Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/323830343a353630303a3a2f33322d313238203d3e20323637393730.roa
File:                     323830343a353630303a3a2f33322d313238203d3e20323637393730.roa (raw, json)
Hash identifier:          mD9GVOiES+GEsvO/yWf9sPPJgBo/J02r19F5cY0zIpM=
Subject key identifier:   F1:5D:54:FA:C3:A0:2C:43:D0:20:09:8D:54:31:8A:E3:8F:1A:D1:12
Certificate issuer:       /CN=5FFF55FB550028C5AC6A40A5278B4878D89D2CA9
Certificate serial:       4B4C4436D081DDF5F3B2708804907344D29A1580
Authority key identifier: 5F:FF:55:FB:55:00:28:C5:AC:6A:40:A5:27:8B:48:78:D8:9D:2C:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FFF55FB550028C5AC6A40A5278B4878D89D2CA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/323830343a353630303a3a2f33322d313238203d3e20323637393730.roa
Signing time:             Wed 22 Oct 2025 20:02:19 +0000
ROA not before:           Wed 22 Oct 2025 19:57:19 +0000
ROA not after:            Wed 21 Oct 2026 20:02:19 +0000
asID:                     267970
IP address blocks:        2804:5600::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/5FFF55FB550028C5AC6A40A5278B4878D89D2CA9.crl
                          rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/5FFF55FB550028C5AC6A40A5278B4878D89D2CA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FFF55FB550028C5AC6A40A5278B4878D89D2CA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 16:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4c:44:36:d0:81:dd:f5:f3:b2:70:88:04:90:73:44:d2:9a:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF55FB550028C5AC6A40A5278B4878D89D2CA9
        Validity
            Not Before: Oct 22 19:57:19 2025 GMT
            Not After : Oct 21 20:02:19 2026 GMT
        Subject: CN=F15D54FAC3A02C43D020098D54318AE38F1AD112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:dd:05:6c:d6:e6:a3:65:7f:e8:9b:f7:36:
                    08:b9:48:e0:eb:07:3c:40:7c:bd:8b:9c:ca:62:46:
                    79:90:0b:35:33:08:dd:4e:f2:91:ef:bd:5b:af:39:
                    fa:a9:15:d9:73:97:98:6e:1b:1d:83:73:7e:99:e6:
                    15:14:d9:76:eb:54:f1:78:8d:d4:6a:ec:89:16:c3:
                    7a:e5:37:48:04:ca:76:30:6b:c5:82:4d:e8:44:bd:
                    d9:2d:ef:8a:13:df:b2:5f:b6:07:cf:3f:2b:3f:21:
                    74:32:17:ef:ac:d1:f1:78:7b:c6:59:50:d1:94:3d:
                    78:21:4d:3e:2f:49:bc:74:8c:0a:72:0e:e3:f4:4f:
                    58:ba:ca:74:d6:73:b9:ce:51:e5:f8:11:b3:79:95:
                    17:82:a2:d2:df:01:5c:29:53:96:2b:1f:72:04:54:
                    e4:99:4a:3b:c6:6e:5b:4f:bd:be:12:63:0d:33:f8:
                    8f:53:66:b6:1e:94:ee:74:fe:b6:7b:42:2f:17:55:
                    b1:e2:73:47:93:37:62:a4:dd:c6:62:3a:fc:ae:28:
                    ff:60:88:ac:e3:78:2d:10:94:9e:6c:7f:5d:52:bb:
                    fc:49:91:01:ab:7e:7f:7a:b7:12:4d:cd:73:c4:f4:
                    7e:83:64:dc:bf:07:bd:a2:ff:9f:bd:72:9d:f6:a9:
                    51:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5D:54:FA:C3:A0:2C:43:D0:20:09:8D:54:31:8A:E3:8F:1A:D1:12
            X509v3 Authority Key Identifier:
                keyid:5F:FF:55:FB:55:00:28:C5:AC:6A:40:A5:27:8B:48:78:D8:9D:2C:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/5FFF55FB550028C5AC6A40A5278B4878D89D2CA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FFF55FB550028C5AC6A40A5278B4878D89D2CA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/0/323830343a353630303a3a2f33322d313238203d3e20323637393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5600::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:e3:81:17:66:72:0c:f2:2e:ee:a5:e5:b4:fe:ab:57:99:50:
         1d:9c:71:45:77:54:84:0d:1f:1f:b4:c1:03:d0:cd:79:f7:90:
         4b:89:ed:e2:7b:fd:1e:2c:8a:31:31:56:ed:2b:92:9c:f6:95:
         85:00:51:0c:4b:90:ed:fb:b9:48:02:3c:47:95:55:d3:30:bc:
         03:fb:92:d0:bf:41:0d:84:9d:89:39:52:72:12:ef:6a:9d:3d:
         f8:41:d0:b6:9f:8b:61:87:65:13:2d:eb:94:b8:19:da:87:07:
         ae:99:75:0a:ba:2d:db:dd:f0:52:0c:06:03:34:d2:ae:ed:a7:
         68:19:b8:64:4d:13:d4:83:12:af:0f:1f:6c:37:5f:f1:80:34:
         ba:b7:64:70:c8:8e:dc:dc:13:15:94:45:31:b9:bc:9c:a8:ec:
         d8:e5:e5:8f:87:bf:a6:0a:52:03:c8:43:93:2e:03:a7:c3:02:
         ae:99:a3:02:0c:5f:f3:85:c5:78:49:4f:fa:e8:6d:0c:c4:7a:
         f2:56:ad:6e:4f:b6:f2:39:4e:37:df:3a:ae:2f:e1:91:5d:b8:
         01:f5:e7:c6:c0:a0:00:4d:92:66:ff:03:51:2d:46:d2:15:1c:
         c3:35:73:23:2b:ca:e5:f5:92:a7:7b:e0:c7:9a:c0:cd:ac:57:
         06:4e:e6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:28:52 2025 by rpki-client