Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/323830343a363436343a3a2f33322d3438203d3e20323639343235.roa
File:                     323830343a363436343a3a2f33322d3438203d3e20323639343235.roa (raw, json)
Hash identifier:          SUMeweuRDf4Hepv8n7A+Gg9WYtgslq7XKuehJm8jv3Y=
Subject key identifier:   12:0D:2B:AC:33:4F:51:BA:19:0F:8D:11:9C:E3:B1:07:EC:D8:F7:D3
Certificate issuer:       /CN=F9FFCCDBCA691A6CB21B455057F486C3805DEF29
Certificate serial:       30279E83FA1D87EBD20A7A28DDEB6C46A9A0F7E4
Authority key identifier: F9:FF:CC:DB:CA:69:1A:6C:B2:1B:45:50:57:F4:86:C3:80:5D:EF:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/323830343a363436343a3a2f33322d3438203d3e20323639343235.roa
Signing time:             Tue 14 Oct 2025 16:39:01 +0000
ROA not before:           Tue 14 Oct 2025 16:34:01 +0000
ROA not after:            Tue 13 Oct 2026 16:39:01 +0000
asID:                     269425
IP address blocks:        2804:6464::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.crl
                          rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:27:9e:83:fa:1d:87:eb:d2:0a:7a:28:dd:eb:6c:46:a9:a0:f7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9FFCCDBCA691A6CB21B455057F486C3805DEF29
        Validity
            Not Before: Oct 14 16:34:01 2025 GMT
            Not After : Oct 13 16:39:01 2026 GMT
        Subject: CN=120D2BAC334F51BA190F8D119CE3B107ECD8F7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:eb:67:dd:ef:86:c9:b4:89:71:d1:d1:bc:
                    f7:8f:f8:4b:b7:fc:20:36:f9:4e:19:0b:49:d3:92:
                    db:db:d9:fd:11:67:a7:85:4e:0a:d1:a0:a0:99:f0:
                    a8:d0:33:aa:e3:82:aa:8f:c1:94:dd:74:88:67:a4:
                    66:28:45:f1:f3:9a:1d:87:ff:f3:6e:ba:90:27:01:
                    cc:4c:f5:69:2c:94:39:2e:ab:cd:41:4e:30:7d:cf:
                    df:85:b5:4e:82:9c:30:fa:ef:59:f4:81:55:64:51:
                    9b:c1:4d:dd:f9:75:e2:ee:5c:97:ab:4d:76:14:e6:
                    9d:e3:6d:9c:a3:bf:55:67:88:92:fe:f7:37:f3:48:
                    ac:77:df:e9:79:42:c0:84:bd:aa:79:38:67:e1:21:
                    d3:f6:ca:6e:ef:90:60:2c:f5:9d:97:af:0b:ae:be:
                    de:23:e3:a3:e9:c2:71:0a:2c:39:7e:52:b6:18:06:
                    4a:d9:0a:08:e2:ee:0b:c8:22:ba:3d:e2:18:ad:e0:
                    0a:80:71:c6:47:3f:64:4d:44:9b:13:c1:52:75:a3:
                    16:60:02:43:d4:b6:87:fa:b3:6a:67:88:87:2e:0e:
                    18:40:fc:79:20:bd:e5:24:21:d1:cf:51:d9:3e:c8:
                    95:b0:34:fc:03:77:2b:ca:cf:58:65:cf:65:67:2a:
                    7b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0D:2B:AC:33:4F:51:BA:19:0F:8D:11:9C:E3:B1:07:EC:D8:F7:D3
            X509v3 Authority Key Identifier:
                keyid:F9:FF:CC:DB:CA:69:1A:6C:B2:1B:45:50:57:F4:86:C3:80:5D:EF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/323830343a363436343a3a2f33322d3438203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6464::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:9f:ab:f2:41:9c:ff:56:d0:ea:3e:1e:8b:17:ff:a4:c8:f1:
         16:c1:03:e6:e2:56:70:b9:69:1c:39:cc:fc:e4:f2:9e:f7:97:
         be:30:1b:b9:39:d4:2b:ca:ef:1f:00:fb:66:a6:a7:af:6b:bf:
         2f:26:44:0e:3f:a8:fb:a0:d3:b8:d6:0c:da:e1:a7:cf:b6:1d:
         7a:84:a8:91:ae:f5:4c:59:8c:32:f0:15:16:c3:41:c1:9e:6b:
         c5:7e:04:6a:e7:0d:d3:9e:f2:07:f2:9e:b0:52:93:62:f6:b8:
         8e:51:3b:0f:f4:09:7e:9e:1f:03:01:15:aa:55:d9:c5:f5:61:
         ff:45:40:5e:c9:47:9d:b9:f7:54:7d:8d:53:86:89:cc:43:80:
         5b:7b:f3:3b:b8:14:56:9a:44:e0:27:ac:cc:99:9f:e7:49:4d:
         14:c2:c5:27:c9:99:98:3f:47:36:5c:a8:d7:d7:a7:af:25:8a:
         57:24:2b:b0:6d:52:df:4a:62:71:08:65:21:38:ba:4f:e6:3c:
         f9:64:88:0c:7b:e4:b2:d0:3c:c0:e7:bc:e5:8f:e0:d8:95:0c:
         02:1d:af:db:22:82:94:49:cb:b8:fd:b8:76:ca:88:be:f1:98:
         67:b7:c2:69:7f:e6:25:9a:37:00:ae:68:bd:ed:d1:4e:26:e5:
         49:4c:d7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:37:46 2025 by rpki-client