Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/323830343a356261343a3a2f33322d3332203d3e20323638383630.roa
File:                     323830343a356261343a3a2f33322d3332203d3e20323638383630.roa (raw, json)
Hash identifier:          wEoQ4ou/1E++fJU/IbfPoy3xAyCqLmk6f5e7llj3sRo=
Subject key identifier:   34:14:ED:97:62:E3:0A:46:1D:9A:D6:9B:A7:1B:4D:3A:D4:2D:F3:4E
Certificate issuer:       /CN=FD06A6E21FE79CC20B98F8870FBA44A2DB5F113A
Certificate serial:       3DC8B72AF471D8127D90E7B6BAD2F67266669431
Authority key identifier: FD:06:A6:E2:1F:E7:9C:C2:0B:98:F8:87:0F:BA:44:A2:DB:5F:11:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD06A6E21FE79CC20B98F8870FBA44A2DB5F113A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/323830343a356261343a3a2f33322d3332203d3e20323638383630.roa
Signing time:             Mon 01 Sep 2025 13:12:42 +0000
ROA not before:           Mon 01 Sep 2025 13:07:42 +0000
ROA not after:            Mon 31 Aug 2026 13:12:42 +0000
asID:                     268860
IP address blocks:        2804:5ba4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/FD06A6E21FE79CC20B98F8870FBA44A2DB5F113A.crl
                          rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/FD06A6E21FE79CC20B98F8870FBA44A2DB5F113A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD06A6E21FE79CC20B98F8870FBA44A2DB5F113A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c8:b7:2a:f4:71:d8:12:7d:90:e7:b6:ba:d2:f6:72:66:66:94:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD06A6E21FE79CC20B98F8870FBA44A2DB5F113A
        Validity
            Not Before: Sep  1 13:07:42 2025 GMT
            Not After : Aug 31 13:12:42 2026 GMT
        Subject: CN=3414ED9762E30A461D9AD69BA71B4D3AD42DF34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a7:b6:a6:e8:db:8b:95:ec:d9:b1:3c:0b:55:
                    30:b9:d0:97:16:9c:67:12:b7:4e:e3:db:20:8c:3c:
                    06:4b:6d:fb:71:4f:fb:8c:14:46:f3:71:2b:be:be:
                    c3:3a:c6:25:f3:25:6c:aa:77:f8:f3:63:3b:fd:e5:
                    2a:ad:12:2b:9b:34:4a:67:55:ff:96:1e:82:40:7c:
                    cd:0f:e5:34:3b:65:34:d0:00:d5:96:b9:2d:70:57:
                    d8:bd:62:f1:b8:8b:cc:bc:f3:07:0d:6b:52:19:d6:
                    70:71:a1:7b:ec:ba:0e:4a:c9:47:ca:83:04:4f:09:
                    b1:8a:9c:94:76:86:90:34:56:95:df:e9:22:f2:af:
                    af:c6:1d:57:7d:ef:09:a7:6e:e5:15:8f:d3:91:8f:
                    62:f6:0e:83:a9:e0:e8:e3:61:8c:b1:a5:3f:69:26:
                    52:b6:dc:ad:ab:77:85:80:4d:74:81:4c:c8:1e:a5:
                    9a:e7:0d:7e:de:9b:5c:2c:02:6c:e0:bf:ea:87:b6:
                    7e:d1:fd:8c:89:11:3d:e8:96:67:8b:6c:b3:81:fa:
                    d4:97:f2:3b:c1:a2:64:38:bb:43:30:47:8e:b0:86:
                    02:43:13:ec:e2:47:52:4a:95:ba:58:f1:cc:8f:25:
                    d0:55:1e:74:79:93:63:33:23:1f:a4:67:11:30:8b:
                    6d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:14:ED:97:62:E3:0A:46:1D:9A:D6:9B:A7:1B:4D:3A:D4:2D:F3:4E
            X509v3 Authority Key Identifier:
                keyid:FD:06:A6:E2:1F:E7:9C:C2:0B:98:F8:87:0F:BA:44:A2:DB:5F:11:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/FD06A6E21FE79CC20B98F8870FBA44A2DB5F113A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD06A6E21FE79CC20B98F8870FBA44A2DB5F113A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/323830343a356261343a3a2f33322d3332203d3e20323638383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ba4::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:02:f8:ca:27:20:32:e5:32:33:f8:74:56:98:09:25:31:99:
         5d:a8:50:b3:7a:7f:a1:07:f3:66:0e:93:5b:ad:2b:42:4b:63:
         18:9b:1f:df:1d:7e:cd:9a:a1:96:5a:62:20:b9:f6:81:c0:89:
         d3:27:06:cd:e2:ea:1b:bf:05:42:e2:c8:01:7a:e0:0d:2c:d7:
         41:2c:1c:1a:fa:7a:dd:f9:c7:70:ae:35:33:c0:e3:88:16:1f:
         98:c2:c1:f0:f9:e3:04:86:46:76:74:38:b3:46:b3:6f:f6:df:
         1f:52:73:34:08:31:55:bc:ff:4b:ed:e3:d6:5c:82:6d:ef:c3:
         4c:0d:d2:8f:ab:c8:37:fa:fb:74:60:8b:f6:71:1e:73:27:c3:
         f8:10:c8:3f:d4:66:dc:3f:39:e8:a2:c6:01:ff:3b:84:78:e0:
         0c:70:53:d7:5a:fa:a2:ed:ed:5f:0e:5d:95:78:17:8f:46:44:
         7f:33:65:79:51:39:6e:4e:aa:e5:6a:79:09:e4:20:81:00:c2:
         a4:b3:ba:10:15:89:6a:6d:ef:13:c8:4b:a4:b3:b0:df:3c:8b:
         dc:f4:9d:bd:a0:34:d1:fe:db:e4:f3:90:f8:95:09:eb:9d:c6:
         7b:4b:bd:86:0d:09:9b:a4:e9:dc:28:e6:a5:34:98:62:47:37:
         82:2b:66:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:31 2025 by rpki-client