Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/323830343a313238633a3a2f33322d313238203d3e20323633343833.roa
File:                     323830343a313238633a3a2f33322d313238203d3e20323633343833.roa (raw, json)
Hash identifier:          isKP7Gqpo9BmvMhfLr/hFW4a0IAN0T1VZHi6xalEwb0=
Subject key identifier:   8C:5F:E9:04:96:4E:00:BF:B0:A9:83:35:46:03:6C:8E:A6:F5:3C:92
Certificate issuer:       /CN=7D1B0166FDC8051F0765B0C6D92955CF1509B704
Certificate serial:       1CF2E03E963B4E9C9AEE3A6FB59DC40B50D79CC3
Authority key identifier: 7D:1B:01:66:FD:C8:05:1F:07:65:B0:C6:D9:29:55:CF:15:09:B7:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D1B0166FDC8051F0765B0C6D92955CF1509B704.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/323830343a313238633a3a2f33322d313238203d3e20323633343833.roa
Signing time:             Wed 08 Oct 2025 12:25:00 +0000
ROA not before:           Wed 08 Oct 2025 12:20:00 +0000
ROA not after:            Wed 07 Oct 2026 12:25:00 +0000
asID:                     263483
IP address blocks:        2804:128c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/7D1B0166FDC8051F0765B0C6D92955CF1509B704.crl
                          rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/7D1B0166FDC8051F0765B0C6D92955CF1509B704.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D1B0166FDC8051F0765B0C6D92955CF1509B704.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f2:e0:3e:96:3b:4e:9c:9a:ee:3a:6f:b5:9d:c4:0b:50:d7:9c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1B0166FDC8051F0765B0C6D92955CF1509B704
        Validity
            Not Before: Oct  8 12:20:00 2025 GMT
            Not After : Oct  7 12:25:00 2026 GMT
        Subject: CN=8C5FE904964E00BFB0A9833546036C8EA6F53C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:94:b4:6a:a2:a9:8b:d5:62:2d:41:46:26:
                    fa:80:84:4e:52:be:91:a7:b3:4a:1c:18:75:53:dd:
                    63:a9:ae:74:14:84:fc:60:a2:bf:f0:87:bf:bf:c8:
                    1c:1c:df:6e:b7:75:89:53:59:0e:34:08:24:b3:2d:
                    0b:da:55:84:d2:e4:3a:a2:ac:85:36:8a:ac:bf:7f:
                    ba:44:d6:c5:a1:6e:52:ff:dc:57:64:3d:d4:60:bb:
                    d8:07:12:9c:de:64:62:c9:8d:d9:cc:2e:79:01:0f:
                    cf:04:57:bb:ae:2d:2c:3e:f8:5b:1c:8b:e1:6d:bc:
                    8a:25:32:6b:cc:59:e8:f0:bb:db:cf:21:07:ff:78:
                    40:01:d2:b0:56:2e:11:33:68:6f:d9:c1:9e:5c:3f:
                    cf:9c:6e:92:c9:01:17:98:72:f1:ce:d0:ef:ef:b0:
                    47:5f:5d:e1:4f:59:c1:b4:3f:6e:06:7d:25:26:76:
                    ef:24:68:b9:cc:4b:20:6b:ce:d5:2a:72:02:67:9b:
                    16:6e:79:45:47:08:02:2b:16:e6:55:fc:13:6b:7e:
                    0f:58:0a:c8:4a:1f:a8:12:6e:92:da:1f:0c:2e:7f:
                    da:b6:7d:e9:81:e0:7b:d2:5a:c4:34:52:10:13:1a:
                    f9:d8:3a:b2:a8:b8:71:f7:58:fa:ea:d9:4c:4a:08:
                    a7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5F:E9:04:96:4E:00:BF:B0:A9:83:35:46:03:6C:8E:A6:F5:3C:92
            X509v3 Authority Key Identifier:
                keyid:7D:1B:01:66:FD:C8:05:1F:07:65:B0:C6:D9:29:55:CF:15:09:B7:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/7D1B0166FDC8051F0765B0C6D92955CF1509B704.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D1B0166FDC8051F0765B0C6D92955CF1509B704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/323830343a313238633a3a2f33322d313238203d3e20323633343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:128c::/32

    Signature Algorithm: sha256WithRSAEncryption
         d3:d9:c3:29:b4:b1:55:91:c9:1b:bf:2c:0e:d3:a3:1b:d9:da:
         75:4e:da:42:94:4b:f3:e2:2d:2d:ba:e8:c1:35:5a:2d:4e:71:
         9c:e5:e0:b4:24:97:93:fb:fe:29:e9:43:f2:ed:04:01:dd:33:
         c3:1e:10:d3:1e:f5:e9:d6:d5:f1:a5:4a:20:20:a0:28:58:6a:
         e9:fa:cb:ca:08:bb:60:1b:8a:d9:b8:f8:a6:ee:be:ff:f9:4a:
         7c:39:62:5e:0e:b1:36:d5:52:70:a7:75:55:62:6b:65:c1:4f:
         ec:0a:53:4a:52:90:2c:3b:7a:3d:5a:a7:42:2c:fe:f8:ce:77:
         25:01:90:b7:b7:80:3a:18:39:70:7d:71:60:de:70:35:f1:56:
         2f:96:bf:bd:fe:f7:be:b0:01:88:ca:fb:fd:e2:3e:ef:be:b7:
         8b:3d:6f:0e:41:41:1c:3c:d8:5a:5e:d5:44:81:f1:e1:88:7c:
         79:df:7b:48:b9:eb:5e:75:9b:7b:b4:ab:b9:1f:e2:fe:b0:bb:
         b7:81:de:15:ba:54:78:10:34:6f:86:44:4c:63:bf:a4:fe:70:
         14:0e:a0:54:11:44:b0:6e:3d:70:5b:f1:93:a8:04:89:b9:57:
         45:a5:d0:0a:ca:1c:41:15:79:11:2b:91:75:cc:1c:3e:bf:c2:
         d7:2a:35:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:48 2025 by rpki-client