Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/323830343a316466343a3a2f33322d3438203d3e203532393437.roa
File:                     323830343a316466343a3a2f33322d3438203d3e203532393437.roa (raw, json)
Hash identifier:          2SqYa/WLX2/b5k1jmm9h6Hi0HDkGkAIsRcKD3Qgzqqc=
Subject key identifier:   8E:4D:FF:80:06:7C:09:12:91:DC:03:A9:65:F0:88:9B:46:B7:BA:2A
Certificate issuer:       /CN=524E9D1652F660663CB5548E20AE99DA463B2CFA
Certificate serial:       06C11CC182F7DB91DA73D595CD5911399E790DC7
Authority key identifier: 52:4E:9D:16:52:F6:60:66:3C:B5:54:8E:20:AE:99:DA:46:3B:2C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/323830343a316466343a3a2f33322d3438203d3e203532393437.roa
Signing time:             Fri 03 Oct 2025 18:00:50 +0000
ROA not before:           Fri 03 Oct 2025 17:55:50 +0000
ROA not after:            Fri 02 Oct 2026 18:00:50 +0000
asID:                     52947
IP address blocks:        2804:1df4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.crl
                          rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 03:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c1:1c:c1:82:f7:db:91:da:73:d5:95:cd:59:11:39:9e:79:0d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=524E9D1652F660663CB5548E20AE99DA463B2CFA
        Validity
            Not Before: Oct  3 17:55:50 2025 GMT
            Not After : Oct  2 18:00:50 2026 GMT
        Subject: CN=8E4DFF80067C091291DC03A965F0889B46B7BA2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:68:88:25:b5:47:f5:ed:92:12:a0:74:e1:5f:
                    9f:6d:e5:ec:5b:05:56:21:80:d6:79:71:20:d3:1d:
                    11:26:ac:1d:c2:5c:00:ac:fe:4f:82:db:c7:6f:0b:
                    23:19:39:ca:e2:ae:50:42:fd:c6:95:e6:ea:ea:04:
                    cf:db:66:0b:5a:f9:fa:54:1b:f9:04:2c:47:f7:80:
                    1c:cb:84:b7:0b:d0:1f:c7:0d:b9:c5:27:3b:e4:ff:
                    d8:46:48:2f:89:61:24:c0:1e:99:48:62:b3:bc:2d:
                    1e:9a:86:82:e5:60:c2:88:e1:7b:bc:71:3e:43:f3:
                    d3:11:d0:80:a1:b7:04:55:72:eb:4d:f9:43:8f:93:
                    68:d7:48:c3:00:11:4f:1b:57:6d:47:0c:54:51:15:
                    43:09:96:be:0f:65:09:8e:99:72:dc:55:f7:22:b1:
                    7a:56:91:3f:8e:ec:bb:23:5c:75:07:3d:4c:30:5c:
                    f2:b1:c1:0e:1d:b7:81:b7:fd:58:79:bc:dc:56:9b:
                    40:3a:d2:eb:38:56:72:63:85:ff:84:11:81:1e:e4:
                    36:19:e0:d2:9f:36:44:4d:78:e7:84:28:6c:0d:f1:
                    14:fc:72:3f:99:a7:7d:5d:7e:22:b5:3a:55:38:e5:
                    07:9a:eb:74:32:00:4c:fd:cd:54:33:05:8b:8f:42:
                    f8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4D:FF:80:06:7C:09:12:91:DC:03:A9:65:F0:88:9B:46:B7:BA:2A
            X509v3 Authority Key Identifier:
                keyid:52:4E:9D:16:52:F6:60:66:3C:B5:54:8E:20:AE:99:DA:46:3B:2C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/323830343a316466343a3a2f33322d3438203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1df4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:79:d2:af:c1:5e:d1:e0:57:c5:30:f6:9c:58:fd:70:9c:19:
         06:47:74:a2:ef:17:7f:c8:02:e3:29:ba:ad:40:4d:46:93:a0:
         d2:3b:9f:9c:25:0e:0f:48:6d:53:52:1a:12:2c:a0:e4:7c:5c:
         2e:d1:44:83:52:12:0f:58:aa:d2:b7:52:e0:ff:44:62:c2:d5:
         ff:49:5e:2a:0e:33:e0:75:72:44:97:d6:26:21:33:f6:ef:f7:
         a5:0b:a7:ac:4f:3a:08:0d:c4:f8:e7:95:93:44:97:13:3e:05:
         f3:a5:52:ec:97:ec:cf:8d:31:b7:61:43:75:9a:42:ce:cc:94:
         16:d7:c3:ac:44:f0:e6:08:8b:31:16:a4:18:0a:c3:01:38:c9:
         c5:33:58:fe:3c:09:ec:81:26:e0:bd:79:19:73:a3:40:98:10:
         73:6e:c0:40:43:3e:d3:1c:60:74:b5:5f:9c:6d:42:69:ac:5c:
         eb:4b:e8:b6:f8:ae:03:21:94:9d:02:da:63:d5:2e:b7:24:dc:
         b4:60:2c:7f:ca:6e:65:2c:14:93:23:08:1f:31:55:d0:61:1c:
         8c:cb:a3:9e:49:27:e1:c6:81:cb:fa:7f:55:43:c0:d2:41:e6:
         a5:9b:94:6f:0d:5d:43:da:74:82:f9:41:69:b8:14:b7:fd:88:
         c0:f4:cf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:18:30 2025 by rpki-client