Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/323830343a6534383a3a2f33322d313238203d3e20323632393439.roa
File:                     323830343a6534383a3a2f33322d313238203d3e20323632393439.roa (raw, json)
Hash identifier:          ZP7LxRSY9e7An77Rzk9cRX4tKzfidV+jAXvMsYBInSM=
Subject key identifier:   36:0E:55:41:EA:50:65:CF:BB:1A:F5:C2:F1:64:B9:EC:83:B4:41:BD
Certificate issuer:       /CN=64EE45FF4E73BCB7FEE37731DE1088660B5851F8
Certificate serial:       7101B389562522EF1D965701C332B10DDA0F6399
Authority key identifier: 64:EE:45:FF:4E:73:BC:B7:FE:E3:77:31:DE:10:88:66:0B:58:51:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/323830343a6534383a3a2f33322d313238203d3e20323632393439.roa
Signing time:             Mon 27 Oct 2025 19:16:28 +0000
ROA not before:           Mon 27 Oct 2025 19:11:28 +0000
ROA not after:            Mon 26 Oct 2026 19:16:28 +0000
asID:                     262949
IP address blocks:        2804:e48::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.crl
                          rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:01:b3:89:56:25:22:ef:1d:96:57:01:c3:32:b1:0d:da:0f:63:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EE45FF4E73BCB7FEE37731DE1088660B5851F8
        Validity
            Not Before: Oct 27 19:11:28 2025 GMT
            Not After : Oct 26 19:16:28 2026 GMT
        Subject: CN=360E5541EA5065CFBB1AF5C2F164B9EC83B441BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a2:55:46:bd:5a:1a:78:8c:0b:06:fe:6f:6c:
                    46:a9:c1:63:34:8e:b8:fa:22:b1:07:fe:18:69:a3:
                    38:1c:00:c6:f5:a9:f9:89:bc:d5:6f:ba:99:42:65:
                    54:c8:90:8b:eb:cc:61:8c:86:ed:6c:93:2c:bd:94:
                    9f:25:56:03:ff:1d:5f:43:f5:2b:1d:9e:32:4c:a7:
                    90:2f:53:20:59:9f:6a:ce:c3:d0:3c:f5:7d:03:b6:
                    8f:a2:03:15:e6:5d:dd:22:11:98:2f:a9:dc:49:6e:
                    55:32:0b:91:aa:49:ff:d6:52:c5:1e:f1:5a:a4:7e:
                    1a:3e:a8:8d:e5:f8:90:94:20:5b:9e:c8:07:3b:ed:
                    51:73:cc:b0:04:9d:63:1d:80:86:6f:78:b4:84:86:
                    68:3a:36:b9:95:12:1b:8e:e8:9f:8f:63:d2:22:28:
                    72:95:f8:d0:76:c1:0f:70:75:c6:7d:4d:d1:cf:b9:
                    a3:ca:ac:b2:be:f3:56:b3:9d:df:02:34:a9:54:75:
                    77:12:16:c9:09:e7:b5:a3:4d:c0:4b:cf:90:e1:61:
                    59:cc:fe:49:11:75:82:06:b1:09:4c:0c:28:be:ce:
                    8b:27:eb:79:2e:f2:8f:39:7d:f6:2f:c2:34:de:1a:
                    64:01:ae:5d:5e:18:e7:12:87:68:d3:f8:60:db:02:
                    05:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0E:55:41:EA:50:65:CF:BB:1A:F5:C2:F1:64:B9:EC:83:B4:41:BD
            X509v3 Authority Key Identifier:
                keyid:64:EE:45:FF:4E:73:BC:B7:FE:E3:77:31:DE:10:88:66:0B:58:51:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EE45FF4E73BCB7FEE37731DE1088660B5851F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9P5CV9B6N8z3PUWsCsSEjM7FV9oRovFcyrwmaBjmsUJH/0/323830343a6534383a3a2f33322d313238203d3e20323632393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e48::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:f3:f2:9f:10:f3:bb:ce:a2:cb:db:03:c3:3a:fc:64:8e:57:
         d5:30:68:82:b5:50:82:8e:d9:a7:b0:af:6d:40:6e:14:6e:9b:
         fb:96:12:23:ce:19:3a:29:d0:a7:7f:71:6a:14:ed:03:81:e1:
         98:c1:f7:28:5e:a9:fa:13:83:d0:64:bf:84:b0:2f:a9:8d:c1:
         9f:e2:c2:7f:c8:d5:af:df:63:d2:aa:3f:28:cc:51:2d:75:5f:
         58:df:3c:b7:b2:03:4a:69:e1:5c:db:60:de:08:a1:d6:3d:3b:
         b9:2c:ac:04:5e:26:d4:53:f3:44:43:41:13:0d:a3:8b:91:46:
         50:47:78:72:33:a3:24:82:04:4f:48:bf:55:f2:3e:c7:0c:d6:
         b9:aa:66:0f:db:9e:85:e4:5d:77:7f:eb:21:fc:1c:33:5f:d6:
         4b:5d:a6:ab:63:63:1d:1f:4a:c0:e4:b2:d0:d8:d8:02:c5:be:
         d7:20:0a:2f:ca:e9:12:2a:f4:ba:78:07:41:46:cb:96:2c:53:
         e3:40:e7:b3:51:c0:28:d9:7a:74:93:98:ce:bf:da:b6:df:cd:
         74:2e:9a:32:ee:e1:68:0e:60:2e:d9:8b:9c:41:42:e5:18:57:
         5d:35:8d:a3:68:1c:eb:37:f6:ca:6e:e9:fa:f0:06:81:9b:ba:
         a3:1f:ca:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:06:46 2025 by rpki-client