Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/323830343a343737383a3a2f33322d3438203d3e20323637303536.roa
File:                     323830343a343737383a3a2f33322d3438203d3e20323637303536.roa (raw, json)
Hash identifier:          uSx2QInVU7dPUD1XpC3zsr9iVyxnTwdzolsbn7DZuBw=
Subject key identifier:   96:98:F6:CA:33:BE:03:D5:6A:98:AF:FF:EC:10:E0:78:F3:6D:1A:B3
Certificate issuer:       /CN=AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8
Certificate serial:       4BA048622C1C10C1F2408C9418178E774A6FB34F
Authority key identifier: AA:E5:DE:B2:8F:B1:B7:7C:56:21:A4:8D:33:03:49:DB:07:D1:D3:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/323830343a343737383a3a2f33322d3438203d3e20323637303536.roa
Signing time:             Mon 06 Oct 2025 22:58:15 +0000
ROA not before:           Mon 06 Oct 2025 22:53:15 +0000
ROA not after:            Mon 05 Oct 2026 22:58:15 +0000
asID:                     267056
IP address blocks:        2804:4778::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl
                          rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a0:48:62:2c:1c:10:c1:f2:40:8c:94:18:17:8e:77:4a:6f:b3:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8
        Validity
            Not Before: Oct  6 22:53:15 2025 GMT
            Not After : Oct  5 22:58:15 2026 GMT
        Subject: CN=9698F6CA33BE03D56A98AFFFEC10E078F36D1AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:c7:be:9f:2d:f3:07:47:d5:ae:76:d5:d3:
                    08:d4:f2:15:4c:da:37:0f:e6:f8:2e:6e:8f:3d:eb:
                    9d:57:09:5a:76:69:1b:15:f7:53:b3:dc:66:06:ed:
                    da:be:07:d0:7b:6a:4a:5b:e9:fa:49:f3:fc:5c:2d:
                    ee:82:b6:15:61:ca:0f:c1:1e:00:f2:da:79:c9:fa:
                    1e:db:6b:f0:a4:d1:cf:25:41:25:84:51:18:08:71:
                    0b:9c:39:f5:30:f5:51:10:e4:f4:f4:0f:9b:48:4d:
                    4f:e4:33:61:7f:cb:01:ae:50:c6:3d:86:48:cc:79:
                    a3:5f:40:10:ff:41:88:2c:22:8d:50:7e:8e:bb:c7:
                    bc:c1:de:66:f8:47:ce:e1:40:46:1a:e2:5b:56:71:
                    6d:16:8c:c5:5a:96:09:db:f8:8a:53:b1:c5:93:ce:
                    a5:91:a4:32:f0:4d:ad:98:93:a5:40:30:eb:8b:c9:
                    54:ed:9c:f7:39:46:cf:82:da:c8:f7:a0:45:40:1f:
                    79:83:87:a4:bf:b6:50:0f:ed:0d:37:a6:56:3d:b7:
                    18:6d:a5:b3:f7:cd:38:85:9b:4d:66:17:cd:99:08:
                    8a:3d:9e:11:b1:c0:05:f5:95:cf:0e:00:46:a8:07:
                    22:7c:2b:7e:16:b5:ca:2d:bf:c2:cc:20:3a:59:89:
                    1c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:98:F6:CA:33:BE:03:D5:6A:98:AF:FF:EC:10:E0:78:F3:6D:1A:B3
            X509v3 Authority Key Identifier:
                keyid:AA:E5:DE:B2:8F:B1:B7:7C:56:21:A4:8D:33:03:49:DB:07:D1:D3:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAE5DEB28FB1B77C5621A48D330349DB07D1D3F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/0/323830343a343737383a3a2f33322d3438203d3e20323637303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4778::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:4b:b9:7e:dc:c6:3a:67:c2:40:57:b6:a1:65:4a:a2:38:be:
         80:4d:d6:10:cc:8d:fd:fb:f8:05:5f:7f:14:dc:33:32:36:21:
         4c:4f:14:9a:cc:ac:43:26:5d:f5:ba:48:d0:d8:b7:15:44:92:
         14:ee:35:a6:46:a3:b8:5e:4e:76:d8:31:41:50:2a:74:a9:19:
         a6:72:c7:48:39:82:68:3d:1c:5a:3d:46:d4:8a:10:fd:5b:6a:
         44:6e:0f:40:1c:c4:20:50:6d:b9:8b:f5:28:b9:59:eb:bc:c4:
         a5:89:80:cf:b1:cc:af:14:bd:af:ea:d0:4d:8e:2c:b8:20:f6:
         b8:04:4a:f9:5c:54:b7:92:52:7c:9f:99:ed:ea:8c:23:27:a6:
         28:de:1b:74:f9:00:af:26:7e:35:24:1d:a0:0e:bf:8b:9d:1e:
         d9:a9:b1:04:30:d7:03:8e:0d:6d:f0:b2:da:4b:f6:a0:7e:e1:
         55:67:dd:0a:52:ee:b9:c4:aa:0a:fb:e3:24:da:41:ce:d9:57:
         cf:91:d6:18:9a:d7:45:4d:a0:cb:21:08:62:32:c9:e8:10:20:
         8f:c0:96:62:bc:29:9a:f0:53:7c:5b:94:45:7b:0b:46:28:47:
         d7:90:9d:26:27:0e:6c:39:a2:66:a8:77:bc:b4:6d:3a:36:da:
         2b:2e:1e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:37:01 2025 by rpki-client