Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/323830343a376332383a3a2f33332d3333203d3e20323731343739.roa
File:                     323830343a376332383a3a2f33332d3333203d3e20323731343739.roa (raw, json)
Hash identifier:          sbq1iDsZBN1A9qN9zjBkhferB8XT+wDTQdix7Jf6ibE=
Subject key identifier:   1C:0F:C8:90:B8:4C:B0:48:CB:2A:10:06:DA:2F:64:3C:F9:7D:58:46
Certificate issuer:       /CN=5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF
Certificate serial:       2447DB447B0164B44719D8EBB914CA357FF0BF37
Authority key identifier: 5C:FB:EA:E8:ED:6B:09:98:01:F3:BC:C4:84:7C:1C:FB:3F:E6:09:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/323830343a376332383a3a2f33332d3333203d3e20323731343739.roa
Signing time:             Fri 17 Oct 2025 17:43:38 +0000
ROA not before:           Fri 17 Oct 2025 17:38:38 +0000
ROA not after:            Fri 16 Oct 2026 17:43:38 +0000
asID:                     271479
IP address blocks:        2804:7c28::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.crl
                          rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:47:db:44:7b:01:64:b4:47:19:d8:eb:b9:14:ca:35:7f:f0:bf:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF
        Validity
            Not Before: Oct 17 17:38:38 2025 GMT
            Not After : Oct 16 17:43:38 2026 GMT
        Subject: CN=1C0FC890B84CB048CB2A1006DA2F643CF97D5846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:01:4c:05:4c:3c:9a:d1:f8:b7:ef:8b:74:7d:
                    b5:69:25:52:e9:d4:a9:7d:56:02:6b:e9:02:3b:8b:
                    cf:b6:73:42:23:66:09:69:47:27:6a:48:4b:5b:c6:
                    fa:cb:99:ec:6c:0b:2a:9c:0d:03:fe:94:dc:50:b8:
                    c9:91:c3:09:d5:ad:d4:3f:6c:60:41:5d:90:1a:d2:
                    c0:a6:d1:5f:80:da:75:67:42:74:37:0b:08:b6:9b:
                    c4:1d:ba:57:4e:e2:55:a3:96:6a:1e:fb:36:c4:2a:
                    e5:9d:19:08:8b:40:b9:8e:1f:c0:6b:7e:47:db:13:
                    a1:ea:7d:8e:68:63:3e:a0:da:4f:c9:ad:3e:e9:a2:
                    f7:52:fd:87:f7:f8:56:ee:80:64:ac:eb:66:d3:47:
                    d5:bc:96:83:62:56:af:cb:d7:f6:d8:13:2b:e6:f5:
                    3d:df:d2:a8:8b:af:e6:65:e1:9f:0f:de:be:0f:91:
                    3b:2c:07:11:7a:fc:11:05:f5:07:d8:b0:ea:a1:75:
                    1e:f7:a7:f4:4e:e1:b2:e1:49:aa:e5:77:ad:8f:4e:
                    ec:e2:01:b6:66:0f:47:5f:41:02:3f:c0:0f:06:f7:
                    b5:fb:1c:36:e3:09:06:9e:88:4b:62:2c:eb:fa:a8:
                    48:04:e4:7f:b0:fc:9f:ab:9e:f7:fb:c5:98:b4:9c:
                    0c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0F:C8:90:B8:4C:B0:48:CB:2A:10:06:DA:2F:64:3C:F9:7D:58:46
            X509v3 Authority Key Identifier:
                keyid:5C:FB:EA:E8:ED:6B:09:98:01:F3:BC:C4:84:7C:1C:FB:3F:E6:09:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CFBEAE8ED6B099801F3BCC4847C1CFB3FE609DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/323830343a376332383a3a2f33332d3333203d3e20323731343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c28::/33

    Signature Algorithm: sha256WithRSAEncryption
         60:e5:e7:24:f1:78:24:3f:a4:2a:57:26:ca:02:25:63:9d:c3:
         e5:9f:18:be:83:60:30:6d:1a:ad:72:1b:e4:98:65:08:6b:d7:
         86:ac:6f:a3:f1:c4:9b:f8:e2:c2:02:86:ee:8b:79:f5:9f:02:
         99:38:64:72:41:11:a6:e0:b8:57:7c:21:00:dc:52:c8:71:4c:
         a8:32:6a:a2:25:62:d4:48:eb:6d:9f:c6:21:0f:b4:00:be:09:
         e4:9f:af:8b:9e:fc:ae:73:f8:ae:91:29:46:b5:89:17:d6:20:
         e3:91:68:b5:cd:35:d1:f1:56:09:63:fb:76:93:5e:2e:43:b5:
         4b:e0:7f:09:0b:c1:4d:7d:1b:33:36:a6:c9:61:26:b6:fe:2c:
         11:0d:c6:14:5c:e5:36:86:09:ca:de:b8:98:4c:4d:5c:2d:ff:
         fe:54:32:ad:5e:d8:22:49:f9:6c:b7:65:8b:c1:a7:c6:25:da:
         33:1b:97:19:d8:11:cb:c1:ef:1d:d8:53:9b:3d:bc:ba:90:d9:
         e0:e3:03:fd:39:46:d1:a5:af:12:f7:02:93:84:a8:d8:21:02:
         1a:6f:ea:c0:94:81:7d:b7:3f:0a:56:eb:c6:78:02:8b:fb:26:
         fc:b0:19:21:56:9a:c0:e0:3a:74:0e:6d:5d:87:bb:a9:38:17:
         03:11:fa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:04:26 2025 by rpki-client