Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/323830343a343561383a3a2f33322d3332203d3e20323636393431.roa
File:                     323830343a343561383a3a2f33322d3332203d3e20323636393431.roa (raw, json)
Hash identifier:          dIc7Rh+1+xV2FZU7nGCItsQt2x2QWu60oaWM1gYidhY=
Subject key identifier:   6E:21:6E:CB:E9:0E:5F:6A:8C:9E:1B:F8:8F:43:45:A8:20:59:E7:69
Certificate issuer:       /CN=B5E21BF9371917CEB7412D67CD3CC163FC87A875
Certificate serial:       352C77B8ADC9858EBDE4FA2CF42331F59A72C00C
Authority key identifier: B5:E2:1B:F9:37:19:17:CE:B7:41:2D:67:CD:3C:C1:63:FC:87:A8:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E21BF9371917CEB7412D67CD3CC163FC87A875.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/323830343a343561383a3a2f33322d3332203d3e20323636393431.roa
Signing time:             Wed 22 Oct 2025 18:09:22 +0000
ROA not before:           Wed 22 Oct 2025 18:04:22 +0000
ROA not after:            Wed 21 Oct 2026 18:09:22 +0000
asID:                     266941
IP address blocks:        2804:45a8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/B5E21BF9371917CEB7412D67CD3CC163FC87A875.crl
                          rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/B5E21BF9371917CEB7412D67CD3CC163FC87A875.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E21BF9371917CEB7412D67CD3CC163FC87A875.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 01:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2c:77:b8:ad:c9:85:8e:bd:e4:fa:2c:f4:23:31:f5:9a:72:c0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E21BF9371917CEB7412D67CD3CC163FC87A875
        Validity
            Not Before: Oct 22 18:04:22 2025 GMT
            Not After : Oct 21 18:09:22 2026 GMT
        Subject: CN=6E216ECBE90E5F6A8C9E1BF88F4345A82059E769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0f:11:bc:03:9f:f2:82:d0:22:b5:12:b2:d0:
                    80:4e:fc:ff:90:37:85:84:54:a4:5e:3d:e0:11:4a:
                    90:18:7f:29:3d:02:a4:f5:a0:a2:09:fd:6c:df:9f:
                    37:dc:d5:db:73:1c:79:86:d1:6d:d7:e6:a6:58:d3:
                    50:6f:4a:70:c5:34:ad:b1:43:63:0f:eb:e8:3a:88:
                    35:e6:65:d7:55:aa:c1:3c:aa:7b:83:71:10:09:62:
                    64:4d:48:33:45:22:6f:e4:a2:d0:25:f6:51:71:f5:
                    81:66:fe:3c:f0:e7:51:6a:26:73:3e:5b:c4:43:f9:
                    44:30:3d:0b:f1:a3:e7:37:f1:bc:e5:e1:7c:e5:f0:
                    09:3b:3c:82:de:2e:38:0b:e9:d6:e1:54:0c:aa:4b:
                    f5:45:2a:b4:e6:0b:2a:28:f3:2c:8a:47:7c:11:23:
                    65:0d:39:98:cf:9e:ee:eb:87:18:1e:0c:7d:85:cf:
                    09:30:8e:43:3c:49:9f:9c:b4:25:25:af:1a:d9:a9:
                    7e:65:7b:b1:06:be:24:bb:c8:9b:fe:71:d2:87:c4:
                    d2:79:ef:0b:6f:0d:36:f0:00:1c:c4:9a:2d:cd:d1:
                    ab:10:f5:b9:32:6e:8d:79:b0:9c:94:bf:fc:32:fd:
                    41:03:3f:30:3d:c5:b8:94:17:72:e7:37:83:9e:2a:
                    58:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:21:6E:CB:E9:0E:5F:6A:8C:9E:1B:F8:8F:43:45:A8:20:59:E7:69
            X509v3 Authority Key Identifier:
                keyid:B5:E2:1B:F9:37:19:17:CE:B7:41:2D:67:CD:3C:C1:63:FC:87:A8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/B5E21BF9371917CEB7412D67CD3CC163FC87A875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E21BF9371917CEB7412D67CD3CC163FC87A875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/323830343a343561383a3a2f33322d3332203d3e20323636393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:c7:59:f2:5d:8c:0c:18:09:fe:36:29:10:7c:be:1f:d1:
         aa:e2:ff:29:82:b9:2d:15:c9:11:2a:89:15:57:97:d7:76:be:
         35:9a:7d:71:c0:a3:3e:4b:7b:bf:d1:00:0b:f6:83:7e:dc:95:
         4d:83:80:d7:cf:4e:b6:b7:f4:7c:b7:4a:84:e5:be:16:29:85:
         34:be:5a:e0:bb:e6:ec:93:e4:b8:de:ae:86:ab:f2:b8:aa:fa:
         df:d0:8a:22:8a:75:4a:e5:54:81:83:c6:3f:0a:b3:50:b0:21:
         74:d2:e0:5f:8f:5c:b8:3e:67:d1:2b:56:f5:3a:94:40:a9:f7:
         1f:98:ae:a0:38:af:dd:fe:6e:2c:a5:06:36:eb:46:26:13:46:
         9e:8a:be:c8:ec:ca:18:32:eb:99:5d:7f:d6:97:01:69:7b:2c:
         0c:56:67:72:3f:ab:27:b4:52:a9:75:ee:c7:b2:7b:25:5b:fd:
         37:6c:42:fb:b9:a4:1e:e9:54:35:bf:a3:90:1d:9c:4c:84:5a:
         43:a1:e2:30:5f:84:cc:df:a8:aa:e8:7f:c3:6a:b2:81:3d:51:
         fc:1d:dc:04:01:5c:3d:60:fb:2b:e8:6f:4c:e6:16:42:25:be:
         0e:83:53:e7:ab:41:6c:f9:13:07:94:5f:93:3b:da:90:f2:ec:
         c8:dc:05:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:30:24 2025 by rpki-client