Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/323830343a313631343a3a2f33322d3438203d3e20323633323636.roa
File:                     323830343a313631343a3a2f33322d3438203d3e20323633323636.roa (raw, json)
Hash identifier:          H1ySD22gAkwKaQwiOrw+K7D23u1auOLZ3TSQPkOCeyw=
Subject key identifier:   49:29:66:20:93:82:DA:6B:B4:5A:15:F9:BA:03:89:08:E7:7D:EF:B8
Certificate issuer:       /CN=0673A8A85FD75BDF7374650633566E470F5D792A
Certificate serial:       0D6BB093411462049CBC5664229AD5A4957FACDA
Authority key identifier: 06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/323830343a313631343a3a2f33322d3438203d3e20323633323636.roa
Signing time:             Tue 04 Nov 2025 14:18:17 +0000
ROA not before:           Tue 04 Nov 2025 14:13:17 +0000
ROA not after:            Tue 03 Nov 2026 14:18:17 +0000
asID:                     263266
IP address blocks:        2804:1614::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.crl
                          rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 17:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6b:b0:93:41:14:62:04:9c:bc:56:64:22:9a:d5:a4:95:7f:ac:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0673A8A85FD75BDF7374650633566E470F5D792A
        Validity
            Not Before: Nov  4 14:13:17 2025 GMT
            Not After : Nov  3 14:18:17 2026 GMT
        Subject: CN=492966209382DA6BB45A15F9BA038908E77DEFB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9e:66:f3:80:a6:3a:c6:c9:38:9a:3d:5e:e8:
                    51:5d:ff:65:31:f3:63:af:e2:bc:c3:ea:28:d2:b1:
                    c1:da:3a:62:1e:a7:a2:1a:58:ff:50:6f:a1:84:0d:
                    f4:0a:e4:5d:62:2d:a4:c4:6c:a0:06:59:7a:71:c2:
                    a8:70:0a:75:63:71:d9:cf:18:44:2e:74:b5:5c:6b:
                    b2:9e:3d:8d:e3:9e:23:96:ea:4b:d4:98:81:4a:fb:
                    77:4c:8b:37:fb:f7:76:01:ec:cf:9c:22:6b:50:04:
                    88:9b:df:ef:ea:0b:d5:fc:0d:e5:89:13:ec:9e:0e:
                    4c:82:7f:bb:70:ce:56:95:32:eb:e4:6f:90:b8:b8:
                    53:60:af:1c:fe:c9:c8:c3:a5:d2:a7:76:a3:a5:5f:
                    36:91:37:88:96:70:56:67:b2:ba:06:71:40:96:d7:
                    be:0a:9d:5e:7f:eb:ab:05:b5:00:93:20:a5:ab:7a:
                    de:9f:c8:4d:67:ad:88:93:f6:23:34:fe:9a:cf:50:
                    ed:6f:2f:35:97:14:56:6a:8c:63:6e:10:a8:f2:eb:
                    ff:77:7e:fe:e4:d2:db:5a:a1:de:99:cf:47:ee:0d:
                    b4:ab:f2:38:d3:32:e7:bb:ba:9f:a3:7d:fd:4e:d2:
                    77:44:3d:1c:00:12:a3:14:a5:34:6f:7c:a8:ab:81:
                    d3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:29:66:20:93:82:DA:6B:B4:5A:15:F9:BA:03:89:08:E7:7D:EF:B8
            X509v3 Authority Key Identifier:
                keyid:06:73:A8:A8:5F:D7:5B:DF:73:74:65:06:33:56:6E:47:0F:5D:79:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/0673A8A85FD75BDF7374650633566E470F5D792A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0673A8A85FD75BDF7374650633566E470F5D792A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2UWj7WMaKR7bGni5boRsb63o6UxL9C79u5ub6NnkRge2/0/323830343a313631343a3a2f33322d3438203d3e20323633323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1614::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:b6:39:0b:26:5b:0c:c1:50:f5:de:75:5d:ae:01:73:64:51:
         f1:23:c2:99:57:4b:1c:78:8c:ae:a4:98:d4:3b:28:c4:e2:cb:
         2a:af:c4:34:1c:6a:1b:57:4f:b9:81:94:d3:7e:4f:1b:2b:ea:
         42:67:92:0c:89:b5:c3:60:f1:b9:29:e4:0a:0e:92:22:7b:5c:
         6d:af:9e:39:d7:bf:11:cf:65:ec:41:6a:aa:dd:27:fb:01:ec:
         45:4d:7b:c3:83:66:b5:02:4f:b0:c3:4e:8d:ad:a9:7c:fb:78:
         2e:3b:2b:da:26:a3:ec:03:49:bd:27:9e:c9:e8:07:98:bc:19:
         4c:13:a1:bc:c6:70:c7:f1:b3:06:0e:84:92:e5:e0:53:5d:26:
         c4:4a:38:77:66:58:c3:fa:9a:87:84:86:a0:d6:64:dd:ab:60:
         0f:c3:34:5e:23:55:6f:8d:67:62:04:b4:75:7c:f2:bf:62:d2:
         05:5f:6c:64:63:8c:2c:b9:dd:b3:28:6b:d4:7c:c0:3d:c7:f0:
         c6:99:1f:5b:aa:b3:47:ff:6f:e9:8d:ff:db:ed:1b:1e:97:91:
         b5:80:0a:04:5e:7f:8c:f3:a3:0f:04:04:7c:4e:f7:5b:c2:53:
         1f:e0:50:d8:e6:23:1a:94:ce:ab:40:8a:0f:ec:57:ca:a3:05:
         37:2b:62:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:58:28 2025 by rpki-client