Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/323830343a326465343a3a2f33322d313238203d3e20323635333130.roa
File:                     323830343a326465343a3a2f33322d313238203d3e20323635333130.roa (raw, json)
Hash identifier:          mILs34fJrXyGAOzbhdDKS616xzLP8S5hh2/14VIeyts=
Subject key identifier:   EA:96:10:CF:57:42:2B:AD:95:C0:E9:85:09:A0:03:73:FB:8C:8E:92
Certificate issuer:       /CN=ADCD3FBE64DF83F123DCA7C212089403CD855CD0
Certificate serial:       15CDB6D5D1A80DA3B97A8C71A7712B21D488E863
Authority key identifier: AD:CD:3F:BE:64:DF:83:F1:23:DC:A7:C2:12:08:94:03:CD:85:5C:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/323830343a326465343a3a2f33322d313238203d3e20323635333130.roa
Signing time:             Tue 21 Oct 2025 14:32:48 +0000
ROA not before:           Tue 21 Oct 2025 14:27:48 +0000
ROA not after:            Tue 20 Oct 2026 14:32:48 +0000
asID:                     265310
IP address blocks:        2804:2de4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.crl
                          rsync://rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 09:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cd:b6:d5:d1:a8:0d:a3:b9:7a:8c:71:a7:71:2b:21:d4:88:e8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCD3FBE64DF83F123DCA7C212089403CD855CD0
        Validity
            Not Before: Oct 21 14:27:48 2025 GMT
            Not After : Oct 20 14:32:48 2026 GMT
        Subject: CN=EA9610CF57422BAD95C0E98509A00373FB8C8E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:21:42:d6:3a:b3:22:21:5e:86:98:fd:60:
                    fc:4d:fe:a8:3e:b7:f8:39:56:36:a6:6e:65:10:6e:
                    69:df:8b:dc:40:5d:f6:b5:35:84:29:6b:fb:fd:f3:
                    0b:42:e7:ae:d6:cb:f5:85:19:83:a6:7b:ec:b2:6d:
                    fa:08:42:8b:f3:e3:1a:79:23:bd:b6:34:97:9a:28:
                    cb:ef:66:33:a3:a7:7c:d3:da:bc:8e:8b:b3:c9:12:
                    36:c5:84:23:ee:57:46:bb:b4:85:50:15:9b:2c:80:
                    0b:de:be:ca:02:0d:93:b4:9d:d4:d5:5d:a4:a5:dc:
                    da:a8:1a:29:2f:a7:70:4f:7c:22:8b:42:3f:5a:52:
                    ee:6f:a3:e7:1f:db:5d:b7:38:d4:c1:dc:20:47:c7:
                    35:7f:18:62:2f:ee:00:5e:99:67:dd:6b:ea:1d:9c:
                    19:a4:25:f5:1f:33:59:6e:69:d0:57:8d:41:0a:9a:
                    17:60:6d:72:a1:87:4f:55:4e:e3:05:de:50:a7:35:
                    6b:48:a6:98:cf:57:54:d4:c2:67:e9:91:61:1e:11:
                    7f:c5:4c:44:80:10:b6:c1:93:6f:c5:ef:97:18:f4:
                    03:2c:b0:ae:9f:38:24:e8:7f:be:ef:d1:48:a3:56:
                    82:96:b5:8b:96:47:e4:72:09:a4:a2:63:3e:26:16:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:96:10:CF:57:42:2B:AD:95:C0:E9:85:09:A0:03:73:FB:8C:8E:92
            X509v3 Authority Key Identifier:
                keyid:AD:CD:3F:BE:64:DF:83:F1:23:DC:A7:C2:12:08:94:03:CD:85:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADCD3FBE64DF83F123DCA7C212089403CD855CD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxQwBChNpEHSLCrzqnc6S1iLdB1xPAprmeyRw1YaCGhb/0/323830343a326465343a3a2f33322d313238203d3e20323635333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2de4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:66:e6:63:39:57:c7:56:8f:dc:89:26:b6:47:43:a9:52:71:
         37:44:a5:53:5f:ef:0c:9b:5f:20:8b:0f:3d:99:7f:72:45:00:
         cb:93:25:b8:45:24:58:69:3e:69:6a:17:8b:91:8e:17:9e:3b:
         8b:de:82:11:5e:c7:80:8c:e0:e7:37:67:f5:88:30:a4:1d:14:
         78:7b:1b:11:a3:06:93:f6:04:63:6b:98:14:6e:d8:f4:fe:28:
         41:70:d8:cd:db:de:77:c4:a7:3f:3f:e0:6e:19:54:e4:80:eb:
         0c:5a:81:e7:90:d4:e4:fe:3e:71:5b:c0:2a:a6:f2:99:2a:61:
         01:3b:13:0a:1b:9e:16:d0:23:d5:c0:50:8a:86:02:bc:31:f3:
         25:f3:a4:d0:5f:a7:04:73:92:c5:68:30:12:54:5d:d7:25:db:
         21:c7:32:ea:7c:62:9d:a4:ec:d4:d1:11:59:61:07:ef:87:d8:
         72:22:6a:04:83:fa:54:fa:36:56:e1:24:5c:e5:be:e5:73:52:
         48:a2:1a:03:02:6b:a7:81:a6:8f:65:aa:e3:d2:f2:97:6c:39:
         39:3f:3f:42:e6:24:06:55:b5:47:98:7a:09:d6:8d:18:54:ea:
         af:fa:12:2a:e3:09:f0:bc:1f:a7:8c:29:94:88:c1:a4:7e:d1:
         6b:ab:0e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:38:17 2025 by rpki-client