Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a3a2f33332d3333203d3e20323639353032.roa
File:                     323830343a363539383a3a2f33332d3333203d3e20323639353032.roa (raw, json)
Hash identifier:          CJeNHfyGlF/7V/7/Qut0AP5q5nM7bXUmoT2Ii4o1VPc=
Subject key identifier:   95:85:3E:92:7C:FB:47:AF:6D:5B:17:78:C0:6B:60:A4:86:20:7E:9A
Certificate issuer:       /CN=B65E7DF05538E025E5EF0533E401B97A4458BF8C
Certificate serial:       060129531892FE8D237CAFFC1CD7B145C589D117
Authority key identifier: B6:5E:7D:F0:55:38:E0:25:E5:EF:05:33:E4:01:B9:7A:44:58:BF:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a3a2f33332d3333203d3e20323639353032.roa
Signing time:             Sun 02 Nov 2025 13:51:01 +0000
ROA not before:           Sun 02 Nov 2025 13:46:01 +0000
ROA not after:            Sun 01 Nov 2026 13:51:01 +0000
asID:                     269502
IP address blocks:        2804:6598::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 06:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:01:29:53:18:92:fe:8d:23:7c:af:fc:1c:d7:b1:45:c5:89:d1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B65E7DF05538E025E5EF0533E401B97A4458BF8C
        Validity
            Not Before: Nov  2 13:46:01 2025 GMT
            Not After : Nov  1 13:51:01 2026 GMT
        Subject: CN=95853E927CFB47AF6D5B1778C06B60A486207E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:64:63:66:5f:aa:c8:a8:f0:8b:28:5f:9d:
                    ef:f0:96:be:b5:a0:86:6d:26:12:0f:32:0b:96:d3:
                    41:83:8f:70:52:b7:14:87:36:66:3d:40:3e:28:b2:
                    17:4c:5f:7f:47:95:ec:98:e8:ce:a9:ab:dd:73:f2:
                    cb:dc:6c:9e:c8:67:de:95:d4:d0:7b:6d:26:e2:22:
                    7c:75:88:00:84:ac:08:28:f7:48:4d:18:ed:24:64:
                    2b:23:f0:19:6f:9e:d2:cf:86:b5:34:82:53:d5:50:
                    63:3a:9c:4f:e4:66:2a:32:6f:00:ac:cb:4f:9c:98:
                    de:69:f5:d3:06:6a:98:8e:66:36:5f:03:52:6b:fc:
                    12:60:69:c8:5a:67:39:0c:53:d1:49:3a:f9:f7:17:
                    9b:25:f2:b8:5e:fa:9a:82:30:11:4e:e3:b6:c5:fc:
                    84:b6:d5:83:d0:51:f5:11:2a:3b:42:e9:2c:71:db:
                    7f:1a:95:1c:d1:4a:f7:b1:b7:c2:3a:b8:5d:23:e7:
                    20:3f:5d:c1:04:3b:14:8f:14:52:2c:81:9a:80:5b:
                    e9:f8:e2:8a:10:11:c8:7f:89:88:77:1b:e3:d1:37:
                    86:cd:6d:65:19:db:4c:fd:29:94:fd:46:eb:45:88:
                    4c:7f:44:78:b7:f8:a0:c4:65:30:e6:ca:d0:18:4b:
                    25:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:85:3E:92:7C:FB:47:AF:6D:5B:17:78:C0:6B:60:A4:86:20:7E:9A
            X509v3 Authority Key Identifier:
                keyid:B6:5E:7D:F0:55:38:E0:25:E5:EF:05:33:E4:01:B9:7A:44:58:BF:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a3a2f33332d3333203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598::/33

    Signature Algorithm: sha256WithRSAEncryption
         3a:1d:62:44:74:55:91:d6:50:52:7a:b4:13:74:27:66:06:3e:
         e2:ee:8a:46:59:87:d5:3e:e4:51:d9:ae:bc:de:a3:04:52:c8:
         d1:81:ce:b9:1f:16:fe:f4:d8:04:2d:f1:78:63:b8:f2:b3:fb:
         6a:37:b9:4f:b2:e7:55:31:fe:25:1c:47:f1:0a:16:ca:6b:c5:
         ba:4a:2e:4d:eb:01:57:92:80:87:88:f7:84:c4:06:3c:48:a2:
         ff:7a:ec:bf:ba:a1:a0:87:f1:54:9a:5b:72:80:df:ac:9f:61:
         19:04:b5:75:73:7a:fd:e2:c6:81:bb:6c:64:aa:43:b4:48:9f:
         29:ef:bf:27:0b:ac:06:da:ff:62:51:cd:46:98:49:26:ea:75:
         6e:1d:68:e1:ad:df:fe:a6:a6:44:44:fb:62:49:ca:2d:81:29:
         29:e7:47:b3:ab:32:28:88:1a:c7:dd:40:d7:c9:4c:f1:a2:cb:
         a7:eb:40:a5:89:96:19:33:de:6b:b4:d5:76:30:53:4f:c0:f9:
         79:90:05:99:66:f5:de:b1:a4:49:c8:2f:1d:b7:f2:04:55:7b:
         d5:09:ab:fa:f2:e8:ca:24:cd:c9:1c:de:e7:4b:23:96:7a:81:
         f7:8e:49:33:17:11:b8:c3:6e:6a:61:4b:99:7f:e0:83:02:02:
         b3:a5:69:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 13:15:19 2025 by rpki-client