Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a343030303a3a2f33362d3336203d3e20323632353835.roa
File:                     323830343a386637303a343030303a3a2f33362d3336203d3e20323632353835.roa (raw, json)
Hash identifier:          6ombmZIGj3nkFXJjP3QqUW5KHx9vkINliGEcOesoY8c=
Subject key identifier:   ED:A3:F7:BC:C9:CD:25:BC:E6:32:A6:0C:62:7D:7F:24:B1:75:BD:A7
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       66EF4E4138D0E56228D58D88272A6F2F66943CA8
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a343030303a3a2f33362d3336203d3e20323632353835.roa
Signing time:             Thu 16 Oct 2025 16:05:06 +0000
ROA not before:           Thu 16 Oct 2025 16:00:06 +0000
ROA not after:            Thu 15 Oct 2026 16:05:06 +0000
asID:                     262585
IP address blocks:        2804:8f70:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ef:4e:41:38:d0:e5:62:28:d5:8d:88:27:2a:6f:2f:66:94:3c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Oct 16 16:00:06 2025 GMT
            Not After : Oct 15 16:05:06 2026 GMT
        Subject: CN=EDA3F7BCC9CD25BCE632A60C627D7F24B175BDA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:20:d4:15:b6:7d:e7:c0:18:db:47:70:2f:22:
                    c8:f2:ab:4b:8a:f0:14:c8:3c:d6:b0:2c:80:9f:0a:
                    e2:ab:e8:f4:8c:31:b9:ee:dd:7a:e8:b4:7c:cf:3c:
                    80:56:42:45:58:6d:d2:a0:7d:fb:48:51:41:e2:20:
                    85:b5:27:fc:5e:ba:2a:3a:94:37:7e:c1:90:20:d8:
                    c1:a0:6f:8c:ba:d0:f8:8f:1f:ef:30:cf:59:92:59:
                    0a:fd:3f:91:e8:86:b1:16:3e:e5:19:f6:7f:bd:79:
                    c0:09:22:5b:cd:4e:25:3e:9f:93:33:eb:06:1c:ce:
                    33:ad:c4:47:eb:35:0d:55:e0:9a:19:c4:59:77:5e:
                    52:16:71:91:90:28:52:b7:a0:38:d4:92:69:14:73:
                    a1:7a:12:86:7f:3e:28:33:f2:3d:99:c4:63:19:80:
                    58:33:f4:02:66:e4:69:8b:fc:b7:be:95:26:cb:d5:
                    0d:3c:06:90:1e:49:c9:c6:02:57:46:8a:55:98:be:
                    82:d9:ca:0c:c2:2f:6a:55:99:24:13:b1:e7:5a:57:
                    ea:31:18:ad:e9:31:4b:10:dc:99:46:61:9b:9c:55:
                    5e:4c:0e:ee:62:f1:6a:05:1f:cb:91:ac:2e:08:25:
                    2c:54:69:3f:df:93:31:f7:83:59:d6:09:03:69:79:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A3:F7:BC:C9:CD:25:BC:E6:32:A6:0C:62:7D:7F:24:B1:75:BD:A7
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a343030303a3a2f33362d3336203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f70:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         23:9e:f8:02:30:82:36:52:a4:ed:46:d7:55:90:f0:18:40:c0:
         76:76:39:ee:6c:33:5b:63:b7:25:f1:81:26:1c:79:4d:42:27:
         4c:8f:37:a7:8f:50:ec:c2:89:07:6b:8d:3a:d5:7a:2c:b0:a6:
         1a:86:7e:85:20:ff:eb:2e:68:be:54:db:d0:b7:70:04:e6:f7:
         85:26:72:3a:78:f0:fe:04:df:19:5f:47:17:11:65:c7:53:0f:
         35:65:27:4d:01:10:d4:5a:a1:55:d8:18:0b:0f:2b:cf:bd:f3:
         3e:4b:b9:c7:d0:1b:7a:ee:89:89:c6:14:a4:ff:c0:7f:8c:3c:
         71:2c:f3:b2:b1:7a:65:f9:88:8f:33:14:00:24:70:57:7b:fb:
         dd:2d:1b:87:d6:93:c4:16:6a:6b:af:15:9d:88:6a:fc:c6:bb:
         fc:02:0d:f8:ae:31:74:5c:df:f8:f1:ef:ac:23:34:42:e9:19:
         54:72:b3:e7:e2:d7:36:0d:e8:0e:6c:e9:2c:9d:b6:a3:a3:62:
         6d:32:bc:c5:b9:7b:8a:b4:97:ad:97:18:3b:6d:41:23:44:98:
         a0:63:63:fb:56:1d:83:99:74:d2:78:82:42:f6:34:10:6a:3b:
         2a:1c:6e:fe:f9:c3:0e:4e:2d:b1:7b:19:87:69:01:6e:7e:16:
         d2:a6:95:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:38:06 2025 by rpki-client