Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/323830343a323837383a3a2f33322d313238203d3e20323633393633.roa
File:                     323830343a323837383a3a2f33322d313238203d3e20323633393633.roa (raw, json)
Hash identifier:          hpg9sOEi3xaCO9v17zpfUf72FMO/U8MEML8fvgpIA8Q=
Subject key identifier:   48:12:4A:90:A0:11:D9:36:4A:84:8F:71:C1:C9:9B:53:EB:4D:D6:29
Certificate issuer:       /CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F
Certificate serial:       4D318B34677A851BDC83B48330D02F5617806536
Authority key identifier: FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/323830343a323837383a3a2f33322d313238203d3e20323633393633.roa
Signing time:             Tue 02 Sep 2025 17:42:10 +0000
ROA not before:           Tue 02 Sep 2025 17:37:10 +0000
ROA not after:            Tue 01 Sep 2026 17:42:10 +0000
asID:                     263963
IP address blocks:        2804:2878::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl
                          rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:31:8b:34:67:7a:85:1b:dc:83:b4:83:30:d0:2f:56:17:80:65:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F
        Validity
            Not Before: Sep  2 17:37:10 2025 GMT
            Not After : Sep  1 17:42:10 2026 GMT
        Subject: CN=48124A90A011D9364A848F71C1C99B53EB4DD629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:db:ab:61:e7:fd:04:6b:51:db:f0:b0:a2:
                    02:e9:a2:ad:7e:d8:31:57:e7:80:d7:22:8f:56:45:
                    5a:ad:d6:2a:8d:d2:29:71:f5:db:ae:69:bc:28:6b:
                    69:06:ce:7f:ef:84:c5:1f:9f:51:02:97:43:ae:5e:
                    fc:04:13:9a:05:c6:1e:e6:8c:5c:97:e5:22:3b:f0:
                    cf:21:a5:f5:cd:3e:0a:5f:43:60:6d:a9:9f:a2:c9:
                    23:99:d4:51:18:c5:51:09:c9:4f:5c:f4:76:a0:81:
                    7b:b9:9b:04:93:65:b0:c7:78:97:d1:c8:c8:61:99:
                    c4:a7:29:3c:a6:9d:c4:3d:78:df:ba:09:6f:f4:2f:
                    10:c0:1a:c2:cd:23:30:a7:87:d0:98:b1:e3:1e:b1:
                    2a:ac:5e:d4:f4:b9:00:e9:4e:20:19:f8:62:3b:ff:
                    78:dc:2d:ae:12:be:2e:11:13:ce:67:ea:3a:ea:d7:
                    c8:a5:d2:66:15:d5:e7:fa:a1:24:d8:36:48:79:bf:
                    9a:0d:64:d7:62:bf:50:66:cc:57:2d:54:c8:94:92:
                    6d:a9:3d:dc:22:cb:09:fd:83:4d:5c:d5:21:98:e6:
                    23:54:c7:b6:44:79:66:05:b5:db:8d:7d:b8:1d:6f:
                    08:a1:e9:42:ec:ec:4e:53:6e:82:84:c9:23:05:26:
                    68:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:12:4A:90:A0:11:D9:36:4A:84:8F:71:C1:C9:9B:53:EB:4D:D6:29
            X509v3 Authority Key Identifier:
                keyid:FA:A2:0D:01:76:A8:E0:99:3E:B6:3C:7F:51:07:16:3B:BE:5D:BA:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA20D0176A8E0993EB63C7F5107163BBE5DBA8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaJAnD5PNKpxKxq9dQJGf2nQNJ5MpTnqw5P7a1XXxHfG/0/323830343a323837383a3a2f33322d313238203d3e20323633393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2878::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:4f:de:28:c0:7a:12:4f:f1:99:17:50:3c:ac:65:c4:52:f1:
         51:5c:b8:5e:e9:1d:4d:32:5b:0d:be:70:2d:9e:0d:50:34:33:
         64:00:8d:8c:2b:cb:80:f8:98:52:8c:f3:fe:0d:63:74:39:21:
         7c:2c:96:20:6d:47:6f:8f:ed:e5:d0:c9:50:49:62:b0:fb:6c:
         31:26:de:70:35:fa:0a:4c:85:dd:45:97:51:24:5b:f3:04:b0:
         0c:33:13:dd:2d:df:8d:f2:c4:1a:23:26:9f:7b:5a:1b:ff:4a:
         3b:ce:95:e4:b9:da:be:4e:77:fe:0f:08:4e:01:fb:76:d5:a3:
         fb:c9:77:d1:64:19:74:df:4e:b7:4a:b1:90:7c:51:61:53:c6:
         55:25:ed:f7:32:f4:12:32:51:ea:9b:2e:df:30:d5:b5:f4:9f:
         5d:70:83:d8:1d:06:d3:22:fc:06:aa:28:08:27:c8:75:6b:24:
         20:16:4c:a2:44:95:d4:5a:7e:58:55:71:2b:51:62:72:9f:86:
         a0:e0:3d:a0:b0:4f:3a:3f:00:56:7c:5b:30:6f:84:7c:47:07:
         cf:49:5d:fb:95:77:ba:c8:23:53:12:c6:ba:de:19:dc:53:6d:
         6f:a0:4d:43:c2:c7:4c:6a:ee:17:35:4f:f3:63:ad:b3:0a:2f:
         e1:b6:d2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:32:48 2025 by rpki-client