Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/323830343a356532343a3a2f33322d3332203d3e20323639303134.roa
File:                     323830343a356532343a3a2f33322d3332203d3e20323639303134.roa (raw, json)
Hash identifier:          dbRajCwkUM/mXWCLryUwlycBUOEYhLxqWf5vL7Fmxwo=
Subject key identifier:   A4:38:7B:BE:B1:E9:F3:C6:13:BB:AE:1E:24:85:F2:FC:C8:03:E2:EC
Certificate issuer:       /CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
Certificate serial:       3856FBD3347A51C7D2D5604FAE83D3B140C939EC
Authority key identifier: DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/323830343a356532343a3a2f33322d3332203d3e20323639303134.roa
Signing time:             Wed 01 Oct 2025 12:52:52 +0000
ROA not before:           Wed 01 Oct 2025 12:47:52 +0000
ROA not after:            Wed 30 Sep 2026 12:52:52 +0000
asID:                     269014
IP address blocks:        2804:5e24::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl
                          rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:56:fb:d3:34:7a:51:c7:d2:d5:60:4f:ae:83:d3:b1:40:c9:39:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
        Validity
            Not Before: Oct  1 12:47:52 2025 GMT
            Not After : Sep 30 12:52:52 2026 GMT
        Subject: CN=A4387BBEB1E9F3C613BBAE1E2485F2FCC803E2EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:74:6b:f8:14:3f:da:c5:0b:09:f9:9e:b2:88:
                    f6:65:f1:95:94:59:4e:97:2f:5f:62:e3:bc:fd:fc:
                    f7:65:c2:5c:0c:a2:b1:6a:ae:a9:0f:c2:dd:cd:e1:
                    a3:f7:ac:8b:63:6d:7f:50:aa:1f:1c:00:49:30:93:
                    5c:ff:62:cc:6a:4c:8a:3b:e8:42:5a:c5:d5:a3:d9:
                    9b:c2:51:21:f8:a5:21:11:7c:d6:c2:c2:25:50:9b:
                    9a:7e:ed:10:35:cb:ce:00:92:09:72:59:4a:3f:1a:
                    95:db:7b:13:0a:19:d9:83:3b:f6:86:78:cf:6d:63:
                    ab:08:96:40:0c:4d:ed:19:9a:6b:11:69:95:5c:2b:
                    38:24:bd:6f:01:63:a4:03:cf:79:54:36:e3:52:35:
                    5c:9a:93:34:ad:f1:6d:5d:91:bd:5c:13:79:fd:48:
                    4e:a7:88:fc:02:56:5d:c7:2e:d4:fa:1a:52:5f:66:
                    74:e1:9c:db:32:92:b0:12:ce:81:4c:99:23:9a:40:
                    ef:27:99:59:5d:9e:62:e2:64:37:f8:49:cc:40:8f:
                    3d:3c:1c:57:35:f6:fa:57:a1:d9:32:b5:02:9f:97:
                    c5:2d:c5:dd:8e:b7:56:9d:2a:3a:71:8b:ca:89:5e:
                    40:10:7e:42:7c:d7:be:50:ee:11:70:7a:a3:9b:57:
                    70:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:38:7B:BE:B1:E9:F3:C6:13:BB:AE:1E:24:85:F2:FC:C8:03:E2:EC
            X509v3 Authority Key Identifier:
                keyid:DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/323830343a356532343a3a2f33322d3332203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e24::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:18:92:5f:57:ce:f9:36:5d:85:77:c7:29:e0:83:83:94:f5:
         23:0a:f9:cb:cf:32:77:0e:c4:9a:13:3d:00:a1:38:c0:c6:fc:
         0f:82:2a:33:60:79:d5:0d:76:95:95:24:34:72:77:52:8f:4e:
         e4:8c:4c:67:7a:0a:1f:56:92:c8:08:f3:28:9d:07:62:ae:b6:
         6a:8a:f2:75:75:79:de:a5:1b:87:d6:8d:97:c7:85:8b:94:60:
         16:4a:13:bb:b2:29:6c:ca:96:4d:5a:d8:16:48:fd:0f:0d:e3:
         54:ec:f5:21:61:c8:ca:a4:43:fc:ac:7c:8a:cf:82:ec:19:74:
         56:9b:9d:40:30:bc:ff:47:2c:6d:c5:5f:5a:b4:81:57:57:1a:
         86:c4:b2:d0:c9:67:5e:f8:bc:e1:0f:d6:87:61:3c:c1:af:5b:
         19:09:61:37:a6:8f:ce:b9:56:c7:b8:c8:9b:14:f7:0d:85:f3:
         10:f6:ec:3f:7e:77:21:f8:5b:2a:98:1c:ab:88:52:d3:f1:ab:
         95:48:85:72:88:f5:94:61:85:e1:6c:77:53:4c:4a:18:62:c9:
         db:08:9a:05:d1:72:0b:1a:e5:bf:31:4e:37:95:db:75:3b:d4:
         7e:65:9e:47:cb:b6:01:82:c1:84:89:29:d1:ca:ef:e7:90:8d:
         1b:a5:fb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:43 2025 by rpki-client