Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/323830343a383261303a3a2f33322d3430203d3e20323732353330.roa
File:                     323830343a383261303a3a2f33322d3430203d3e20323732353330.roa (raw, json)
Hash identifier:          XCXtsfYA0MgrRAzHRX1gA/Ze2ylYSaIaMINX0XQu8Eo=
Subject key identifier:   75:64:AA:FC:48:9C:59:79:E3:85:DA:D3:66:CD:EF:CE:1D:17:93:E5
Certificate issuer:       /CN=A5E813FA7753A43F3CBC2FD84C2BFA8E0F674D9C
Certificate serial:       3E70498AC8044A8B7C77594741523D15758B3C52
Authority key identifier: A5:E8:13:FA:77:53:A4:3F:3C:BC:2F:D8:4C:2B:FA:8E:0F:67:4D:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E813FA7753A43F3CBC2FD84C2BFA8E0F674D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/323830343a383261303a3a2f33322d3430203d3e20323732353330.roa
Signing time:             Wed 08 Oct 2025 12:29:19 +0000
ROA not before:           Wed 08 Oct 2025 12:24:19 +0000
ROA not after:            Wed 07 Oct 2026 12:29:19 +0000
asID:                     272530
IP address blocks:        2804:82a0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/A5E813FA7753A43F3CBC2FD84C2BFA8E0F674D9C.crl
                          rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/A5E813FA7753A43F3CBC2FD84C2BFA8E0F674D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E813FA7753A43F3CBC2FD84C2BFA8E0F674D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:70:49:8a:c8:04:4a:8b:7c:77:59:47:41:52:3d:15:75:8b:3c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5E813FA7753A43F3CBC2FD84C2BFA8E0F674D9C
        Validity
            Not Before: Oct  8 12:24:19 2025 GMT
            Not After : Oct  7 12:29:19 2026 GMT
        Subject: CN=7564AAFC489C5979E385DAD366CDEFCE1D1793E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:65:0b:3c:59:a0:c6:a5:10:00:08:46:d2:
                    c2:78:15:ef:43:b5:67:23:1f:6f:51:8b:d9:63:35:
                    82:ae:c7:80:f7:a4:d2:0d:08:9a:43:7b:0f:a2:5d:
                    2f:e0:89:28:43:77:e3:ff:c6:c7:67:b5:e0:0b:9b:
                    95:cc:09:7a:4b:1e:68:48:07:60:38:b4:ad:62:d5:
                    3d:77:9a:8d:c4:50:9a:c5:b0:03:61:e5:e8:92:aa:
                    15:d3:bf:b3:97:a5:f8:98:99:46:8c:69:cd:e9:e3:
                    c8:48:09:8d:de:96:4b:4a:8a:db:b5:0b:0e:e0:a8:
                    84:c7:eb:76:b2:03:06:3c:cc:ad:63:e4:a1:d3:f7:
                    d5:d9:04:ed:80:2c:ca:11:fc:88:07:59:c0:88:02:
                    68:35:0f:1a:40:16:9f:4a:4c:94:73:c8:1c:d4:d6:
                    8a:6e:77:b6:25:5a:0b:09:0a:fb:d4:59:36:27:bb:
                    f3:c2:13:68:6c:13:34:f5:29:53:3b:32:aa:0b:6f:
                    59:3b:be:4e:5c:f9:3d:00:5f:e9:75:a0:6f:f4:d3:
                    ca:9d:31:85:20:c4:e3:3d:ff:4a:db:71:4d:3a:18:
                    73:7d:8c:f6:23:f5:8f:31:f4:d4:2d:f4:b2:70:0a:
                    e9:cd:b7:ad:9a:60:bc:f0:26:8b:30:80:47:a5:94:
                    e1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:64:AA:FC:48:9C:59:79:E3:85:DA:D3:66:CD:EF:CE:1D:17:93:E5
            X509v3 Authority Key Identifier:
                keyid:A5:E8:13:FA:77:53:A4:3F:3C:BC:2F:D8:4C:2B:FA:8E:0F:67:4D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/A5E813FA7753A43F3CBC2FD84C2BFA8E0F674D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E813FA7753A43F3CBC2FD84C2BFA8E0F674D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVoeMCMQBdgLMQNz9ckEmvyDVRbB92sgE2fvtLGwYjfd/0/323830343a383261303a3a2f33322d3430203d3e20323732353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:fd:67:3c:51:e7:5d:ed:f4:c0:1d:24:68:08:ba:b2:8f:15:
         52:8b:2b:8c:0f:09:fd:1e:62:0a:3d:df:65:de:6d:89:b2:e8:
         17:5b:49:3a:73:88:36:d6:f0:5a:fb:f2:b6:04:90:ea:8b:84:
         2a:16:b2:8c:cd:d3:0a:19:02:2f:68:fc:fb:1a:bf:5d:45:f5:
         d2:45:16:4b:11:63:3e:17:34:24:83:6f:86:17:e6:1a:85:27:
         6f:69:6a:b2:80:ba:aa:a0:79:20:c1:ca:c4:48:df:3f:7a:74:
         32:a9:8e:57:8c:0e:63:a5:98:a4:2f:25:da:46:db:a9:a3:9b:
         16:4f:51:db:cd:36:f8:ab:bc:a7:9a:a4:94:43:e2:4a:16:18:
         87:c0:90:81:c9:58:dd:76:05:c5:4d:b9:89:d7:35:ca:22:ce:
         3d:04:b0:79:c0:08:2c:9a:ec:e0:26:9b:01:e4:a5:a1:9c:4e:
         83:3c:ee:80:88:f3:46:11:05:d7:c7:7a:cd:47:9e:0c:c8:d7:
         8e:40:66:10:f3:63:85:ee:6c:d7:0f:70:bb:e1:cf:ab:82:b5:
         f0:ce:54:fb:61:7a:9a:2b:b2:65:68:ef:85:66:72:d5:fe:25:
         2b:d3:7c:1b:3f:83:5c:34:c1:b0:2e:2e:e7:12:b7:89:ca:1a:
         f6:7e:b9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:43 2025 by rpki-client