Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a363030303a3a2f33362d3336203d3e20323632373937.roa
File:                     323830343a3233633a363030303a3a2f33362d3336203d3e20323632373937.roa (raw, json)
Hash identifier:          VkNEo5MxELoNqqrJz9uajVt59zU4yp4Hlc49rONklaY=
Subject key identifier:   89:49:14:7C:E7:65:2D:44:99:11:35:B8:34:8A:E3:CA:05:10:ED:C7
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       45CCFE5258E6DB530E9AA525092BC105124A2E90
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a363030303a3a2f33362d3336203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:16 +0000
ROA not before:           Thu 23 Oct 2025 14:08:16 +0000
ROA not after:            Thu 22 Oct 2026 14:13:16 +0000
asID:                     262797
IP address blocks:        2804:23c:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cc:fe:52:58:e6:db:53:0e:9a:a5:25:09:2b:c1:05:12:4a:2e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:16 2025 GMT
            Not After : Oct 22 14:13:16 2026 GMT
        Subject: CN=8949147CE7652D44991135B8348AE3CA0510EDC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6f:af:8b:88:61:e7:83:5b:99:58:b3:16:98:
                    da:4e:a7:c0:9b:19:95:42:f4:74:f4:93:0c:1c:38:
                    8c:e2:1b:65:db:92:55:43:83:a4:c8:21:61:eb:09:
                    b3:3b:2c:60:1d:5c:f2:f2:ca:20:99:18:11:9c:e7:
                    57:e0:98:00:d3:d1:03:a1:05:28:a7:87:58:08:27:
                    08:6a:5b:13:30:b2:17:58:d4:12:42:fa:93:8e:c3:
                    53:6e:48:83:cd:d6:ca:8c:9e:d5:bb:b5:65:47:87:
                    bc:18:d1:7f:fa:7b:7d:61:d0:b5:38:15:82:78:3a:
                    5d:b2:b6:32:63:44:69:be:77:a7:18:d0:be:1f:73:
                    e9:45:2b:65:72:d1:d1:96:53:e3:b0:d5:5f:7a:fd:
                    8b:2b:82:23:f9:6c:77:3f:73:3a:52:24:8c:1b:5f:
                    7e:ca:d8:4e:c5:34:42:6e:b5:ec:58:f4:ab:ef:82:
                    0f:ae:62:26:ea:86:39:21:82:7a:a0:c0:d4:af:1f:
                    00:3c:b0:a5:30:e1:52:17:50:74:a7:44:b8:9f:56:
                    01:8c:a8:ed:3a:83:f3:26:c2:f1:e4:4c:e7:4e:e6:
                    33:c9:88:46:32:45:34:57:64:bb:6d:d9:c5:6c:36:
                    85:ee:79:a5:5c:bf:f6:36:07:9a:88:4e:7e:4d:35:
                    be:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:49:14:7C:E7:65:2D:44:99:11:35:B8:34:8A:E3:CA:05:10:ED:C7
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a363030303a3a2f33362d3336203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:58:fd:7f:35:9f:92:62:44:fe:37:35:ac:78:00:dd:6d:15:
         5f:40:b3:85:35:e2:3d:26:f0:d9:fa:be:68:94:c3:67:f6:51:
         f2:bd:fb:4d:6d:6f:cf:f3:71:80:bc:ee:6c:c5:14:e0:db:a3:
         f9:a9:19:25:26:07:8f:3c:94:ed:ce:0f:eb:11:75:16:5d:b1:
         2d:9a:48:89:1d:ca:3b:02:3a:b9:a3:89:4d:e2:9f:90:16:ca:
         12:5b:ec:b2:e4:f3:9f:a8:d4:c1:12:59:5f:b8:d2:c2:50:d6:
         a3:0b:ca:69:f7:5f:e8:6b:bb:b7:96:a1:64:67:c3:fc:8d:76:
         fb:8f:2a:f8:6f:5b:01:44:1e:fc:66:0c:3f:c3:8e:08:f3:aa:
         2d:41:31:d5:84:c4:b2:b1:e5:62:19:71:d5:7a:97:be:1c:ae:
         bc:4a:fa:6e:c9:66:32:72:8e:ea:5f:80:ba:56:af:34:e8:fb:
         3d:e0:30:24:67:b3:73:77:fc:b8:03:18:f6:c9:af:0e:94:dc:
         32:84:b2:dd:bb:79:e3:bc:0b:0c:4d:0b:06:72:77:e2:1e:a8:
         e1:f2:43:1e:7b:f5:30:cd:0a:21:51:96:3c:23:eb:d5:7c:a8:
         2b:c7:e6:bb:e5:89:68:56:3b:81:59:a4:e2:e0:3b:12:18:19:
         a1:95:c3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:37:33 2025 by rpki-client