Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33322d3332203d3e20323638343633.roa
File:                     323830343a353139343a3a2f33322d3332203d3e20323638343633.roa (raw, json)
Hash identifier:          0MwQRiPqp9hzykygs9/UXlHJpRLqglugvZQ4A53JA/g=
Subject key identifier:   DC:95:43:3D:25:C9:F7:FF:70:B5:0A:CD:6B:C1:50:E7:A3:48:1C:31
Certificate issuer:       /CN=A0E5732D5CB2354F7128E1B6A750407464415454
Certificate serial:       3418AAFEF921B00FE449F22DC03810A8101B4EA0
Authority key identifier: A0:E5:73:2D:5C:B2:35:4F:71:28:E1:B6:A7:50:40:74:64:41:54:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E5732D5CB2354F7128E1B6A750407464415454.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33322d3332203d3e20323638343633.roa
Signing time:             Thu 25 Sep 2025 13:25:20 +0000
ROA not before:           Thu 25 Sep 2025 13:20:20 +0000
ROA not after:            Thu 24 Sep 2026 13:25:20 +0000
asID:                     268463
IP address blocks:        2804:5194::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/A0E5732D5CB2354F7128E1B6A750407464415454.crl
                          rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/A0E5732D5CB2354F7128E1B6A750407464415454.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E5732D5CB2354F7128E1B6A750407464415454.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:18:aa:fe:f9:21:b0:0f:e4:49:f2:2d:c0:38:10:a8:10:1b:4e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0E5732D5CB2354F7128E1B6A750407464415454
        Validity
            Not Before: Sep 25 13:20:20 2025 GMT
            Not After : Sep 24 13:25:20 2026 GMT
        Subject: CN=DC95433D25C9F7FF70B50ACD6BC150E7A3481C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:79:5f:34:fa:bf:7e:6f:65:69:78:9f:43:11:
                    1b:f8:8b:ce:df:82:0b:e4:5f:85:8c:c2:20:29:63:
                    0c:30:c9:45:10:4c:be:56:24:61:76:a5:fd:4e:41:
                    85:29:7d:8f:dc:86:7d:1c:c3:86:3d:fe:9a:39:3c:
                    f7:7d:bb:b7:ee:e5:12:b8:3d:a3:9b:96:e8:db:51:
                    07:1b:d5:1b:e9:35:a1:99:53:df:fd:72:51:0e:9a:
                    fa:a0:da:e8:b2:24:ff:ff:fb:59:93:9b:70:5c:52:
                    e8:a6:fa:c4:84:d1:e7:d3:7f:0f:6d:0d:2b:61:ae:
                    83:5a:df:52:40:d8:e3:f1:c3:7c:81:09:c0:05:25:
                    ba:68:c6:64:9d:80:28:68:3a:d4:46:83:b4:5c:8b:
                    22:7a:81:e3:32:59:4d:24:b7:ad:25:46:c5:7f:89:
                    66:04:5f:f7:39:e2:e9:72:1c:0a:28:bf:3f:66:bb:
                    6a:7b:f4:d7:5c:c7:3d:11:98:d3:01:c3:2c:e2:8e:
                    da:1c:bb:79:95:6b:02:00:ae:d9:55:d2:97:10:8f:
                    1b:30:ff:0d:ac:84:cf:b0:2a:4d:09:8f:14:a3:5b:
                    5e:78:da:94:af:dd:e0:23:d8:03:03:bf:f1:eb:1f:
                    30:8a:8e:87:fc:ca:4f:13:a3:28:00:d1:a0:2c:bf:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:95:43:3D:25:C9:F7:FF:70:B5:0A:CD:6B:C1:50:E7:A3:48:1C:31
            X509v3 Authority Key Identifier:
                keyid:A0:E5:73:2D:5C:B2:35:4F:71:28:E1:B6:A7:50:40:74:64:41:54:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/A0E5732D5CB2354F7128E1B6A750407464415454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E5732D5CB2354F7128E1B6A750407464415454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33322d3332203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5194::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:94:04:52:27:ef:c5:65:b5:58:67:56:e2:53:c3:84:d8:5e:
         91:6e:98:07:37:ec:be:e6:a1:fe:09:f4:24:b9:54:56:8c:dd:
         79:98:96:59:cf:50:82:05:8e:c0:3d:61:cf:96:90:85:cb:de:
         e8:c6:ee:41:2c:0b:63:59:d8:1d:ae:68:e1:8b:79:ac:0c:58:
         98:f4:bb:bb:89:5c:49:1b:59:ea:a9:55:23:e6:7d:be:00:64:
         bb:b9:d9:af:9a:01:27:4e:18:71:e6:e2:8c:44:f5:f3:dc:86:
         01:13:90:19:fb:59:cb:d9:d7:f8:97:8e:35:13:04:46:0d:88:
         16:df:05:fc:e2:5b:57:35:1e:31:d8:75:fd:1f:ad:eb:ee:4f:
         b5:76:4c:99:09:8c:69:54:60:e0:bc:3a:bc:3d:39:77:b8:06:
         c9:45:18:48:67:00:76:f7:9d:ac:01:84:80:5d:28:0e:37:e8:
         d5:f9:d3:62:81:15:27:ca:b2:80:42:9c:4e:b4:0c:9c:0a:0e:
         c3:8f:97:c0:95:9f:85:55:e9:eb:cd:4d:68:79:ea:03:60:75:
         d2:db:46:da:b1:14:83:bb:39:dd:c7:a9:57:e1:50:e1:90:ad:
         6f:fd:5b:f9:fe:e6:83:6b:b1:e9:fb:53:d7:93:78:58:31:4d:
         72:c1:8c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:37:22 2025 by rpki-client