Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa
File:                     323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa (raw, json)
Hash identifier:          qZs+RVwlvNx5m+aiJpdWI3/JhEWUoqAju8K15DRI4bw=
Subject key identifier:   78:DC:01:89:42:79:6B:E7:55:98:4F:25:81:61:B0:C6:E0:66:57:08
Certificate issuer:       /CN=F312DD28F74F7F28D25A7DC41721E8A859A96817
Certificate serial:       32917E39BB22C2F72DE5696B7A9D7051719D2C02
Authority key identifier: F3:12:DD:28:F7:4F:7F:28:D2:5A:7D:C4:17:21:E8:A8:59:A9:68:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa
Signing time:             Wed 27 Aug 2025 12:42:32 +0000
ROA not before:           Wed 27 Aug 2025 12:37:32 +0000
ROA not after:            Wed 26 Aug 2026 12:42:32 +0000
asID:                     266385
IP address blocks:        2804:3708:8040::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.crl
                          rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 21:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:91:7e:39:bb:22:c2:f7:2d:e5:69:6b:7a:9d:70:51:71:9d:2c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F312DD28F74F7F28D25A7DC41721E8A859A96817
        Validity
            Not Before: Aug 27 12:37:32 2025 GMT
            Not After : Aug 26 12:42:32 2026 GMT
        Subject: CN=78DC018942796BE755984F258161B0C6E0665708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:df:19:14:e7:77:38:87:1e:a7:40:81:48:1f:
                    bb:01:e1:bc:73:d4:a7:33:98:f8:d3:3c:c4:bf:98:
                    bb:4a:34:63:54:dc:42:6f:d0:d1:9d:aa:6a:14:f9:
                    26:43:55:30:38:4c:6a:14:68:6e:93:77:f8:f6:d3:
                    99:3c:b0:d6:54:f8:a5:c1:9b:1e:fa:df:82:c9:a6:
                    23:1b:4a:e0:de:05:ec:cb:a6:b2:2a:3d:03:46:14:
                    75:26:f9:08:c7:f7:21:9a:48:b9:9a:21:18:d1:75:
                    48:b8:df:42:b2:95:20:34:c0:07:e0:51:e3:64:e0:
                    7e:b6:19:18:ff:c9:ec:a6:ed:bf:61:f6:a2:25:08:
                    3f:70:db:9d:37:64:7a:6d:86:c3:9b:69:7f:64:74:
                    15:ee:8c:15:ab:3f:de:56:af:67:37:a2:61:c2:32:
                    f5:91:2a:20:c2:5d:70:1d:16:14:73:94:35:f5:d2:
                    85:e8:fa:51:15:9c:a5:12:b4:4d:9b:27:06:e1:30:
                    47:59:5c:6f:c1:b4:6d:dd:b1:c3:bb:00:d6:02:e8:
                    3d:32:3b:a7:f8:02:05:ae:d6:4b:3c:50:6b:63:d8:
                    a5:8d:c3:bb:25:58:fe:eb:df:af:61:e8:fd:db:a1:
                    2f:fd:43:3d:2f:09:d3:a7:77:cf:31:b2:90:b9:56:
                    04:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DC:01:89:42:79:6B:E7:55:98:4F:25:81:61:B0:C6:E0:66:57:08
            X509v3 Authority Key Identifier:
                keyid:F3:12:DD:28:F7:4F:7F:28:D2:5A:7D:C4:17:21:E8:A8:59:A9:68:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3708:8040::/42

    Signature Algorithm: sha256WithRSAEncryption
         b1:5a:74:6a:98:bf:9c:fd:b0:f1:fa:e8:3f:17:76:ef:10:7b:
         66:aa:c1:73:13:37:7c:d7:d3:31:6c:ad:1f:45:40:0b:1e:fe:
         47:80:a8:7d:09:3f:af:f2:f1:a1:9e:cd:a6:a4:c6:cd:b7:c0:
         c5:d2:8d:07:1a:2d:a1:98:f8:ab:3d:4e:7a:cd:94:95:6d:f3:
         70:0b:89:3b:e9:40:4a:90:3b:42:1f:23:16:fb:ca:21:d9:f2:
         36:7a:97:fb:97:22:b6:48:d8:9f:bf:84:65:97:8e:d7:4d:46:
         f2:e8:f7:df:23:35:bc:48:e2:50:fc:e4:c4:51:d7:f7:cc:ab:
         15:5e:db:47:d7:61:5f:09:12:95:68:9e:1f:9e:e1:da:4e:6a:
         87:8c:5e:11:3c:89:40:e1:b7:3a:5c:ae:a3:1c:b4:eb:da:41:
         3f:18:1d:f8:c4:bd:18:b0:f1:f2:4f:c8:9d:3d:63:4e:b2:8b:
         a3:4e:17:e3:e6:bf:18:ac:3a:0a:65:8d:c6:d9:bf:bc:8c:4a:
         e6:5f:30:0f:8b:ad:ec:a6:c0:a4:b0:34:98:7d:26:44:3a:69:
         2f:1d:c9:91:47:eb:e2:09:34:33:47:31:bb:b1:d1:f9:73:72:
         26:9d:67:a2:0b:ac:32:bf:31:55:65:5f:53:a6:7c:d3:c1:f6:
         a4:94:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:59:30 2025 by rpki-client