Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/323830343a373134303a3a2f33322d3430203d3e20323730373737.roa
File:                     323830343a373134303a3a2f33322d3430203d3e20323730373737.roa (raw, json)
Hash identifier:          PE/NIHITmmTdB57qmVw7PbqSuJcOU80mbtPRgBbyjwI=
Subject key identifier:   C9:C4:E8:A4:6C:AD:D3:B8:14:24:B4:22:BF:56:6C:22:27:5E:E7:04
Certificate issuer:       /CN=04202F9EB86639A8A0326D739CBCD86E6324B99A
Certificate serial:       4F1581FC805A7FDECBC46853D6DB3D5CA0D53407
Authority key identifier: 04:20:2F:9E:B8:66:39:A8:A0:32:6D:73:9C:BC:D8:6E:63:24:B9:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04202F9EB86639A8A0326D739CBCD86E6324B99A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/323830343a373134303a3a2f33322d3430203d3e20323730373737.roa
Signing time:             Sat 01 Nov 2025 02:49:43 +0000
ROA not before:           Sat 01 Nov 2025 02:44:43 +0000
ROA not after:            Sat 31 Oct 2026 02:49:43 +0000
asID:                     270777
IP address blocks:        2804:7140::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/04202F9EB86639A8A0326D739CBCD86E6324B99A.crl
                          rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/04202F9EB86639A8A0326D739CBCD86E6324B99A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04202F9EB86639A8A0326D739CBCD86E6324B99A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 01:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:15:81:fc:80:5a:7f:de:cb:c4:68:53:d6:db:3d:5c:a0:d5:34:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04202F9EB86639A8A0326D739CBCD86E6324B99A
        Validity
            Not Before: Nov  1 02:44:43 2025 GMT
            Not After : Oct 31 02:49:43 2026 GMT
        Subject: CN=C9C4E8A46CADD3B81424B422BF566C22275EE704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bf:bf:5a:02:a2:8f:c3:58:9c:76:77:22:fd:
                    f4:31:f7:63:be:4e:87:2d:78:70:bd:e7:7f:e1:3f:
                    80:ba:60:41:c4:89:64:0c:38:c8:2d:59:c2:9e:e8:
                    10:41:6b:b7:48:ff:a9:dc:e2:7f:4a:ab:8f:c1:7c:
                    8d:59:06:31:cd:ef:57:86:a4:cd:d7:ec:7a:86:a7:
                    62:20:00:54:15:17:cf:49:15:19:70:76:3f:fc:15:
                    1c:a7:1e:57:c2:60:9d:50:be:7f:9d:c1:f9:50:f6:
                    bc:d0:21:20:2d:3b:73:3c:ab:fa:44:c2:17:bc:1f:
                    86:8e:af:fc:b6:3f:3c:ce:ed:62:7b:f5:6e:38:25:
                    06:11:63:33:ce:51:3b:6c:aa:76:99:3a:6e:d0:ad:
                    b1:a3:0c:63:7a:c1:fb:69:5a:e7:a9:31:24:1a:02:
                    11:02:8b:8d:5f:dc:85:ea:b4:ef:cb:37:b5:17:ea:
                    ec:83:0e:42:1d:3b:c3:d7:9b:b9:3d:53:2e:3d:4e:
                    ea:4c:20:b5:22:71:25:72:17:57:34:4a:44:f6:fb:
                    dc:98:ea:80:e4:9e:9a:05:54:65:cf:d4:ee:9b:78:
                    e0:a3:7b:42:38:c6:49:08:47:c1:5c:8a:2e:39:71:
                    ce:54:fa:27:06:1e:58:4f:be:c4:f1:ae:f0:da:80:
                    e1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C4:E8:A4:6C:AD:D3:B8:14:24:B4:22:BF:56:6C:22:27:5E:E7:04
            X509v3 Authority Key Identifier:
                keyid:04:20:2F:9E:B8:66:39:A8:A0:32:6D:73:9C:BC:D8:6E:63:24:B9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/04202F9EB86639A8A0326D739CBCD86E6324B99A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04202F9EB86639A8A0326D739CBCD86E6324B99A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C55JUPHuygNVCyp7bD8metjsoLPrDT5BQAfgE7FrjbXk/0/323830343a373134303a3a2f33322d3430203d3e20323730373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7140::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:b2:fb:af:b1:3b:b1:8b:f5:fe:82:f7:cf:5f:5e:70:13:3a:
         b2:04:02:02:87:5f:9f:49:85:7a:25:9b:f8:58:04:20:05:01:
         6f:19:7f:11:39:32:0b:52:a5:8d:cc:57:7d:63:ee:74:35:85:
         55:4b:e2:28:39:6e:df:96:af:50:ff:46:fe:10:ed:23:e5:a3:
         1a:95:02:23:b9:62:5a:e8:37:cb:df:46:df:c8:fc:d9:0b:3e:
         5b:51:10:55:c1:04:67:80:cb:c2:b3:11:27:11:30:b2:37:82:
         8d:3a:bc:2d:f7:1d:c3:d4:91:fa:14:ca:71:07:fa:4c:5f:49:
         ca:6a:9c:09:47:4a:94:e3:b2:de:e6:ba:82:d1:f1:04:d7:df:
         28:d1:01:46:53:62:c6:64:c0:a3:88:53:b5:f1:ca:3c:34:5d:
         47:c3:2c:30:a0:07:de:6c:8d:ed:6e:23:9b:36:74:a0:b5:39:
         fd:6b:60:13:03:23:09:e7:2b:13:6d:ac:bd:6f:35:83:25:3f:
         a0:c7:c8:4d:db:21:62:82:c3:78:f7:6d:3c:4c:c0:da:96:2a:
         bd:24:93:79:59:82:c0:d7:58:0a:b6:08:57:f3:48:79:58:ac:
         06:41:67:91:91:24:a2:75:97:1c:de:5f:e1:70:2c:82:01:d8:
         8a:c8:d2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:11:31 2025 by rpki-client