Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/323830343a363235633a383030303a3a2f33332d3333203d3e20323639323932.roa
File:                     323830343a363235633a383030303a3a2f33332d3333203d3e20323639323932.roa (raw, json)
Hash identifier:          epbEj8krG33tpaWS0bXehGzTYsTkA59oEqF1PjGbstQ=
Subject key identifier:   63:E5:1F:76:3A:C5:FB:18:BC:27:B7:E6:83:8C:8B:23:84:B8:49:7B
Certificate issuer:       /CN=891876379661096633CCF1E14D82D1BBB9CBF133
Certificate serial:       0CD7CFE4DB46BA1D75C92B852F49701D260F449D
Authority key identifier: 89:18:76:37:96:61:09:66:33:CC:F1:E1:4D:82:D1:BB:B9:CB:F1:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/323830343a363235633a383030303a3a2f33332d3333203d3e20323639323932.roa
Signing time:             Tue 16 Sep 2025 17:07:06 +0000
ROA not before:           Tue 16 Sep 2025 17:02:06 +0000
ROA not after:            Tue 15 Sep 2026 17:07:06 +0000
asID:                     269292
IP address blocks:        2804:625c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.crl
                          rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d7:cf:e4:db:46:ba:1d:75:c9:2b:85:2f:49:70:1d:26:0f:44:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891876379661096633CCF1E14D82D1BBB9CBF133
        Validity
            Not Before: Sep 16 17:02:06 2025 GMT
            Not After : Sep 15 17:07:06 2026 GMT
        Subject: CN=63E51F763AC5FB18BC27B7E6838C8B2384B8497B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:27:de:45:7f:34:e5:8e:a8:52:5d:84:d2:
                    a3:b4:59:ec:cd:ae:9b:b5:5c:92:ad:32:ad:0b:43:
                    9e:2a:f8:6c:25:f1:5e:68:e9:4c:a5:c1:34:7b:58:
                    5d:8e:1b:db:20:cb:2c:45:4d:6b:62:e3:62:bb:ea:
                    c9:93:3e:45:23:01:e8:e5:87:ef:b7:04:fd:61:79:
                    2e:74:b5:bb:7b:98:1b:b4:e2:db:30:ab:00:bd:f5:
                    9c:12:1d:d5:cf:3d:ae:ab:50:e5:32:e4:2b:6b:41:
                    d1:b3:64:fe:69:89:df:52:2a:f9:6c:d6:9f:0b:42:
                    97:40:dd:f1:89:b9:47:62:d2:13:25:d3:94:fb:b3:
                    d8:24:9e:7f:6a:6d:08:77:3d:98:46:f7:d3:af:f7:
                    0f:2a:27:f1:f2:d7:b5:8d:01:36:29:4d:96:5a:0e:
                    1b:83:33:31:0c:b6:51:a2:ef:2f:3f:41:a6:04:74:
                    88:1d:57:06:36:82:9e:2b:99:71:26:2c:45:8d:8a:
                    39:e4:68:df:f7:60:b0:66:5d:62:06:36:74:9f:b3:
                    87:b0:f5:a4:41:ec:a0:78:85:54:39:04:e9:47:40:
                    14:f0:cd:79:61:31:1f:99:6a:48:58:2b:74:bc:46:
                    69:60:22:42:01:0a:97:ad:13:59:da:ea:32:1d:96:
                    86:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E5:1F:76:3A:C5:FB:18:BC:27:B7:E6:83:8C:8B:23:84:B8:49:7B
            X509v3 Authority Key Identifier:
                keyid:89:18:76:37:96:61:09:66:33:CC:F1:E1:4D:82:D1:BB:B9:CB:F1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/891876379661096633CCF1E14D82D1BBB9CBF133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891876379661096633CCF1E14D82D1BBB9CBF133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cieqzvMC2PKTA9TYePjqQn8Q2dKxfX8RghKKopqMFP/0/323830343a363235633a383030303a3a2f33332d3333203d3e20323639323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:625c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         27:a9:d4:40:df:98:14:b9:79:02:9a:70:b2:40:51:dc:3a:21:
         7d:36:10:f2:66:f6:b8:ac:87:c4:f3:20:28:d7:9f:19:da:2a:
         2d:88:6d:a1:1e:bb:a9:e6:0d:16:03:46:64:86:fe:68:ee:53:
         4e:91:fd:3d:4f:0a:e4:a8:7a:27:11:57:0f:53:22:58:89:31:
         80:48:19:bc:45:77:6c:35:fc:0f:32:76:87:e1:f7:8a:4d:90:
         a1:8a:56:d6:1a:e5:1c:a2:2c:c8:24:e9:de:08:57:13:67:b9:
         5d:9c:62:52:21:53:5c:80:e9:71:20:6b:7b:90:a5:bc:ee:24:
         13:4b:25:be:23:c6:2d:27:ed:81:b2:7c:1b:1c:64:00:0d:5e:
         81:e4:03:85:a3:24:35:d9:60:19:7e:30:0b:eb:38:bc:f3:80:
         f4:7c:0e:85:16:36:84:23:f6:55:bc:98:56:7f:98:ed:3e:ee:
         4f:28:79:0a:bc:42:63:a0:22:6d:48:c5:97:1d:6c:ac:6d:b2:
         f4:7d:68:5b:a7:4a:55:ee:ff:24:8d:57:05:fd:f0:fb:98:6e:
         05:6d:66:ea:35:f2:f9:3a:1b:c8:c3:75:12:6f:f6:52:75:ef:
         dc:47:60:3a:de:b3:2f:64:fe:7b:65:f5:77:94:d0:10:7d:a0:
         b9:e5:f1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:48:12 2025 by rpki-client