Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/323830343a313262633a3a2f33322d313238203d3e20323633343935.roa
File:                     323830343a313262633a3a2f33322d313238203d3e20323633343935.roa (raw, json)
Hash identifier:          PsO0rBlFL87VDdP7wq/L8V7MJOH689SxXWrb76Ynk5w=
Subject key identifier:   61:CA:AA:F6:B0:D5:73:06:C4:AA:CD:87:AC:C7:76:7A:E4:3B:57:4C
Certificate issuer:       /CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7
Certificate serial:       7C5720F5E9FA87BC030621E1AE15201A99673763
Authority key identifier: DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/323830343a313262633a3a2f33322d313238203d3e20323633343935.roa
Signing time:             Thu 23 Oct 2025 12:27:52 +0000
ROA not before:           Thu 23 Oct 2025 12:22:52 +0000
ROA not after:            Thu 22 Oct 2026 12:27:52 +0000
asID:                     263495
IP address blocks:        2804:12bc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl
                          rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 14:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:57:20:f5:e9:fa:87:bc:03:06:21:e1:ae:15:20:1a:99:67:37:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7
        Validity
            Not Before: Oct 23 12:22:52 2025 GMT
            Not After : Oct 22 12:27:52 2026 GMT
        Subject: CN=61CAAAF6B0D57306C4AACD87ACC7767AE43B574C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:43:7d:cf:a6:da:9d:58:55:67:3c:f3:6b:70:
                    01:4a:76:31:fc:36:dc:ce:fe:e2:da:9b:3b:c3:0a:
                    e7:c4:ac:55:ac:2d:79:de:f0:6b:66:de:ac:60:04:
                    4e:d8:51:ba:f7:53:42:4a:8b:38:66:e8:59:ce:7e:
                    42:2e:52:49:11:29:2a:19:dc:ae:0f:08:35:f5:1c:
                    fa:21:c5:dd:98:a3:2a:45:99:07:de:fa:37:79:c4:
                    9f:40:03:da:9e:1a:f7:ea:30:1d:c8:2b:b4:b3:c1:
                    93:ca:c5:c5:cc:8a:f7:03:be:b8:bb:18:1a:69:59:
                    f2:dc:66:7b:cd:a6:57:e2:18:83:14:2b:b7:b0:85:
                    b8:ec:cb:d9:92:43:65:1b:f1:8d:56:6f:a8:b8:d3:
                    9f:14:67:bf:3f:3f:41:d1:9e:e1:58:9b:b0:a4:b2:
                    67:77:a9:51:23:18:a1:7a:10:54:10:59:e4:34:03:
                    86:c5:e7:8d:b0:03:be:54:73:c0:22:4d:d0:a7:db:
                    9b:66:2b:3c:8b:d4:2b:5f:3c:91:a0:39:22:cd:2e:
                    3a:4c:7b:b5:b8:c5:f1:29:21:43:8a:71:cc:0a:c1:
                    93:97:a9:0b:49:c3:5b:4b:ce:80:af:38:21:e7:82:
                    f3:29:61:dd:7d:da:71:47:a7:f4:e9:a5:56:89:a2:
                    3b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CA:AA:F6:B0:D5:73:06:C4:AA:CD:87:AC:C7:76:7A:E4:3B:57:4C
            X509v3 Authority Key Identifier:
                keyid:DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/323830343a313262633a3a2f33322d313238203d3e20323633343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:bb:c6:a7:64:c4:0f:9f:ef:49:6a:15:f3:d4:b5:fb:c1:c7:
         38:3a:37:ed:f7:57:ed:b8:9a:51:7e:15:a3:fe:d8:a3:20:af:
         98:4d:86:8f:6f:a3:90:74:e7:f2:40:e5:46:e7:2b:73:8c:ea:
         46:28:c5:71:2b:46:11:8f:16:af:fe:59:63:de:8e:cd:4c:89:
         c9:d9:e8:88:59:96:3a:ad:f2:22:7d:fa:ff:c2:be:54:b7:f5:
         e8:fc:0f:80:30:3a:29:5b:15:13:19:e4:eb:7f:89:05:db:ac:
         c6:53:06:7f:9f:b6:b6:fd:4c:e0:08:de:25:79:03:d8:a9:1b:
         03:73:d6:c9:87:86:5b:bb:4a:ec:76:81:c5:5a:bf:70:3b:07:
         66:67:48:58:39:da:72:a5:84:dd:69:f8:61:75:ff:f2:08:d7:
         fc:2c:fd:a0:04:d4:9b:77:a4:63:63:d9:1d:48:80:21:34:8a:
         6a:d3:33:eb:0f:6b:94:00:67:2f:96:e6:15:c5:db:30:42:3a:
         46:e9:2f:53:c4:05:e2:78:c3:49:5d:b6:eb:45:e5:9d:8c:0e:
         74:ed:5b:d4:05:82:04:4f:2a:0e:b3:30:d4:f1:bf:d3:e3:8b:
         23:d1:8c:af:11:b7:6c:df:dd:34:93:d1:7a:88:ef:7b:c1:36:
         2c:e8:70:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:51:33 2025 by rpki-client