Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/323830343a383835383a3a2f33322d3332203d3e20323732373635.roa
File:                     323830343a383835383a3a2f33322d3332203d3e20323732373635.roa (raw, json)
Hash identifier:          anfiFG4940ODVki2NKZsZkJH7aYaRx0qBF/g6BYeXAc=
Subject key identifier:   B9:29:F3:3B:C2:77:11:AD:82:0F:77:E4:23:CE:8B:F2:60:A8:23:81
Certificate issuer:       /CN=4556575234FAB5B5EB40632FC9E93E2BF6A5A631
Certificate serial:       267CF1479F34524BDF0BEE31D99C4AB8CB3847CB
Authority key identifier: 45:56:57:52:34:FA:B5:B5:EB:40:63:2F:C9:E9:3E:2B:F6:A5:A6:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/323830343a383835383a3a2f33322d3332203d3e20323732373635.roa
Signing time:             Fri 19 Sep 2025 19:35:20 +0000
ROA not before:           Fri 19 Sep 2025 19:30:20 +0000
ROA not after:            Fri 18 Sep 2026 19:35:20 +0000
asID:                     272765
IP address blocks:        2804:8858::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.crl
                          rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 10:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7c:f1:47:9f:34:52:4b:df:0b:ee:31:d9:9c:4a:b8:cb:38:47:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4556575234FAB5B5EB40632FC9E93E2BF6A5A631
        Validity
            Not Before: Sep 19 19:30:20 2025 GMT
            Not After : Sep 18 19:35:20 2026 GMT
        Subject: CN=B929F33BC27711AD820F77E423CE8BF260A82381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e1:af:81:11:c8:ef:d3:cc:c3:42:b1:76:3b:
                    ea:8f:56:7c:79:78:96:5e:c7:91:64:e2:26:1b:29:
                    fb:74:72:c0:76:4f:7c:6e:2f:18:49:ab:dd:03:44:
                    0b:e6:21:b2:b7:10:61:7a:bf:c4:ec:cd:de:2b:55:
                    af:cf:60:f7:cc:d5:ca:15:e8:35:f4:9f:05:8b:bd:
                    fa:09:cf:57:c4:11:3f:1d:9e:5f:17:e3:07:6f:a7:
                    dc:53:94:1b:19:92:b3:cc:25:09:1b:c7:67:fa:61:
                    88:35:ab:4a:8b:59:18:86:7a:21:8f:6d:f8:6b:fe:
                    7f:4c:2a:f8:13:29:a8:9a:61:fd:ad:6b:7c:33:26:
                    d7:13:c1:c8:33:f7:c1:ba:61:fb:c9:d9:28:dc:02:
                    e2:b3:14:5c:d0:63:fb:a7:69:70:8c:09:98:04:4d:
                    e8:3e:95:db:83:a6:c6:58:37:c4:32:7e:fc:2a:79:
                    27:71:cc:cb:d1:52:e2:30:ae:7c:b2:83:24:92:56:
                    ac:d9:c1:b6:69:eb:d7:b1:5b:50:75:93:50:d3:4b:
                    a7:49:2b:55:a1:35:5b:f2:da:6e:ca:4c:11:f0:95:
                    84:91:e2:cd:f6:a5:8e:02:e2:10:c0:99:d5:4d:ae:
                    07:e5:52:9d:7f:c0:b4:d6:19:8c:67:64:53:a2:46:
                    53:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:29:F3:3B:C2:77:11:AD:82:0F:77:E4:23:CE:8B:F2:60:A8:23:81
            X509v3 Authority Key Identifier:
                keyid:45:56:57:52:34:FA:B5:B5:EB:40:63:2F:C9:E9:3E:2B:F6:A5:A6:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/323830343a383835383a3a2f33322d3332203d3e20323732373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8858::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:4f:8e:1d:9a:1e:28:2e:41:98:3f:6e:0e:12:9f:da:ef:e5:
         3b:94:82:db:05:41:63:b7:d8:1f:9d:d4:fa:cd:16:a3:36:ac:
         fb:20:32:2d:51:3c:ae:16:c2:2a:ff:01:57:8e:f0:e8:fb:ac:
         5b:ae:88:34:b0:9c:5e:7c:47:c9:b6:d5:28:ae:06:fb:1c:21:
         97:84:55:17:06:ff:91:1b:76:95:0e:68:f0:65:d4:07:af:dd:
         3b:3a:ba:1d:16:75:00:5b:b6:00:f4:f0:7e:95:77:fd:14:8c:
         dd:67:b8:9b:73:83:f7:6f:a4:db:56:69:cb:0f:3b:5a:c1:f7:
         36:bf:59:ac:69:01:84:ca:1c:41:5a:95:c8:51:b9:e8:5a:4e:
         6e:1d:9e:a3:c3:34:a7:95:92:d1:ca:b2:4d:61:33:39:2c:27:
         65:a7:7b:27:b7:54:a2:55:52:05:35:bc:b4:e2:bc:a0:42:94:
         b5:d6:3e:ce:ce:8d:06:7d:0e:c1:89:5a:ed:2c:8a:a6:e6:98:
         1e:56:4b:9f:3e:59:35:64:9e:22:46:eb:6b:8b:ef:3d:29:3c:
         47:79:e3:dd:86:d6:ed:9a:05:01:5b:b8:b7:f1:7b:50:cf:52:
         7e:fe:24:aa:e9:d2:72:43:bc:ca:5d:0f:15:9a:40:be:d0:0a:
         32:f3:1d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:47 2025 by rpki-client