Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/323830343a316538343a3a2f33322d3336203d3e20323634343333.roa
File:                     323830343a316538343a3a2f33322d3336203d3e20323634343333.roa (raw, json)
Hash identifier:          wqkO26iBwML8dHCOdOfHPla5oFoB5WF7uIRgLGj2YMk=
Subject key identifier:   C6:F9:FB:51:C3:72:F3:71:41:68:24:EB:0E:EB:17:B9:76:64:A0:B8
Certificate issuer:       /CN=D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053
Certificate serial:       182CA28F70AB67C6F60228363E9C1BC75DBE760A
Authority key identifier: D9:45:1C:DC:86:C0:A3:FB:12:CE:EA:0E:C7:F4:B1:D3:82:27:00:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/323830343a316538343a3a2f33322d3336203d3e20323634343333.roa
Signing time:             Wed 05 Nov 2025 14:12:31 +0000
ROA not before:           Wed 05 Nov 2025 14:07:31 +0000
ROA not after:            Wed 04 Nov 2026 14:12:31 +0000
asID:                     264433
IP address blocks:        2804:1e84::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.crl
                          rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 17:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:2c:a2:8f:70:ab:67:c6:f6:02:28:36:3e:9c:1b:c7:5d:be:76:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053
        Validity
            Not Before: Nov  5 14:07:31 2025 GMT
            Not After : Nov  4 14:12:31 2026 GMT
        Subject: CN=C6F9FB51C372F371416824EB0EEB17B97664A0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f5:66:e6:46:9f:9e:27:7a:73:60:05:d7:01:
                    f1:6e:46:fa:42:63:32:90:89:05:b5:f4:8a:78:e5:
                    1e:8a:01:9a:1f:fb:91:31:e5:9d:d9:13:e8:6d:7b:
                    3d:c8:6b:9c:53:03:1e:28:6a:41:d3:36:e9:11:21:
                    c1:aa:f1:3c:11:3f:e6:59:67:c8:61:2b:12:4a:2f:
                    a9:87:ab:8c:3b:c7:c9:3c:39:f1:d4:77:94:e1:4f:
                    95:8f:6e:9d:39:71:0e:8d:39:74:c5:cd:30:70:4e:
                    2d:6b:c3:a8:7f:89:04:0b:b8:4e:17:3f:54:ca:29:
                    4f:a7:92:5f:78:36:f8:c5:49:f3:64:e1:0e:75:91:
                    eb:d2:25:01:18:ba:54:51:b1:ca:72:f0:5f:92:a8:
                    51:04:10:c4:36:83:61:a4:3c:c7:5f:1b:5b:ff:57:
                    d5:cb:7f:6e:4d:e7:00:d9:e9:04:fc:29:40:4f:1a:
                    0c:21:ba:8e:15:55:67:31:3c:c5:b9:d6:1d:86:26:
                    02:ad:bf:3d:68:04:99:5e:d4:d0:37:cd:31:26:c8:
                    6a:4c:3b:76:c6:2b:a0:73:41:82:e2:26:3c:58:4f:
                    73:e4:b7:35:1c:6b:03:97:e0:54:c2:97:6b:7a:67:
                    f6:d7:55:ff:93:6d:4b:9a:8e:7c:66:8e:63:ab:39:
                    e6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F9:FB:51:C3:72:F3:71:41:68:24:EB:0E:EB:17:B9:76:64:A0:B8
            X509v3 Authority Key Identifier:
                keyid:D9:45:1C:DC:86:C0:A3:FB:12:CE:EA:0E:C7:F4:B1:D3:82:27:00:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9451CDC86C0A3FB12CEEA0EC7F4B1D382270053.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AENgdKVxHoDdKui5q1EPJtShA6BeXuVyU3nLuJBpBFeV/0/323830343a316538343a3a2f33322d3336203d3e20323634343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e84::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:f5:d2:c2:f7:d9:bf:4c:88:6e:90:9a:03:38:52:89:e7:21:
         8e:b0:61:b5:2e:58:8c:f9:a7:ad:39:a3:38:fd:13:1a:bc:ec:
         49:77:e9:2d:3c:30:34:bc:3e:f9:25:34:72:7c:39:ae:4f:47:
         ee:a3:0b:36:2d:61:23:8d:f2:f9:1f:de:d5:bb:cc:03:5d:3b:
         f3:61:b5:0d:ff:e6:eb:b1:4c:ac:93:ea:ca:2e:d7:06:08:29:
         ee:39:a9:f6:20:38:47:10:af:31:12:27:3d:36:a5:7d:2e:af:
         f7:9c:5b:0f:19:9e:30:63:e7:c2:04:bb:15:65:2f:60:95:2f:
         08:f4:fc:d7:4e:38:2d:8d:6e:c5:08:c6:c3:ca:5f:6c:98:d8:
         5c:eb:e9:43:57:e5:ca:8d:ad:98:42:90:04:f5:52:4f:b5:c8:
         1b:75:15:05:9f:a2:ae:d4:29:e7:13:e7:5b:6e:b0:39:77:43:
         76:90:fc:5c:56:bc:83:97:53:44:b9:09:ab:1a:ff:b9:aa:61:
         7a:e0:f7:4c:c6:e8:9c:a0:ac:a9:7d:ed:3a:9b:a1:d1:5e:ab:
         f4:4e:3c:c2:dc:54:88:52:35:78:4e:33:dd:c2:51:59:aa:a5:
         f7:d5:e0:ce:2b:41:d2:13:67:51:9e:89:72:00:bb:72:e8:97:
         89:04:a1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:30:18 2025 by rpki-client