Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a3a2f33322d313238203d3e203631383035.roa
File:                     323830343a313939383a3a2f33322d313238203d3e203631383035.roa (raw, json)
Hash identifier:          DEdn1PUucNYh26MflbSbXwR48HFdlBfMJXHqQYtgYUs=
Subject key identifier:   DA:7C:B9:74:C0:8B:69:1B:B5:C6:BF:71:3D:7B:36:1C:94:FD:F5:36
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       0F956466F2CD132038749ADD0D4302CBA55E04A0
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a3a2f33322d313238203d3e203631383035.roa
Signing time:             Thu 09 Oct 2025 12:35:04 +0000
ROA not before:           Thu 09 Oct 2025 12:30:04 +0000
ROA not after:            Thu 08 Oct 2026 12:35:04 +0000
asID:                     61805
IP address blocks:        2804:1998::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:95:64:66:f2:cd:13:20:38:74:9a:dd:0d:43:02:cb:a5:5e:04:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: Oct  9 12:30:04 2025 GMT
            Not After : Oct  8 12:35:04 2026 GMT
        Subject: CN=DA7CB974C08B691BB5C6BF713D7B361C94FDF536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ab:fa:b4:41:d9:72:3b:69:3f:e8:71:53:61:
                    0a:29:8c:fa:cc:0c:80:68:77:b9:ba:47:c5:5b:28:
                    7e:e5:44:ed:aa:74:37:bc:8f:a2:df:3b:4c:6e:02:
                    d5:d7:84:b7:f7:e5:5c:20:57:41:1e:4f:78:a1:f5:
                    d2:16:c1:f7:78:4e:c2:3e:f8:3a:df:f1:27:de:5e:
                    82:d9:e3:3c:00:ea:01:5d:b0:88:15:30:f4:0a:a1:
                    4d:eb:0c:5c:d0:b3:21:d7:f1:be:77:40:3e:28:f6:
                    17:79:4d:9d:39:e1:c2:d9:5a:3f:d0:a7:b3:3d:fd:
                    10:c3:cd:91:7f:10:5c:92:91:7b:23:14:03:1d:6f:
                    63:e4:c5:2c:c6:31:7a:3e:2b:e1:e7:9f:27:ab:6f:
                    2b:aa:7d:29:0c:4e:05:30:12:ca:d6:3f:3f:d5:75:
                    fa:30:19:b2:b8:87:81:43:d3:83:97:d5:8c:6b:ca:
                    a1:93:f0:59:81:e0:b4:ae:9e:f9:aa:11:b6:02:b8:
                    7b:5d:db:a1:00:f2:78:12:f1:fb:df:ca:e9:71:95:
                    67:81:76:3a:a9:39:b8:7b:4a:8a:56:96:8b:79:bb:
                    f4:9b:eb:94:86:3b:69:b5:bc:34:e1:4a:53:86:8a:
                    6b:a9:aa:26:fc:e3:19:28:4a:a2:48:03:63:7c:59:
                    5d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7C:B9:74:C0:8B:69:1B:B5:C6:BF:71:3D:7B:36:1C:94:FD:F5:36
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a3a2f33322d313238203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1998::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:c6:09:63:92:d2:ce:6f:23:f0:ae:b7:de:4c:fe:3a:22:40:
         6d:ca:06:82:f8:d5:9f:1b:95:14:b3:62:7a:69:f9:e8:85:db:
         24:c9:fe:66:a9:b4:13:98:e7:0b:06:09:4d:c2:35:24:70:35:
         41:af:48:e9:00:1c:61:8d:ca:7a:8d:ef:6e:35:f9:73:9b:d6:
         5d:c0:87:3f:d8:54:c1:bd:ac:84:ea:18:18:f0:1b:12:30:e7:
         f0:c3:68:76:bc:ab:f6:7a:93:ed:ab:c0:c1:14:18:f2:64:6f:
         30:ea:96:10:04:3e:50:a4:d8:9a:e5:06:dc:da:fa:48:72:a9:
         72:e0:f9:7d:49:29:a5:72:4b:5d:60:03:c1:8a:13:25:af:91:
         34:14:e0:82:89:30:f5:e2:12:22:22:80:fc:4a:e2:f6:12:65:
         73:39:f0:a1:77:e8:02:4d:bf:39:83:17:05:a2:4f:58:58:49:
         64:7b:5a:ad:88:6c:53:df:8c:cf:b1:f2:df:4c:bb:ce:f3:6f:
         91:98:2b:84:0b:65:60:a2:90:34:c6:17:a1:ca:a8:a9:ce:8a:
         05:33:b8:6d:b5:a4:c5:2f:d8:f1:a4:1b:05:37:03:51:ec:9d:
         d6:8a:00:58:10:81:89:89:5c:39:db:8f:da:92:85:9c:50:66:
         b2:c4:6f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:19 2025 by rpki-client