Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a383030303a3a2f33362d3336203d3e20323632373937.roa
File:                     323830343a3233633a383030303a3a2f33362d3336203d3e20323632373937.roa (raw, json)
Hash identifier:          r6COQzilnk6Ly8fa7NDFDveoCIEL8H51HYvGU5M6Smk=
Subject key identifier:   56:6D:24:34:FE:40:FD:06:A2:B3:38:B7:9F:FA:52:F7:8D:93:5A:74
Certificate issuer:       /CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
Certificate serial:       1657D802911EFA19BB8D66D46B2E682E4254A004
Authority key identifier: A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a383030303a3a2f33362d3336203d3e20323632373937.roa
Signing time:             Thu 23 Oct 2025 14:13:13 +0000
ROA not before:           Thu 23 Oct 2025 14:08:13 +0000
ROA not after:            Thu 22 Oct 2026 14:13:13 +0000
asID:                     262797
IP address blocks:        2804:23c:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:57:d8:02:91:1e:fa:19:bb:8d:66:d4:6b:2e:68:2e:42:54:a0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Validity
            Not Before: Oct 23 14:08:13 2025 GMT
            Not After : Oct 22 14:13:13 2026 GMT
        Subject: CN=566D2434FE40FD06A2B338B79FFA52F78D935A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:f1:de:18:e6:23:fc:d2:a4:f4:e5:76:72:
                    9e:e3:ac:2d:6d:e6:c4:c0:a8:b0:84:c0:9d:e6:2b:
                    7a:59:0d:26:f9:23:64:ef:c5:44:38:b1:9e:61:3f:
                    be:72:92:c3:44:92:6d:16:7c:8f:be:bb:20:f6:a4:
                    02:ba:9a:89:a2:de:9b:01:44:be:5b:75:f0:0d:72:
                    2b:59:0d:66:bf:4d:4f:68:02:0f:0e:02:31:53:02:
                    5c:06:09:71:2b:5f:b3:22:c1:fd:57:57:2e:b9:24:
                    7b:d1:4e:91:fe:d6:ce:68:1a:1e:f7:36:66:38:b2:
                    6a:00:9e:2e:f4:94:ff:2e:20:b1:cd:e3:5c:dd:9e:
                    bd:87:5a:80:1e:b4:d3:8a:8f:b8:94:48:0c:b4:72:
                    15:5e:fc:c8:7f:b0:1c:95:d7:a8:15:be:3a:fb:72:
                    db:e3:52:3c:d3:27:64:56:83:28:61:c8:22:f0:3b:
                    90:22:57:16:f7:d5:51:c0:12:24:4a:6e:f5:a8:65:
                    8e:24:86:d5:48:bb:7f:8c:de:18:7b:f4:32:83:67:
                    bf:74:7b:f7:4c:85:38:6f:6a:f0:04:53:f1:30:6b:
                    fc:b2:95:fe:4b:08:fa:e7:96:1d:ef:de:32:83:30:
                    47:b4:e7:0b:75:52:5f:d9:c9:61:42:f2:a0:a6:2d:
                    23:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6D:24:34:FE:40:FD:06:A2:B3:38:B7:9F:FA:52:F7:8D:93:5A:74
            X509v3 Authority Key Identifier:
                keyid:A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/323830343a3233633a383030303a3a2f33362d3336203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4c:08:c8:11:d7:3a:33:67:24:a5:44:1d:d8:58:d2:96:06:af:
         ef:62:c7:cd:bb:03:26:9b:05:0a:2f:a1:42:2d:f5:29:ae:a1:
         3b:88:00:c3:21:76:ca:c6:0b:23:c9:c2:7f:f0:14:de:c4:4e:
         7c:80:36:ec:49:be:d9:0e:81:b2:13:5c:6c:90:03:5f:46:f1:
         a4:06:97:ea:ed:9b:47:6e:8d:9c:ee:fa:c1:e0:2a:c5:00:00:
         25:4f:23:98:65:a7:3e:a8:ad:e8:e4:96:81:4a:ce:2c:98:04:
         7c:f7:4b:a2:75:57:ed:94:0b:1f:d0:0a:9d:1d:cf:39:d0:0a:
         90:09:a2:91:a5:15:75:21:b4:87:78:59:f5:fc:cc:ae:b6:28:
         e4:ad:6f:ca:a2:b9:8c:e3:e1:7c:04:74:e2:0f:a8:8e:77:ba:
         d8:aa:21:e4:79:9b:04:42:92:a5:81:92:47:b2:93:4a:a3:93:
         e4:ae:2e:e9:10:5c:c8:50:aa:64:94:74:3a:cc:0d:c7:7a:4c:
         53:4f:ef:03:93:a5:12:9a:e0:78:3a:87:54:0f:cd:60:2c:7c:
         44:c3:af:2e:1c:ea:2d:6e:aa:b2:a8:e6:93:29:3c:93:8e:6b:
         ae:ba:cf:58:32:a0:16:7d:d3:0a:3f:db:c6:b3:2b:0b:d3:3f:
         1b:41:58:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:35:33 2025 by rpki-client