Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa
File:                     323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa (raw, json)
Hash identifier:          htt8/wfW6Hxe+9jIDzOcmBE4SC+NwwnFzJbq7+OCYFE=
Subject key identifier:   CB:26:60:D5:9B:A7:79:54:38:8E:55:D9:BF:35:04:80:1F:42:65:9E
Certificate issuer:       /CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8
Certificate serial:       6B3ECD2CA5835D9435A0CBCFB73B0B48F298E8A4
Authority key identifier: 43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa
Signing time:             Tue 28 Oct 2025 11:04:57 +0000
ROA not before:           Tue 28 Oct 2025 10:59:57 +0000
ROA not after:            Tue 27 Oct 2026 11:04:57 +0000
asID:                     272220
IP address blocks:        2804:1f54:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl
                          rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3e:cd:2c:a5:83:5d:94:35:a0:cb:cf:b7:3b:0b:48:f2:98:e8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8
        Validity
            Not Before: Oct 28 10:59:57 2025 GMT
            Not After : Oct 27 11:04:57 2026 GMT
        Subject: CN=CB2660D59BA77954388E55D9BF3504801F42659E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cc:c3:15:b7:c1:fe:35:a8:85:bd:3c:01:0b:
                    4b:4e:e6:1d:c2:68:c5:4b:50:d6:e5:ce:2c:b9:06:
                    dc:fd:2e:f6:b4:50:4e:43:5a:95:cd:c1:36:a2:a4:
                    66:2b:56:25:7f:be:7d:58:5f:db:14:88:42:fe:12:
                    ce:4c:53:68:9c:56:42:13:df:3b:99:c1:a0:a6:8a:
                    c0:d4:21:1c:2d:ce:52:d0:89:6e:27:88:39:b1:27:
                    68:8d:34:47:04:09:d5:76:05:93:83:ac:8e:d1:94:
                    c3:6b:7e:1e:cf:0f:aa:4b:a3:3b:4e:ff:ed:dd:27:
                    af:8c:2f:46:f3:ae:b3:a9:bf:b4:16:c1:c4:54:98:
                    91:8f:a1:41:b7:95:4b:4e:b1:be:6a:38:30:1f:75:
                    fe:9b:04:d6:3e:9e:98:e0:90:e2:4f:c6:c0:c4:af:
                    56:ec:ac:d9:06:3d:59:d6:04:9e:88:12:6c:a8:0d:
                    83:d9:56:69:41:36:6c:45:1f:e3:27:64:1d:10:25:
                    e8:2e:a8:f7:a6:22:86:ae:84:05:f2:3b:ce:e2:91:
                    f8:16:88:04:f5:c2:3a:8c:70:11:9f:82:a8:d5:61:
                    be:55:cc:6b:36:58:75:f3:d6:de:f1:3e:8d:30:58:
                    1b:d2:15:0d:77:30:ef:36:54:e5:4d:0b:ab:54:e9:
                    76:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:26:60:D5:9B:A7:79:54:38:8E:55:D9:BF:35:04:80:1F:42:65:9E
            X509v3 Authority Key Identifier:
                keyid:43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a613030303a3a2f33352d3335203d3e20323732323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a4:c0:85:d0:c5:68:b3:d4:89:eb:15:87:60:45:49:82:8c:c6:
         a6:53:6d:3b:18:98:6e:35:47:d5:4f:cf:49:1f:4f:d9:dd:cc:
         ca:59:91:d7:e0:86:13:3f:49:b7:1b:44:d8:ae:09:d2:83:51:
         35:65:1f:7f:8f:9f:bd:8c:b1:f7:93:e5:b7:e4:2c:8d:28:15:
         30:5e:33:00:7b:c5:4b:00:f4:29:c1:47:db:07:18:24:6c:25:
         80:06:d4:a1:08:80:93:62:5b:46:81:75:4b:05:86:0c:e1:a4:
         57:f0:fc:9b:03:46:76:48:d1:a4:10:03:d9:9a:26:18:63:8d:
         74:dc:6c:87:f7:73:f1:e3:fd:ac:b5:c3:fe:6b:29:64:67:3d:
         36:75:3f:c9:83:df:95:80:10:09:8f:7f:0a:5c:7c:c4:ea:74:
         2f:52:50:a9:f5:7f:f7:bf:15:58:80:dd:a3:cc:f5:65:99:16:
         d4:8c:a4:0f:84:22:41:be:9c:2e:2e:d4:23:07:ce:71:bb:2b:
         03:d0:5b:58:d1:ce:ff:dd:55:18:e1:1c:e6:77:c0:ce:67:b0:
         45:ca:34:76:59:e0:4b:bb:b4:36:4f:da:98:29:b5:dc:de:9b:
         cd:17:27:f7:28:ea:4a:b4:70:53:fb:d6:eb:be:b0:87:b9:c5:
         d0:1e:01:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:29:17 2025 by rpki-client