Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a353030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a353030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          q6ktwSLGnTkmjEmaNEhbHZY26K0ax0dcO8P/ezW7PBs=
Subject key identifier:   E5:48:49:33:CA:D3:FC:19:A2:A2:0E:34:EF:BD:C3:57:83:4F:3C:B5
Certificate issuer:       /CN=199E6A493967FE55BA0140061BC6435DD8779FD9
Certificate serial:       2767C2F56F8EA2C4DE92A1A0AA811E020AB4F944
Authority key identifier: 19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a353030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Fri 17 Oct 2025 12:00:20 +0000
ROA not before:           Fri 17 Oct 2025 11:55:20 +0000
ROA not after:            Fri 16 Oct 2026 12:00:20 +0000
asID:                     267991
IP address blocks:        2804:5654:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:67:c2:f5:6f:8e:a2:c4:de:92:a1:a0:aa:81:1e:02:0a:b4:f9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199E6A493967FE55BA0140061BC6435DD8779FD9
        Validity
            Not Before: Oct 17 11:55:20 2025 GMT
            Not After : Oct 16 12:00:20 2026 GMT
        Subject: CN=E5484933CAD3FC19A2A20E34EFBDC357834F3CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fc:9d:20:f2:84:40:ec:6b:35:69:3b:81:2e:
                    92:4c:b7:41:6c:6d:e1:c4:09:ec:46:70:32:d8:8a:
                    51:32:48:39:00:0d:f2:b9:4f:c6:12:76:75:40:85:
                    80:3e:f4:c7:de:bd:70:f2:b5:59:27:3e:8c:72:58:
                    7f:2f:73:6e:ec:ae:d0:99:c6:7a:23:77:6b:26:d1:
                    9a:e8:13:92:d6:24:b9:44:d5:3e:f0:d3:77:10:2c:
                    18:17:cd:88:cd:ab:4b:30:7f:2c:c6:60:9d:81:e9:
                    cc:4f:88:4e:74:8a:0d:56:e0:a5:95:3b:2f:5e:77:
                    34:6f:80:b7:35:2c:3d:8a:b2:ad:05:18:e8:ce:7a:
                    7e:b4:e2:f9:22:38:85:8e:51:24:c5:5a:3e:97:ff:
                    0d:de:39:5f:cc:24:09:16:92:2c:9c:6e:c1:bd:a6:
                    d1:49:6e:e6:79:ab:4e:24:07:b0:a6:a7:5c:64:51:
                    fc:9c:5c:c4:30:3b:77:4e:14:ca:4c:7f:61:cd:90:
                    5c:a4:8a:84:a3:88:4b:13:1e:d1:64:7a:a6:94:fd:
                    b9:1b:08:1f:c9:8a:85:fe:7c:b4:3d:a9:5d:b2:a6:
                    34:5d:21:34:d7:d8:f3:87:98:3b:ca:8c:0b:56:ea:
                    62:fb:83:0e:9b:5a:00:61:7e:38:35:63:fb:47:58:
                    39:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:48:49:33:CA:D3:FC:19:A2:A2:0E:34:EF:BD:C3:57:83:4F:3C:B5
            X509v3 Authority Key Identifier:
                keyid:19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a353030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1e:57:02:30:71:c6:72:c8:60:56:d5:3b:a1:81:97:96:44:82:
         27:e6:61:e8:fb:ae:08:dc:95:e8:61:f9:c9:81:5f:66:da:88:
         da:da:b7:81:f6:78:52:ef:2b:ef:65:fe:88:b3:e5:12:5c:37:
         b8:7a:08:5f:80:a4:71:e5:20:38:51:5f:91:9b:9c:09:28:b9:
         89:9b:af:30:d7:a1:35:09:b0:f6:57:8d:c2:ee:c1:8b:62:78:
         26:42:19:a6:0c:fb:21:47:04:27:54:3e:ff:38:e6:d1:bd:e8:
         4f:18:5a:17:cd:73:3d:f6:fc:84:c9:6a:26:95:06:ad:9c:27:
         d5:1d:e5:f2:03:34:4f:37:0f:43:57:3d:03:3f:d7:41:ae:45:
         af:9d:2a:2f:71:f1:e3:99:22:1d:d7:42:3c:13:5e:38:53:37:
         57:bd:69:c6:df:93:71:8a:b1:77:1c:92:05:4d:20:40:95:14:
         da:bb:8d:14:9a:66:82:a3:70:92:d2:44:e7:9f:e1:91:28:fe:
         4c:54:16:89:4f:ce:ab:23:56:fe:0e:02:b0:9c:7e:5f:10:03:
         c2:fd:89:09:e4:db:de:80:93:23:9d:be:ad:e1:a0:0a:20:e1:
         30:a7:6a:06:93:63:68:73:3f:13:6e:e5:bd:ee:e4:e6:0b:21:
         89:1f:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:39:53 2025 by rpki-client