.roa (raw, json)
Hash identifier:          4uf9RNTsjkxf9EuDWB+6r+m9+at6FDa0SXFQrEgl2i0=
Subject key identifier:   57:27:F8:F4:7B:4B:F2:F5:91:D9:42:B2:FD:33:AF:60:80:D1:78:93
Certificate issuer:       /CN=12160C865E8914AF8B1FCA40CE51744A67B1E7CC
Certificate serial:       695502BE102C9F0247E6C9F93F30F3838F7D8C3D
Authority key identifier: 12:16:0C:86:5E:89:14:AF:8B:1F:CA:40:CE:51:74:4A:67:B1:E7:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12160C865E8914AF8B1FCA40CE51744A67B1E7CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/323830343a376635633a3a2f33322d3438203d3e20323731363833.roa
Signing time:             Mon 13 Oct 2025 12:19:23 +0000
ROA not before:           Mon 13 Oct 2025 12:14:23 +0000
ROA not after:            Mon 12 Oct 2026 12:19:23 +0000
asID:                     271683
IP address blocks:        2804:7f5c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/12160C865E8914AF8B1FCA40CE51744A67B1E7CC.crl
                          rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/12160C865E8914AF8B1FCA40CE51744A67B1E7CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12160C865E8914AF8B1FCA40CE51744A67B1E7CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:55:02:be:10:2c:9f:02:47:e6:c9:f9:3f:30:f3:83:8f:7d:8c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12160C865E8914AF8B1FCA40CE51744A67B1E7CC
        Validity
            Not Before: Oct 13 12:14:23 2025 GMT
            Not After : Oct 12 12:19:23 2026 GMT
        Subject: CN=5727F8F47B4BF2F591D942B2FD33AF6080D17893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a4:95:14:98:5b:84:bc:ce:e4:e3:28:dc:8f:
                    74:e3:fc:49:14:3e:a9:5c:c8:67:3a:b6:e3:04:cf:
                    de:92:19:d3:ec:de:a8:70:2b:96:54:00:de:c9:db:
                    bf:6f:7d:20:34:9c:95:97:75:6c:85:87:3f:52:0f:
                    b3:f0:e7:25:36:ec:8c:2f:ff:a9:80:ec:11:d1:bd:
                    96:c9:cb:5c:1c:23:3e:d6:cc:4c:c2:4a:fa:9d:e7:
                    6d:23:40:4f:c1:48:09:66:42:16:0e:7e:c2:c0:a1:
                    2a:5f:80:20:90:91:c5:ea:5a:12:23:11:00:4d:33:
                    78:c0:72:80:9b:ba:67:f0:30:e6:9e:be:6a:6c:34:
                    f8:f8:bb:51:4b:5b:f7:0c:be:33:5c:3d:f9:ac:69:
                    ce:65:1a:29:ce:4c:69:2f:f7:4d:b3:9b:a5:e7:85:
                    a5:26:f6:f0:cb:b7:96:9c:9c:ca:64:34:09:aa:64:
                    2a:2f:c9:cd:84:17:47:a8:72:71:d4:ee:74:92:03:
                    ea:19:1d:18:46:7f:50:7c:ee:da:a2:09:9b:63:96:
                    5e:f3:88:cf:82:dc:a2:6c:85:84:6d:b3:98:76:06:
                    98:38:dc:9f:b0:87:38:22:b5:8f:e9:c9:45:1a:80:
                    2a:22:22:8d:3a:d2:df:ad:bb:05:ba:27:d4:75:28:
                    5b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:27:F8:F4:7B:4B:F2:F5:91:D9:42:B2:FD:33:AF:60:80:D1:78:93
            X509v3 Authority Key Identifier:
                keyid:12:16:0C:86:5E:89:14:AF:8B:1F:CA:40:CE:51:74:4A:67:B1:E7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/12160C865E8914AF8B1FCA40CE51744A67B1E7CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12160C865E8914AF8B1FCA40CE51744A67B1E7CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/323830343a376635633a3a2f33322d3438203d3e20323731363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:7e:6c:20:9a:17:24:6e:c8:3d:76:3b:c3:62:1c:e7:37:9f:
         ad:07:d7:db:1a:80:b0:97:53:99:76:69:5b:c8:12:ea:9e:61:
         a0:d0:5e:64:51:6b:c6:90:84:64:73:d3:9d:40:c5:cb:10:7d:
         eb:a3:22:75:ff:81:de:2a:a6:ff:3d:85:13:44:4c:e3:1b:3c:
         40:6d:b1:62:e0:37:65:c9:93:b4:d4:ea:85:ee:92:ae:ef:a9:
         eb:a3:7c:d4:d5:02:47:f4:51:b5:67:46:5d:66:64:e5:11:0c:
         ed:fd:61:11:8e:19:2a:5b:22:83:6f:9a:fc:ae:1a:94:73:c2:
         59:cf:c3:1e:98:4d:23:43:5b:f4:76:5d:ee:56:91:d4:24:8e:
         8d:8b:94:38:d6:cf:68:6c:99:44:94:de:ea:83:5e:ae:4b:1b:
         e9:1d:9e:ca:de:ff:bc:f2:f9:fb:c7:0e:93:84:50:bf:eb:d2:
         00:d5:35:cb:ab:46:ea:50:8a:4e:e1:5d:d9:0d:27:bc:6d:b4:
         f7:06:11:ce:0a:1b:e1:06:f1:7c:2d:13:56:7e:77:42:dd:e4:
         dc:fb:0f:3b:bb:7c:d1:51:ff:d0:47:62:01:40:b8:7f:ed:18:
         f9:c2:ae:07:b0:60:bd:dd:c0:6d:73:b2:17:4c:5c:d6:00:c8:
         c1:55:97:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:22:21 2025 by rpki-client