Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/323830343a326134633a3a2f33322d3332203d3e203533313637.roa
File:                     323830343a326134633a3a2f33322d3332203d3e203533313637.roa (raw, json)
Hash identifier:          +yoN+1O23LKSs+Y0eipXNIz1gUJrTYUH8Fwi5LE3gZc=
Subject key identifier:   42:33:AA:0A:CD:31:D3:A6:8A:48:59:DB:FF:A0:51:13:E2:45:70:9C
Certificate issuer:       /CN=0CAC382B5A4247796D76A664F9F3A39C715ABD15
Certificate serial:       526DA88198A0D535AEFB3B6B09DDF40D816A69B1
Authority key identifier: 0C:AC:38:2B:5A:42:47:79:6D:76:A6:64:F9:F3:A3:9C:71:5A:BD:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CAC382B5A4247796D76A664F9F3A39C715ABD15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/323830343a326134633a3a2f33322d3332203d3e203533313637.roa
Signing time:             Mon 20 Oct 2025 15:35:54 +0000
ROA not before:           Mon 20 Oct 2025 15:30:54 +0000
ROA not after:            Mon 19 Oct 2026 15:35:54 +0000
asID:                     53167
IP address blocks:        2804:2a4c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/0CAC382B5A4247796D76A664F9F3A39C715ABD15.crl
                          rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/0CAC382B5A4247796D76A664F9F3A39C715ABD15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CAC382B5A4247796D76A664F9F3A39C715ABD15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 11:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6d:a8:81:98:a0:d5:35:ae:fb:3b:6b:09:dd:f4:0d:81:6a:69:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CAC382B5A4247796D76A664F9F3A39C715ABD15
        Validity
            Not Before: Oct 20 15:30:54 2025 GMT
            Not After : Oct 19 15:35:54 2026 GMT
        Subject: CN=4233AA0ACD31D3A68A4859DBFFA05113E245709C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:0a:3b:8a:5d:04:27:c6:fb:9c:53:d8:d9:
                    22:0f:8a:79:66:0e:00:d2:7d:ff:ce:5c:e6:69:7a:
                    be:9a:7a:d1:39:fd:8a:91:f3:88:53:35:d2:9d:10:
                    95:de:af:81:57:ba:3c:68:9c:bd:c2:c7:b4:9f:67:
                    6f:f2:c5:2d:cd:62:96:f0:ca:5a:f4:eb:e3:d5:d9:
                    7d:6e:60:cc:f4:9b:72:9a:d3:96:11:85:24:a7:6a:
                    85:85:cb:aa:4d:b8:39:1b:db:a2:7d:c3:49:a8:75:
                    4b:b2:31:c4:88:84:4e:d7:3d:d9:77:17:1c:ea:ff:
                    fe:9a:8a:74:3a:f9:b1:1b:59:76:c9:a2:70:67:84:
                    03:ee:43:39:41:a3:a4:34:45:7c:79:cc:9b:7d:10:
                    f4:4f:2c:ae:fe:19:4a:72:08:e0:02:74:b9:10:da:
                    38:01:8f:d5:b5:67:3f:9c:dd:aa:48:c7:3f:18:a4:
                    2e:1c:4e:09:5a:1f:3f:dc:e6:99:9e:74:66:de:b1:
                    09:3d:d9:c7:fb:f8:e6:91:4b:97:ec:10:94:8c:3c:
                    26:84:82:7f:c9:80:40:2f:7d:a3:bb:63:52:67:e8:
                    e0:2b:a8:7c:65:34:32:84:a2:70:1c:4e:25:65:e6:
                    a0:bd:41:91:e8:f7:6d:0d:ae:e0:79:db:c4:2b:46:
                    1b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:33:AA:0A:CD:31:D3:A6:8A:48:59:DB:FF:A0:51:13:E2:45:70:9C
            X509v3 Authority Key Identifier:
                keyid:0C:AC:38:2B:5A:42:47:79:6D:76:A6:64:F9:F3:A3:9C:71:5A:BD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/0CAC382B5A4247796D76A664F9F3A39C715ABD15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CAC382B5A4247796D76A664F9F3A39C715ABD15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/323830343a326134633a3a2f33322d3332203d3e203533313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:8a:e4:c1:95:a9:56:e7:e6:0b:1d:3d:ca:e1:22:b4:8d:52:
         7b:d3:d7:1a:62:b7:1c:95:ef:4b:a9:59:10:b7:af:6f:d2:68:
         a8:1c:39:56:e4:74:cc:65:bd:40:b8:0a:ee:7f:01:26:bf:5f:
         10:0a:81:cc:18:be:49:21:37:82:47:19:a1:95:ee:52:e3:08:
         2d:c6:68:ff:f4:48:d3:02:2a:a9:29:22:a5:3e:3a:f3:37:4f:
         80:b8:3b:96:d0:e5:04:89:9e:ed:a8:d5:f4:3c:ae:bf:a2:71:
         bd:a5:97:49:47:59:7d:ef:39:94:fc:ca:72:c0:5d:0d:ba:94:
         91:05:e0:8b:10:46:aa:4b:a7:3b:f7:cd:35:9b:6b:7d:6c:05:
         3e:59:2c:5c:25:3e:fb:3f:b7:cf:8a:46:e6:7a:05:10:d9:a3:
         8a:7f:a9:4d:c8:78:d4:6c:70:e8:ae:84:c1:18:7c:d9:7f:81:
         ae:0e:69:ec:00:9f:be:68:08:c5:6f:ec:fb:36:a2:02:54:9b:
         16:e6:a6:04:db:77:c7:f1:75:b8:66:8e:03:57:91:eb:e3:1b:
         b7:da:42:24:3f:3e:41:d4:db:5c:03:aa:12:2a:5b:f8:75:ee:
         65:bc:55:57:66:ad:93:bb:68:09:71:e9:ea:77:c3:a7:cd:93:
         3c:cf:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:00 2025 by rpki-client