Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/323830343a316437633a3a2f33322d313238203d3e20323634333733.roa
File:                     323830343a316437633a3a2f33322d313238203d3e20323634333733.roa (raw, json)
Hash identifier:          OIEDiP2yguoQemr/E5C8mS+rz10cSxxc2lzVOAwOXqc=
Subject key identifier:   0A:BA:D8:F8:1F:A6:2E:A3:36:6F:05:D0:7E:4A:DE:BC:65:DB:86:46
Certificate issuer:       /CN=16D59541EC6814ABD32D2385C29E7A64CA2E012A
Certificate serial:       70847A274D597012CA5873C016E7492141094F
Authority key identifier: 16:D5:95:41:EC:68:14:AB:D3:2D:23:85:C2:9E:7A:64:CA:2E:01:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16D59541EC6814ABD32D2385C29E7A64CA2E012A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/323830343a316437633a3a2f33322d313238203d3e20323634333733.roa
Signing time:             Thu 02 Oct 2025 18:27:34 +0000
ROA not before:           Thu 02 Oct 2025 18:22:34 +0000
ROA not after:            Thu 01 Oct 2026 18:27:34 +0000
asID:                     264373
IP address blocks:        2804:1d7c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/16D59541EC6814ABD32D2385C29E7A64CA2E012A.crl
                          rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/16D59541EC6814ABD32D2385C29E7A64CA2E012A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16D59541EC6814ABD32D2385C29E7A64CA2E012A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:84:7a:27:4d:59:70:12:ca:58:73:c0:16:e7:49:21:41:09:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16D59541EC6814ABD32D2385C29E7A64CA2E012A
        Validity
            Not Before: Oct  2 18:22:34 2025 GMT
            Not After : Oct  1 18:27:34 2026 GMT
        Subject: CN=0ABAD8F81FA62EA3366F05D07E4ADEBC65DB8646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:25:f4:44:1b:d2:9b:73:82:bf:3d:be:a7:
                    ca:1b:0a:0a:11:4a:64:16:03:d6:48:ce:67:18:0e:
                    e4:db:43:88:7e:2b:d3:55:2d:1a:8c:89:ba:96:e3:
                    1b:83:84:24:a8:6d:91:00:1d:50:3f:6a:37:e2:76:
                    85:85:7a:5e:5c:24:9d:ab:81:dc:d1:f0:c6:56:76:
                    03:eb:6f:6a:b4:03:ef:5a:95:59:5e:0d:57:59:65:
                    3b:b1:84:ae:a0:e6:d6:15:a2:78:cf:96:7e:ae:71:
                    a1:a6:d9:cd:45:3c:7e:cb:93:e6:41:24:55:05:bb:
                    70:cb:69:d8:ca:23:57:da:65:d6:f9:9c:87:84:b8:
                    cf:32:f5:c9:b4:f9:80:da:7d:27:df:df:88:91:5c:
                    af:80:72:1b:ab:7e:e5:c1:70:7b:ae:3a:66:8a:17:
                    b6:ab:08:63:30:a9:79:fd:32:92:c2:f1:ff:6b:3a:
                    ae:ae:6d:7e:f3:8f:c6:b3:67:0c:7a:bd:a7:0d:4b:
                    2c:72:88:99:bd:91:81:63:d9:66:72:d3:1a:57:8c:
                    b2:2e:87:a8:8c:ef:09:72:ee:d2:a8:c5:39:9a:3c:
                    4a:99:83:22:0f:78:6a:d7:55:94:f9:02:b5:f9:2f:
                    79:8f:0d:7c:e7:4c:cb:55:93:e4:33:fb:93:58:43:
                    eb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BA:D8:F8:1F:A6:2E:A3:36:6F:05:D0:7E:4A:DE:BC:65:DB:86:46
            X509v3 Authority Key Identifier:
                keyid:16:D5:95:41:EC:68:14:AB:D3:2D:23:85:C2:9E:7A:64:CA:2E:01:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/16D59541EC6814ABD32D2385C29E7A64CA2E012A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16D59541EC6814ABD32D2385C29E7A64CA2E012A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMoWs4kJS6LjhtGu8pXZxFL5BqmHRcefgrcPn2YjmCqN/0/323830343a316437633a3a2f33322d313238203d3e20323634333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:b4:93:6c:cb:b8:d1:08:fc:b6:41:75:e5:5e:fd:1e:c1:7c:
         da:42:e0:29:99:bb:1c:76:e9:6f:5f:9a:06:47:3c:51:6e:13:
         00:1d:88:53:eb:e2:f8:6f:58:dd:2e:ad:bf:f0:30:6f:6f:07:
         8a:d0:a3:0c:b9:b4:b5:e7:a2:e5:77:e8:bf:e8:84:08:33:96:
         71:ac:6b:55:5e:5c:16:4b:0d:43:eb:4b:9a:df:e2:d3:2a:58:
         99:03:84:be:c9:e7:cb:57:8b:85:47:b3:6f:c2:31:fe:f1:13:
         3f:98:8b:8a:6c:59:2f:6f:b5:9c:ff:f6:c2:05:64:c5:be:33:
         e7:8c:48:a4:3d:f8:8d:ba:e6:04:57:aa:ee:05:5a:63:5a:64:
         27:45:50:f7:28:61:2a:e8:03:46:51:16:ef:05:d5:04:fb:2f:
         38:ae:81:9b:f0:f4:ec:e7:83:ae:86:cb:94:dd:e1:24:00:ce:
         c8:9f:63:c3:3b:88:51:4e:c2:5d:b8:6d:b7:30:17:22:ff:09:
         a1:c1:16:2e:1b:e6:8b:17:da:d0:18:08:46:4e:86:56:81:fd:
         e3:cf:f6:2f:f1:ef:89:ad:7b:af:53:da:7f:de:6c:10:6d:a5:
         31:c3:6c:74:d0:1c:b6:51:52:77:b7:2d:6a:1a:82:d7:30:cf:
         e8:25:5f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:09:28 2025 by rpki-client