Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a3a2f33322d313238203d3e20323638363333.roa
File:                     323830343a353432633a3a2f33322d313238203d3e20323638363333.roa (raw, json)
Hash identifier:          gTqmfAnqFeMRsR1+0aHTMmmvSo4mb2anI+U1ppJk4yQ=
Subject key identifier:   DC:89:CC:DB:06:9F:62:C8:F7:70:D0:79:50:08:7C:CE:AC:D3:85:62
Certificate issuer:       /CN=9328C12B504085DE63AE2A3D42C088FB7863F9C6
Certificate serial:       3E1BD91EA67D245B2B0A7524CBF4C691BBEAB448
Authority key identifier: 93:28:C1:2B:50:40:85:DE:63:AE:2A:3D:42:C0:88:FB:78:63:F9:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9328C12B504085DE63AE2A3D42C088FB7863F9C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a3a2f33322d313238203d3e20323638363333.roa
Signing time:             Fri 24 Oct 2025 00:04:31 +0000
ROA not before:           Thu 23 Oct 2025 23:59:31 +0000
ROA not after:            Fri 23 Oct 2026 00:04:31 +0000
asID:                     268633
IP address blocks:        2804:542c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/9328C12B504085DE63AE2A3D42C088FB7863F9C6.crl
                          rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/9328C12B504085DE63AE2A3D42C088FB7863F9C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9328C12B504085DE63AE2A3D42C088FB7863F9C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 15:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1b:d9:1e:a6:7d:24:5b:2b:0a:75:24:cb:f4:c6:91:bb:ea:b4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9328C12B504085DE63AE2A3D42C088FB7863F9C6
        Validity
            Not Before: Oct 23 23:59:31 2025 GMT
            Not After : Oct 23 00:04:31 2026 GMT
        Subject: CN=DC89CCDB069F62C8F770D07950087CCEACD38562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:11:c8:f5:40:be:94:99:25:1d:71:3d:b0:bc:
                    9e:05:47:5d:5f:38:5b:4e:6c:f8:b7:31:4e:ac:81:
                    b6:a5:ae:8a:0f:c2:5b:39:06:81:21:c6:0e:66:41:
                    7e:c9:65:51:a8:5e:f9:e4:cd:a4:e4:13:f1:b7:fd:
                    85:0d:fe:0a:a8:18:dc:27:1d:e3:7b:99:90:d9:97:
                    ec:4b:e4:4f:a5:59:67:4c:85:ba:5c:fa:65:63:7d:
                    06:06:2f:32:c7:13:07:3a:84:c8:fc:96:7d:bb:a6:
                    2a:ff:8e:68:de:01:36:58:4d:94:59:98:f6:bc:bb:
                    ed:1a:e5:24:a5:a0:2b:a2:e8:94:6d:b8:55:a2:27:
                    9c:1c:a0:45:e4:eb:1c:32:49:5e:1b:fb:b7:fb:40:
                    75:2c:93:8f:e4:2e:0f:7a:7f:d7:67:08:75:a0:d5:
                    7d:aa:25:f5:da:85:0f:64:20:59:97:b3:42:29:bd:
                    8c:76:22:18:dc:08:39:29:36:99:b6:b7:e8:ee:c4:
                    43:ae:38:3a:2e:97:0a:0a:00:25:73:35:ac:5b:a8:
                    dd:06:50:cd:92:2d:95:3c:71:80:c3:4a:11:c9:44:
                    4a:f9:04:1b:ef:62:71:18:37:08:29:c5:40:ec:4c:
                    09:a3:2f:eb:41:4b:db:30:42:b1:83:d9:6e:95:e1:
                    c6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:89:CC:DB:06:9F:62:C8:F7:70:D0:79:50:08:7C:CE:AC:D3:85:62
            X509v3 Authority Key Identifier:
                keyid:93:28:C1:2B:50:40:85:DE:63:AE:2A:3D:42:C0:88:FB:78:63:F9:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/9328C12B504085DE63AE2A3D42C088FB7863F9C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9328C12B504085DE63AE2A3D42C088FB7863F9C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a3a2f33322d313238203d3e20323638363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:542c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:5a:f0:3d:bf:d3:61:36:be:92:0f:42:40:26:94:c7:c6:42:
         a6:b2:22:15:33:26:cf:9b:b1:da:f4:ab:39:a9:77:72:d4:4b:
         9f:50:32:06:e7:dc:60:97:f3:61:ba:57:f6:e5:ce:4d:0d:fc:
         20:64:a3:d1:d8:62:d3:0d:6c:92:b7:21:54:b2:54:24:89:17:
         7b:3e:53:c1:5d:b0:9e:67:ee:8a:13:05:d2:b7:ab:7e:14:49:
         29:f3:71:76:d0:78:73:1c:c1:62:12:34:7d:fc:a2:fb:36:af:
         2b:01:03:94:c8:85:7a:7d:a0:3f:61:1e:8c:93:f4:3b:8b:d7:
         fd:c0:95:3d:10:03:4b:60:6d:8b:4d:70:f2:7a:08:b1:a8:a7:
         61:46:55:58:e0:a2:43:b6:4f:4a:39:3b:92:e1:0c:aa:d4:09:
         6e:6a:5d:5c:78:a8:00:24:a8:73:8d:bc:a2:c8:47:72:30:18:
         c3:51:1e:6e:1f:a1:b4:85:02:35:cb:05:89:a8:19:ec:a1:3f:
         60:68:00:68:2b:1d:6d:df:80:46:6b:3f:e4:3d:39:0e:02:00:
         92:64:97:15:32:a6:f3:7f:90:41:71:58:e9:ee:69:10:8d:9b:
         82:53:f8:e1:5d:93:9c:04:10:29:4e:e5:d2:8d:af:b0:37:77:
         fb:c4:a9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:28:52 2025 by rpki-client