Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/323830343a356566633a3a2f33322d313238203d3e20323639303639.roa
File:                     323830343a356566633a3a2f33322d313238203d3e20323639303639.roa (raw, json)
Hash identifier:          lzP0xeUMLoX9dWyjd9n03TrAU0arlK1Lb4gv3Lt8koM=
Subject key identifier:   6E:1F:3D:58:98:4C:FA:CB:39:07:C4:1A:CC:87:30:49:AC:D7:54:B6
Certificate issuer:       /CN=23A45196211651E8A4484F360D708F4E265B4320
Certificate serial:       7718F5F35DA6942BBC765F111953B2493817ADD8
Authority key identifier: 23:A4:51:96:21:16:51:E8:A4:48:4F:36:0D:70:8F:4E:26:5B:43:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A45196211651E8A4484F360D708F4E265B4320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/323830343a356566633a3a2f33322d313238203d3e20323639303639.roa
Signing time:             Sat 30 Aug 2025 23:43:05 +0000
ROA not before:           Sat 30 Aug 2025 23:38:05 +0000
ROA not after:            Sat 29 Aug 2026 23:43:05 +0000
asID:                     269069
IP address blocks:        2804:5efc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.crl
                          rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A45196211651E8A4484F360D708F4E265B4320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 13:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:18:f5:f3:5d:a6:94:2b:bc:76:5f:11:19:53:b2:49:38:17:ad:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23A45196211651E8A4484F360D708F4E265B4320
        Validity
            Not Before: Aug 30 23:38:05 2025 GMT
            Not After : Aug 29 23:43:05 2026 GMT
        Subject: CN=6E1F3D58984CFACB3907C41ACC873049ACD754B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7e:32:ba:77:78:8b:e3:4b:a8:41:3c:80:72:
                    f6:90:fa:10:68:50:af:ab:63:95:dc:6a:af:ec:fe:
                    a4:8f:37:7a:44:7e:68:d9:07:bc:0c:0e:d6:9b:de:
                    ca:09:15:ec:93:11:20:bb:d5:96:76:bf:2e:89:3b:
                    79:84:91:9a:5b:53:2e:92:bb:59:c6:07:e1:5e:f4:
                    74:61:11:c9:6f:b8:86:bf:3b:e4:6e:ab:d6:c8:ac:
                    34:31:ab:ac:3a:de:45:78:b4:5d:05:a4:b3:d1:e9:
                    8e:a7:71:e9:cb:8d:f4:c9:74:ac:ce:e0:69:81:0d:
                    b8:1e:a9:d9:e8:90:30:5b:c9:00:f6:81:82:bb:04:
                    95:6d:97:77:95:cd:67:b3:33:08:6a:62:16:bf:65:
                    cc:8c:80:85:c6:e5:fd:5a:c1:ca:a2:b4:5a:f5:7a:
                    59:0b:b1:8e:c9:63:fd:9c:89:07:7d:5f:24:be:3b:
                    46:6d:19:74:50:ca:a3:36:fb:fb:c2:e6:a0:cf:53:
                    82:bc:0d:61:ed:8c:fa:dc:65:69:ed:f1:77:6c:33:
                    9c:e4:35:23:92:9a:b3:f2:ae:15:bd:20:6a:c9:a3:
                    b2:20:1e:e0:c6:19:4c:8f:65:66:73:8c:29:05:8a:
                    88:af:95:d9:de:7e:88:51:00:c0:03:41:36:e4:65:
                    b5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1F:3D:58:98:4C:FA:CB:39:07:C4:1A:CC:87:30:49:AC:D7:54:B6
            X509v3 Authority Key Identifier:
                keyid:23:A4:51:96:21:16:51:E8:A4:48:4F:36:0D:70:8F:4E:26:5B:43:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A45196211651E8A4484F360D708F4E265B4320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/323830343a356566633a3a2f33322d313238203d3e20323639303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5efc::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:7d:e7:03:5b:f4:96:ff:2a:da:11:0e:0e:8d:d3:17:38:bb:
         a8:e8:1e:85:44:61:eb:f1:e1:8a:dc:41:41:18:3a:3c:89:ad:
         5e:28:41:c5:51:0a:0d:6a:07:e6:f5:3a:63:ba:11:c7:2d:b5:
         05:33:78:0d:bc:3f:2b:32:cf:3a:4c:77:65:95:97:02:a7:4c:
         25:af:79:c1:e4:f6:7c:73:d9:0c:82:0c:2c:07:f9:49:93:80:
         8f:4d:fe:e4:1a:65:1c:d4:08:18:4b:93:d1:13:01:3a:b4:9b:
         d5:51:4e:ce:70:03:85:9d:4c:bc:cc:fb:23:be:a9:d9:2b:e7:
         76:09:79:78:a1:11:c2:d7:9a:ec:c3:54:bb:25:b5:c2:3c:df:
         37:6f:dd:c2:fb:49:9c:ff:5b:c3:5b:96:0c:cf:af:d0:1d:16:
         bc:ad:db:5f:89:5e:66:e2:79:aa:e4:9a:d3:d8:1e:03:04:74:
         c3:4a:ee:d3:44:1c:93:55:a1:43:68:4d:3f:5b:09:8b:2f:f6:
         e1:59:10:01:8f:ff:9a:b3:b9:e0:01:37:54:44:e0:7c:02:f2:
         ad:fa:9a:3c:f8:d2:f5:c0:d1:7c:4c:a1:e3:d1:13:d8:a4:36:
         83:7f:9c:82:d1:71:ff:28:11:19:45:ff:f0:12:cf:e7:79:6d:
         bc:59:c7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 05:36:28 2025 by rpki-client