Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa
File:                     323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa (raw, json)
Hash identifier:          /ycBkjI3emVZ92X/rqUmSq2zzg32TVvNrTsfhlF/FHg=
Subject key identifier:   1D:55:0A:3F:99:F5:56:3D:5B:7B:7F:2D:21:66:D0:F8:6E:43:B5:36
Certificate issuer:       /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial:       0EAD340F6E029A90D553970B2551B7AD0BB64C7F
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa
Signing time:             Tue 28 Oct 2025 22:28:04 +0000
ROA not before:           Tue 28 Oct 2025 22:23:04 +0000
ROA not after:            Tue 27 Oct 2026 22:28:04 +0000
asID:                     11802
IP address blocks:        2801:80:50::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
                          rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ad:34:0f:6e:02:9a:90:d5:53:97:0b:25:51:b7:ad:0b:b6:4c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
        Validity
            Not Before: Oct 28 22:23:04 2025 GMT
            Not After : Oct 27 22:28:04 2026 GMT
        Subject: CN=1D550A3F99F5563D5B7B7F2D2166D0F86E43B536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:04:7a:68:18:1f:5d:e2:a1:72:86:dd:bd:
                    9c:b3:2f:91:ed:63:35:94:1d:28:a0:23:19:99:62:
                    90:a0:2d:23:95:30:dc:86:84:8e:c3:84:f4:2f:29:
                    fb:9e:41:87:73:85:b8:63:d9:4a:e5:c0:be:b0:d9:
                    61:fd:6c:5f:74:2a:da:b4:10:3a:d4:7d:24:4b:a2:
                    4c:df:be:d9:54:c1:a4:2e:bb:30:1d:22:0d:d3:43:
                    50:75:7c:ba:36:ff:0f:87:d8:d6:6e:40:d5:4f:32:
                    78:08:c9:56:12:b6:7f:9e:3f:ae:27:ad:1b:84:df:
                    a3:3a:41:8d:b7:de:82:ba:bf:e2:40:29:ea:4e:c5:
                    25:ff:af:f2:42:1d:d8:0b:9d:c0:f6:a2:fd:fd:0d:
                    c4:e9:58:31:ab:74:3f:30:12:56:0b:b9:73:71:e2:
                    60:6c:b8:e3:c1:32:88:8d:51:b7:35:a4:83:67:72:
                    97:b5:d8:66:6a:45:ea:ce:0f:06:85:0e:c7:79:ba:
                    2d:30:bd:f7:84:9b:40:de:cc:59:95:55:cd:ba:fb:
                    59:78:fc:9a:05:ad:d4:ff:28:8b:0f:bc:21:30:24:
                    89:58:73:56:de:0f:08:d0:58:60:5e:e5:8e:14:81:
                    e4:98:80:23:53:01:1c:d9:d7:29:15:ad:48:5d:4f:
                    be:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:55:0A:3F:99:F5:56:3D:5B:7B:7F:2D:21:66:D0:F8:6E:43:B5:36
            X509v3 Authority Key Identifier:
                keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:50::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:ba:db:91:e8:fe:0c:75:ae:c5:e3:63:44:e1:a8:20:51:b3:
         c6:e2:f9:e5:ec:bd:fd:13:b5:27:54:7a:a5:bf:e3:b1:45:a0:
         8c:3a:6c:6d:ee:8b:14:34:76:93:8b:bd:86:7a:08:72:1c:b3:
         52:4d:07:c8:f8:c1:c7:df:52:64:ab:99:5c:b3:77:63:a7:19:
         f9:1c:ef:57:8a:bb:9e:40:e2:a1:73:1e:f7:5f:8f:5c:4b:da:
         6d:99:27:eb:43:29:b0:05:47:3d:5a:5d:aa:37:89:17:21:76:
         f0:58:f3:d2:1e:08:56:72:8d:99:77:96:30:d9:e0:4f:79:63:
         4e:40:4c:cd:55:2a:f4:51:1b:a5:07:f4:2b:c1:d5:2c:83:8f:
         af:9d:5f:81:87:8d:c9:39:8d:d3:b3:d9:8f:83:7f:35:0f:f4:
         81:85:cd:74:40:12:ae:b2:ec:1f:5a:a9:ab:44:a8:5b:09:71:
         c5:5d:1c:34:08:a0:d3:4b:32:a7:5f:44:56:71:c3:1b:4b:e6:
         6e:09:c1:25:8e:e3:43:56:c0:41:3b:b9:3a:3b:66:f3:83:83:
         5d:fb:99:cb:4e:09:41:ec:a1:6c:3c:b7:2a:c3:1e:d8:a8:90:
         99:0a:e3:76:22:c6:47:33:d0:f2:38:2b:47:0f:34:14:40:bf:
         ee:b1:72:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:41:47 2025 by rpki-client