Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B5fwne6CEuHWJXRt6EkZ1iydR73ggHj9y4oHtLdsudbp/0/323830343a3865383a3a2f33322d313238203d3e20323632333939.roa
File:                     323830343a3865383a3a2f33322d313238203d3e20323632333939.roa (raw, json)
Hash identifier:          6GSM7GEqRsrbIAGhvIkanpyHEvI80ZudIQSa1FZnTME=
Subject key identifier:   49:9A:CF:EE:2C:A5:2A:5F:7E:9C:83:33:72:B3:5D:F5:CA:D9:C2:D6
Certificate issuer:       /CN=E19169B2B60C1E8B695976AA3CFA8F061F06CA76
Certificate serial:       6C3D331585195D1DD1B34763F4D6E0F5DE262BD4
Authority key identifier: E1:91:69:B2:B6:0C:1E:8B:69:59:76:AA:3C:FA:8F:06:1F:06:CA:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19169B2B60C1E8B695976AA3CFA8F061F06CA76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B5fwne6CEuHWJXRt6EkZ1iydR73ggHj9y4oHtLdsudbp/0/323830343a3865383a3a2f33322d313238203d3e20323632333939.roa
Signing time:             Thu 30 Oct 2025 19:33:34 +0000
ROA not before:           Thu 30 Oct 2025 19:28:34 +0000
ROA not after:            Thu 29 Oct 2026 19:33:34 +0000
asID:                     262399
IP address blocks:        2804:8e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B5fwne6CEuHWJXRt6EkZ1iydR73ggHj9y4oHtLdsudbp/0/E19169B2B60C1E8B695976AA3CFA8F061F06CA76.crl
                          rsync://rpki-repo.registro.br/repo/B5fwne6CEuHWJXRt6EkZ1iydR73ggHj9y4oHtLdsudbp/0/E19169B2B60C1E8B695976AA3CFA8F061F06CA76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19169B2B60C1E8B695976AA3CFA8F061F06CA76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 00:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3d:33:15:85:19:5d:1d:d1:b3:47:63:f4:d6:e0:f5:de:26:2b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19169B2B60C1E8B695976AA3CFA8F061F06CA76
        Validity
            Not Before: Oct 30 19:28:34 2025 GMT
            Not After : Oct 29 19:33:34 2026 GMT
        Subject: CN=499ACFEE2CA52A5F7E9C833372B35DF5CAD9C2D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:23:6b:f4:59:21:95:4f:e0:ad:aa:49:4b:a6:
                    c1:28:15:96:3d:72:ff:f0:bd:24:89:45:89:b7:77:
                    6d:cd:95:3f:44:f6:ca:16:f8:b2:fa:aa:34:a5:8a:
                    2e:72:d4:4b:95:0f:12:e3:da:10:02:d6:bc:62:9e:
                    62:b7:69:8c:ca:f9:4e:45:70:85:8b:97:bc:1d:7b:
                    4b:cc:d1:42:a1:6a:b0:e2:09:06:98:3a:49:d4:02:
                    90:63:d0:92:60:d2:01:b3:40:26:7d:a0:6f:30:66:
                    07:24:d3:f9:c8:12:23:8c:16:b0:3d:c8:93:82:a9:
                    5d:ed:78:87:61:cc:22:3c:0c:7c:88:16:7d:de:61:
                    34:8e:2b:ad:c9:bb:a8:c2:79:1d:02:8b:4b:ef:25:
                    1d:3c:fd:18:77:4d:2e:6f:12:c5:32:23:b2:ff:69:
                    2a:da:dc:ab:91:0e:f1:51:9a:69:a5:9e:c7:69:6d:
                    8d:25:78:6e:d4:91:76:a4:0d:5e:74:3e:a2:1e:72:
                    42:6c:75:c6:1e:56:cc:73:c6:33:77:a3:5f:b7:b4:
                    f1:72:ff:a4:aa:23:f1:0b:2e:3c:f6:28:20:fd:42:
                    d3:2c:06:42:19:db:e0:c0:1e:e8:01:df:55:31:c8:
                    df:64:f6:4f:38:bd:29:bb:68:10:a9:0b:3d:ca:b6:
                    8e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9A:CF:EE:2C:A5:2A:5F:7E:9C:83:33:72:B3:5D:F5:CA:D9:C2:D6
            X509v3 Authority Key Identifier:
                keyid:E1:91:69:B2:B6:0C:1E:8B:69:59:76:AA:3C:FA:8F:06:1F:06:CA:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B5fwne6CEuHWJXRt6EkZ1iydR73ggHj9y4oHtLdsudbp/0/E19169B2B60C1E8B695976AA3CFA8F061F06CA76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19169B2B60C1E8B695976AA3CFA8F061F06CA76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5fwne6CEuHWJXRt6EkZ1iydR73ggHj9y4oHtLdsudbp/0/323830343a3865383a3a2f33322d313238203d3e20323632333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:d3:f8:b9:f7:61:bf:cf:0d:43:f6:c7:f8:20:52:18:19:7e:
         3e:b9:d1:8e:2b:da:59:f3:0e:1d:bb:d3:3b:22:36:0a:2f:1b:
         e9:50:93:35:71:0a:19:da:d4:0d:5f:86:fa:18:fa:51:11:dd:
         52:2b:7e:20:b0:e8:53:3a:1b:3f:e0:46:4c:fd:0c:d7:bc:88:
         c1:02:a8:f7:fa:94:82:42:1a:e7:08:d0:4a:be:1e:bf:6b:50:
         84:02:46:6b:87:94:a4:9e:90:d6:b6:55:56:a9:71:06:f7:35:
         8a:ea:ac:ae:a3:e3:00:60:b1:fc:07:73:c3:39:61:3f:a9:33:
         81:e3:cf:57:e7:f5:a1:d2:6d:9a:9b:25:13:68:e6:98:d5:dc:
         cf:69:f0:d9:82:a3:03:59:b7:75:d6:c8:05:12:4d:52:34:a8:
         27:e8:b7:c0:d7:dc:28:9d:2b:5e:6c:f7:49:d7:30:d9:b6:e6:
         51:5a:83:f8:7c:18:29:40:82:d9:7e:0f:13:19:41:9f:9b:d4:
         e5:7e:72:d3:d5:56:b0:c1:d1:23:20:a0:99:02:b7:0c:86:d5:
         43:73:2f:00:9a:6b:ac:89:b9:19:ad:f4:cb:23:d4:b5:bb:e6:
         af:e7:58:47:d8:87:60:0a:0b:36:46:83:32:ce:92:67:03:f6:
         b4:51:1d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:02:08 2025 by rpki-client