Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a323030303a3a2f33362d3336203d3e20323632373937.roa
File:                     323830343a3233633a323030303a3a2f33362d3336203d3e20323632373937.roa (raw, json)
Hash identifier:          +cw/26IdzodleYo/yl3m7uTNYNYgMJXVilnOERUl/Iw=
Subject key identifier:   A1:20:28:06:AE:8E:38:0E:38:C3:38:2F:61:2F:CE:69:38:64:6B:B8
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       192545041D5E4A8315D11C3191AFC7E891199CDE
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a323030303a3a2f33362d3336203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:12 +0000
ROA not before:           Thu 23 Oct 2025 14:08:12 +0000
ROA not after:            Thu 22 Oct 2026 14:13:12 +0000
asID:                     262797
IP address blocks:        2804:23c:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:25:45:04:1d:5e:4a:83:15:d1:1c:31:91:af:c7:e8:91:19:9c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:12 2025 GMT
            Not After : Oct 22 14:13:12 2026 GMT
        Subject: CN=A1202806AE8E380E38C3382F612FCE6938646BB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a5:31:5f:ce:06:fb:15:4f:d8:c2:86:57:2d:
                    fa:ec:71:a2:b9:1b:26:87:d8:28:59:a0:d1:8c:36:
                    49:be:d2:00:04:1c:98:7b:04:10:40:54:e9:f5:ca:
                    62:e7:64:bf:dd:02:87:36:19:fa:80:8c:9d:fa:97:
                    69:87:55:69:98:fd:7f:73:3a:25:30:1e:59:ad:fa:
                    55:08:12:66:dc:be:ba:cf:ed:6b:3e:1a:cc:4c:85:
                    d2:6c:5a:4c:81:34:b4:25:b0:31:54:f3:12:8d:43:
                    18:1e:3d:66:39:d7:c7:ac:95:7f:41:17:ac:b8:ff:
                    d5:cb:0e:fa:4e:bd:9c:ec:8c:b6:4f:a9:69:1b:ca:
                    98:b0:a9:5a:ac:04:62:57:36:71:4a:40:c5:77:50:
                    a2:e0:d1:c9:c5:11:64:fe:1f:1b:65:d1:b5:80:42:
                    e8:21:ff:79:4a:e1:66:5c:02:85:c3:4e:7d:57:f5:
                    c5:af:4f:c8:62:3c:f4:77:ed:94:94:2b:96:c2:25:
                    68:a5:76:f8:57:5c:fa:70:5b:58:db:db:a9:ba:01:
                    f4:75:fe:67:3c:cf:ce:dd:34:20:4f:ef:fa:b0:0e:
                    9c:8d:76:c4:86:2c:ad:b4:4a:ac:5a:a2:16:8c:66:
                    88:81:7b:6f:a6:04:57:d0:e0:b2:a6:52:93:7d:f9:
                    63:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:20:28:06:AE:8E:38:0E:38:C3:38:2F:61:2F:CE:69:38:64:6B:B8
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a323030303a3a2f33362d3336203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bd:6f:c2:4c:5b:29:5f:79:f5:28:1e:5a:6b:c9:52:51:be:b4:
         d7:49:2d:ff:f2:8a:dd:c7:00:8a:a5:be:e9:21:88:55:5a:4b:
         5a:0d:b5:0e:70:d8:65:39:30:00:4d:cc:90:f3:6f:ca:c6:8c:
         b6:9b:85:78:00:5d:24:95:4b:94:ac:c6:e8:25:08:e2:ad:9c:
         1f:81:18:3e:92:0e:91:b5:e0:e3:81:19:8a:48:1a:13:7b:06:
         0e:bf:ec:8a:06:1c:c4:e1:24:d7:96:bf:fe:2a:bf:ed:dc:44:
         4a:65:28:c5:13:8d:41:57:3f:df:3d:7c:30:0b:77:a5:58:ae:
         ba:5d:6d:d5:b4:3f:92:b5:99:bf:34:fe:69:f2:d6:1e:66:83:
         30:c2:5f:06:42:44:51:62:74:eb:a0:5c:76:7e:54:84:40:5d:
         fe:7a:a7:86:c1:85:90:1c:51:34:17:5d:01:b5:68:c1:9e:26:
         42:9d:c1:b7:2d:18:bf:45:6d:ed:02:72:c5:a8:cf:82:f2:45:
         1b:33:86:b5:bc:f9:9a:6b:17:27:93:d8:c3:5e:07:a7:9f:99:
         b5:a0:49:41:c2:8e:81:7f:b2:dd:a5:07:42:22:02:ef:d7:eb:
         e0:32:aa:c1:ec:37:ac:2f:c0:27:6e:b9:56:95:b8:b8:05:ac:
         26:a1:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:37:11 2025 by rpki-client