Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/323830343a353133633a3a2f33322d313238203d3e20323638343339.roa
File:                     323830343a353133633a3a2f33322d313238203d3e20323638343339.roa (raw, json)
Hash identifier:          9ZfI0lwT2k412VGKqsFFpbiSYloDbVJsUJ9EhXxZO0Y=
Subject key identifier:   E0:21:1B:A3:F5:2E:D4:31:70:16:67:25:6A:3E:6A:B2:D4:F0:1B:96
Certificate issuer:       /CN=6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85
Certificate serial:       3F92D3864CB9754D6CF1F41A527CD6E8C6877DA8
Authority key identifier: 6D:FF:8D:77:9C:90:7C:4E:2E:AB:49:68:5D:35:DD:3B:D2:C3:7B:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/323830343a353133633a3a2f33322d313238203d3e20323638343339.roa
Signing time:             Tue 28 Oct 2025 13:26:35 +0000
ROA not before:           Tue 28 Oct 2025 13:21:35 +0000
ROA not after:            Tue 27 Oct 2026 13:26:35 +0000
asID:                     268439
IP address blocks:        2804:513c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.crl
                          rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 05:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:92:d3:86:4c:b9:75:4d:6c:f1:f4:1a:52:7c:d6:e8:c6:87:7d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85
        Validity
            Not Before: Oct 28 13:21:35 2025 GMT
            Not After : Oct 27 13:26:35 2026 GMT
        Subject: CN=E0211BA3F52ED431701667256A3E6AB2D4F01B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:2a:81:f5:e0:d8:29:3a:24:7e:f3:83:1d:
                    7a:53:5b:9a:91:87:93:e7:b6:19:5a:eb:3c:88:dc:
                    f1:b4:fe:f6:8f:a2:b4:60:9a:00:d4:85:db:68:eb:
                    5b:75:76:66:2b:1e:2b:f3:4d:cf:1e:cc:f3:77:14:
                    ab:19:9c:5d:75:47:6a:86:f7:27:00:ac:6e:78:90:
                    63:98:5e:38:0f:7b:22:c3:a4:fd:5d:17:86:01:b4:
                    4f:f1:1d:6b:d5:7f:10:1f:46:53:23:b9:0c:18:69:
                    32:27:3a:2e:11:20:0b:11:2a:0d:44:f1:91:93:bd:
                    39:49:72:cf:ef:40:6f:89:d5:2b:96:16:46:c9:aa:
                    f0:fa:ea:ac:58:26:6c:f9:2e:84:43:4b:92:c4:b2:
                    fd:96:57:63:1e:65:2e:c4:4b:06:b0:8c:66:b2:2c:
                    cd:1c:53:8a:ca:86:e6:37:84:ae:8f:62:bb:98:90:
                    df:ff:72:c6:72:47:50:a2:8a:93:bd:ec:dd:28:78:
                    fc:03:aa:ee:51:a7:9f:e3:c0:c7:e9:37:c3:7a:0c:
                    36:24:19:a7:4e:8b:b6:76:35:48:e4:24:98:cf:f0:
                    47:e7:ae:04:ab:61:d6:24:67:ad:78:06:58:05:45:
                    56:88:95:aa:d2:6b:69:09:df:6f:b0:87:71:47:03:
                    25:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:21:1B:A3:F5:2E:D4:31:70:16:67:25:6A:3E:6A:B2:D4:F0:1B:96
            X509v3 Authority Key Identifier:
                keyid:6D:FF:8D:77:9C:90:7C:4E:2E:AB:49:68:5D:35:DD:3B:D2:C3:7B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/323830343a353133633a3a2f33322d313238203d3e20323638343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:513c::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:d9:22:53:43:d1:9a:d3:86:bb:3a:10:5a:d8:3c:aa:8f:5e:
         b9:24:d4:3a:52:83:b2:38:a0:4f:0d:8a:07:07:fb:34:fb:5a:
         8f:a5:17:1f:22:a4:6d:2d:fc:b2:19:b0:9c:09:3b:c7:2d:6b:
         25:5d:ec:40:14:58:5e:e3:56:ba:9b:9a:50:62:d7:5f:d5:aa:
         5b:cf:2a:0b:84:43:92:83:15:d9:52:d5:99:5b:33:bd:63:c9:
         71:ea:08:58:c5:d8:5b:b6:83:0c:c0:26:a3:61:eb:ec:b5:2d:
         81:cc:27:29:48:19:8d:f2:0d:58:2c:8c:be:67:5c:34:81:e1:
         81:3e:4c:37:53:97:a4:54:c7:ce:fa:74:22:73:25:3a:e3:84:
         43:ea:e3:14:a7:c6:df:93:6d:41:9b:64:b4:32:27:81:26:9e:
         f4:92:27:06:fe:b1:63:e2:21:a5:6c:6d:fd:7d:2a:b7:0a:a8:
         d9:e2:7a:8d:6c:a3:ca:48:5d:7f:ba:11:4c:99:aa:fc:eb:ec:
         1f:ea:99:ae:f9:a0:50:0a:48:56:62:20:b2:f8:f6:d2:5f:b3:
         8b:a7:bc:7e:fd:c1:ea:78:7d:55:7b:e1:bf:1d:1a:8e:83:30:
         05:2e:5f:b2:c8:73:94:4b:0e:f9:19:6f:c6:d6:0f:f5:53:32:
         89:ad:99:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:09:59 2025 by rpki-client