Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a3a2f33322d313238203d3e20323733353137.roa
File:                     323830343a386664633a3a2f33322d313238203d3e20323733353137.roa (raw, json)
Hash identifier:          4l2CtiYgrvBy/A92kVg7Hm+FkGGTJkGXYmtPO4rSlHg=
Subject key identifier:   66:02:B8:EC:6F:5F:DB:77:23:E8:74:32:4F:5B:02:41:71:19:CD:9D
Certificate issuer:       /CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C
Certificate serial:       5AF950DFF6132E3522ADF59E92B4B5C893B89AF8
Authority key identifier: A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a3a2f33322d313238203d3e20323733353137.roa
Signing time:             Mon 25 Aug 2025 18:53:04 +0000
ROA not before:           Mon 25 Aug 2025 18:48:04 +0000
ROA not after:            Mon 24 Aug 2026 18:53:04 +0000
asID:                     273517
IP address blocks:        2804:8fdc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl
                          rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f9:50:df:f6:13:2e:35:22:ad:f5:9e:92:b4:b5:c8:93:b8:9a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E28E9F8644B6F21F026644C14C380CDCA6B11C
        Validity
            Not Before: Aug 25 18:48:04 2025 GMT
            Not After : Aug 24 18:53:04 2026 GMT
        Subject: CN=6602B8EC6F5FDB7723E874324F5B02417119CD9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b1:f1:08:7b:69:95:cd:ce:0a:54:d2:82:76:
                    c6:be:f5:64:74:c9:b5:97:c0:aa:f1:4b:86:ba:dd:
                    29:19:ec:97:06:03:49:77:bd:c1:07:3b:95:51:74:
                    bb:42:36:5b:9b:38:85:6d:95:fe:29:82:f0:f8:4c:
                    71:76:61:48:66:db:8b:cc:e2:a1:66:bb:9e:9c:88:
                    e0:8c:da:31:7a:8a:2b:71:69:bf:57:c0:83:70:14:
                    a5:87:f6:2f:34:c9:a3:ff:09:8d:8a:c0:9b:11:e8:
                    a8:c1:17:eb:50:d5:52:3d:cc:21:a4:cd:df:38:67:
                    32:9e:b1:90:4e:92:0c:76:ae:03:f4:1e:cf:e7:be:
                    9f:b1:fe:6b:2b:83:86:15:aa:03:c0:13:db:09:70:
                    31:74:6f:cf:83:52:4e:dd:dc:01:ce:a1:1a:bd:66:
                    a1:ec:cb:cd:a8:f0:82:ac:ab:51:df:ba:ca:91:4f:
                    3f:eb:ff:6d:7d:8e:cc:d8:ce:fb:49:87:05:ba:f9:
                    7b:97:4c:8a:46:ed:6d:3e:72:c4:be:38:d0:47:ca:
                    e5:ae:e8:6b:b4:89:99:51:68:4f:4a:ff:b8:c5:ee:
                    49:62:c5:34:a7:b2:70:6e:7d:66:30:67:eb:15:23:
                    11:39:36:c9:e4:48:a6:03:89:42:b4:c7:5f:da:e7:
                    09:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:02:B8:EC:6F:5F:DB:77:23:E8:74:32:4F:5B:02:41:71:19:CD:9D
            X509v3 Authority Key Identifier:
                keyid:A2:E2:8E:9F:86:44:B6:F2:1F:02:66:44:C1:4C:38:0C:DC:A6:B1:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E28E9F8644B6F21F026644C14C380CDCA6B11C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a3a2f33322d313238203d3e20323733353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:fa:45:4f:59:13:a5:64:5d:1d:92:3a:2a:a4:67:1d:4e:83:
         aa:37:3c:d3:75:54:4e:24:c0:02:d0:18:75:8d:c3:92:85:ae:
         ff:f8:1a:af:59:72:0e:cd:fd:f3:bd:7d:29:5b:25:da:2b:ea:
         c8:0f:a6:e0:d9:ce:ba:f6:7c:a8:f6:bb:80:a7:97:2c:0d:33:
         6b:0e:aa:13:72:1b:7d:f2:54:bb:1f:f0:62:2b:2d:30:c2:5b:
         0e:b3:d5:0b:23:23:a5:93:97:e2:59:12:c7:b2:10:84:c3:a0:
         bd:b4:8f:f4:2f:d2:e8:ee:3f:5e:c3:7d:52:e3:f4:6f:33:42:
         92:14:b9:eb:9c:47:33:89:fb:0e:13:f2:0b:ec:f6:78:89:9a:
         f7:9c:8e:1e:d3:72:1d:22:7f:ff:84:9b:fb:81:61:b7:b6:c4:
         af:ea:ae:30:df:bb:2c:85:26:15:15:e2:39:f7:be:24:24:cf:
         8a:c3:3d:f8:d8:0c:ab:cd:78:5a:bd:64:8e:90:40:a5:8e:43:
         1a:93:e1:c1:16:1e:21:0f:d6:c2:46:98:7c:e5:ea:f5:cf:d8:
         f9:98:0a:31:01:dc:84:fc:7c:c2:3a:ce:e3:2d:a6:ca:d5:43:
         b1:48:5a:82:93:66:a8:85:51:71:a3:ee:81:91:7a:c1:09:a4:
         ca:a6:dc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:03:06 2025 by rpki-client