Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34312d3431203d3e20323733363739.roa
File:                     323830313a38303a343030303a3a2f34312d3431203d3e20323733363739.roa (raw, json)
Hash identifier:          v9j/QM4lSzjy5nq3WggrEbGRurrWofdS34kNNgl2Dyo=
Subject key identifier:   BC:D6:65:04:40:B9:65:D2:57:0A:8A:44:E0:22:5F:C5:16:E5:D6:20
Certificate issuer:       /CN=A9A028180095CF5E2153D60C1B49E4B7E950C76A
Certificate serial:       72A72214409FC8B4DF7BDF6339305115F4D73E5F
Authority key identifier: A9:A0:28:18:00:95:CF:5E:21:53:D6:0C:1B:49:E4:B7:E9:50:C7:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A028180095CF5E2153D60C1B49E4B7E950C76A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34312d3431203d3e20323733363739.roa
Signing time:             Fri 03 Oct 2025 12:56:26 +0000
ROA not before:           Fri 03 Oct 2025 12:51:26 +0000
ROA not after:            Fri 02 Oct 2026 12:56:26 +0000
asID:                     273679
IP address blocks:        2801:80:4000::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/A9A028180095CF5E2153D60C1B49E4B7E950C76A.crl
                          rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/A9A028180095CF5E2153D60C1B49E4B7E950C76A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A028180095CF5E2153D60C1B49E4B7E950C76A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a7:22:14:40:9f:c8:b4:df:7b:df:63:39:30:51:15:f4:d7:3e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9A028180095CF5E2153D60C1B49E4B7E950C76A
        Validity
            Not Before: Oct  3 12:51:26 2025 GMT
            Not After : Oct  2 12:56:26 2026 GMT
        Subject: CN=BCD6650440B965D2570A8A44E0225FC516E5D620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:6b:e5:88:a9:37:c8:ab:6e:46:fd:4b:8b:
                    68:f1:86:53:d2:7c:bc:c4:e4:8d:f0:ed:3e:ba:00:
                    ab:a4:4d:d1:ee:22:c2:13:6b:ca:74:c4:a0:43:1a:
                    78:16:18:99:71:56:55:c2:c4:71:15:18:0a:de:d9:
                    a9:96:e1:33:67:a1:93:60:69:81:23:b3:01:0c:0c:
                    36:cd:bb:d0:cf:60:b8:54:07:96:04:9c:a6:cd:8d:
                    11:4a:85:96:7b:26:50:8c:35:61:09:bd:57:d3:81:
                    a6:63:65:5f:01:a7:0a:69:76:27:64:09:57:3e:9b:
                    1a:d4:21:c3:8c:c9:15:c6:d9:ef:ca:24:5a:a6:e6:
                    08:48:49:b9:8d:d9:50:30:44:08:24:47:c0:5b:c3:
                    62:85:fe:61:84:bc:6c:e6:23:30:cb:37:5a:73:08:
                    03:a1:22:c8:a6:84:95:16:c7:4b:4b:96:1b:b8:4d:
                    3d:3b:31:51:dc:ce:78:3c:89:f5:dd:c4:d6:e3:0d:
                    09:04:82:40:64:23:52:44:cd:88:e7:96:cb:1e:6a:
                    5c:60:fc:fb:5b:58:c3:d8:e0:66:05:a0:a8:05:77:
                    94:05:ab:cd:52:28:1f:36:64:e5:95:c5:ea:8b:27:
                    ed:21:d9:89:32:72:78:b1:10:55:98:a1:3e:6c:52:
                    87:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D6:65:04:40:B9:65:D2:57:0A:8A:44:E0:22:5F:C5:16:E5:D6:20
            X509v3 Authority Key Identifier:
                keyid:A9:A0:28:18:00:95:CF:5E:21:53:D6:0C:1B:49:E4:B7:E9:50:C7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/A9A028180095CF5E2153D60C1B49E4B7E950C76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A028180095CF5E2153D60C1B49E4B7E950C76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/0/323830313a38303a343030303a3a2f34312d3431203d3e20323733363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:4000::/41

    Signature Algorithm: sha256WithRSAEncryption
         47:60:b1:20:c2:93:60:87:e1:c8:1c:cf:5d:30:11:41:c6:1f:
         96:9e:7c:ff:c5:1e:34:da:72:9a:a9:2b:2e:8e:09:b3:69:48:
         12:78:95:1d:65:d7:51:24:1e:1d:9f:90:1b:55:50:6d:bb:dc:
         de:15:b2:f9:72:08:3b:fc:0c:b1:e1:0f:e2:60:5c:c8:96:8c:
         00:2c:7c:0c:b3:37:87:b1:35:43:ee:03:20:d7:1e:e1:10:ca:
         1c:77:73:f8:11:30:de:8f:ae:a9:0d:b2:6e:b2:e4:26:72:a3:
         bf:be:aa:c9:b2:d1:83:19:11:4a:5b:2a:a4:3d:f7:44:db:d9:
         5e:bf:1c:6c:4b:df:a7:d6:00:4f:ce:8a:ca:f1:03:f9:00:ef:
         bb:52:e8:2c:b8:92:cd:f8:f1:e4:99:7e:2f:f4:b5:53:01:09:
         4a:65:4a:bc:3d:d6:d4:97:d2:09:64:1c:69:7d:4d:38:63:31:
         c7:25:51:1d:ba:be:91:fc:97:59:81:12:1d:a5:01:16:28:bd:
         0c:19:33:e6:3e:b0:fe:73:05:40:e3:92:4e:8b:d7:14:89:f4:
         85:cd:39:8a:46:06:2e:12:95:66:d9:bc:a6:94:ce:fe:0c:33:
         9f:4c:ee:a4:7a:d6:ac:a4:e2:a2:ac:19:af:18:07:ef:ea:9d:
         19:2d:6b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:39 2025 by rpki-client