Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a383030303a3a2f33332d3333203d3e20323636333835.roa
File:                     323830343a333730383a383030303a3a2f33332d3333203d3e20323636333835.roa (raw, json)
Hash identifier:          xmvkMQaqk3aTvkvwklULKEjL538DDgTZDvtyL/0npGM=
Subject key identifier:   26:FF:A9:91:A8:FA:A0:4D:2A:3F:CC:52:07:5E:DF:63:1D:76:95:B8
Certificate issuer:       /CN=F312DD28F74F7F28D25A7DC41721E8A859A96817
Certificate serial:       34F42AC40C65F260F6C86E22015A6B964CD9C0A8
Authority key identifier: F3:12:DD:28:F7:4F:7F:28:D2:5A:7D:C4:17:21:E8:A8:59:A9:68:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a383030303a3a2f33332d3333203d3e20323636333835.roa
Signing time:             Wed 27 Aug 2025 12:42:29 +0000
ROA not before:           Wed 27 Aug 2025 12:37:29 +0000
ROA not after:            Wed 26 Aug 2026 12:42:29 +0000
asID:                     266385
IP address blocks:        2804:3708:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.crl
                          rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f4:2a:c4:0c:65:f2:60:f6:c8:6e:22:01:5a:6b:96:4c:d9:c0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F312DD28F74F7F28D25A7DC41721E8A859A96817
        Validity
            Not Before: Aug 27 12:37:29 2025 GMT
            Not After : Aug 26 12:42:29 2026 GMT
        Subject: CN=26FFA991A8FAA04D2A3FCC52075EDF631D7695B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:cc:d5:74:34:73:b6:e6:69:24:32:fa:97:
                    29:ea:0e:d9:d2:19:b8:e7:69:27:fb:28:e9:76:91:
                    47:f1:93:e9:53:18:f8:f0:6e:5b:e5:8c:ec:de:2f:
                    6a:cb:d1:ab:2c:e0:c7:ac:98:6a:ae:b2:cb:91:f2:
                    7e:ab:c2:5a:d6:bf:ef:fd:3f:f9:94:e1:e2:e5:34:
                    91:ac:c6:4f:cb:b4:5f:2b:4c:b8:7b:fd:c9:05:57:
                    64:de:7a:58:0d:a8:d7:51:13:39:eb:d0:48:46:31:
                    6a:1b:f8:bb:b7:1a:77:29:82:bd:d8:d0:70:48:de:
                    10:50:00:d8:a2:96:b2:2f:66:49:0c:2f:3d:dd:1e:
                    a8:d6:4a:77:6c:51:14:57:22:4e:47:2b:b0:7f:68:
                    69:c6:6b:d7:68:fe:85:d6:8e:19:42:12:39:55:5f:
                    98:0c:95:41:36:04:da:9f:92:17:92:fd:53:6d:47:
                    b2:34:9b:19:6d:71:06:9d:d9:01:d7:df:18:3e:4a:
                    b7:72:6b:96:2b:75:09:ba:73:23:36:a8:6a:23:6a:
                    bf:bb:27:88:01:23:6d:ab:c9:2d:89:c7:41:92:5d:
                    e9:b7:19:76:a6:3a:aa:fc:0d:61:a6:f8:e6:10:41:
                    15:01:3e:72:31:20:09:51:b9:fd:d2:07:88:64:ce:
                    6f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FF:A9:91:A8:FA:A0:4D:2A:3F:CC:52:07:5E:DF:63:1D:76:95:B8
            X509v3 Authority Key Identifier:
                keyid:F3:12:DD:28:F7:4F:7F:28:D2:5A:7D:C4:17:21:E8:A8:59:A9:68:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a383030303a3a2f33332d3333203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3708:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         90:a2:74:8c:7e:65:53:c8:4c:bf:bb:a7:72:27:de:df:28:66:
         87:d7:6f:58:f6:ca:12:2c:49:7e:84:10:0c:2b:77:f5:1a:8b:
         5d:84:9b:18:d2:be:10:d9:ff:d5:b5:1d:f8:50:04:7f:9d:78:
         b1:74:72:6f:11:19:9d:31:ef:34:7c:12:87:9a:2d:64:48:6d:
         a2:90:16:1d:29:f3:3d:fc:41:b9:e2:a7:3d:c2:34:2a:bd:2c:
         a3:e2:19:b6:c9:60:3f:af:3e:c8:23:6e:72:41:14:93:5c:65:
         fe:bb:f8:e0:32:c1:4d:6d:97:43:e6:78:91:80:05:7e:bd:bf:
         7b:0e:33:fc:42:9d:f9:a7:06:1a:75:32:a7:2c:06:1a:89:fa:
         fb:20:3f:2b:e5:51:f9:ef:a4:8c:2c:d3:a3:7e:ec:20:f2:1a:
         e9:dc:c5:14:38:94:a9:68:1c:0c:bf:71:3a:e7:12:ef:b1:dd:
         45:12:ce:11:35:75:0c:16:1e:6e:f4:52:cb:40:ad:4d:c8:af:
         5d:f7:25:ca:dc:ca:b6:7b:10:45:ca:9d:86:7b:27:16:1d:3a:
         35:4e:09:b7:05:b7:08:c1:dc:b0:6b:23:5c:08:2c:2c:4d:f4:
         e0:d5:ab:8e:82:6b:a8:42:23:2a:30:ee:92:d9:62:23:b9:9d:
         0f:7c:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:37:03 2025 by rpki-client