Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/323830343a363738303a3a2f33322d3430203d3e20323639363332.roa
File:                     323830343a363738303a3a2f33322d3430203d3e20323639363332.roa (raw, json)
Hash identifier:          SX2dU0cds+iLnyJtcs06QjqpHxXnJw1YEktYayh/TlE=
Subject key identifier:   73:A7:19:D8:22:1E:7A:09:07:38:AF:DA:79:A1:6F:01:52:48:9F:0A
Certificate issuer:       /CN=1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5
Certificate serial:       7FC65C2393431AD0B2743AB769078F14A8D9B263
Authority key identifier: 1B:FA:70:C3:BF:99:AF:CA:8E:1C:96:99:D5:F6:48:DF:2C:B4:41:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/323830343a363738303a3a2f33322d3430203d3e20323639363332.roa
Signing time:             Wed 05 Nov 2025 14:41:23 +0000
ROA not before:           Wed 05 Nov 2025 14:36:23 +0000
ROA not after:            Wed 04 Nov 2026 14:41:23 +0000
asID:                     269632
IP address blocks:        2804:6780::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.crl
                          rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 15:50:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c6:5c:23:93:43:1a:d0:b2:74:3a:b7:69:07:8f:14:a8:d9:b2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5
        Validity
            Not Before: Nov  5 14:36:23 2025 GMT
            Not After : Nov  4 14:41:23 2026 GMT
        Subject: CN=73A719D8221E7A090738AFDA79A16F0152489F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5d:dd:17:68:28:f4:80:be:25:28:b8:61:1a:
                    3f:64:9f:b6:31:02:4f:ba:5c:e1:4b:6a:50:b6:e9:
                    b8:f2:b3:13:0d:89:20:e5:0d:3f:a6:a5:2f:f7:67:
                    c4:67:72:33:90:e6:89:7d:b0:6b:1e:72:4e:8c:93:
                    80:fc:40:93:bc:aa:1b:be:eb:7e:47:b5:81:c7:3a:
                    1b:2a:75:14:3f:87:a7:ff:f7:a0:24:09:71:44:b0:
                    29:23:08:9f:76:bc:e6:7f:58:7c:74:cb:68:82:83:
                    67:9b:e6:af:ff:b2:bf:96:3c:13:44:98:e3:1b:5a:
                    f4:20:8a:56:d8:c8:6f:41:79:5e:1b:b9:85:1d:86:
                    a2:10:a5:16:7d:5b:cd:27:42:0c:4c:1f:35:60:66:
                    00:b6:c4:0e:a4:42:7e:1f:3a:36:22:f6:66:7a:d5:
                    28:61:0e:f4:41:f3:d3:dc:80:d4:e7:48:7d:bd:ce:
                    1d:54:d5:72:88:be:a4:2f:3d:9a:42:70:5f:40:b8:
                    2f:f9:c1:5d:b5:21:2b:f8:bc:26:10:a5:07:e7:81:
                    e5:a6:5a:3f:0a:ea:d2:bd:4d:0e:5e:e3:72:7d:df:
                    35:ba:46:ee:bb:ec:a2:06:f6:ce:f4:b8:4c:cd:05:
                    2a:96:6e:17:a7:10:01:e8:31:e8:df:cc:5e:ce:ea:
                    59:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A7:19:D8:22:1E:7A:09:07:38:AF:DA:79:A1:6F:01:52:48:9F:0A
            X509v3 Authority Key Identifier:
                keyid:1B:FA:70:C3:BF:99:AF:CA:8E:1C:96:99:D5:F6:48:DF:2C:B4:41:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFA70C3BF99AFCA8E1C9699D5F648DF2CB441A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Mw2fbgzgw6hFMwjXbiDSQyqTQfM4wnMYw2B9A54L5L8/0/323830343a363738303a3a2f33322d3430203d3e20323639363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6780::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:73:68:4b:25:42:74:67:e5:a1:8b:d1:89:c5:cf:ae:27:f6:
         2d:2e:23:24:5c:87:f4:13:dc:ee:a0:0b:be:1b:f9:88:a4:76:
         f6:9f:d9:11:d0:93:ff:55:a1:6c:f7:77:1a:b7:f3:f3:f2:28:
         55:70:3d:44:ac:b2:c6:5b:47:e7:96:5b:ea:d4:74:2a:c5:86:
         0d:81:f2:9a:ae:5f:6a:78:20:dc:2b:f9:9b:55:d3:54:ac:58:
         d5:d5:de:ac:bc:3a:4a:d9:2d:67:07:8b:9f:3f:bf:7c:db:bc:
         2a:36:43:e5:ac:ba:38:04:69:85:28:99:40:af:4a:a2:92:2b:
         10:74:12:10:dd:1c:8c:ef:e3:31:0a:b7:47:fd:bc:67:34:ae:
         68:f8:25:7b:dd:c8:fb:d1:45:f0:f3:f0:e5:80:d7:3b:8a:f6:
         e0:49:e0:91:67:b4:66:8b:55:bd:2b:e0:26:26:22:87:c3:f5:
         0d:d3:83:d5:10:ff:8f:5b:8f:9f:6d:7a:fb:71:04:77:96:a2:
         13:40:d7:e1:8d:c9:81:42:b2:c7:90:65:06:20:9d:26:e5:d2:
         d6:61:d2:dc:44:d6:b4:19:f0:7b:11:a3:fc:af:ee:98:2e:fb:
         5d:f9:77:b0:b1:7e:cb:3d:fc:9d:63:11:a3:ea:ef:4f:b7:05:
         23:1b:07:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:30:34 2025 by rpki-client