Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/323830343a353139383a3a2f33322d313238203d3e20323638343634.roa
File:                     323830343a353139383a3a2f33322d313238203d3e20323638343634.roa (raw, json)
Hash identifier:          60BHpnz6u50/eMwN4Pe9Kfx9pF1BlKP6R240ePjTG1c=
Subject key identifier:   00:E8:48:98:85:00:7B:2F:65:56:D8:E7:73:63:16:21:FF:6A:63:1B
Certificate issuer:       /CN=1014927E28103822EBD27A9BBFCE358A2ADB16B3
Certificate serial:       7B2F77A18DBAE3CA1961E2A18B7DE2D84149BCAF
Authority key identifier: 10:14:92:7E:28:10:38:22:EB:D2:7A:9B:BF:CE:35:8A:2A:DB:16:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1014927E28103822EBD27A9BBFCE358A2ADB16B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/323830343a353139383a3a2f33322d313238203d3e20323638343634.roa
Signing time:             Fri 26 Sep 2025 22:47:00 +0000
ROA not before:           Fri 26 Sep 2025 22:42:00 +0000
ROA not after:            Fri 25 Sep 2026 22:47:00 +0000
asID:                     268464
IP address blocks:        2804:5198::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.crl
                          rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1014927E28103822EBD27A9BBFCE358A2ADB16B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2f:77:a1:8d:ba:e3:ca:19:61:e2:a1:8b:7d:e2:d8:41:49:bc:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1014927E28103822EBD27A9BBFCE358A2ADB16B3
        Validity
            Not Before: Sep 26 22:42:00 2025 GMT
            Not After : Sep 25 22:47:00 2026 GMT
        Subject: CN=00E8489885007B2F6556D8E773631621FF6A631B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:d6:a8:bc:3d:0e:3c:5c:22:ea:7d:20:21:
                    db:df:6b:80:15:14:b3:01:a8:7e:5d:8e:9c:99:e1:
                    24:7a:a8:1a:e6:37:30:79:f3:cd:6b:2d:e7:a3:00:
                    6c:7c:58:7e:4c:88:84:68:86:20:cc:9f:41:60:b3:
                    6b:4d:3d:1a:f5:e5:1c:a4:70:14:7d:31:ce:c4:6f:
                    c1:da:20:eb:9a:2b:b9:16:f6:69:e2:9a:66:13:7c:
                    91:b5:8c:aa:38:bf:51:94:4d:f2:d0:0a:55:cf:93:
                    a5:16:c3:23:10:01:74:95:5b:65:8a:a1:88:76:58:
                    13:f5:41:b7:8b:fe:ec:44:25:63:d2:3f:c4:21:f2:
                    6b:99:b4:3b:6a:1a:9a:49:94:b4:c7:28:ca:8d:3e:
                    94:52:49:53:8f:e5:4f:c6:39:76:ef:43:7c:f6:ca:
                    67:6f:6d:29:7e:d9:83:bf:06:9d:37:0c:73:08:7a:
                    75:f2:50:80:e6:7b:f2:e8:0a:35:37:51:d8:fa:82:
                    73:e6:f8:3c:eb:5b:fd:14:00:bf:2a:ef:66:ce:8e:
                    68:a3:48:e5:49:aa:f2:3f:3f:a9:46:43:9d:25:fb:
                    44:aa:04:bd:b6:97:f0:fc:3c:4b:1f:74:04:af:c1:
                    38:9b:7a:47:cb:58:ea:cf:75:53:10:30:36:ca:f2:
                    df:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E8:48:98:85:00:7B:2F:65:56:D8:E7:73:63:16:21:FF:6A:63:1B
            X509v3 Authority Key Identifier:
                keyid:10:14:92:7E:28:10:38:22:EB:D2:7A:9B:BF:CE:35:8A:2A:DB:16:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/1014927E28103822EBD27A9BBFCE358A2ADB16B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1014927E28103822EBD27A9BBFCE358A2ADB16B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/323830343a353139383a3a2f33322d313238203d3e20323638343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5198::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:16:6f:67:31:69:24:73:fc:6c:5f:df:e8:c0:d4:68:24:a7:
         a4:46:91:7b:5e:a7:35:46:36:83:21:38:a8:2e:f6:99:b9:ea:
         f1:24:7d:6a:bc:6b:c6:34:e1:42:b7:07:b2:9e:49:f8:33:e6:
         9e:30:db:db:94:5b:7f:ab:61:20:9c:9f:43:fa:07:41:b7:64:
         3b:cb:9c:ea:7a:e6:46:a7:f9:ee:27:6c:8c:d4:3b:69:6a:75:
         4b:f8:a0:e3:2a:1f:87:fa:a6:15:f6:9c:b7:ce:63:da:c8:af:
         d3:86:11:83:b0:8a:72:5e:00:87:a9:89:9b:95:1e:43:dc:12:
         f7:76:2f:42:2b:fb:53:11:4a:ea:61:51:88:a2:1e:e9:65:8f:
         b5:d2:4d:3e:56:09:65:91:8a:e3:49:b4:a3:6d:3f:4e:56:16:
         cc:05:c1:7f:1d:03:5d:c5:e8:98:f3:2c:e2:e7:67:bd:24:80:
         98:c0:6f:a6:95:3c:73:d8:fe:fd:74:ee:89:9e:0f:23:76:3c:
         3f:e4:97:a3:b5:29:09:4d:e0:f2:9a:22:f1:26:0c:52:88:26:
         7c:e7:2c:d9:21:ea:8f:f2:dd:8f:68:7a:2a:08:eb:4f:41:90:
         83:d1:53:11:13:04:23:97:f7:b7:63:e6:f6:dc:85:5b:43:ed:
         95:60:42:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:40:56 2025 by rpki-client