Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/323830343a346361343a3a2f33322d313238203d3e20323637333832.roa
File:                     323830343a346361343a3a2f33322d313238203d3e20323637333832.roa (raw, json)
Hash identifier:          gt5uEoYMYqM6if3oNPcnpwptlLfdw88JJcTDqT76Luo=
Subject key identifier:   DF:15:8C:5E:F3:63:46:C7:7A:98:B3:93:F3:28:EE:45:FC:1C:5D:F7
Certificate issuer:       /CN=349BDC9A5D2D169C13F5929341F8E986CACF88D9
Certificate serial:       27E6A6BE81C0FD30B27ABE12B2F7C74E50C6DD1F
Authority key identifier: 34:9B:DC:9A:5D:2D:16:9C:13:F5:92:93:41:F8:E9:86:CA:CF:88:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/323830343a346361343a3a2f33322d313238203d3e20323637333832.roa
Signing time:             Wed 24 Sep 2025 16:06:48 +0000
ROA not before:           Wed 24 Sep 2025 16:01:48 +0000
ROA not after:            Wed 23 Sep 2026 16:06:48 +0000
asID:                     267382
IP address blocks:        2804:4ca4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.crl
                          rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e6:a6:be:81:c0:fd:30:b2:7a:be:12:b2:f7:c7:4e:50:c6:dd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349BDC9A5D2D169C13F5929341F8E986CACF88D9
        Validity
            Not Before: Sep 24 16:01:48 2025 GMT
            Not After : Sep 23 16:06:48 2026 GMT
        Subject: CN=DF158C5EF36346C77A98B393F328EE45FC1C5DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:7f:91:53:79:75:a7:a5:e8:77:68:87:4b:
                    19:16:7d:b9:1d:7f:e0:40:88:55:fb:fa:96:19:8e:
                    b3:c2:f9:21:d0:ec:81:93:8a:07:bd:fd:6b:c4:97:
                    f7:06:03:59:79:c3:a4:68:5f:1c:b1:46:77:61:18:
                    2f:cb:83:15:fc:b1:fa:27:1b:48:3a:95:b9:a7:9a:
                    85:db:e7:46:8f:c0:ca:77:bc:e5:fa:8d:6d:46:4e:
                    ee:31:a3:27:6e:c2:7f:76:97:64:4c:80:61:31:b4:
                    81:17:0f:0d:c5:b0:eb:d4:f9:88:2f:0d:01:43:fd:
                    81:41:ae:72:9f:16:8d:36:14:54:ad:a0:7a:36:22:
                    30:ea:80:7c:c8:01:d1:80:39:87:cf:f1:cf:21:b9:
                    2e:27:26:61:ff:17:1f:2d:8b:b6:e8:d4:d5:77:0e:
                    a6:d4:f4:e9:31:df:06:e7:e0:a7:be:3b:40:c3:6c:
                    d3:03:00:2c:f8:cc:d8:50:41:d1:d1:86:51:1f:b3:
                    f2:61:31:12:1f:7c:c8:f6:c6:2c:29:e0:22:09:59:
                    57:89:1a:34:5f:26:3e:72:f0:5c:52:99:45:5f:bb:
                    ab:6d:28:d2:7e:99:6e:65:5c:f6:ac:b0:63:2f:17:
                    1d:53:3a:21:69:7c:07:8c:33:4c:db:25:6b:1a:6e:
                    c0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:15:8C:5E:F3:63:46:C7:7A:98:B3:93:F3:28:EE:45:FC:1C:5D:F7
            X509v3 Authority Key Identifier:
                keyid:34:9B:DC:9A:5D:2D:16:9C:13:F5:92:93:41:F8:E9:86:CA:CF:88:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/323830343a346361343a3a2f33322d313238203d3e20323637333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ca4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:bf:6d:e6:32:22:60:e3:90:9d:60:a2:86:56:a5:3e:c7:64:
         ad:32:90:ab:e2:3a:7c:dc:f1:cb:2a:b9:ba:c4:41:4c:1a:54:
         90:30:5e:96:c3:f6:99:9e:f0:65:00:e2:af:49:93:ec:6e:7e:
         4d:4a:fc:88:a8:2b:40:78:17:bc:e0:28:ba:0e:29:ab:a2:c4:
         0a:d9:74:d4:ae:ca:53:b1:5d:da:12:11:16:24:f1:a0:cc:f0:
         df:e1:55:0b:03:2d:bc:1b:a5:90:cf:38:77:a3:e5:3e:63:a1:
         28:04:23:4e:1c:3d:cb:22:92:f2:21:81:f3:76:97:e9:dc:8a:
         03:09:9b:30:2f:c3:be:7b:9e:2d:2d:ee:b8:19:c6:21:43:02:
         73:40:dc:f4:fd:b4:b0:22:3c:f5:91:c8:f4:92:ed:19:1b:4f:
         7c:79:c5:8e:d5:57:d1:01:99:a1:02:b1:8b:4b:9c:4a:6c:82:
         d8:4f:02:92:fe:bd:72:61:99:53:c4:92:67:b7:ad:96:6f:1d:
         89:a1:10:f3:a9:83:b6:f3:f9:8b:83:8a:99:21:8b:54:6a:35:
         43:42:2e:ff:f9:f4:cc:71:f2:27:73:82:d8:23:69:ef:c1:20:
         42:7d:19:2c:30:f4:1a:7f:4e:ac:15:dd:77:59:77:3e:a2:e7:
         ba:e5:75:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:05:06 2025 by rpki-client