Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/2/323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa
File:                     323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa (raw, json)
Hash identifier:          jZZdJtZfFqGutbVdktREb0VerZIugLpVi30uc1jrrAY=
Subject key identifier:   65:66:2D:D3:E4:24:4C:E1:B1:19:57:D1:FF:61:44:D3:EE:71:C7:AE
Certificate issuer:       /CN=FE286004D24FF2372D205BD41556AFCE53BFE25B
Certificate serial:       E3B34EE3972F3DAF0E4A71A19D32E0CDB0650A
Authority key identifier: FE:28:60:04:D2:4F:F2:37:2D:20:5B:D4:15:56:AF:CE:53:BF:E2:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE286004D24FF2372D205BD41556AFCE53BFE25B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/2/323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa
Signing time:             Wed 22 Oct 2025 13:56:16 +0000
ROA not before:           Wed 22 Oct 2025 13:51:16 +0000
ROA not after:            Wed 21 Oct 2026 13:56:16 +0000
asID:                     263568
IP address blocks:        2801:80:740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/2/FE286004D24FF2372D205BD41556AFCE53BFE25B.crl
                          rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/2/FE286004D24FF2372D205BD41556AFCE53BFE25B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE286004D24FF2372D205BD41556AFCE53BFE25B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 17:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e3:b3:4e:e3:97:2f:3d:af:0e:4a:71:a1:9d:32:e0:cd:b0:65:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE286004D24FF2372D205BD41556AFCE53BFE25B
        Validity
            Not Before: Oct 22 13:51:16 2025 GMT
            Not After : Oct 21 13:56:16 2026 GMT
        Subject: CN=65662DD3E4244CE1B11957D1FF6144D3EE71C7AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:a5:9e:eb:53:c3:d9:12:d5:a1:8b:e0:5f:
                    cb:21:99:b5:29:8f:88:91:0d:73:7e:04:cc:6e:47:
                    67:b8:7f:10:98:42:df:e0:fe:75:85:85:33:87:64:
                    13:82:0d:67:87:e1:7a:7c:09:da:59:52:8d:0c:a7:
                    c4:db:33:72:0d:f1:dd:08:98:8b:92:81:92:89:0c:
                    8f:1e:0e:f0:56:7c:75:d8:b4:04:5c:31:b6:1e:f3:
                    06:3d:75:a7:8f:b5:ea:24:4a:7e:5c:a7:a9:6c:bb:
                    6e:78:f2:25:35:0b:98:64:18:b7:b6:77:49:20:6d:
                    a9:e8:1e:24:1b:f2:a4:fe:6b:6f:3d:01:b4:4b:0e:
                    55:16:50:50:bb:5c:bd:bd:7a:4f:fd:a5:af:35:60:
                    d9:54:a4:19:cf:96:36:a8:d5:1b:86:c5:cc:4e:cd:
                    ce:ad:1f:9c:57:26:c9:54:cf:ee:51:c5:e4:a6:f6:
                    56:59:f4:b4:45:33:f0:85:4c:a2:b3:44:e7:3a:72:
                    b3:32:ec:27:3b:f8:30:5e:36:6e:66:04:0a:9c:27:
                    d6:9b:c7:82:c6:8e:24:7d:f9:47:18:bc:e6:d6:bd:
                    1b:2f:c7:9c:8d:37:8a:73:4a:10:88:90:59:6e:a1:
                    a8:40:cb:96:81:ee:fc:fe:6d:89:4c:01:6a:b2:16:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:66:2D:D3:E4:24:4C:E1:B1:19:57:D1:FF:61:44:D3:EE:71:C7:AE
            X509v3 Authority Key Identifier:
                keyid:FE:28:60:04:D2:4F:F2:37:2D:20:5B:D4:15:56:AF:CE:53:BF:E2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/2/FE286004D24FF2372D205BD41556AFCE53BFE25B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE286004D24FF2372D205BD41556AFCE53BFE25B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/2/323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:740::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:e5:dd:98:c3:b4:f3:27:15:56:d4:4a:9f:62:05:0e:88:b7:
         69:e6:05:2e:39:cd:1a:2b:41:40:04:2e:a6:d8:7a:f2:9b:2c:
         a0:53:52:73:c9:2e:ef:46:c3:9c:aa:b2:34:69:19:17:7a:c5:
         ba:a8:84:20:46:e0:ad:f8:54:6f:0d:4f:de:70:f1:c2:30:38:
         c5:e8:40:dd:24:73:21:ac:df:b9:0a:7d:4e:4f:87:1a:ec:93:
         4b:6b:bc:e6:bc:98:be:db:7e:22:59:c9:8f:9b:c2:1c:f9:44:
         d7:4a:41:b6:4f:b5:e2:9b:e0:23:b2:78:82:92:90:7a:d2:64:
         d5:09:54:fa:93:46:4c:9b:ab:48:53:d2:50:9f:62:9a:bb:85:
         2a:1b:b7:31:64:c3:50:66:b8:51:e8:cd:1b:80:4a:29:ca:c5:
         2a:b9:07:fc:2b:84:b2:88:c0:f8:b6:6b:06:31:d3:66:55:5a:
         8e:8d:f8:05:9f:7e:34:0e:ed:68:fe:20:83:23:ae:da:b9:3e:
         5e:96:30:13:df:30:85:35:8c:dc:b1:ba:18:89:82:db:45:09:
         9c:bd:4c:e5:c5:3e:1f:e4:59:a8:05:8e:34:52:b3:0e:e9:6c:
         92:f1:4a:03:91:07:f5:81:84:ac:44:dd:d5:09:a4:ef:1d:bc:
         c9:f9:65:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:28:52 2025 by rpki-client