Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/323830343a383835383a3a2f33332d3333203d3e20323732373635.roa
File:                     323830343a383835383a3a2f33332d3333203d3e20323732373635.roa (raw, json)
Hash identifier:          0/xDi7G2AWaZ7rU/15kJ3OCBwlYTYgRFbuCzfuZukR8=
Subject key identifier:   DF:4F:D7:C1:2C:34:0A:E0:54:96:FE:BD:9E:B8:73:E8:9C:7D:6A:76
Certificate issuer:       /CN=4556575234FAB5B5EB40632FC9E93E2BF6A5A631
Certificate serial:       2499F7FA1FB06C7AC5D13BA633FC2A172F7D05B9
Authority key identifier: 45:56:57:52:34:FA:B5:B5:EB:40:63:2F:C9:E9:3E:2B:F6:A5:A6:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/323830343a383835383a3a2f33332d3333203d3e20323732373635.roa
Signing time:             Fri 19 Sep 2025 19:35:21 +0000
ROA not before:           Fri 19 Sep 2025 19:30:21 +0000
ROA not after:            Fri 18 Sep 2026 19:35:21 +0000
asID:                     272765
IP address blocks:        2804:8858::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.crl
                          rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 10:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:99:f7:fa:1f:b0:6c:7a:c5:d1:3b:a6:33:fc:2a:17:2f:7d:05:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4556575234FAB5B5EB40632FC9E93E2BF6A5A631
        Validity
            Not Before: Sep 19 19:30:21 2025 GMT
            Not After : Sep 18 19:35:21 2026 GMT
        Subject: CN=DF4FD7C12C340AE05496FEBD9EB873E89C7D6A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:de:9b:a9:d6:17:6c:04:02:d7:b8:30:28:
                    1d:7d:92:3b:28:4b:81:1b:d4:54:1a:ee:0d:ef:7c:
                    b0:07:31:21:2a:9b:84:a4:59:8f:dc:d6:f6:1b:7d:
                    05:aa:59:ff:23:a2:ba:48:8b:b3:f3:ba:ab:eb:ce:
                    f8:af:c1:fe:06:be:18:7a:0c:c0:28:1f:b4:45:64:
                    7b:42:2e:54:a1:f8:00:65:de:7c:22:97:17:84:7b:
                    31:40:0d:ab:0d:88:62:1b:c4:97:3f:74:2b:ca:25:
                    ed:8d:22:95:56:90:a6:54:0d:ff:ee:1a:54:0a:68:
                    08:fc:4b:b8:4b:16:59:b1:3a:84:b2:67:12:eb:a5:
                    ff:48:52:26:75:8d:23:18:e6:d3:e4:1a:ee:da:c6:
                    13:1f:f6:2d:9b:af:5e:9d:41:41:a1:81:62:6e:99:
                    cc:5c:8e:8c:02:eb:18:8e:45:60:48:0a:c1:8f:86:
                    e9:ee:75:23:d5:8a:0f:d3:73:4e:dc:63:85:e3:f5:
                    94:78:00:fe:1e:59:6d:2e:b5:86:75:f9:3a:fd:40:
                    e9:ce:e1:4f:f7:23:7e:6a:d5:ae:cb:54:90:1d:f0:
                    3f:37:23:21:86:e7:5b:77:00:23:ba:a8:32:4c:3e:
                    6e:4f:58:e2:70:70:1b:5c:99:d5:32:78:7f:47:19:
                    59:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4F:D7:C1:2C:34:0A:E0:54:96:FE:BD:9E:B8:73:E8:9C:7D:6A:76
            X509v3 Authority Key Identifier:
                keyid:45:56:57:52:34:FA:B5:B5:EB:40:63:2F:C9:E9:3E:2B:F6:A5:A6:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4556575234FAB5B5EB40632FC9E93E2BF6A5A631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6HHnJgXqYzuCkzhrwmuRgqQf1SNFB3Pn72Ehs9Tohv7/0/323830343a383835383a3a2f33332d3333203d3e20323732373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8858::/33

    Signature Algorithm: sha256WithRSAEncryption
         79:e9:e6:b0:ea:d7:20:bd:a4:1c:65:44:83:bd:43:b9:dc:6d:
         0d:62:20:58:59:e8:b8:70:28:6d:c0:7c:7a:4c:ae:97:45:de:
         12:ad:a2:ed:e9:77:93:c6:38:70:df:bd:87:a7:df:78:a4:7e:
         c0:ae:e6:e7:1d:e1:3b:1e:60:e9:ad:a0:a0:55:b4:35:c1:de:
         16:56:3c:6c:ca:a4:ac:69:f6:40:29:a0:ee:d3:c8:aa:0b:d3:
         92:a1:59:7d:96:60:70:82:38:6e:8d:04:d2:3e:71:fb:9e:14:
         b1:7f:f6:5a:63:58:28:1a:51:8f:ac:d6:0b:4a:23:7f:44:2f:
         88:55:bf:b7:8d:d3:f8:c9:17:a4:4f:4b:7e:b6:2e:87:49:1a:
         a7:fc:fc:16:56:a0:84:21:6c:85:f5:6f:72:3a:0c:a6:ed:4c:
         ad:33:82:b2:7d:9d:22:bf:9e:15:39:6a:80:12:21:13:e3:9d:
         54:67:61:bf:ac:17:85:97:8c:5b:6e:13:43:d6:a2:a9:bc:0b:
         b8:91:b1:37:6d:c1:66:fa:e9:18:97:68:98:d0:d8:d1:36:1f:
         2c:d1:57:8a:1b:78:8c:48:93:0b:b1:3a:38:20:b3:c3:5b:25:
         f5:d5:85:e7:24:1c:d0:78:60:79:d1:87:50:01:c8:1a:90:1f:
         a9:94:83:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:10:46 2025 by rpki-client