Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663234303a3a2f34332d3433203d3e20323637343639.roa
File:                     323830343a343166383a663234303a3a2f34332d3433203d3e20323637343639.roa (raw, json)
Hash identifier:          rT8cf1ONWslM6q58ddcVm5FujlGeQfHT4OCZkudm/Cg=
Subject key identifier:   B3:6D:48:EA:25:AE:09:E5:80:E1:CF:77:B5:1D:0D:05:B7:10:71:11
Certificate issuer:       /CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
Certificate serial:       0DE9EC481D4740094F93E1BAE0BACFB5ADB644D1
Authority key identifier: FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663234303a3a2f34332d3433203d3e20323637343639.roa
Signing time:             Wed 05 Nov 2025 00:53:15 +0000
ROA not before:           Wed 05 Nov 2025 00:48:15 +0000
ROA not after:            Wed 04 Nov 2026 00:53:15 +0000
asID:                     267469
IP address blocks:        2804:41f8:f240::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl
                          rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 23:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e9:ec:48:1d:47:40:09:4f:93:e1:ba:e0:ba:cf:b5:ad:b6:44:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAA66A1B59B1FF832D30110F8B4A72F4F10B7139
        Validity
            Not Before: Nov  5 00:48:15 2025 GMT
            Not After : Nov  4 00:53:15 2026 GMT
        Subject: CN=B36D48EA25AE09E580E1CF77B51D0D05B7107111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:44:d6:b5:bb:62:59:ea:a0:90:b7:17:16:
                    3a:75:99:2a:81:7e:be:6a:47:ba:3c:8a:a4:a9:06:
                    13:7d:c7:14:f8:33:71:79:59:5e:26:61:47:4d:3f:
                    45:27:72:72:eb:4f:9e:dd:9d:96:d8:82:53:f7:44:
                    16:a5:85:45:3f:1c:55:a4:81:5b:5e:da:8a:30:db:
                    de:05:ec:89:c9:59:3c:e3:28:78:11:48:33:4e:5e:
                    88:65:17:42:ae:a7:d7:37:0a:24:a9:44:28:20:18:
                    7e:71:3d:57:5d:d6:43:04:af:e0:8c:54:0e:6d:75:
                    25:24:8a:e9:3f:e6:1d:73:b8:6b:87:50:2b:a1:9e:
                    05:8e:00:05:99:9f:ee:04:3d:a3:69:a3:b2:e3:4f:
                    07:2e:de:11:6e:cd:e2:1a:3d:9f:00:af:bc:7b:31:
                    11:e6:77:81:25:12:0b:c4:d5:86:f3:b9:20:0b:e9:
                    6f:6b:fb:17:84:2e:77:89:de:fd:ea:59:ce:be:c4:
                    88:a2:42:20:ae:a1:83:ca:9f:08:c1:00:f7:cf:96:
                    f7:40:47:c4:54:26:38:d4:0e:4f:3d:81:bf:eb:55:
                    da:ca:5f:70:c5:c2:aa:08:1d:a6:a0:48:c8:9a:b6:
                    9b:a8:8d:e4:01:62:df:0d:72:d8:92:f0:d3:5f:06:
                    7d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6D:48:EA:25:AE:09:E5:80:E1:CF:77:B5:1D:0D:05:B7:10:71:11
            X509v3 Authority Key Identifier:
                keyid:FA:A6:6A:1B:59:B1:FF:83:2D:30:11:0F:8B:4A:72:F4:F1:0B:71:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAA66A1B59B1FF832D30110F8B4A72F4F10B7139.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663234303a3a2f34332d3433203d3e20323637343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41f8:f240::/43

    Signature Algorithm: sha256WithRSAEncryption
         33:1b:78:a5:43:b5:bb:d3:8b:28:bf:bc:d2:e9:30:f7:93:1d:
         8d:45:50:d6:65:9a:e5:32:73:9c:88:69:d3:70:a7:a7:23:c6:
         2e:33:e1:b7:00:74:f4:04:62:aa:3d:c5:87:ea:91:71:d3:af:
         5e:70:83:8f:18:87:d2:9a:3e:35:10:4a:39:a6:07:af:70:32:
         d7:53:db:44:a2:37:47:cf:68:d0:c1:cf:08:3b:56:da:d3:20:
         84:60:f8:15:69:e5:a1:61:c4:09:89:eb:d9:19:38:88:d3:e5:
         7f:76:7e:53:20:29:94:65:a4:e1:8a:5d:68:ec:d6:16:f3:ca:
         c9:ec:e0:9f:1e:fb:3e:ef:66:8a:be:b1:75:cf:fe:4c:0e:00:
         cd:7e:7d:e8:c3:94:f4:eb:f4:5e:0f:16:6b:ce:9d:b2:21:7d:
         04:9a:16:ab:c4:9e:98:fa:0a:86:62:8d:a5:97:e2:d3:aa:7a:
         3d:82:ae:c6:6a:23:90:35:f5:43:1f:1d:9a:1d:d8:7d:2a:13:
         c3:46:d7:5c:d3:d4:f4:54:8e:22:9e:f0:48:26:61:21:9f:3c:
         04:38:66:db:5a:eb:58:40:38:77:26:05:ea:29:f7:a8:6a:67:
         8f:1d:7c:60:5d:5f:dd:f1:41:f2:e6:b8:ba:99:f2:b7:c8:fd:
         af:32:a1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:30:23 2025 by rpki-client