Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/323830343a366531303a3a2f33322d3438203d3e20323730353733.roa
File:                     323830343a366531303a3a2f33322d3438203d3e20323730353733.roa (raw, json)
Hash identifier:          OCck8oRzPexvTlPwmQAJq49N7xpb4HAaXrjVME2DkRM=
Subject key identifier:   86:09:A0:E3:1B:0F:A5:CA:58:C5:14:2D:43:41:FA:E4:D3:CE:78:39
Certificate issuer:       /CN=0C798FE22F8627F84460ED2A0EB3901EF772D9E1
Certificate serial:       5BFE85CB7FD4C48B8155956B6B9AE58A19221200
Authority key identifier: 0C:79:8F:E2:2F:86:27:F8:44:60:ED:2A:0E:B3:90:1E:F7:72:D9:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C798FE22F8627F84460ED2A0EB3901EF772D9E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/323830343a366531303a3a2f33322d3438203d3e20323730353733.roa
Signing time:             Tue 16 Sep 2025 19:14:19 +0000
ROA not before:           Tue 16 Sep 2025 19:09:19 +0000
ROA not after:            Tue 15 Sep 2026 19:14:19 +0000
asID:                     270573
IP address blocks:        2804:6e10::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/0C798FE22F8627F84460ED2A0EB3901EF772D9E1.crl
                          rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/0C798FE22F8627F84460ED2A0EB3901EF772D9E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C798FE22F8627F84460ED2A0EB3901EF772D9E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 06:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fe:85:cb:7f:d4:c4:8b:81:55:95:6b:6b:9a:e5:8a:19:22:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C798FE22F8627F84460ED2A0EB3901EF772D9E1
        Validity
            Not Before: Sep 16 19:09:19 2025 GMT
            Not After : Sep 15 19:14:19 2026 GMT
        Subject: CN=8609A0E31B0FA5CA58C5142D4341FAE4D3CE7839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:16:d0:7f:83:ff:6d:b2:91:39:92:5e:d2:37:
                    92:65:e2:98:cb:66:88:49:92:de:0b:64:bb:c5:df:
                    ba:fb:21:c1:d3:e8:cf:89:54:55:c3:af:58:f4:60:
                    6a:df:b2:ab:4e:64:87:26:ba:21:a4:15:78:76:a0:
                    37:d4:49:48:09:10:a4:21:c8:a0:ee:eb:6c:69:7a:
                    cf:d3:cc:33:42:b7:c4:2c:d5:16:64:63:3e:4d:24:
                    b1:70:72:1c:bc:38:5d:04:81:de:fc:66:99:4c:32:
                    69:bc:5a:57:f9:1c:ac:48:72:5a:e6:d1:c2:2e:ce:
                    91:56:7e:63:4b:fb:90:bb:7e:c0:7b:76:1e:49:04:
                    91:62:77:51:9a:e8:5d:9d:a4:dc:02:06:a0:72:8a:
                    45:8e:67:50:50:ab:0f:5f:52:64:c0:b3:f8:5d:ad:
                    34:b6:c3:f1:f0:95:25:6c:c5:59:69:cf:dd:23:17:
                    f4:c6:6b:9c:90:d8:a2:64:e6:03:d1:95:9f:aa:e8:
                    a6:1b:57:66:c8:96:2a:72:27:f6:c0:72:98:48:08:
                    d2:c1:76:3a:4d:63:ad:d8:f9:e4:71:e4:dc:85:60:
                    93:6a:47:20:5c:76:87:f4:d2:12:0f:e6:88:b2:00:
                    32:e0:4b:58:60:d4:6d:b8:16:de:f6:a3:f5:af:60:
                    aa:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:09:A0:E3:1B:0F:A5:CA:58:C5:14:2D:43:41:FA:E4:D3:CE:78:39
            X509v3 Authority Key Identifier:
                keyid:0C:79:8F:E2:2F:86:27:F8:44:60:ED:2A:0E:B3:90:1E:F7:72:D9:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/0C798FE22F8627F84460ED2A0EB3901EF772D9E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C798FE22F8627F84460ED2A0EB3901EF772D9E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/323830343a366531303a3a2f33322d3438203d3e20323730353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e10::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:20:8b:6e:bc:1a:ad:c3:b9:43:54:db:0f:2a:c4:3a:12:ad:
         f8:57:81:69:df:8f:d0:21:07:a5:7e:30:01:28:b1:1f:46:64:
         45:b7:c1:17:68:6b:ff:1c:58:f6:58:0a:c5:63:35:8b:7b:ee:
         a0:32:cc:3f:8b:2b:48:87:1c:63:8c:6a:4c:ae:52:24:85:bf:
         52:0c:67:2f:72:ae:55:af:75:57:1a:c0:5f:5c:07:bf:3d:ac:
         ad:04:a3:cf:48:dd:5c:12:84:24:bb:ee:dd:83:aa:a6:06:17:
         4d:3b:80:69:5a:3b:2e:e5:e3:0c:f0:fc:ea:47:dd:e6:86:0e:
         f3:98:6b:fe:e3:42:5f:a1:68:61:52:00:f2:eb:fb:b4:b9:f2:
         c7:0a:d0:53:4f:7c:14:f6:de:dc:52:e3:4d:9e:fd:e4:7e:4e:
         0d:35:3f:40:80:23:74:ac:7a:36:6d:2d:40:d0:dd:d7:50:98:
         38:1b:c1:bd:34:73:57:2c:71:de:50:7e:60:de:00:5b:bb:32:
         ff:e7:98:fc:77:32:e5:db:75:63:23:e7:70:02:a6:f2:23:4d:
         19:42:62:c6:a7:6f:50:43:00:a8:0e:7f:93:1d:d2:a5:07:db:
         12:b9:c9:54:b1:75:f4:4f:c2:ee:65:a9:9e:f6:90:b3:57:46:
         29:b6:c5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:39:41 2025 by rpki-client