Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/323830343a356432383a3a2f33342d3334203d3e20323638393534.roa
File:                     323830343a356432383a3a2f33342d3334203d3e20323638393534.roa (raw, json)
Hash identifier:          9Z9swvvb4OFojKJQyOTL89trR09odnxrFubM2LhRAyU=
Subject key identifier:   D2:55:6A:3A:A3:9E:E0:36:60:FE:E5:AA:9A:3C:04:A9:35:1C:36:F1
Certificate issuer:       /CN=FF0BEEF86816A988DAE50E54112CB228061C7D50
Certificate serial:       44677C2BD9B04650CA27897980CBB78B65335E88
Authority key identifier: FF:0B:EE:F8:68:16:A9:88:DA:E5:0E:54:11:2C:B2:28:06:1C:7D:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF0BEEF86816A988DAE50E54112CB228061C7D50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/323830343a356432383a3a2f33342d3334203d3e20323638393534.roa
Signing time:             Wed 05 Nov 2025 11:37:22 +0000
ROA not before:           Wed 05 Nov 2025 11:32:22 +0000
ROA not after:            Wed 04 Nov 2026 11:37:22 +0000
asID:                     268954
IP address blocks:        2804:5d28::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/FF0BEEF86816A988DAE50E54112CB228061C7D50.crl
                          rsync://rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/FF0BEEF86816A988DAE50E54112CB228061C7D50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF0BEEF86816A988DAE50E54112CB228061C7D50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 19:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:67:7c:2b:d9:b0:46:50:ca:27:89:79:80:cb:b7:8b:65:33:5e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF0BEEF86816A988DAE50E54112CB228061C7D50
        Validity
            Not Before: Nov  5 11:32:22 2025 GMT
            Not After : Nov  4 11:37:22 2026 GMT
        Subject: CN=D2556A3AA39EE03660FEE5AA9A3C04A9351C36F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:4d:15:8a:46:85:ff:06:2f:3a:c7:f7:60:
                    e1:30:15:03:59:87:a7:da:d3:78:2f:6a:4e:94:4f:
                    31:70:37:60:19:12:89:85:9d:95:94:2a:c2:00:d0:
                    54:1c:89:1c:03:d2:96:9d:11:be:2a:16:d7:2a:0a:
                    c0:f6:47:3d:c7:f1:39:94:10:39:59:99:12:ea:5d:
                    5f:be:4a:13:b4:54:30:a0:2c:73:f7:d3:fb:52:f4:
                    36:a2:07:fa:b6:e1:b4:a1:60:81:31:b9:c9:ed:06:
                    73:57:c3:1a:21:1e:13:eb:d5:6a:68:ce:d7:8a:23:
                    09:a6:83:12:7b:5f:bc:4b:fb:a5:5e:7e:b3:fc:7e:
                    fa:61:16:68:79:df:75:90:db:33:f6:e7:32:20:2c:
                    23:da:a4:8b:90:d8:d4:07:76:b1:a5:8a:40:f3:5f:
                    98:e9:4d:ad:9b:d0:10:f2:e6:94:a1:26:bc:db:7d:
                    93:98:ac:24:97:13:36:0e:b7:9d:cb:c2:37:63:ed:
                    95:2a:d0:d3:d4:50:01:3a:14:10:5f:f5:d6:50:e4:
                    1a:c6:c0:09:fe:76:42:55:3b:70:6b:3d:5c:b6:4f:
                    54:99:8c:f0:6f:db:df:03:65:31:42:33:8d:81:fa:
                    f8:3a:e9:af:9a:ef:59:62:f4:ba:83:2d:d5:d4:86:
                    96:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:55:6A:3A:A3:9E:E0:36:60:FE:E5:AA:9A:3C:04:A9:35:1C:36:F1
            X509v3 Authority Key Identifier:
                keyid:FF:0B:EE:F8:68:16:A9:88:DA:E5:0E:54:11:2C:B2:28:06:1C:7D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/FF0BEEF86816A988DAE50E54112CB228061C7D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF0BEEF86816A988DAE50E54112CB228061C7D50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GK1SWJazRP9w5gQZsK2L1oSECuLQhQSJDqgjTxTb3uNw/0/323830343a356432383a3a2f33342d3334203d3e20323638393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d28::/34

    Signature Algorithm: sha256WithRSAEncryption
         02:f7:95:0d:c8:a8:ed:29:0c:33:b3:fe:e2:08:d9:db:fc:b8:
         02:8b:ac:e0:27:bc:12:82:4c:d6:7f:19:4a:26:f7:b3:05:ed:
         38:6e:11:da:bc:7b:19:e8:56:7f:5f:52:3c:8c:1f:38:6e:64:
         d6:9a:58:28:8c:f8:77:a4:06:56:24:0c:b7:f2:26:2f:2b:a6:
         d3:8d:e6:b5:85:f3:33:49:bd:b8:75:19:9a:74:37:09:08:eb:
         38:f5:ad:9a:67:79:94:38:8a:53:20:27:65:e6:d9:87:c0:bb:
         26:c4:2b:03:22:6a:1c:e8:ab:63:16:78:f8:9f:e2:ab:7a:77:
         ea:65:61:5f:fb:7d:84:36:62:05:a9:2c:48:96:11:6b:96:d5:
         bc:4e:16:38:4b:a7:11:69:97:16:a0:9e:e4:76:9d:49:dd:30:
         0b:be:9d:ee:e6:82:71:7c:40:39:e3:7f:2a:55:2e:a7:d8:31:
         c3:2e:57:02:a7:50:06:cf:8f:07:80:6e:36:1d:5a:fe:53:04:
         6f:e3:6c:25:49:6e:2b:62:7c:4f:6f:be:03:2a:fd:13:5e:c7:
         2f:84:d3:f0:50:15:b7:40:6d:a9:6a:bf:7e:c7:4b:15:c3:6d:
         02:18:24:58:0f:43:29:b8:f9:65:68:bf:57:70:95:c8:4d:ae:
         2f:8f:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:30:30 2025 by rpki-client