Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FeqCzdPEQXcdyhBWksFfZm5JStdEe4GWor9HHA2uWs4W/0/323830343a393132303a3a2f33322d3438203d3e20323734363230.roa
File:                     323830343a393132303a3a2f33322d3438203d3e20323734363230.roa (raw, json)
Hash identifier:          3F4b4h5sawUMypuLlZONmKMqbU3xSTOusChbPbLmXbA=
Subject key identifier:   13:2D:1A:23:DE:32:85:5A:65:E5:7C:9C:8E:5B:F7:7D:26:42:0B:36
Certificate issuer:       /CN=55FAD69D1E6500972858DB168E4C9047383C17FF
Certificate serial:       70EF434B92D39CC741144486B5CE1D88471ED3C6
Authority key identifier: 55:FA:D6:9D:1E:65:00:97:28:58:DB:16:8E:4C:90:47:38:3C:17:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55FAD69D1E6500972858DB168E4C9047383C17FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FeqCzdPEQXcdyhBWksFfZm5JStdEe4GWor9HHA2uWs4W/0/323830343a393132303a3a2f33322d3438203d3e20323734363230.roa
Signing time:             Tue 26 Aug 2025 17:17:29 +0000
ROA not before:           Tue 26 Aug 2025 17:12:29 +0000
ROA not after:            Tue 25 Aug 2026 17:17:29 +0000
asID:                     274620
IP address blocks:        2804:9120::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FeqCzdPEQXcdyhBWksFfZm5JStdEe4GWor9HHA2uWs4W/0/55FAD69D1E6500972858DB168E4C9047383C17FF.crl
                          rsync://rpki-repo.registro.br/repo/FeqCzdPEQXcdyhBWksFfZm5JStdEe4GWor9HHA2uWs4W/0/55FAD69D1E6500972858DB168E4C9047383C17FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55FAD69D1E6500972858DB168E4C9047383C17FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ef:43:4b:92:d3:9c:c7:41:14:44:86:b5:ce:1d:88:47:1e:d3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55FAD69D1E6500972858DB168E4C9047383C17FF
        Validity
            Not Before: Aug 26 17:12:29 2025 GMT
            Not After : Aug 25 17:17:29 2026 GMT
        Subject: CN=132D1A23DE32855A65E57C9C8E5BF77D26420B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4e:15:fa:34:b3:26:bd:03:00:c3:dc:10:74:
                    21:61:f8:99:46:7c:65:f7:49:64:ea:14:00:9d:4c:
                    d5:4b:16:0b:c2:8d:11:c4:46:7e:6f:6e:1c:0c:74:
                    c7:8a:2b:2d:c9:3c:9c:88:4e:a2:cd:e8:38:ee:d5:
                    58:73:16:a3:81:2b:33:2a:52:b6:af:fb:b5:cb:bd:
                    3a:88:85:bf:00:27:0c:a2:0b:8a:bd:2f:e3:83:ba:
                    ae:bc:90:73:07:66:a3:fb:7c:4e:0b:8c:bb:d5:d2:
                    38:26:b1:ec:b7:46:25:2b:d3:89:01:54:e3:1d:d3:
                    ae:cd:45:74:58:11:7b:3a:0f:15:bc:d5:9d:13:3e:
                    81:20:70:05:9a:36:44:2c:ec:f6:b9:86:b0:cc:3b:
                    8f:b3:c8:6f:b0:8d:02:4e:28:1e:68:79:b5:0a:f4:
                    16:71:0c:5e:b6:41:b3:ff:20:32:91:68:18:c4:07:
                    47:9a:0c:c7:6e:53:c9:0e:da:73:ef:23:06:cf:e0:
                    d6:b9:56:75:24:54:75:d4:df:a6:22:1f:18:ce:c4:
                    10:c6:2a:af:85:fe:85:25:f4:7e:3c:5e:9e:23:89:
                    fc:a1:65:69:7b:70:15:7c:d6:6c:39:64:da:6d:f5:
                    43:65:0d:6a:a9:c7:d6:9a:35:b3:9d:48:6b:ac:4a:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2D:1A:23:DE:32:85:5A:65:E5:7C:9C:8E:5B:F7:7D:26:42:0B:36
            X509v3 Authority Key Identifier:
                keyid:55:FA:D6:9D:1E:65:00:97:28:58:DB:16:8E:4C:90:47:38:3C:17:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FeqCzdPEQXcdyhBWksFfZm5JStdEe4GWor9HHA2uWs4W/0/55FAD69D1E6500972858DB168E4C9047383C17FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55FAD69D1E6500972858DB168E4C9047383C17FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FeqCzdPEQXcdyhBWksFfZm5JStdEe4GWor9HHA2uWs4W/0/323830343a393132303a3a2f33322d3438203d3e20323734363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9120::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:04:b7:db:ec:5f:56:a5:98:27:b8:57:14:f9:dd:fc:8b:6d:
         dc:4b:1a:da:a1:4d:af:e1:04:cf:3c:08:dc:c2:2a:2e:7e:0b:
         ff:ee:c2:de:41:2a:e9:9e:9a:fe:ca:42:65:16:09:3b:d3:2c:
         f0:72:c8:a3:f8:6e:4a:0b:dd:19:4c:e0:2e:c4:80:7a:f2:4e:
         4a:c8:68:59:b4:d5:a8:26:f5:d0:e3:a8:f2:1a:75:35:d8:63:
         31:c6:b7:09:6c:28:f8:d0:d9:aa:89:a2:cf:12:7a:3a:0b:68:
         25:5f:a8:23:8a:99:7c:2c:1d:59:ee:9b:e3:a7:26:dd:4b:4b:
         af:a8:e3:cd:41:52:04:bd:fa:91:04:bc:e1:f9:85:74:ea:dd:
         0e:fc:c8:37:f0:d9:35:ea:cd:a4:7c:57:b0:e7:df:e8:25:ba:
         55:f6:d4:41:eb:db:a5:ed:fe:7e:5e:10:f8:ff:4f:d1:42:09:
         96:52:17:9e:f9:c0:28:70:e8:a9:3f:26:0f:2a:ab:0d:70:1d:
         57:d4:1d:9c:2f:9f:ed:d5:07:2b:ea:90:7f:24:7c:4e:e3:16:
         dc:bf:70:1a:ff:5b:54:aa:7d:e1:5c:a9:be:01:62:03:17:98:
         e2:a2:49:a9:c7:af:6b:a3:e3:76:f2:7d:c1:85:f8:19:82:81:
         2b:55:6d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:55:04 2025 by rpki-client