Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a3a2f33322d3334203d3e20323639353234.roa
File:                     323830343a363566303a3a2f33322d3334203d3e20323639353234.roa (raw, json)
Hash identifier:          fFISeSrSOW9En3SDOUBWDRGfW5aQXnV4N8EKYIdaFMY=
Subject key identifier:   61:94:75:34:B4:D3:88:4B:C3:81:D8:1C:48:BC:A2:DB:AB:DF:48:40
Certificate issuer:       /CN=BC6184C5FCD673F65B0D49766B9FBE7FE20551B9
Certificate serial:       52EDF43C800B2F62D244B2C7C8710750685460EF
Authority key identifier: BC:61:84:C5:FC:D6:73:F6:5B:0D:49:76:6B:9F:BE:7F:E2:05:51:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a3a2f33322d3334203d3e20323639353234.roa
Signing time:             Tue 14 Oct 2025 13:54:54 +0000
ROA not before:           Tue 14 Oct 2025 13:49:54 +0000
ROA not after:            Tue 13 Oct 2026 13:54:54 +0000
asID:                     269524
IP address blocks:        2804:65f0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.crl
                          rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ed:f4:3c:80:0b:2f:62:d2:44:b2:c7:c8:71:07:50:68:54:60:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6184C5FCD673F65B0D49766B9FBE7FE20551B9
        Validity
            Not Before: Oct 14 13:49:54 2025 GMT
            Not After : Oct 13 13:54:54 2026 GMT
        Subject: CN=61947534B4D3884BC381D81C48BCA2DBABDF4840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:23:83:43:e2:ed:82:a1:49:f8:92:b9:49:60:
                    4f:33:3a:db:72:5d:77:d8:3c:fc:d9:d8:b3:a2:91:
                    e5:17:bc:4c:04:c2:7c:c1:fb:75:5a:88:f1:43:06:
                    a0:2a:c8:b7:b2:a3:e4:8c:38:c8:1d:37:a5:b3:fb:
                    87:ed:8d:9d:eb:42:ab:ce:63:36:5b:24:8e:29:65:
                    30:13:d0:cf:4e:b7:75:2f:3c:8b:76:4e:52:89:84:
                    a9:04:94:9b:fb:40:45:c5:70:cb:2f:2c:45:83:87:
                    5f:30:84:a3:c9:75:85:68:42:c8:a0:8d:98:d2:3f:
                    04:c5:a5:cc:6e:70:00:5a:fe:d3:bd:e3:ac:05:22:
                    ee:34:52:6a:2e:f9:ba:0a:c4:1a:56:35:e0:54:6d:
                    f4:bf:49:e1:4c:c3:5b:83:9f:30:16:df:77:69:c4:
                    25:d5:89:eb:22:ca:20:a2:c5:e5:cb:07:6e:df:bd:
                    00:cb:b2:00:75:3c:10:4c:b8:38:0b:ce:9a:3b:50:
                    be:e6:7d:07:83:35:91:e3:84:1b:b0:c0:72:17:9e:
                    cb:8a:4b:d0:69:be:38:33:3a:67:f3:c3:9b:49:e9:
                    53:dc:77:2c:91:49:29:3f:19:09:8d:b4:63:6d:b9:
                    ed:23:42:87:50:83:40:22:b6:84:fb:35:bd:bf:d4:
                    1d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:94:75:34:B4:D3:88:4B:C3:81:D8:1C:48:BC:A2:DB:AB:DF:48:40
            X509v3 Authority Key Identifier:
                keyid:BC:61:84:C5:FC:D6:73:F6:5B:0D:49:76:6B:9F:BE:7F:E2:05:51:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6184C5FCD673F65B0D49766B9FBE7FE20551B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xG3mTU3WZrM58jBuTKbJrxk8iqceuzBXZ63EVMM9ZrK/0/323830343a363566303a3a2f33322d3334203d3e20323639353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:f9:14:1c:e2:3c:84:1b:d4:e9:e9:e9:42:d9:4c:2e:bf:f8:
         8e:83:0e:2e:d1:38:a2:86:5a:41:87:0f:84:ce:df:93:25:77:
         da:3a:21:0a:2c:15:76:2f:b1:06:cd:a9:0f:55:1a:f0:08:9b:
         24:69:03:31:64:4c:a0:68:71:77:a9:36:7c:b5:28:a1:d9:77:
         d0:f8:72:4e:e0:3c:0b:0d:59:ee:12:41:fb:e2:e9:e7:34:95:
         7c:1e:ab:31:3f:74:55:5b:f4:0a:c7:02:31:70:b6:83:ee:78:
         e8:64:c4:22:94:9a:7f:6a:88:e4:22:a5:af:42:ad:93:74:8e:
         15:94:4a:e5:2d:86:47:a1:da:be:2e:48:21:9a:88:51:57:52:
         fe:5a:a0:43:b9:4b:21:c5:23:d0:e2:70:05:57:8e:91:d3:af:
         c9:d4:3a:24:09:25:6f:a4:fe:29:19:9a:46:a7:43:cf:67:3e:
         aa:db:3c:11:5e:6a:ed:e0:2f:3d:39:5c:f2:3b:83:7b:ca:04:
         9f:3c:45:eb:db:67:fd:a1:04:bb:1d:0e:4c:8b:ed:b4:ce:b9:
         7f:90:a5:56:63:f1:0f:7d:f1:f5:6a:01:b2:1d:37:c3:86:1e:
         d8:08:1a:48:20:35:50:10:72:a7:d5:ed:25:58:86:3f:c8:e0:
         e5:4d:ca:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:12:21 2025 by rpki-client