Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/323830343a323539303a3a2f33322d3333203d3e20323634323838.roa
File:                     323830343a323539303a3a2f33322d3333203d3e20323634323838.roa (raw, json)
Hash identifier:          916F6IYadG8a5DigzCzraiDt4J161Frs/6oclbTDEa0=
Subject key identifier:   C9:AD:1C:15:E5:2D:C8:79:F9:C2:27:59:E4:4B:78:A3:DF:34:98:87
Certificate issuer:       /CN=B4CF2598B6261CD548C5DE39692F9A87E4BBE36C
Certificate serial:       6589623F22AB29391D44EA328A616B58850EE14E
Authority key identifier: B4:CF:25:98:B6:26:1C:D5:48:C5:DE:39:69:2F:9A:87:E4:BB:E3:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/323830343a323539303a3a2f33322d3333203d3e20323634323838.roa
Signing time:             Fri 26 Sep 2025 14:28:22 +0000
ROA not before:           Fri 26 Sep 2025 14:23:22 +0000
ROA not after:            Fri 25 Sep 2026 14:28:22 +0000
asID:                     264288
IP address blocks:        2804:2590::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.crl
                          rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:89:62:3f:22:ab:29:39:1d:44:ea:32:8a:61:6b:58:85:0e:e1:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4CF2598B6261CD548C5DE39692F9A87E4BBE36C
        Validity
            Not Before: Sep 26 14:23:22 2025 GMT
            Not After : Sep 25 14:28:22 2026 GMT
        Subject: CN=C9AD1C15E52DC879F9C22759E44B78A3DF349887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:e8:50:40:e0:f7:3f:e1:86:e5:f5:69:76:
                    e6:d8:41:1f:12:94:86:b1:4b:91:78:51:fd:2e:b4:
                    68:77:c3:3f:36:67:17:ae:d5:14:26:73:4e:de:00:
                    53:d6:81:99:5b:6e:7e:80:e4:6e:87:71:47:6e:d0:
                    c9:31:16:ce:37:08:6d:de:46:6c:38:47:4c:4d:f4:
                    00:17:db:ec:ef:be:0b:1d:8e:53:a7:91:a6:9d:ca:
                    20:8e:1c:e9:cf:21:55:a5:af:63:88:9c:d3:f6:99:
                    0f:9a:cc:25:e4:e6:7c:b5:5b:27:81:fb:78:08:40:
                    9a:07:03:8b:a0:4e:3e:74:77:b3:16:59:24:7a:3f:
                    c2:b9:db:89:09:d3:51:dc:52:ba:11:c7:9d:f3:66:
                    59:7c:9a:cd:7f:1c:36:07:f2:ca:ae:bc:34:9d:46:
                    81:e3:74:b5:61:8c:9e:a9:fb:0a:b7:0d:ad:e9:73:
                    f9:05:50:ea:be:ef:04:5b:e6:59:80:b6:7a:c3:7d:
                    76:b2:53:18:e4:67:77:46:be:49:e0:02:c8:ed:5f:
                    43:5f:c7:ba:05:3a:b2:4c:b2:4b:ea:25:25:46:78:
                    3b:0f:27:7d:a6:46:07:64:2a:ac:68:7d:88:36:30:
                    66:f4:1c:63:54:ad:c0:8c:56:a5:8a:28:60:82:dd:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AD:1C:15:E5:2D:C8:79:F9:C2:27:59:E4:4B:78:A3:DF:34:98:87
            X509v3 Authority Key Identifier:
                keyid:B4:CF:25:98:B6:26:1C:D5:48:C5:DE:39:69:2F:9A:87:E4:BB:E3:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4CF2598B6261CD548C5DE39692F9A87E4BBE36C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GY4yLmNvZKpNFysEugwfWbyH32t6XvfaMDLoPKUbYG1U/0/323830343a323539303a3a2f33322d3333203d3e20323634323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2590::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:3a:e9:ba:f9:f6:64:be:4f:e7:41:f0:c8:7a:99:47:4f:fb:
         dd:d4:f9:ed:8b:5c:8e:a7:ed:73:6e:d1:17:14:93:e0:0b:ed:
         4c:cc:52:de:21:93:0d:42:3f:06:2b:ce:c9:9c:31:9b:ec:95:
         bb:e7:97:41:4e:8d:6c:80:2b:69:dd:33:9b:b6:8e:ba:01:03:
         4d:8f:a9:94:ba:ec:4f:0d:35:92:ce:1e:26:a7:d1:36:d4:14:
         58:00:fc:d6:37:65:f5:e6:66:94:cf:f4:75:ee:05:94:c1:87:
         0d:03:a8:0e:ca:3a:11:f8:14:fb:52:a5:8d:da:b8:59:a3:fe:
         fb:5f:61:13:bf:8e:c4:98:f6:91:0f:e6:57:2c:73:67:5a:66:
         80:a9:0c:0b:47:d1:bb:a9:89:d8:f1:71:98:2b:14:42:c6:de:
         b2:f3:eb:af:67:4f:0a:4a:af:d8:52:03:9a:7d:cf:23:9b:f1:
         37:5e:65:d5:8e:21:39:c1:d8:ad:fd:52:9b:e5:79:34:40:c4:
         d9:1e:6f:b2:7c:8c:a6:01:1e:7c:26:63:2f:44:03:51:e8:04:
         1c:94:b5:ee:96:69:15:9d:7b:9f:a3:e4:7d:04:9d:36:bb:b1:
         ff:9d:fc:2a:31:2d:5f:7a:ce:6b:62:5e:35:e5:f3:ec:9e:ad:
         97:02:2f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:03 2025 by rpki-client