Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/323830343a356163633a3a2f33322d313238203d3e20323638373937.roa
File:                     323830343a356163633a3a2f33322d313238203d3e20323638373937.roa (raw, json)
Hash identifier:          AVfWHWDQAEBVyyme575/wX2OEGc8AOZpErj40wplqs4=
Subject key identifier:   BB:BC:60:5C:D0:36:F4:18:8C:3E:6D:4D:AB:9B:01:DE:7A:BA:5B:7B
Certificate issuer:       /CN=7499E822E8F090E061CDDF504CE58116408B14AE
Certificate serial:       6B43F02A8C98AD9519E4F3F4D3E67E9B45BC59FA
Authority key identifier: 74:99:E8:22:E8:F0:90:E0:61:CD:DF:50:4C:E5:81:16:40:8B:14:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7499E822E8F090E061CDDF504CE58116408B14AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/323830343a356163633a3a2f33322d313238203d3e20323638373937.roa
Signing time:             Tue 04 Nov 2025 19:31:57 +0000
ROA not before:           Tue 04 Nov 2025 19:26:57 +0000
ROA not after:            Tue 03 Nov 2026 19:31:57 +0000
asID:                     268797
IP address blocks:        2804:5acc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/7499E822E8F090E061CDDF504CE58116408B14AE.crl
                          rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/7499E822E8F090E061CDDF504CE58116408B14AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7499E822E8F090E061CDDF504CE58116408B14AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 22:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:43:f0:2a:8c:98:ad:95:19:e4:f3:f4:d3:e6:7e:9b:45:bc:59:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7499E822E8F090E061CDDF504CE58116408B14AE
        Validity
            Not Before: Nov  4 19:26:57 2025 GMT
            Not After : Nov  3 19:31:57 2026 GMT
        Subject: CN=BBBC605CD036F4188C3E6D4DAB9B01DE7ABA5B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:fa:c7:b7:1b:da:30:0a:c0:cf:f1:6d:fb:
                    17:fb:1e:e1:95:30:af:1a:1d:7a:5c:06:d0:75:fc:
                    b5:31:5d:23:da:a8:c3:9c:3b:08:0a:d0:03:0b:6c:
                    eb:b5:6a:3f:76:0b:5e:89:a5:ae:34:fa:ee:02:77:
                    4e:f0:2e:01:45:20:48:fd:f2:91:1d:7f:47:01:2c:
                    0f:39:d6:b0:24:b6:ef:16:2a:66:b9:97:c4:b6:35:
                    75:aa:b2:66:e3:d8:c4:6c:55:f4:0d:e2:5c:3d:01:
                    61:68:00:e1:49:80:89:b1:01:98:34:54:0a:70:6a:
                    c8:cb:d2:42:4f:20:b8:4b:95:ff:f0:a7:97:8d:4c:
                    01:98:6c:a8:92:be:62:af:d8:9a:2d:cf:f3:c2:5f:
                    09:8d:f2:86:5f:fa:23:9c:2c:87:3d:f9:ca:8c:0a:
                    05:a5:6a:fc:ae:34:2e:46:18:f0:26:03:ac:8a:7e:
                    86:0d:89:c6:dd:d0:04:c8:c2:51:02:a5:1e:b0:da:
                    a6:48:d7:e8:00:2f:b5:f4:d8:6d:14:6d:c6:67:73:
                    17:f1:99:72:57:03:46:26:02:a0:1b:ae:25:68:45:
                    a8:ab:99:a7:e9:85:de:c7:fb:00:51:c4:28:4f:34:
                    96:3d:26:90:91:bb:ab:78:2e:08:7c:e2:42:64:8f:
                    5b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BC:60:5C:D0:36:F4:18:8C:3E:6D:4D:AB:9B:01:DE:7A:BA:5B:7B
            X509v3 Authority Key Identifier:
                keyid:74:99:E8:22:E8:F0:90:E0:61:CD:DF:50:4C:E5:81:16:40:8B:14:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/7499E822E8F090E061CDDF504CE58116408B14AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7499E822E8F090E061CDDF504CE58116408B14AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/0/323830343a356163633a3a2f33322d313238203d3e20323638373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5acc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:5d:22:ff:93:a7:dd:43:20:f6:32:73:7b:ee:40:b1:4d:ad:
         8c:c4:69:81:3d:47:c9:ec:f2:05:34:fa:bf:2c:f3:ea:6d:50:
         b8:56:0f:0d:3c:ac:07:0c:d6:15:21:52:64:0c:d3:fa:1c:d9:
         2f:d9:cd:c1:04:fb:8c:ae:68:75:61:92:20:6d:07:9b:bc:78:
         26:6d:26:f8:37:91:73:a9:4a:4e:5f:65:93:45:27:92:c7:c0:
         43:04:b7:a1:8c:32:3b:2f:4e:ec:b9:d9:81:6c:47:15:f9:b4:
         e2:0b:3f:6d:ea:8f:91:e1:ee:1d:61:81:ef:c1:e6:9b:a4:44:
         d8:58:d0:e3:e9:f3:41:8c:e7:ea:b0:75:6d:38:44:27:c5:10:
         97:39:f4:f0:99:c7:46:7a:d3:70:2f:fb:a0:25:89:0e:8b:4b:
         11:8c:b7:86:13:fc:a4:ea:83:f8:e1:b2:1c:b7:23:1a:dc:3d:
         0f:9c:c2:75:4d:9c:50:81:b2:e8:75:3b:58:8b:77:b2:f6:68:
         ea:09:67:71:cb:a5:43:60:79:80:b0:41:00:eb:3a:44:2e:fb:
         33:61:f4:2f:0b:4d:30:d7:a9:2b:f6:65:80:bc:be:04:a9:15:
         44:bd:43:96:22:af:81:c7:52:c8:6f:8e:23:db:90:12:61:04:
         c3:c5:a5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:24:09 2025 by rpki-client