Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/0/323830343a363232383a3a2f33332d3438203d3e20323639323739.roa
File:                     323830343a363232383a3a2f33332d3438203d3e20323639323739.roa (raw, json)
Hash identifier:          Rk5LZToAPwroLglbIl2QQxH9TIHd9qoC0+794jisgcI=
Subject key identifier:   59:1B:17:3E:8F:56:9F:40:B1:4F:B2:D4:63:7A:FA:1D:8A:39:77:15
Certificate issuer:       /CN=12A612DD786AA7742995A9E6A0F873BA795ABE6F
Certificate serial:       4BAF81B3EC50AD0FA08FA61F38F07F08F904DEF4
Authority key identifier: 12:A6:12:DD:78:6A:A7:74:29:95:A9:E6:A0:F8:73:BA:79:5A:BE:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12A612DD786AA7742995A9E6A0F873BA795ABE6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/0/323830343a363232383a3a2f33332d3438203d3e20323639323739.roa
Signing time:             Mon 13 Oct 2025 18:08:27 +0000
ROA not before:           Mon 13 Oct 2025 18:03:27 +0000
ROA not after:            Mon 12 Oct 2026 18:08:27 +0000
asID:                     269279
IP address blocks:        2804:6228::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/0/12A612DD786AA7742995A9E6A0F873BA795ABE6F.crl
                          rsync://rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/0/12A612DD786AA7742995A9E6A0F873BA795ABE6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12A612DD786AA7742995A9E6A0F873BA795ABE6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 23:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:af:81:b3:ec:50:ad:0f:a0:8f:a6:1f:38:f0:7f:08:f9:04:de:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12A612DD786AA7742995A9E6A0F873BA795ABE6F
        Validity
            Not Before: Oct 13 18:03:27 2025 GMT
            Not After : Oct 12 18:08:27 2026 GMT
        Subject: CN=591B173E8F569F40B14FB2D4637AFA1D8A397715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:96:df:10:c5:a4:c3:d2:02:b8:5a:7b:db:
                    03:5e:b9:15:04:35:e3:38:54:2d:51:1a:89:09:c2:
                    73:68:7e:40:eb:87:ba:3b:f4:75:e6:ac:65:58:e0:
                    9b:3f:0f:72:61:8d:8c:9a:8f:9e:2a:56:64:f9:e9:
                    d4:17:57:ba:dd:28:64:94:e9:5b:03:9a:4e:82:4f:
                    18:78:3b:a4:39:2a:8b:99:2e:d8:46:93:81:78:39:
                    6b:a6:6a:b6:56:7f:aa:4a:41:6d:b5:18:90:a7:db:
                    91:a1:b7:50:07:a2:66:06:12:ce:ab:e9:63:9d:48:
                    12:b2:b5:6b:71:2a:e5:3f:1a:03:c9:ce:29:19:a5:
                    1f:6c:2b:73:93:61:ad:a2:58:0f:01:a6:73:97:3a:
                    02:fe:17:b4:a7:ad:74:a8:c7:40:d7:66:6f:4d:72:
                    92:01:3d:f6:8c:ad:2f:ea:14:d8:7d:c0:d8:8b:a1:
                    e0:c4:e1:4d:ab:8b:d9:dd:db:79:d1:1d:20:fb:40:
                    1c:b1:2f:a7:53:96:79:1e:27:86:95:94:cb:39:48:
                    e8:54:2e:90:a8:d3:61:fb:cc:e0:7f:72:d0:12:25:
                    9c:17:30:b8:54:09:1a:00:c4:b4:a5:c2:94:59:fd:
                    33:01:17:d6:ee:b2:99:5c:cb:3e:47:5f:ce:fa:d6:
                    ab:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1B:17:3E:8F:56:9F:40:B1:4F:B2:D4:63:7A:FA:1D:8A:39:77:15
            X509v3 Authority Key Identifier:
                keyid:12:A6:12:DD:78:6A:A7:74:29:95:A9:E6:A0:F8:73:BA:79:5A:BE:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/0/12A612DD786AA7742995A9E6A0F873BA795ABE6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12A612DD786AA7742995A9E6A0F873BA795ABE6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9dihGZzmM9nSYNwTsToKiAT3YAaL4TmA362NxZ9iAmA/0/323830343a363232383a3a2f33332d3438203d3e20323639323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6228::/33

    Signature Algorithm: sha256WithRSAEncryption
         89:b3:8e:59:93:3c:98:30:4d:ae:2f:8f:4b:fd:99:2c:1d:6f:
         f9:f1:a8:bd:c8:9e:02:c1:c5:3b:50:e5:45:15:26:42:5f:45:
         46:ca:7a:c5:33:e5:71:09:e9:98:f4:5a:6f:7f:b9:bb:f5:30:
         24:04:2f:cc:cc:9d:3e:c2:a6:3f:bb:70:e5:39:b3:09:52:cb:
         cf:87:7c:d1:e7:91:da:89:85:ed:da:7f:e8:2f:b7:e0:6c:79:
         aa:bb:fd:e1:aa:b1:ca:79:5a:63:e3:89:50:31:58:6f:b5:19:
         84:49:90:5d:8b:d1:04:29:18:ce:ab:cf:18:32:77:fd:cb:94:
         6f:75:fb:e1:d9:34:02:89:f8:19:97:47:3f:35:5e:eb:cc:6a:
         ef:17:0a:4b:ba:bf:68:d9:54:e0:53:d3:d2:5e:06:60:79:98:
         43:60:20:3f:2a:14:b7:58:89:3d:3c:0d:f0:9a:2f:7e:56:36:
         fe:c9:bd:9d:e1:ad:18:cc:f0:35:23:24:3c:03:a0:ac:06:c2:
         9d:5c:df:13:21:54:21:fd:2f:19:ca:e1:bb:bd:69:1e:67:0c:
         91:c7:02:5f:fc:bb:29:50:db:9e:d1:5c:6a:3a:cc:aa:64:5f:
         c8:44:1c:e3:f9:6d:53:e6:de:1d:4f:37:2b:e1:5b:36:90:f1:
         7d:42:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:25:18 2025 by rpki-client