Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/323830343a363636383a3a2f33322d3438203d3e20323639353536.roa
File:                     323830343a363636383a3a2f33322d3438203d3e20323639353536.roa (raw, json)
Hash identifier:          gBG4Qlb27HXo3NuqJCUwy25pnJ/e3ADhfWsSexuL8bw=
Subject key identifier:   F8:E5:FD:44:3A:A2:FA:52:A4:6E:0D:0E:AD:4B:2A:A2:B7:F0:7C:BC
Certificate issuer:       /CN=7CA1FCF91BD0F97C0D4500E2183D85782B175D28
Certificate serial:       30D59E69A6E8EB2B0BA8741BC190D275EF0E1CEF
Authority key identifier: 7C:A1:FC:F9:1B:D0:F9:7C:0D:45:00:E2:18:3D:85:78:2B:17:5D:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/323830343a363636383a3a2f33322d3438203d3e20323639353536.roa
Signing time:             Fri 10 Oct 2025 01:05:09 +0000
ROA not before:           Fri 10 Oct 2025 01:00:09 +0000
ROA not after:            Fri 09 Oct 2026 01:05:09 +0000
asID:                     269556
IP address blocks:        2804:6668::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.crl
                          rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d5:9e:69:a6:e8:eb:2b:0b:a8:74:1b:c1:90:d2:75:ef:0e:1c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA1FCF91BD0F97C0D4500E2183D85782B175D28
        Validity
            Not Before: Oct 10 01:00:09 2025 GMT
            Not After : Oct  9 01:05:09 2026 GMT
        Subject: CN=F8E5FD443AA2FA52A46E0D0EAD4B2AA2B7F07CBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:25:cd:eb:03:f7:e8:52:a8:c2:10:28:7b:ab:
                    db:34:94:d7:c5:cd:3d:ca:cd:7d:cc:49:e8:a6:12:
                    7a:6d:1f:de:50:0d:c7:e3:80:6c:16:97:41:12:1a:
                    4d:15:5b:82:95:29:11:65:ef:ad:d2:11:1b:ab:1c:
                    6e:2b:b2:b0:6f:ca:8e:84:97:a9:4c:33:ee:3a:84:
                    16:00:23:d8:6e:19:f1:c3:29:3c:2d:81:08:d7:ef:
                    98:74:6e:56:5e:96:69:a8:c7:65:88:2f:2e:62:e3:
                    99:50:21:7e:db:67:09:ab:58:03:d6:98:2b:5b:c1:
                    0a:50:3f:52:78:2e:01:f2:93:27:68:13:9f:8b:38:
                    67:79:5b:d4:ca:43:67:87:c3:12:1c:cb:a0:60:a7:
                    19:8d:07:90:43:3d:f3:68:23:13:04:6d:4e:99:b0:
                    4b:68:e4:38:23:74:04:09:69:ea:b0:ea:dc:11:56:
                    d5:36:9b:cb:65:42:1d:78:55:00:0b:a9:d1:06:cb:
                    47:46:fc:3a:34:51:5c:d9:dd:9f:1d:47:01:0c:d8:
                    6c:39:61:41:c1:07:fd:38:69:7f:d0:09:c3:b6:bc:
                    8e:7e:3a:62:a3:45:48:a8:a1:c3:6c:08:93:a5:0b:
                    c4:64:ca:c7:3a:4e:57:ee:c7:3d:73:31:f6:7e:89:
                    a3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E5:FD:44:3A:A2:FA:52:A4:6E:0D:0E:AD:4B:2A:A2:B7:F0:7C:BC
            X509v3 Authority Key Identifier:
                keyid:7C:A1:FC:F9:1B:D0:F9:7C:0D:45:00:E2:18:3D:85:78:2B:17:5D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/323830343a363636383a3a2f33322d3438203d3e20323639353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6668::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:c0:1c:db:e8:20:94:f9:91:c1:f1:8f:ec:47:ce:19:81:8f:
         c5:71:52:b4:3c:77:ec:de:ed:07:6c:bc:2b:b6:c1:bf:21:98:
         96:4e:2a:d9:b7:48:23:c7:e6:d3:0b:fc:2b:d0:dd:1c:80:c0:
         d3:80:e2:29:99:24:e3:51:9a:bc:09:cd:2d:b1:be:ee:e1:24:
         d7:99:a3:c0:f9:00:bb:09:44:36:cf:62:bc:72:34:de:b1:4f:
         b8:7c:8f:09:e0:67:f6:e7:62:98:cd:a3:16:fc:2b:1b:60:ae:
         2b:9f:16:f1:22:84:aa:bb:2f:b7:f7:ff:3b:4d:1a:dd:59:f9:
         54:fa:43:5d:d6:bc:1b:13:d8:bb:d7:bf:3d:fe:89:d4:b0:20:
         51:c7:9a:d8:1c:e2:99:b1:1f:1c:c6:a5:14:9b:a1:d4:13:1e:
         2a:65:8b:82:fd:59:0b:21:a0:e6:9b:2f:4e:1f:5a:6b:6f:06:
         fc:85:b5:7e:02:8b:75:35:83:3c:5e:8a:e5:70:0a:ac:7c:2b:
         1e:35:c6:a2:24:c8:b4:a2:09:86:3a:88:9a:18:ac:76:39:54:
         28:cf:42:1b:6a:a3:8d:19:dd:5a:88:90:5e:3e:44:0b:37:0b:
         b7:2f:c8:dd:1e:82:ee:9b:37:20:14:0c:18:92:43:94:17:72:
         d0:5b:eb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:44:57 2025 by rpki-client