Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a333030303a3a2f33362d3336203d3e20323632353835.roa
File:                     323830343a386637303a333030303a3a2f33362d3336203d3e20323632353835.roa (raw, json)
Hash identifier:          V8Q76XeYCmigjgHd9exuEVZO21LhvOEz8UJdt2IOq60=
Subject key identifier:   05:02:BD:39:60:0A:6A:48:41:75:26:3B:B3:CF:A6:C4:A9:47:5D:54
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       0A75D58A19879C0AA993DA8E29E8EEE0811F130B
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a333030303a3a2f33362d3336203d3e20323632353835.roa
Signing time:             Thu 16 Oct 2025 16:05:04 +0000
ROA not before:           Thu 16 Oct 2025 16:00:04 +0000
ROA not after:            Thu 15 Oct 2026 16:05:04 +0000
asID:                     262585
IP address blocks:        2804:8f70:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:75:d5:8a:19:87:9c:0a:a9:93:da:8e:29:e8:ee:e0:81:1f:13:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Oct 16 16:00:04 2025 GMT
            Not After : Oct 15 16:05:04 2026 GMT
        Subject: CN=0502BD39600A6A484175263BB3CFA6C4A9475D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fc:8e:99:27:d1:3b:41:3c:67:b5:6e:07:4d:
                    3a:b5:b2:b5:b7:d7:fe:bb:84:d7:45:cf:15:a7:ef:
                    d9:94:98:a8:ab:bf:75:a5:08:03:f7:e4:05:fd:d5:
                    a6:0b:5f:79:8d:56:92:94:e0:3b:c1:a4:19:a7:bb:
                    4e:ac:e2:cd:39:57:59:b5:c0:84:09:34:16:0d:ab:
                    25:35:7b:b6:54:ea:c7:66:61:8a:bc:86:b2:a8:84:
                    e4:8d:e6:fe:54:40:8d:89:07:a1:d3:50:5a:5b:96:
                    79:a3:de:7e:38:1c:4b:30:1a:78:70:cf:ee:6e:99:
                    e0:f0:f6:76:eb:99:26:cc:61:94:6e:5e:fd:1e:11:
                    b4:02:56:6e:20:aa:8e:e9:ed:c9:a4:a0:51:3d:28:
                    9a:cf:2e:dd:f2:eb:90:10:30:bf:df:dd:80:82:e4:
                    cc:83:17:b1:87:b3:3f:ce:d4:bc:2e:95:5f:d8:ab:
                    6c:cf:da:3b:d0:84:ad:b4:d2:08:a9:99:10:0f:28:
                    aa:0e:a4:79:b4:c0:87:4e:15:dd:9c:f9:70:96:7b:
                    6d:55:f9:61:76:fd:15:0e:78:bb:d4:4d:60:25:32:
                    ba:27:9f:73:2c:09:82:44:9f:75:32:78:df:be:cf:
                    79:95:5b:a1:ff:28:27:72:2b:14:29:75:74:60:3e:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:02:BD:39:60:0A:6A:48:41:75:26:3B:B3:CF:A6:C4:A9:47:5D:54
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a333030303a3a2f33362d3336203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f70:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8e:07:94:07:b0:e5:76:e3:cf:ea:53:70:b3:30:70:03:0d:12:
         75:02:a1:d8:e9:c1:a1:7b:c5:60:08:2b:7c:12:3a:f8:13:a0:
         34:b8:88:44:6f:31:eb:a3:27:6b:dc:7d:e6:98:c7:7e:c5:0b:
         af:f3:94:1b:8f:b5:66:b3:21:6e:65:63:75:38:fd:06:8b:03:
         9f:3f:29:06:c6:a2:47:ad:ed:42:3c:6f:80:2d:76:c6:11:cc:
         d3:dc:e1:d5:fa:54:26:2d:be:d0:ab:76:c8:4d:e8:72:60:a1:
         00:e5:8a:12:c0:34:d3:47:b7:03:cf:9a:64:8f:e1:72:0c:4d:
         5f:cb:eb:6c:a1:66:16:6e:f7:40:2f:5a:3a:5e:a9:07:20:7d:
         e5:23:cf:a5:d0:1f:d1:55:f6:27:c4:49:fa:83:5c:d1:72:6b:
         99:3d:a7:4f:6d:69:ee:28:ee:b9:c5:6b:5d:fa:61:21:69:9b:
         85:e2:a3:ec:ca:2e:c3:d0:1b:a4:fe:bc:d0:e4:17:30:69:06:
         9c:0e:d9:25:b4:a9:f0:f6:31:8c:2e:8f:61:ad:d1:e3:e7:1c:
         96:a9:48:90:21:a5:71:cc:f4:db:a8:fc:bd:4c:74:b4:69:ea:
         b5:c8:6f:99:66:1a:a5:db:ba:b8:eb:29:45:7c:91:a7:3a:4a:
         73:6f:37:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:34:26 2025 by rpki-client