Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/323830343a356636633a3a2f33322d3335203d3e20323639303938.roa
File:                     323830343a356636633a3a2f33322d3335203d3e20323639303938.roa (raw, json)
Hash identifier:          W0moOcX7EQ8ovMAUNIbLs06bFtFyXiRUgu3Kd5N0I6c=
Subject key identifier:   BB:1C:06:5F:2D:B1:A1:4B:D3:A2:F1:B2:35:4D:74:69:16:17:29:ED
Certificate issuer:       /CN=73777C12CA4BD8733B75D3010D997C91E776937F
Certificate serial:       2E0914C3BE4F60E341BCFF4BE69AFD4E559A412D
Authority key identifier: 73:77:7C:12:CA:4B:D8:73:3B:75:D3:01:0D:99:7C:91:E7:76:93:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/323830343a356636633a3a2f33322d3335203d3e20323639303938.roa
Signing time:             Thu 09 Oct 2025 16:57:41 +0000
ROA not before:           Thu 09 Oct 2025 16:52:41 +0000
ROA not after:            Thu 08 Oct 2026 16:57:41 +0000
asID:                     269098
IP address blocks:        2804:5f6c::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.crl
                          rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:09:14:c3:be:4f:60:e3:41:bc:ff:4b:e6:9a:fd:4e:55:9a:41:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73777C12CA4BD8733B75D3010D997C91E776937F
        Validity
            Not Before: Oct  9 16:52:41 2025 GMT
            Not After : Oct  8 16:57:41 2026 GMT
        Subject: CN=BB1C065F2DB1A14BD3A2F1B2354D7469161729ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:58:54:62:ef:11:3b:98:69:d9:06:74:b5:d6:
                    e8:ba:fe:a8:56:c8:b4:df:2c:2c:06:84:62:0e:e1:
                    46:b6:37:e5:b7:84:83:43:80:12:90:a3:95:4d:60:
                    6d:89:e0:c5:e2:77:6b:94:f6:2d:e2:fe:ba:71:03:
                    02:5b:17:2d:58:da:42:06:5c:80:e6:c3:46:31:37:
                    26:ee:55:0c:51:cd:ac:04:09:64:6c:a7:68:3e:98:
                    b8:c4:b9:25:d0:62:ed:7c:a9:e3:bd:51:2f:51:ed:
                    40:2a:97:b3:64:73:64:f8:5f:ed:0f:f5:15:65:f1:
                    b8:22:03:8d:a2:4c:50:a1:47:e2:35:c5:0e:e7:ad:
                    87:4c:89:be:41:32:20:b4:fd:c9:a0:23:4b:2d:5a:
                    1c:0d:f5:0b:d4:3c:be:79:ef:de:ca:26:7e:d4:0c:
                    06:20:63:c9:17:25:05:ff:7d:f6:63:50:1f:51:c3:
                    65:cd:f1:3b:6b:95:dc:e4:7b:45:e8:cb:06:6b:73:
                    5e:05:a4:19:cb:27:02:e4:38:57:90:92:b3:a9:55:
                    83:8c:1c:81:a7:de:26:50:92:89:8c:8a:bc:8b:71:
                    c6:8a:96:49:48:da:4d:8a:47:c4:cc:02:89:46:17:
                    7f:8f:13:23:d4:3e:78:96:ba:b5:f9:30:e3:a9:cc:
                    fd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1C:06:5F:2D:B1:A1:4B:D3:A2:F1:B2:35:4D:74:69:16:17:29:ED
            X509v3 Authority Key Identifier:
                keyid:73:77:7C:12:CA:4B:D8:73:3B:75:D3:01:0D:99:7C:91:E7:76:93:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/73777C12CA4BD8733B75D3010D997C91E776937F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73777C12CA4BD8733B75D3010D997C91E776937F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Bfa2ttw6zXZg8a9siDH6AXP91KtSznt2R93yGGx1PbK/0/323830343a356636633a3a2f33322d3335203d3e20323639303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:a9:51:11:d9:60:e9:61:33:e2:cd:89:92:a3:7e:59:23:e7:
         43:ac:0b:73:38:30:a3:d0:e5:6c:21:94:5b:7b:37:4c:e0:ae:
         4f:c9:b7:cf:9d:d3:64:dc:67:e7:64:24:65:bb:6d:bb:85:81:
         5c:0b:b4:af:57:b9:d1:57:a9:c0:5b:31:49:98:83:5f:f1:bd:
         48:fc:6e:15:de:48:cf:af:6d:c0:d6:32:4e:cc:15:2f:a4:79:
         f8:b5:66:7e:f3:cf:61:49:e5:76:9b:94:9d:5f:f1:65:a4:44:
         35:b6:2f:b1:96:79:fa:1b:e2:3a:4b:70:f8:35:03:5e:da:40:
         01:63:70:f3:4d:50:ff:a2:3e:d7:88:a4:6e:25:7f:26:c7:9c:
         2c:19:7a:77:56:bb:03:94:e1:c6:70:83:d9:af:33:53:1c:07:
         2d:92:ab:42:81:45:fc:b2:1e:1e:99:35:04:d4:ea:14:dc:0e:
         c0:76:df:cd:6f:f7:df:00:89:e7:26:05:f9:ff:63:d7:b9:72:
         ad:ae:48:b9:13:cb:58:6a:a5:80:b9:6f:ad:3e:93:cf:86:cc:
         e5:b5:f1:84:fa:49:f9:68:23:14:de:e1:2b:9f:9b:6c:a1:e8:
         61:fb:02:13:83:21:3d:d2:ee:ca:99:1b:98:ab:64:28:12:81:
         c6:10:f5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:10:33 2025 by rpki-client