Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DznGgmasshTKNJkqqi21tC77ZATkFszAwQ7EdYz8wYR6/0/323830313a38313a3138303a3a2f34382d313238203d3e20323734353437.roa
File:                     323830313a38313a3138303a3a2f34382d313238203d3e20323734353437.roa (raw, json)
Hash identifier:          3fwCMiSgcHWqy9bPmA+41J2oMyvxyJ1lk71y/hyGZ/8=
Subject key identifier:   72:94:FE:B9:B9:94:90:C5:0A:25:E4:E8:0C:DC:4D:08:28:DE:EB:EF
Certificate issuer:       /CN=FCBD34E7C215EC042D15B10EF260995210C95E9B
Certificate serial:       15990EFC48F484215E218BB7AF11CEE5778F904C
Authority key identifier: FC:BD:34:E7:C2:15:EC:04:2D:15:B1:0E:F2:60:99:52:10:C9:5E:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCBD34E7C215EC042D15B10EF260995210C95E9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DznGgmasshTKNJkqqi21tC77ZATkFszAwQ7EdYz8wYR6/0/323830313a38313a3138303a3a2f34382d313238203d3e20323734353437.roa
Signing time:             Tue 21 Oct 2025 15:04:33 +0000
ROA not before:           Tue 21 Oct 2025 14:59:33 +0000
ROA not after:            Tue 20 Oct 2026 15:04:33 +0000
asID:                     274547
IP address blocks:        2801:81:180::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DznGgmasshTKNJkqqi21tC77ZATkFszAwQ7EdYz8wYR6/0/FCBD34E7C215EC042D15B10EF260995210C95E9B.crl
                          rsync://rpki-repo.registro.br/repo/DznGgmasshTKNJkqqi21tC77ZATkFszAwQ7EdYz8wYR6/0/FCBD34E7C215EC042D15B10EF260995210C95E9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCBD34E7C215EC042D15B10EF260995210C95E9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 22:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:99:0e:fc:48:f4:84:21:5e:21:8b:b7:af:11:ce:e5:77:8f:90:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCBD34E7C215EC042D15B10EF260995210C95E9B
        Validity
            Not Before: Oct 21 14:59:33 2025 GMT
            Not After : Oct 20 15:04:33 2026 GMT
        Subject: CN=7294FEB9B99490C50A25E4E80CDC4D0828DEEBEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:d5:fb:06:64:c2:31:96:00:d5:76:32:0b:
                    dc:6a:97:9e:b4:2f:26:59:a0:86:e4:67:62:f3:00:
                    7c:8d:46:ec:11:2c:1e:5e:bc:4e:75:a8:9a:5f:62:
                    8e:d4:ad:59:ae:a4:86:32:e7:31:48:d3:c1:1f:7a:
                    9a:27:19:61:93:01:c0:cf:81:3a:09:e0:93:ac:70:
                    aa:6b:ba:c2:26:07:f5:e4:c0:1f:02:81:c7:fd:30:
                    13:65:40:b8:43:43:65:11:0e:b0:c0:e2:d4:19:96:
                    72:1b:66:5e:63:3d:4f:dc:4d:cb:6b:69:45:f0:20:
                    7d:b5:35:33:5c:6d:ca:b2:9a:c2:de:ea:63:6e:c7:
                    a0:64:5f:5b:00:2a:f1:f5:1a:27:98:95:5f:47:94:
                    6d:c9:29:cd:08:0d:a1:e2:05:60:e7:40:2a:64:51:
                    64:46:9c:f3:d5:db:e5:85:89:3c:fa:8b:76:63:ab:
                    86:fa:7f:72:a5:39:98:a0:ee:99:43:f6:97:c8:f5:
                    4d:a2:65:a1:7b:17:f4:ac:e9:9b:c3:5f:16:32:ab:
                    dd:c3:d5:c2:f6:5c:df:4d:16:04:f2:3a:f7:8f:b2:
                    6f:a3:e6:f9:bf:74:90:1d:ac:3b:f8:75:66:ae:ff:
                    b7:41:bc:ae:aa:6e:19:6e:01:be:ee:aa:f9:96:26:
                    dc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:94:FE:B9:B9:94:90:C5:0A:25:E4:E8:0C:DC:4D:08:28:DE:EB:EF
            X509v3 Authority Key Identifier:
                keyid:FC:BD:34:E7:C2:15:EC:04:2D:15:B1:0E:F2:60:99:52:10:C9:5E:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DznGgmasshTKNJkqqi21tC77ZATkFszAwQ7EdYz8wYR6/0/FCBD34E7C215EC042D15B10EF260995210C95E9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCBD34E7C215EC042D15B10EF260995210C95E9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DznGgmasshTKNJkqqi21tC77ZATkFszAwQ7EdYz8wYR6/0/323830313a38313a3138303a3a2f34382d313238203d3e20323734353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:81:180::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:93:c6:cb:91:3d:a8:bd:88:3f:78:7b:33:bd:55:e8:f6:99:
         30:a5:73:8e:6e:16:14:d0:42:32:23:83:67:47:aa:11:c0:1f:
         50:22:8a:29:0f:87:ea:b5:3b:a6:cd:9f:6f:b1:29:15:ee:71:
         86:48:7c:ca:84:0a:13:44:0c:f6:45:66:ca:6f:58:3b:9f:9d:
         fb:5d:02:49:09:05:f8:b8:f9:3e:ea:13:d5:03:09:2d:66:6e:
         16:6d:7b:35:26:71:d4:2b:18:46:a3:2e:95:6d:4c:c0:72:30:
         7a:65:01:29:c1:5f:b3:db:b0:82:17:07:f6:b5:1d:47:f4:9b:
         7a:9f:fc:a3:6b:36:9f:1e:42:67:dc:37:f4:73:14:d8:a5:5d:
         b7:b7:4d:d4:78:69:fb:20:3b:68:ae:ea:87:98:03:0f:04:67:
         7f:b7:a2:47:d0:40:3e:bf:c0:2d:34:c2:8f:8f:25:8a:b7:78:
         39:06:1b:69:9f:df:19:e5:2c:b1:08:c4:dd:c6:38:6e:b5:05:
         23:7b:32:44:db:50:ea:b2:45:44:53:66:4a:97:26:45:a9:71:
         b0:f4:21:b4:2b:99:54:a6:51:98:aa:4e:c8:cd:a5:4d:00:bf:
         90:2c:a1:b6:18:ec:e1:de:78:98:60:cc:37:02:c5:9b:db:04:
         a1:ed:68:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:34:59 2025 by rpki-client