Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d313238203d3e20323639353236.roa
File:                     323830343a363566633a3a2f33322d313238203d3e20323639353236.roa (raw, json)
Hash identifier:          4IkO2/QszAGyQ7/jEwgFxyuaLZEe2+r9yzDRXkeYGkE=
Subject key identifier:   FA:F6:96:56:7C:7E:49:0E:FE:A9:40:7F:BD:AB:0E:46:90:12:85:81
Certificate issuer:       /CN=8FA6C9C794647CA6A63966B05F650C6F52374A28
Certificate serial:       6DFCACA740C71FFAC2C19F3F00E9DD9118305953
Authority key identifier: 8F:A6:C9:C7:94:64:7C:A6:A6:39:66:B0:5F:65:0C:6F:52:37:4A:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA6C9C794647CA6A63966B05F650C6F52374A28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d313238203d3e20323639353236.roa
Signing time:             Mon 01 Sep 2025 17:00:00 +0000
ROA not before:           Mon 01 Sep 2025 16:55:00 +0000
ROA not after:            Mon 31 Aug 2026 17:00:00 +0000
asID:                     269526
IP address blocks:        2804:65fc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/8FA6C9C794647CA6A63966B05F650C6F52374A28.crl
                          rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/8FA6C9C794647CA6A63966B05F650C6F52374A28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA6C9C794647CA6A63966B05F650C6F52374A28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fc:ac:a7:40:c7:1f:fa:c2:c1:9f:3f:00:e9:dd:91:18:30:59:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FA6C9C794647CA6A63966B05F650C6F52374A28
        Validity
            Not Before: Sep  1 16:55:00 2025 GMT
            Not After : Aug 31 17:00:00 2026 GMT
        Subject: CN=FAF696567C7E490EFEA9407FBDAB0E4690128581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b4:ef:ff:67:66:a0:b1:8a:93:da:58:60:05:
                    80:d5:ef:a5:d3:db:26:5d:74:41:b7:1f:26:e2:22:
                    af:1d:f3:80:22:c4:f5:f6:90:86:10:f1:68:bd:e7:
                    2c:ce:8b:95:e2:bd:7b:0f:86:34:05:ff:9e:32:3e:
                    ec:20:43:69:0c:92:8c:40:2a:fc:df:61:92:ae:7e:
                    e6:49:74:5f:8f:dd:c8:c3:07:9b:aa:40:f2:4b:77:
                    c9:19:c9:a5:a9:ac:2b:47:a5:ab:9b:57:0e:9b:a3:
                    46:4b:ea:1e:74:31:cf:81:13:85:2e:9b:93:9c:1e:
                    0e:b0:81:c2:fb:33:fe:de:53:66:f6:20:52:34:ef:
                    e0:12:58:2a:8c:6c:c0:58:e7:f1:ab:f4:16:c6:f6:
                    b4:3c:58:b6:78:7b:41:e1:ae:2e:de:5b:5a:0a:06:
                    14:aa:59:f4:44:94:d1:33:b5:64:c3:6f:31:c3:96:
                    76:09:cb:8c:51:0f:2e:c3:3e:5c:a4:8b:b2:8d:c5:
                    dd:a6:22:4e:0d:76:a5:b0:95:5f:53:94:af:79:e3:
                    96:d1:23:cb:c3:aa:a9:5e:2b:42:4d:1d:5e:33:76:
                    67:29:53:69:ba:49:b9:31:91:74:a4:80:ff:0d:9c:
                    05:8b:8b:01:87:44:4c:99:69:45:90:dd:9d:55:bd:
                    f0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F6:96:56:7C:7E:49:0E:FE:A9:40:7F:BD:AB:0E:46:90:12:85:81
            X509v3 Authority Key Identifier:
                keyid:8F:A6:C9:C7:94:64:7C:A6:A6:39:66:B0:5F:65:0C:6F:52:37:4A:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/8FA6C9C794647CA6A63966B05F650C6F52374A28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA6C9C794647CA6A63966B05F650C6F52374A28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d313238203d3e20323639353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:58:ff:64:e4:33:b6:6e:ff:96:33:af:26:44:5e:30:19:2b:
         2b:09:19:bd:f8:17:80:c1:9d:66:59:5f:2f:98:7a:eb:f4:39:
         f2:0f:0b:85:e8:1c:ca:09:61:1b:d8:e1:ea:ac:25:76:99:4a:
         70:ad:7b:ec:78:20:fc:bc:57:84:28:72:12:f6:9e:b1:57:ab:
         ac:8c:40:ae:8a:d7:9d:ee:52:74:52:01:2f:29:71:6f:e2:ea:
         95:0b:76:98:34:5c:99:8a:56:20:e2:29:d1:d2:65:29:c4:d8:
         3b:95:d2:d9:72:f9:6e:77:fc:fa:f6:f0:80:15:13:a5:45:b3:
         8c:01:ff:40:42:bb:50:51:ce:8e:9e:dd:48:2e:79:48:e1:40:
         27:cd:86:b5:db:da:e8:ac:03:18:ac:e5:57:03:d5:85:18:0b:
         30:f8:8b:91:0e:86:c8:49:a6:b2:ba:2f:60:58:22:09:58:59:
         97:3f:ad:f4:ac:3d:6b:57:bc:92:43:e4:a9:4d:bd:99:df:93:
         35:df:23:91:fd:c4:fb:81:13:d9:b0:68:49:c0:89:89:d9:e9:
         f0:e1:38:95:eb:96:6c:97:c0:c6:3e:6b:78:3d:db:a5:81:0d:
         bd:40:0d:6f:b7:3c:fa:d4:5c:ce:d3:0e:7f:aa:87:e3:26:bb:
         bc:52:fe:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:27:19 2025 by rpki-client