Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/323830343a326464343a3a2f33322d3634203d3e20323635333036.roa
File:                     323830343a326464343a3a2f33322d3634203d3e20323635333036.roa (raw, json)
Hash identifier:          4MKivFL6JuVASe9BgAi01EUwjKYbl7Q+yc9ZbfpQruI=
Subject key identifier:   86:3A:9B:D4:EC:9B:13:AA:A0:76:BA:22:B7:7D:6E:3F:D0:27:F1:F9
Certificate issuer:       /CN=B6BED81A275EBA830D2F2882B605540F9C45CED5
Certificate serial:       5EB87AD0D653C4CB987DBEEB93C6B7E5FC6F5ACB
Authority key identifier: B6:BE:D8:1A:27:5E:BA:83:0D:2F:28:82:B6:05:54:0F:9C:45:CE:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6BED81A275EBA830D2F2882B605540F9C45CED5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/323830343a326464343a3a2f33322d3634203d3e20323635333036.roa
Signing time:             Tue 07 Oct 2025 18:34:56 +0000
ROA not before:           Tue 07 Oct 2025 18:29:56 +0000
ROA not after:            Tue 06 Oct 2026 18:34:56 +0000
asID:                     265306
IP address blocks:        2804:2dd4::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/B6BED81A275EBA830D2F2882B605540F9C45CED5.crl
                          rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/B6BED81A275EBA830D2F2882B605540F9C45CED5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6BED81A275EBA830D2F2882B605540F9C45CED5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b8:7a:d0:d6:53:c4:cb:98:7d:be:eb:93:c6:b7:e5:fc:6f:5a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6BED81A275EBA830D2F2882B605540F9C45CED5
        Validity
            Not Before: Oct  7 18:29:56 2025 GMT
            Not After : Oct  6 18:34:56 2026 GMT
        Subject: CN=863A9BD4EC9B13AAA076BA22B77D6E3FD027F1F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:9b:a3:ca:7f:59:36:bc:68:d3:73:04:3d:
                    39:4e:63:fc:7d:a2:cb:14:58:35:64:c9:fd:90:4b:
                    0b:a0:30:f8:81:90:3b:37:79:12:6d:2a:7c:0b:60:
                    54:07:33:f2:73:cd:05:81:1a:80:d9:dd:38:00:7a:
                    b6:5b:e9:22:8b:b2:8b:3f:79:19:eb:7a:0c:82:9c:
                    5d:bf:61:25:42:4a:4a:d0:b8:40:6e:2d:7b:84:4c:
                    5d:56:19:1a:7a:00:67:60:2f:e0:16:a9:fc:2c:e8:
                    e7:ab:49:de:3d:1c:26:05:ee:3a:ce:5e:09:03:d6:
                    05:a3:85:d6:2e:4c:96:7c:a8:ed:2c:a1:5c:7c:6e:
                    48:03:07:98:e1:05:ad:cf:3f:b5:ce:6b:f3:04:2e:
                    aa:ab:cf:fb:54:9a:fe:ac:99:d7:16:6f:c3:e3:70:
                    3d:3d:7e:f2:b5:9a:0b:a8:08:d9:aa:c9:09:fb:45:
                    79:1b:d2:ad:d1:2d:a1:89:2b:c6:18:6e:c3:1e:12:
                    d4:84:a5:e5:24:ee:c7:3c:d6:b6:ca:41:e4:11:1d:
                    bb:f3:89:17:6a:d4:ea:fa:d1:37:9a:9f:c0:c0:49:
                    5e:bf:b9:47:07:eb:db:3a:be:dd:3a:52:d6:3c:1e:
                    96:83:82:e1:f3:ed:17:ed:75:c4:7d:0b:6b:8f:51:
                    9a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3A:9B:D4:EC:9B:13:AA:A0:76:BA:22:B7:7D:6E:3F:D0:27:F1:F9
            X509v3 Authority Key Identifier:
                keyid:B6:BE:D8:1A:27:5E:BA:83:0D:2F:28:82:B6:05:54:0F:9C:45:CE:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/B6BED81A275EBA830D2F2882B605540F9C45CED5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6BED81A275EBA830D2F2882B605540F9C45CED5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/323830343a326464343a3a2f33322d3634203d3e20323635333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dd4::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:f4:ae:da:ef:37:61:3e:d8:2f:3f:44:cd:2f:86:f3:d4:9b:
         1c:aa:fd:33:ea:4a:1d:0f:59:77:5a:5e:c1:ad:18:8a:0d:92:
         69:19:24:90:1d:42:f2:13:0c:da:8a:54:0b:b6:d3:93:43:22:
         37:f2:cd:c9:fd:ef:e7:0e:e1:54:12:6a:f6:41:51:e9:99:25:
         c4:65:9d:5f:c9:39:f6:34:43:dd:6a:a2:23:d4:f4:5d:21:c7:
         60:40:89:58:b2:4f:05:72:49:c3:56:72:a1:43:4e:56:7f:7d:
         94:2d:9f:b2:5e:12:1e:2d:94:5e:af:f1:19:32:ec:78:0b:51:
         d8:5f:a2:6b:ed:9f:cc:5b:b1:c1:3d:93:d3:14:28:dd:ae:23:
         e5:c6:9a:4b:7c:f9:31:e2:3f:2a:cb:fb:73:85:55:ee:28:1c:
         7f:b0:32:97:59:1c:81:0e:ca:a2:27:c7:ef:16:f5:fa:9d:31:
         9f:3a:c2:b4:bb:e1:aa:a0:7f:5c:eb:56:d6:53:0b:ec:63:41:
         a5:af:94:38:ed:7f:c0:7d:d6:73:59:6f:08:16:28:65:17:96:
         42:9d:5c:03:cc:2e:87:46:b9:13:19:c6:35:15:d5:7f:ca:3b:
         61:1c:87:25:72:59:67:97:a6:e6:70:2f:86:f6:c2:c2:68:f7:
         25:bf:32:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:43:45 2025 by rpki-client