Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/323830343a356532343a3a2f33322d3336203d3e20323639303134.roa
File:                     323830343a356532343a3a2f33322d3336203d3e20323639303134.roa (raw, json)
Hash identifier:          SgQxhgts+Y+EWNtugqTsmlKzL2Okz9e8hZxr+1j3IGo=
Subject key identifier:   C2:65:C8:36:16:84:62:09:0F:34:0A:47:50:E0:99:69:CB:FB:31:B5
Certificate issuer:       /CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
Certificate serial:       353D1C36D8DADDA296FCA1A43828F8A637B098C6
Authority key identifier: DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/323830343a356532343a3a2f33322d3336203d3e20323639303134.roa
Signing time:             Wed 01 Oct 2025 12:52:32 +0000
ROA not before:           Wed 01 Oct 2025 12:47:32 +0000
ROA not after:            Wed 30 Sep 2026 12:52:32 +0000
asID:                     269014
IP address blocks:        2804:5e24::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl
                          rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:3d:1c:36:d8:da:dd:a2:96:fc:a1:a4:38:28:f8:a6:37:b0:98:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE
        Validity
            Not Before: Oct  1 12:47:32 2025 GMT
            Not After : Sep 30 12:52:32 2026 GMT
        Subject: CN=C265C836168462090F340A4750E09969CBFB31B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:88:1c:c1:90:b0:47:0d:4a:a4:2e:90:ac:
                    bc:57:b9:29:1a:95:24:6f:5b:fe:45:c4:bd:d7:1a:
                    33:2c:d4:63:d8:31:c1:78:a6:84:5f:51:80:f9:d4:
                    9b:57:2b:d4:74:72:b0:19:17:45:b9:9b:d6:3c:fd:
                    a9:06:0e:aa:66:c4:40:80:79:26:21:ad:4f:19:82:
                    35:fe:08:9a:f9:8a:06:15:0d:7f:8a:d5:f4:c4:56:
                    82:72:2b:e7:05:29:70:08:48:06:0c:6c:63:91:2b:
                    37:eb:7f:2d:21:84:c4:66:1a:77:c8:28:9a:00:4b:
                    da:b6:f0:7c:2e:14:cd:21:42:16:6d:ec:46:63:b7:
                    3d:36:9d:00:cf:10:74:b6:81:67:4e:1d:29:cc:f2:
                    50:ab:5a:b9:8c:9c:63:d6:73:79:22:bb:21:b5:73:
                    90:53:8a:21:b7:50:30:fc:65:09:1f:57:7e:74:2a:
                    32:bf:2d:b7:01:f4:08:48:97:7d:94:c8:0a:e0:66:
                    4f:48:70:c4:a4:1f:94:0c:dd:47:a0:ff:71:c4:b0:
                    58:ef:59:5a:28:ac:53:8b:d9:6d:d8:d2:ac:10:9b:
                    f9:88:de:05:47:e7:21:d3:4c:86:60:10:f4:21:d3:
                    1b:90:6c:af:d3:4e:b0:e4:5d:24:ea:ee:21:64:3a:
                    c3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:65:C8:36:16:84:62:09:0F:34:0A:47:50:E0:99:69:CB:FB:31:B5
            X509v3 Authority Key Identifier:
                keyid:DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/323830343a356532343a3a2f33322d3336203d3e20323639303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e24::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:5d:c5:7d:61:30:ee:b7:ed:eb:a1:9a:83:64:5e:e5:b7:3d:
         b8:c2:62:d3:e9:f6:ef:0e:08:e7:02:67:0b:8d:35:f8:c6:cc:
         15:3e:5b:88:af:dc:b8:3c:67:4b:46:8f:09:28:b3:9e:44:06:
         34:1b:7d:3f:2a:cf:94:43:bf:1b:3a:08:b1:bc:72:1c:05:e0:
         57:23:48:71:b9:2a:8e:f3:dc:90:2c:e2:e3:c0:b7:1e:7e:a9:
         bd:9d:01:25:e3:ea:9f:76:d5:45:71:30:38:1f:71:fd:e2:a4:
         70:0d:c6:fd:45:ff:5c:18:21:5e:f7:a0:2c:f4:9e:15:fd:56:
         1e:10:7e:5a:c2:9b:d8:e3:56:a9:42:8d:13:b2:57:7b:4a:6f:
         0e:07:3d:f4:02:0f:07:8a:4a:21:e2:6c:6d:62:92:5f:c9:a2:
         56:df:63:18:c4:ad:53:8c:d8:fe:95:6d:67:6d:0d:e9:a1:93:
         30:8f:07:10:2e:32:0f:bf:6b:0a:44:4f:9e:4b:c4:14:c9:6e:
         96:41:56:a3:b6:60:cc:c5:bc:fc:7d:10:44:8f:f9:47:7f:d1:
         b7:5b:a8:5f:a8:70:50:07:6d:5b:ea:1f:2b:53:6d:73:cc:a1:
         2c:4e:c1:ef:40:48:19:cb:64:7e:fa:44:d5:01:3a:be:54:0a:
         64:fd:c4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:43 2025 by rpki-client