Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/323830343a383763343a3a2f33322d3438203d3e20323732373330.roa
File:                     323830343a383763343a3a2f33322d3438203d3e20323732373330.roa (raw, json)
Hash identifier:          By9OFWCoh1bOG8WkOfctKTnehHhZJwuE6+he7oK/gRU=
Subject key identifier:   BC:3A:FA:6F:2C:4A:98:F8:B5:EE:0D:88:17:C1:D0:03:75:35:FF:33
Certificate issuer:       /CN=C0DD64892A0C121799367350C68DE3D2965E859B
Certificate serial:       5FC92781AFD44ECFD6D8B38DC3182C1540E9D953
Authority key identifier: C0:DD:64:89:2A:0C:12:17:99:36:73:50:C6:8D:E3:D2:96:5E:85:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DD64892A0C121799367350C68DE3D2965E859B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/323830343a383763343a3a2f33322d3438203d3e20323732373330.roa
Signing time:             Fri 19 Sep 2025 15:27:58 +0000
ROA not before:           Fri 19 Sep 2025 15:22:58 +0000
ROA not after:            Fri 18 Sep 2026 15:27:58 +0000
asID:                     272730
IP address blocks:        2804:87c4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/C0DD64892A0C121799367350C68DE3D2965E859B.crl
                          rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/C0DD64892A0C121799367350C68DE3D2965E859B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DD64892A0C121799367350C68DE3D2965E859B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c9:27:81:af:d4:4e:cf:d6:d8:b3:8d:c3:18:2c:15:40:e9:d9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DD64892A0C121799367350C68DE3D2965E859B
        Validity
            Not Before: Sep 19 15:22:58 2025 GMT
            Not After : Sep 18 15:27:58 2026 GMT
        Subject: CN=BC3AFA6F2C4A98F8B5EE0D8817C1D0037535FF33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:36:2e:7a:a3:dd:67:14:17:ce:e3:04:b7:8f:
                    20:e7:a6:64:b1:a6:eb:74:5a:96:3e:7e:48:76:2e:
                    61:8a:70:1b:6c:5e:91:dd:6d:d4:51:8f:c7:21:29:
                    79:7e:70:61:c1:79:8d:61:a2:ca:20:9b:aa:5e:34:
                    5d:ce:27:8f:5b:1e:6f:7c:49:53:c8:c2:7b:f0:be:
                    1c:37:5d:58:01:f0:88:59:ee:09:02:f3:ea:e7:f2:
                    ac:75:64:ba:4d:14:06:29:2b:ab:aa:58:a2:fd:64:
                    48:93:a8:aa:13:18:68:9e:d4:09:dd:3a:c6:87:8e:
                    71:88:61:b0:68:6a:ad:51:66:1d:f3:0d:3a:10:60:
                    00:bb:1d:17:52:7d:f7:5a:39:ca:d7:67:9c:7f:c0:
                    3a:d5:ac:30:09:de:c4:39:e3:f3:f4:19:6e:db:1a:
                    e5:9f:44:75:b7:4a:c3:08:91:39:54:b6:a8:f0:5c:
                    96:5a:40:1a:0c:2f:a6:1b:37:aa:a3:a9:1f:2a:76:
                    d0:98:0f:90:d4:fb:6e:aa:01:a4:bc:66:42:7a:d4:
                    01:84:67:f4:a5:78:85:59:09:09:13:26:83:64:a9:
                    9a:7d:7c:50:8f:36:a8:a7:24:fd:03:92:ef:b6:bd:
                    7e:86:06:3a:c7:38:d7:ed:f0:09:4f:1a:4b:8e:0c:
                    51:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3A:FA:6F:2C:4A:98:F8:B5:EE:0D:88:17:C1:D0:03:75:35:FF:33
            X509v3 Authority Key Identifier:
                keyid:C0:DD:64:89:2A:0C:12:17:99:36:73:50:C6:8D:E3:D2:96:5E:85:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/C0DD64892A0C121799367350C68DE3D2965E859B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DD64892A0C121799367350C68DE3D2965E859B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/323830343a383763343a3a2f33322d3438203d3e20323732373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:50:e1:3e:71:7a:c9:eb:3d:4b:5c:ad:5e:f3:09:d6:50:bd:
         c0:60:53:3c:41:1d:5b:23:90:c6:91:54:91:c0:3e:83:0d:a4:
         7a:49:1a:3b:f4:88:c2:7a:09:8f:23:92:37:86:bc:ab:b8:33:
         a8:b5:71:dc:2d:18:0b:43:bb:3d:8b:b8:e0:3c:6a:b2:49:36:
         06:68:5a:fb:7c:e4:96:72:41:5a:c1:21:7d:30:8a:c5:e1:45:
         22:20:c2:3b:06:cc:fd:72:5c:cf:51:fc:a5:68:a1:d8:32:90:
         50:c1:f1:49:df:1c:1b:4c:c5:9a:83:5c:fc:71:21:8b:a7:c2:
         5e:76:08:96:86:f4:50:c0:9a:ee:89:1a:74:c2:e4:d0:08:1b:
         e3:19:10:07:9a:d8:6a:b2:de:f1:c0:a7:3f:52:81:8b:63:2d:
         cf:d2:61:e8:18:84:08:3f:43:64:11:9d:cc:a6:ae:21:e1:9f:
         44:07:00:b5:eb:be:ce:7f:df:96:ba:59:62:81:30:a2:22:3c:
         c9:0f:4f:5f:c0:e2:0c:a8:5d:48:71:ad:90:88:2c:c7:55:cb:
         b8:d8:17:52:e9:f3:98:e4:07:40:86:01:64:1f:29:57:ff:1c:
         c8:7a:bc:98:7f:88:e5:67:31:c3:20:23:49:41:f7:e9:85:4c:
         56:2a:ec:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:44:04 2025 by rpki-client