Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/323830343a373066343a3a2f33322d3332203d3e20323730373538.roa
File:                     323830343a373066343a3a2f33322d3332203d3e20323730373538.roa (raw, json)
Hash identifier:          f27C5T+vOLtC67F9853TU+6fMSfriLRMBjXRflUWZtQ=
Subject key identifier:   1A:7D:51:23:41:B3:28:53:DC:66:09:B4:1F:0E:AA:D3:57:47:04:3A
Certificate issuer:       /CN=687A6048EF56F775209873731BED7BB7E087AB69
Certificate serial:       29CD73D34C740300B62363D724FADB823A4AC721
Authority key identifier: 68:7A:60:48:EF:56:F7:75:20:98:73:73:1B:ED:7B:B7:E0:87:AB:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/323830343a373066343a3a2f33322d3332203d3e20323730373538.roa
Signing time:             Wed 15 Oct 2025 15:48:02 +0000
ROA not before:           Wed 15 Oct 2025 15:43:02 +0000
ROA not after:            Wed 14 Oct 2026 15:48:02 +0000
asID:                     270758
IP address blocks:        2804:70f4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.crl
                          rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:cd:73:d3:4c:74:03:00:b6:23:63:d7:24:fa:db:82:3a:4a:c7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687A6048EF56F775209873731BED7BB7E087AB69
        Validity
            Not Before: Oct 15 15:43:02 2025 GMT
            Not After : Oct 14 15:48:02 2026 GMT
        Subject: CN=1A7D512341B32853DC6609B41F0EAAD35747043A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:6b:14:6c:ae:08:96:13:5a:81:b2:97:ae:
                    5a:a2:4b:fa:50:da:8c:99:99:3b:89:83:09:5f:ec:
                    0f:49:f6:b8:f1:8e:94:a7:1a:6b:47:cb:95:ff:a3:
                    54:a0:a9:41:61:a7:ee:1c:08:3f:5e:d1:9e:83:11:
                    ca:13:24:4a:c5:8c:e7:91:b3:4a:3d:f0:ce:d5:fe:
                    e6:99:78:27:a9:50:0f:5a:52:60:9e:cb:18:c2:c8:
                    a5:ac:73:ed:0b:50:7e:f8:33:a4:8a:09:1e:e9:d7:
                    10:4c:db:02:48:ba:2c:7d:f4:2b:be:0b:7b:e6:29:
                    e4:c3:ad:f0:d6:c7:41:cb:3e:20:e8:08:19:9b:c5:
                    a2:39:d8:a4:de:00:1d:54:d5:31:13:4d:60:7c:b6:
                    f6:fb:a3:0a:0d:17:74:5a:de:36:33:77:ee:cb:23:
                    b3:7e:33:3c:27:7b:49:66:3e:bc:b2:07:f5:ee:d3:
                    5a:56:82:08:b3:eb:5a:01:94:e6:c2:83:ee:05:92:
                    b3:1a:19:97:ed:01:9c:fc:79:06:7c:ab:93:ad:7e:
                    64:c1:b7:e6:b1:c4:ee:b7:63:47:3f:de:36:e2:94:
                    02:f9:a9:da:2e:00:15:65:81:4e:58:f4:45:50:68:
                    10:8f:e1:1a:f3:8c:7a:de:af:9d:9f:97:f6:d5:b6:
                    41:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7D:51:23:41:B3:28:53:DC:66:09:B4:1F:0E:AA:D3:57:47:04:3A
            X509v3 Authority Key Identifier:
                keyid:68:7A:60:48:EF:56:F7:75:20:98:73:73:1B:ED:7B:B7:E0:87:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/687A6048EF56F775209873731BED7BB7E087AB69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687A6048EF56F775209873731BED7BB7E087AB69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/323830343a373066343a3a2f33322d3332203d3e20323730373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:f8:56:f0:a0:ac:e9:d9:8b:55:f6:c2:fa:02:c2:85:7d:55:
         de:1d:15:20:98:bb:be:99:47:e2:f3:0a:2f:71:9f:a2:8d:14:
         a4:ca:79:9f:68:ac:49:42:f5:1b:21:2b:f8:ee:4b:6c:4f:32:
         44:3b:fd:ff:41:70:33:80:ac:0f:ff:85:40:93:f6:93:45:93:
         37:8d:43:e2:db:68:70:68:12:2d:5a:a4:4e:76:be:a2:d2:22:
         1f:b1:bc:d5:90:a6:8c:46:f0:48:12:18:b4:12:8b:dc:8b:16:
         2e:0c:91:56:73:ac:a1:14:92:ed:6b:42:c7:35:cc:86:67:56:
         73:e4:d2:d1:65:0e:47:07:76:3a:be:6a:39:01:47:55:6f:eb:
         13:b6:bd:77:ef:bd:8e:10:74:a8:a0:56:6d:6d:20:20:df:58:
         f1:61:06:8a:ff:b2:96:4c:c4:ed:03:bb:2c:b5:44:c6:d5:24:
         6f:d7:6f:83:e4:f7:6a:1a:7b:3c:79:76:34:57:96:19:37:9e:
         7c:6f:74:aa:a5:b8:e0:d6:cf:35:78:a5:7e:54:2b:b2:a3:8b:
         e5:6c:b6:b9:5d:d7:d8:18:7a:40:3d:2a:a6:97:f2:67:8c:9d:
         4a:e3:6d:f8:85:8b:b3:7b:38:b4:9c:d9:34:92:89:e9:ed:92:
         d2:75:f4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:28:35 2025 by rpki-client