Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/323830343a313234383a3a2f33322d3438203d3e20323633343637.roa
File:                     323830343a313234383a3a2f33322d3438203d3e20323633343637.roa (raw, json)
Hash identifier:          s/YBVzH4cQZZ/23hMNgYQETISCzg20HSp/YyBMI18M8=
Subject key identifier:   A6:F7:D1:B2:E7:80:8E:9A:27:DE:C9:57:AE:A1:9A:8D:7D:2F:D9:38
Certificate issuer:       /CN=718FD7745122924B2C0447ECC4439A2FA495E189
Certificate serial:       5B081D6106CA643A9505D05FF9B904112A56AFA3
Authority key identifier: 71:8F:D7:74:51:22:92:4B:2C:04:47:EC:C4:43:9A:2F:A4:95:E1:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/718FD7745122924B2C0447ECC4439A2FA495E189.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/323830343a313234383a3a2f33322d3438203d3e20323633343637.roa
Signing time:             Wed 29 Oct 2025 14:02:34 +0000
ROA not before:           Wed 29 Oct 2025 13:57:34 +0000
ROA not after:            Wed 28 Oct 2026 14:02:34 +0000
asID:                     263467
IP address blocks:        2804:1248::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.crl
                          rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/718FD7745122924B2C0447ECC4439A2FA495E189.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 00:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:08:1d:61:06:ca:64:3a:95:05:d0:5f:f9:b9:04:11:2a:56:af:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718FD7745122924B2C0447ECC4439A2FA495E189
        Validity
            Not Before: Oct 29 13:57:34 2025 GMT
            Not After : Oct 28 14:02:34 2026 GMT
        Subject: CN=A6F7D1B2E7808E9A27DEC957AEA19A8D7D2FD938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:67:56:1f:8b:d2:a8:e1:4e:66:91:da:bc:
                    11:fb:b2:22:2a:7b:7b:f9:22:37:d8:01:df:6e:59:
                    32:b6:c5:77:59:a4:f2:60:57:42:da:f6:7c:ee:c1:
                    f6:7d:31:78:52:be:cc:71:5d:ad:4d:b8:88:34:95:
                    d7:42:bc:b1:41:af:d7:7b:68:50:74:0f:f9:61:6a:
                    9d:c1:9a:a0:d3:42:a7:26:89:2a:4b:8e:c0:46:bb:
                    75:6d:36:16:a0:1d:28:4c:9d:3d:9d:ae:19:e2:c7:
                    40:52:f0:36:ab:f1:89:56:04:6c:36:77:fb:6b:df:
                    a3:6f:d1:51:25:9c:ec:7d:b1:7a:af:8e:a3:13:19:
                    f0:63:7c:60:4d:92:87:cd:87:7b:d9:cc:5f:e0:d4:
                    d8:89:1f:44:fc:2d:6f:ab:19:2d:65:bc:3e:64:a5:
                    9c:2e:02:18:55:ad:9d:7f:cc:57:6d:4b:38:6d:8c:
                    7e:b3:33:07:1b:9c:18:fd:c9:cf:15:f9:fd:0f:db:
                    5c:7f:86:64:24:54:1a:11:32:01:86:8d:44:1c:91:
                    e0:9c:0a:6a:02:a1:57:f6:2d:0d:84:4b:d9:73:01:
                    d9:7b:42:c0:3d:ad:01:6d:26:7b:af:a7:f6:d3:72:
                    7c:11:13:ee:e5:f3:99:2b:d4:1e:b4:5b:8d:fa:56:
                    11:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F7:D1:B2:E7:80:8E:9A:27:DE:C9:57:AE:A1:9A:8D:7D:2F:D9:38
            X509v3 Authority Key Identifier:
                keyid:71:8F:D7:74:51:22:92:4B:2C:04:47:EC:C4:43:9A:2F:A4:95:E1:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/718FD7745122924B2C0447ECC4439A2FA495E189.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/323830343a313234383a3a2f33322d3438203d3e20323633343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1248::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:ec:5f:f3:ac:8c:61:90:88:8d:f3:40:81:04:34:99:25:62:
         02:37:35:61:e6:61:67:44:87:c0:b9:b6:b0:6b:6a:9f:4e:22:
         46:34:b3:d2:70:9c:d2:42:31:f0:03:86:36:ce:63:b2:ab:ad:
         80:dd:d0:91:78:fb:c3:50:13:a1:9d:b1:0a:57:06:62:01:ad:
         1a:17:b6:52:45:1e:88:6d:c8:5e:ef:7a:a3:10:34:ae:a6:79:
         5e:d1:b7:6b:52:92:1f:d1:af:f5:42:79:c6:ab:6c:69:d9:ea:
         c8:eb:d4:33:49:60:16:83:94:93:2d:43:5c:f9:67:54:ec:4d:
         d1:6e:6c:5a:84:4f:f1:5b:e6:04:9c:b0:b0:76:11:07:af:d5:
         9a:ae:2d:4b:ca:85:91:eb:3e:15:2e:ef:0a:60:a3:78:cb:b4:
         ae:e5:99:32:85:47:6c:4f:7e:17:a9:da:d4:59:63:f3:a9:00:
         c1:7f:94:95:99:79:13:a1:0e:0e:ed:34:84:69:53:b0:44:10:
         c1:50:a4:b3:3e:1a:d7:5e:96:e0:6d:94:b3:8d:fd:ed:63:65:
         69:a2:8f:36:45:2d:ce:43:e6:36:92:2d:ae:db:a3:00:c5:cb:
         22:64:d9:15:87:d6:c4:24:f5:d5:5e:82:29:bd:d7:6f:04:8a:
         07:1e:00:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:21:42 2025 by rpki-client