Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/323830343a3362633a313a3a2f34382d3438203d3e203238363234.roa
File:                     323830343a3362633a313a3a2f34382d3438203d3e203238363234.roa (raw, json)
Hash identifier:          9LQSAMd36yf1l0uUso2Q4iLxYwgAPJXddIFC23MQXnA=
Subject key identifier:   E9:F1:DD:A7:86:57:46:BA:7E:18:17:9A:4A:F0:FC:4C:A0:2A:8A:3D
Certificate issuer:       /CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
Certificate serial:       3F19A3556770AF284121502F36508398933F9589
Authority key identifier: C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/323830343a3362633a313a3a2f34382d3438203d3e203238363234.roa
Signing time:             Thu 30 Oct 2025 02:45:12 +0000
ROA not before:           Thu 30 Oct 2025 02:40:12 +0000
ROA not after:            Thu 29 Oct 2026 02:45:12 +0000
asID:                     28624
IP address blocks:        2804:3bc:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl
                          rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:19:a3:55:67:70:af:28:41:21:50:2f:36:50:83:98:93:3f:95:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7988AE6A79E78DD71235096E9BAE2E429BA06C4
        Validity
            Not Before: Oct 30 02:40:12 2025 GMT
            Not After : Oct 29 02:45:12 2026 GMT
        Subject: CN=E9F1DDA7865746BA7E18179A4AF0FC4CA02A8A3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b2:f6:69:c6:d6:54:81:e1:8a:8b:ab:d2:4e:
                    0c:ca:d7:13:69:54:12:1b:7d:2d:ac:bf:02:aa:98:
                    40:88:8d:dd:da:39:71:71:6e:43:94:6e:2e:f8:f4:
                    8d:69:4c:32:d5:d9:a4:3f:63:a9:3c:9b:f2:fa:84:
                    65:9f:97:af:b7:7e:a8:7b:64:0c:79:22:79:fe:94:
                    be:7b:02:1a:48:6d:3b:77:90:50:05:81:e9:4e:b6:
                    53:ea:72:d1:1e:9f:bd:2e:35:44:0d:f7:0f:98:a1:
                    38:5d:c4:41:89:cd:ab:43:6d:57:13:02:c1:65:d5:
                    4d:2f:b8:24:64:b4:67:f6:af:79:76:1c:7d:27:b7:
                    95:2e:8b:c6:3c:40:17:e4:8f:69:a0:3b:df:4f:f1:
                    a2:8c:1f:95:7a:4f:b4:6d:9f:c1:f5:7e:e0:af:33:
                    27:9e:7f:18:c0:bf:36:1b:bc:d0:2b:47:73:f0:93:
                    86:77:0c:60:15:59:46:2a:ef:c8:d1:8c:ec:99:ad:
                    b3:32:1c:c5:da:9f:99:f2:c3:cc:5e:3a:08:76:fe:
                    6e:13:34:7f:25:aa:b3:d8:43:e0:3c:d8:a8:31:0d:
                    bf:b6:7b:e1:88:74:f5:43:10:7d:fe:ba:5d:89:c8:
                    90:a2:61:7b:2a:dd:eb:78:87:48:3f:0f:3f:5d:bc:
                    8e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F1:DD:A7:86:57:46:BA:7E:18:17:9A:4A:F0:FC:4C:A0:2A:8A:3D
            X509v3 Authority Key Identifier:
                keyid:C7:98:8A:E6:A7:9E:78:DD:71:23:50:96:E9:BA:E2:E4:29:BA:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7988AE6A79E78DD71235096E9BAE2E429BA06C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/323830343a3362633a313a3a2f34382d3438203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bc:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:db:cb:69:23:8b:01:69:a2:ad:a2:e8:d0:f0:75:fe:df:da:
         f1:9d:54:65:3a:48:86:98:66:76:eb:26:ef:f7:04:93:1e:84:
         08:85:80:43:ef:69:23:af:e0:8e:05:e2:ed:b4:ca:d0:b9:0d:
         e3:d2:ab:a1:2a:90:71:ec:25:78:ef:11:58:03:9b:7a:9e:08:
         c6:26:57:bc:8c:bc:c8:d9:44:7a:66:a4:81:ac:1d:a8:8c:9f:
         ad:29:c0:99:a9:3f:01:ad:12:fc:04:3b:8a:95:74:05:35:e9:
         f1:e8:38:ed:59:60:21:a1:33:7f:a4:46:d4:ad:03:60:ca:28:
         49:22:6c:ff:41:a0:dd:a7:85:96:3a:dc:9c:6b:e3:c1:4d:56:
         b4:1c:82:3c:12:bf:cc:67:30:0f:35:c4:b3:a1:c2:f6:25:ba:
         7d:4f:93:22:93:1f:14:68:d7:16:02:ba:e9:90:70:aa:3f:2f:
         b9:81:ea:79:75:44:3b:69:98:d6:88:e6:ff:8b:70:f2:1f:83:
         24:ba:78:b8:08:5f:55:85:f1:e9:c7:56:a4:59:0b:25:17:84:
         2d:b0:72:26:60:18:ba:88:1e:b6:9e:56:a6:21:c0:b6:54:fa:
         85:b6:83:51:ae:da:0d:e0:a3:60:00:9c:74:77:22:59:20:b3:
         ed:ef:58:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:27:03 2025 by rpki-client