Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/323830343a353661383a3a2f33322d3438203d3e20323638303136.roa
File:                     323830343a353661383a3a2f33322d3438203d3e20323638303136.roa (raw, json)
Hash identifier:          GFslzGMs5oIwXSuzFgkW9lwIslCumt75u502gJdO0cM=
Subject key identifier:   0C:C2:64:19:6C:DF:DE:DD:41:B4:EE:6E:A7:A1:81:66:ED:02:91:54
Certificate issuer:       /CN=CC9F42C3A1E6623612312417013AA12DC19734C3
Certificate serial:       311ECB280263979A07701AEC2B6E3CB57CABD9DB
Authority key identifier: CC:9F:42:C3:A1:E6:62:36:12:31:24:17:01:3A:A1:2D:C1:97:34:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC9F42C3A1E6623612312417013AA12DC19734C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/323830343a353661383a3a2f33322d3438203d3e20323638303136.roa
Signing time:             Fri 24 Oct 2025 20:39:12 +0000
ROA not before:           Fri 24 Oct 2025 20:34:12 +0000
ROA not after:            Fri 23 Oct 2026 20:39:12 +0000
asID:                     268016
IP address blocks:        2804:56a8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.crl
                          rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC9F42C3A1E6623612312417013AA12DC19734C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 09:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1e:cb:28:02:63:97:9a:07:70:1a:ec:2b:6e:3c:b5:7c:ab:d9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC9F42C3A1E6623612312417013AA12DC19734C3
        Validity
            Not Before: Oct 24 20:34:12 2025 GMT
            Not After : Oct 23 20:39:12 2026 GMT
        Subject: CN=0CC264196CDFDEDD41B4EE6EA7A18166ED029154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:a0:5e:d4:b1:7d:75:2f:1d:d9:4f:d4:51:
                    25:0c:b9:d6:60:ca:86:03:9f:05:09:a3:46:ee:7e:
                    b9:a7:66:d8:96:4e:41:7e:d0:98:34:a9:d7:e0:b4:
                    65:1e:22:ad:b6:b5:0d:f6:46:18:56:f7:54:8e:a6:
                    98:b4:44:1a:49:9c:4d:26:6c:4c:76:9a:c5:47:2b:
                    43:15:cd:0d:ef:f3:21:3b:9f:9e:4b:a7:a6:b8:a3:
                    ca:a9:eb:58:3c:1e:67:6c:22:f1:66:ef:a3:83:c7:
                    05:0c:85:1c:09:ca:41:ed:8c:3e:89:38:c9:d0:0a:
                    4c:3b:33:45:61:4f:db:ca:51:fe:5e:51:22:fc:5c:
                    53:f1:b1:62:0f:7a:74:ce:e1:8a:3d:48:53:10:43:
                    b1:ef:32:61:29:cb:39:bc:3e:ae:c3:db:0c:cc:b9:
                    9f:52:72:0e:a1:88:7e:19:68:fa:04:18:8e:93:73:
                    d5:ab:27:4a:c1:f3:26:d1:8f:15:28:d8:cc:63:bb:
                    3e:c8:dc:44:d4:74:0b:cd:d0:c3:2a:98:c7:54:15:
                    6a:4a:4d:7d:01:55:63:86:c4:d8:03:6b:bf:d4:1e:
                    05:cb:aa:67:ee:ab:11:de:d8:6d:05:f5:d4:12:a5:
                    71:1a:2c:77:7a:da:ef:b5:cc:3b:9a:bd:7c:81:03:
                    7d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C2:64:19:6C:DF:DE:DD:41:B4:EE:6E:A7:A1:81:66:ED:02:91:54
            X509v3 Authority Key Identifier:
                keyid:CC:9F:42:C3:A1:E6:62:36:12:31:24:17:01:3A:A1:2D:C1:97:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/CC9F42C3A1E6623612312417013AA12DC19734C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC9F42C3A1E6623612312417013AA12DC19734C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PWCyLMB1J7odHSuZc42ksBoxH9ERRAjosxyNyuGhdox/0/323830343a353661383a3a2f33322d3438203d3e20323638303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:43:af:0c:ef:60:a1:48:ee:39:3d:ef:b4:ad:82:5d:99:76:
         d0:54:09:5d:fa:65:cb:61:87:0e:bd:b1:05:c1:ba:d5:dd:af:
         c1:91:4f:53:b0:98:14:a9:1e:b0:fe:91:cd:2b:85:ef:79:75:
         e6:ea:b7:01:89:ad:54:2c:8f:49:80:e3:d3:1e:e3:e9:4a:66:
         70:8e:cf:52:b4:fa:5a:92:cb:76:6a:c1:aa:f6:8d:d8:b8:17:
         00:d6:c5:fb:b5:30:3e:28:63:54:d5:f0:0e:e3:5d:a8:1f:e8:
         3f:72:eb:9b:16:aa:66:c5:dd:e4:03:51:b6:68:a6:cd:e3:11:
         81:c9:61:23:19:a3:13:ce:f5:e6:02:7e:e3:ff:e6:72:7c:2d:
         59:59:6b:9c:df:f6:c8:8d:ea:17:08:95:f6:eb:9f:12:a1:17:
         1d:e9:75:69:94:76:97:49:42:f6:51:3d:d8:08:0a:e7:9d:0c:
         44:b3:f1:fe:9c:4b:9c:f4:8e:de:4a:5f:0b:9c:cf:86:7f:6c:
         e5:36:f4:b8:01:83:0d:07:a0:b9:80:22:99:c3:71:f5:63:f3:
         0f:82:ce:f0:e4:25:1f:57:c2:6f:19:fc:86:79:ac:d2:65:5b:
         54:bb:bb:07:68:b6:a6:c9:67:e1:68:ba:fb:06:6a:dd:4f:41:
         e4:e8:7d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:24:48 2025 by rpki-client