Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a323030303a3a2f33362d3336203d3e20323638303430.roa
File:                     323830343a353730633a323030303a3a2f33362d3336203d3e20323638303430.roa (raw, json)
Hash identifier:          Q6zbgVZ9/2xEzK0l0oVACRPG06HR5I8bst3e2ItEODc=
Subject key identifier:   FA:44:E1:52:3D:F7:1F:18:7D:8C:92:4D:DC:14:16:29:58:1E:ED:3A
Certificate issuer:       /CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
Certificate serial:       7F4F80877E89429C78089159995EFEA015F43DB4
Authority key identifier: CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a323030303a3a2f33362d3336203d3e20323638303430.roa
Signing time:             Mon 08 Sep 2025 21:31:25 +0000
ROA not before:           Mon 08 Sep 2025 21:26:25 +0000
ROA not after:            Mon 07 Sep 2026 21:31:25 +0000
asID:                     268040
IP address blocks:        2804:570c:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl
                          rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:19:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4f:80:87:7e:89:42:9c:78:08:91:59:99:5e:fe:a0:15:f4:3d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA74FF3945E7508599D54A721E47B3BA75706E3
        Validity
            Not Before: Sep  8 21:26:25 2025 GMT
            Not After : Sep  7 21:31:25 2026 GMT
        Subject: CN=FA44E1523DF71F187D8C924DDC141629581EED3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d5:fd:07:07:1d:dc:41:78:89:92:5d:ef:f2:
                    f0:d1:50:c6:cb:34:b1:72:80:f1:21:34:6f:ba:80:
                    e6:9d:ba:13:7f:a7:95:7a:de:a9:da:f5:da:ba:ac:
                    a2:f6:33:22:6d:36:3b:92:9a:d7:86:b7:8b:59:99:
                    a8:f4:b2:29:3d:d0:2e:63:e9:d3:8f:89:c7:97:68:
                    98:93:64:26:69:f7:67:ad:e2:ee:5c:07:56:af:45:
                    cb:ef:2d:22:31:74:2e:1b:df:a0:99:23:d4:ea:ad:
                    43:a8:bb:cc:19:79:9b:32:23:44:58:b6:2e:29:69:
                    5c:b9:12:a2:c4:12:52:48:cb:13:f9:8b:f7:73:db:
                    0f:70:48:3b:54:1e:e1:7b:c0:b7:ea:fe:83:1a:6e:
                    e3:9e:6b:2a:4a:3c:30:ba:14:38:38:31:a3:e0:00:
                    72:08:96:79:09:f0:e0:a8:70:59:6d:e5:ac:4f:7a:
                    8c:8d:32:40:c3:be:25:54:65:81:44:f0:64:d5:bd:
                    a1:5b:72:88:eb:81:97:a2:ed:ea:9d:0b:7b:1e:72:
                    b5:5a:32:aa:fc:0e:9e:62:fe:94:08:87:c0:06:0a:
                    35:fe:5c:f3:3b:96:f1:ae:e0:2c:57:c2:47:31:d1:
                    c6:7f:d0:3f:01:6e:3a:d0:d1:0d:dc:52:05:0d:10:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:44:E1:52:3D:F7:1F:18:7D:8C:92:4D:DC:14:16:29:58:1E:ED:3A
            X509v3 Authority Key Identifier:
                keyid:CE:A7:4F:F3:94:5E:75:08:59:9D:54:A7:21:E4:7B:3B:A7:57:06:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/CEA74FF3945E7508599D54A721E47B3BA75706E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEA74FF3945E7508599D54A721E47B3BA75706E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2jH489HsXpmzXvf8XWg5Dg2DZ85U6FbcVmMPqLFoF6g/0/323830343a353730633a323030303a3a2f33362d3336203d3e20323638303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:570c:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6c:22:fb:a0:5f:0b:79:10:1e:9d:45:df:33:e4:c4:05:d6:cd:
         72:45:10:37:9c:bf:31:eb:f1:3a:25:ce:7a:cd:df:f3:9f:41:
         62:f9:e2:7f:8f:5e:12:84:66:8e:b9:30:03:cf:7b:9f:86:9a:
         21:5a:78:dd:4e:60:a8:e4:10:0e:f5:51:14:fd:43:fa:2a:41:
         1b:bf:9f:3a:7f:c2:47:db:2e:b4:2f:77:19:e2:99:ac:93:62:
         21:97:18:f3:8f:e8:da:1c:c8:04:15:41:b7:03:70:d7:cd:49:
         a8:2f:4a:88:79:16:d6:d9:cf:76:9f:66:c2:90:ec:bd:bd:3b:
         ae:c9:1d:be:50:02:46:c2:af:f0:6b:5f:61:f8:ea:2b:bc:18:
         c8:7b:c8:fc:92:6c:77:cb:40:51:cc:19:22:a6:1d:51:a3:58:
         d2:32:4a:d0:1c:b0:a8:39:8a:26:6d:1c:8b:7d:9d:8c:f5:c2:
         21:4b:0b:a5:38:a9:1f:f8:6b:58:c0:17:e7:0a:71:fe:96:c7:
         64:26:43:1f:42:56:63:96:5b:87:e7:b5:cb:96:89:fb:36:64:
         c4:ba:04:bb:80:85:bc:e2:9d:26:90:7b:ae:97:f4:f0:20:c5:
         46:3d:b1:62:59:75:cd:d9:af:f0:1f:2d:89:6c:8c:e4:75:dd:
         8b:c9:c7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:44:40 2025 by rpki-client