Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/323830343a326630343a3a2f33322d3332203d3e20323634383636.roa
File:                     323830343a326630343a3a2f33322d3332203d3e20323634383636.roa (raw, json)
Hash identifier:          /sXIRUBcpyFTQ4olOCn9dqV9Umz2C4cfKswsrsdKO9k=
Subject key identifier:   C5:C3:F1:4B:33:C8:AF:0F:41:80:66:D4:39:83:2A:D8:4E:33:F4:CD
Certificate issuer:       /CN=F6106BC25F0F5FE119BEEC1A96524A32B1CC4972
Certificate serial:       6A4124496BB528A6B0026D9DAD9155411971BC95
Authority key identifier: F6:10:6B:C2:5F:0F:5F:E1:19:BE:EC:1A:96:52:4A:32:B1:CC:49:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/323830343a326630343a3a2f33322d3332203d3e20323634383636.roa
Signing time:             Fri 12 Sep 2025 18:39:53 +0000
ROA not before:           Fri 12 Sep 2025 18:34:53 +0000
ROA not after:            Fri 11 Sep 2026 18:39:53 +0000
asID:                     264866
IP address blocks:        2804:2f04::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.crl
                          rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:41:24:49:6b:b5:28:a6:b0:02:6d:9d:ad:91:55:41:19:71:bc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6106BC25F0F5FE119BEEC1A96524A32B1CC4972
        Validity
            Not Before: Sep 12 18:34:53 2025 GMT
            Not After : Sep 11 18:39:53 2026 GMT
        Subject: CN=C5C3F14B33C8AF0F418066D439832AD84E33F4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:54:1e:3b:e0:05:bf:ff:de:ed:2f:fe:73:be:
                    63:77:7d:f3:ce:5e:ba:9b:96:44:97:d3:ab:b1:33:
                    df:e1:8b:30:60:9c:8c:bb:1a:e9:54:3e:c5:53:fd:
                    68:c3:02:86:69:1e:88:3e:86:f2:c0:40:99:b2:50:
                    13:22:60:4f:45:86:6b:1a:61:ed:f6:b1:a4:fe:c5:
                    54:de:d5:4c:5a:27:f2:dd:2d:fe:76:96:b8:9f:b5:
                    f2:0b:c2:d9:39:c6:a1:88:73:a8:48:9b:1c:f7:4f:
                    b0:84:d5:73:52:05:9d:b7:8d:ce:7b:55:73:ab:71:
                    52:c4:c8:27:e2:fa:fe:9e:c4:89:a0:15:0a:da:9e:
                    41:40:a7:0c:3b:6b:00:c8:5a:14:61:ac:e1:0b:56:
                    cc:b4:60:8e:fb:a0:5e:1d:64:fd:43:ba:0a:53:65:
                    27:93:d2:42:5d:80:cb:75:2c:61:91:77:c6:3a:bd:
                    85:85:e8:62:c2:63:75:47:c5:61:da:12:49:d9:94:
                    41:61:54:cf:11:df:09:37:12:54:7c:51:d8:4f:ab:
                    23:ac:35:26:4a:20:42:35:55:de:bd:ff:62:70:1c:
                    da:f1:89:5e:57:c3:1d:f0:1a:00:fa:f5:7d:6f:da:
                    d9:02:40:50:fb:c0:9c:ec:fe:3d:c7:56:ae:2f:f1:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C3:F1:4B:33:C8:AF:0F:41:80:66:D4:39:83:2A:D8:4E:33:F4:CD
            X509v3 Authority Key Identifier:
                keyid:F6:10:6B:C2:5F:0F:5F:E1:19:BE:EC:1A:96:52:4A:32:B1:CC:49:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6106BC25F0F5FE119BEEC1A96524A32B1CC4972.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1UMfTubnbbVmJmx8CnHT2mSpcvm8PepZyyLxkUVww4F/0/323830343a326630343a3a2f33322d3332203d3e20323634383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f04::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:62:a0:a4:d0:88:4b:b2:a8:e7:f4:55:b2:e1:38:1d:13:0a:
         55:96:02:d2:26:06:67:31:4f:cc:cd:f0:85:51:93:4d:28:4a:
         66:d6:f6:d7:9e:2d:6d:4e:fc:0f:c4:03:43:83:51:c3:90:f7:
         3e:b8:a8:44:21:7f:27:06:78:a5:56:b7:3b:1f:c7:a4:33:d6:
         ee:e3:bd:b5:16:f1:44:b9:b9:f5:ee:10:8e:a5:50:c4:9a:2b:
         62:8a:9f:e8:91:90:19:59:4a:cb:27:c3:0f:a6:e9:3e:8a:c9:
         e3:0b:4c:fb:1f:19:c8:7b:ff:a0:a9:59:13:d6:36:84:81:6d:
         ae:21:99:13:3e:cc:7e:b6:b4:69:ae:ec:7d:b3:72:da:17:4d:
         7a:2a:6e:f7:32:9e:b5:69:2b:4d:06:38:97:bc:fe:f1:1d:56:
         c9:d8:1c:64:37:0b:70:54:1f:7c:3c:3e:02:9f:4d:4c:e6:58:
         c0:d9:63:37:3b:5e:ef:12:0e:66:02:18:4e:bb:1d:9e:be:5e:
         37:cf:0e:97:65:4b:5d:92:4f:07:4d:88:7c:1e:5e:1f:14:18:
         ab:9d:0b:93:13:27:2e:0e:8f:05:4d:c2:01:8d:31:cb:ec:c9:
         93:c6:9a:e6:e9:a8:46:0a:bb:da:7f:f5:81:93:c1:05:ec:25:
         95:59:7f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:17 2025 by rpki-client