Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/323830343a336531343a3a2f33322d313238203d3e20323636353732.roa
File:                     323830343a336531343a3a2f33322d313238203d3e20323636353732.roa (raw, json)
Hash identifier:          nP53J+8p4R56THoitqqPIV9xJK71Jg/OIheDjr7Qgjo=
Subject key identifier:   5F:18:23:0A:50:63:B2:F1:82:42:0F:7A:50:04:E4:8B:41:40:3F:90
Certificate issuer:       /CN=9327DF660841FA793EB561E1E5F01B343216B1DF
Certificate serial:       77A1F6ADFEF9C4E31A6BC17598582DE6A5CD7A1A
Authority key identifier: 93:27:DF:66:08:41:FA:79:3E:B5:61:E1:E5:F0:1B:34:32:16:B1:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9327DF660841FA793EB561E1E5F01B343216B1DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/323830343a336531343a3a2f33322d313238203d3e20323636353732.roa
Signing time:             Mon 06 Oct 2025 18:36:06 +0000
ROA not before:           Mon 06 Oct 2025 18:31:06 +0000
ROA not after:            Mon 05 Oct 2026 18:36:06 +0000
asID:                     266572
IP address blocks:        2804:3e14::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/9327DF660841FA793EB561E1E5F01B343216B1DF.crl
                          rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/9327DF660841FA793EB561E1E5F01B343216B1DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9327DF660841FA793EB561E1E5F01B343216B1DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 20:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a1:f6:ad:fe:f9:c4:e3:1a:6b:c1:75:98:58:2d:e6:a5:cd:7a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9327DF660841FA793EB561E1E5F01B343216B1DF
        Validity
            Not Before: Oct  6 18:31:06 2025 GMT
            Not After : Oct  5 18:36:06 2026 GMT
        Subject: CN=5F18230A5063B2F182420F7A5004E48B41403F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f4:17:f6:7e:20:20:b1:49:34:1a:48:14:07:
                    c4:5e:45:83:dd:b7:38:8e:51:c0:14:89:d0:4d:06:
                    ed:e2:ff:37:4a:86:08:63:05:87:e6:d3:66:8c:6b:
                    42:2e:b8:6d:5f:9a:05:a4:c6:84:f8:02:c2:83:49:
                    b6:d6:aa:fc:54:4f:1f:65:c6:4d:5d:c0:20:b5:00:
                    08:87:8c:68:65:b2:38:e0:7d:01:22:55:43:fd:91:
                    ed:56:0e:81:4b:ed:6b:dc:cb:4d:a3:ad:2e:ce:fe:
                    3e:2f:ce:cc:ba:31:17:d3:4a:38:28:23:42:d5:e9:
                    14:da:2e:72:16:40:40:cf:0d:72:98:03:fb:ce:ce:
                    4b:f7:39:4c:7e:0d:5b:07:5c:1f:d3:bd:22:7c:d7:
                    2f:0d:5f:5a:bf:5e:90:c3:86:b7:bc:77:cb:0b:7f:
                    7d:dc:9d:a0:f1:fe:99:31:4d:66:44:3e:76:c7:d2:
                    df:46:c4:b5:ec:96:8b:29:d7:89:1d:7b:99:c3:2b:
                    7c:73:e4:52:a1:c1:ba:72:b0:a0:57:cd:80:be:4a:
                    65:57:8c:c0:07:41:4a:5e:e3:bf:f8:76:7a:b3:47:
                    af:73:ce:e8:c5:a3:21:d0:fd:18:60:69:c8:3b:71:
                    9e:b3:3a:9f:69:b3:c7:50:3d:d2:fd:b8:31:d3:99:
                    d8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:18:23:0A:50:63:B2:F1:82:42:0F:7A:50:04:E4:8B:41:40:3F:90
            X509v3 Authority Key Identifier:
                keyid:93:27:DF:66:08:41:FA:79:3E:B5:61:E1:E5:F0:1B:34:32:16:B1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/9327DF660841FA793EB561E1E5F01B343216B1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9327DF660841FA793EB561E1E5F01B343216B1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENYjti5NuoU2GLbdnPoJHdX77NpPHp5ZSdxvNMx6y4QQ/0/323830343a336531343a3a2f33322d313238203d3e20323636353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e14::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:67:db:5d:87:bc:fb:52:55:49:7b:03:7d:a3:fd:3d:98:02:
         6a:c1:66:21:26:dd:47:47:66:cf:0e:e1:04:b1:0b:1e:c7:da:
         22:8b:e2:1a:dc:a1:df:91:ab:39:65:c6:f3:9c:bc:31:49:74:
         41:3b:a7:fc:d0:dc:33:64:87:5e:3c:34:e1:4a:7a:e1:2d:e7:
         9b:7e:e1:7b:5e:34:7c:92:7e:19:8a:85:eb:69:44:79:b6:f5:
         c1:26:58:1f:18:1d:58:87:99:bd:d5:f5:10:da:33:01:c9:cf:
         d7:04:d3:d6:70:5b:89:40:0d:49:35:48:e5:f0:69:85:51:fb:
         b6:8b:98:8d:49:dc:a7:b0:b4:a8:1f:e1:ae:a5:68:72:d0:a3:
         f7:5a:0d:5a:a5:85:5a:c2:4b:54:e3:50:aa:81:04:81:69:d3:
         72:dd:e1:46:0c:91:42:4c:a2:d2:9c:8b:c5:d1:5a:1d:09:55:
         c3:6c:bf:aa:1f:0d:20:4b:2f:14:7c:5a:63:35:60:53:84:7d:
         2a:93:f6:d1:64:9e:09:aa:61:4f:f4:48:24:fe:7a:e5:2e:73:
         47:1b:a4:a1:72:fc:75:cf:bb:0e:1c:4d:82:59:8a:f6:e8:c2:
         9b:ec:77:45:61:e9:32:36:b7:60:c0:e0:a3:d8:14:83:ae:c9:
         af:78:2a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:37:24 2025 by rpki-client