Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a323130313a3a2f34382d3438203d3e203631353931.roa
File:                     323830343a323331633a323130313a3a2f34382d3438203d3e203631353931.roa (raw, json)
Hash identifier:          aMdFHGk5+pZ44bWpFmR0wXFIr5YJoH24GxN372OKXx0=
Subject key identifier:   02:2A:95:40:34:22:EE:D8:8B:3C:75:2B:16:AE:17:A3:A2:6A:DA:D5
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       2F7335E8BCF582F56491C1C1A9B5F95EFEF08BE7
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a323130313a3a2f34382d3438203d3e203631353931.roa
Signing time:             Wed 03 Sep 2025 19:00:00 +0000
ROA not before:           Wed 03 Sep 2025 18:55:00 +0000
ROA not after:            Wed 02 Sep 2026 19:00:00 +0000
asID:                     61591
IP address blocks:        2804:231c:2101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:73:35:e8:bc:f5:82:f5:64:91:c1:c1:a9:b5:f9:5e:fe:f0:8b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Sep  3 18:55:00 2025 GMT
            Not After : Sep  2 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100B095D52E1266FBF24C946B23F913EC1B488C488134C8CC31E76A1C41535748894180CA5BF5DEFF97344CEA505C27A9DEC29F3E67985A7745636490E987D73CDDE1B5052EF671042912B60DB526C2FE760E50891C9BACDF5BF48E4134F8572C1045A8749D8BF45391DAFBA54F3D9D6E79102277F414B08CC02084BF81A8FF7C85B747ABB24EE7AF25245849A43B6877941D657B86DA52EEF219CA6651D359CDB7A21F75376A7BA1BE12955341E7119B3F2B75F102C6C0A9C2BB9E01E8091762122573F13C07C4199D0F63AFBDB0E563B6B8EF1DA9B2DCFA5DD9BD8D362EE74B47FE4B29EAED5803B7E5A766F29B99832D5983391E61D6A7420B96199765903E450203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:d5:2e:12:66:fb:f2:4c:94:6b:23:f9:13:
                    ec:1b:48:8c:48:81:34:c8:cc:31:e7:6a:1c:41:53:
                    57:48:89:41:80:ca:5b:f5:de:ff:97:34:4c:ea:50:
                    5c:27:a9:de:c2:9f:3e:67:98:5a:77:45:63:64:90:
                    e9:87:d7:3c:dd:e1:b5:05:2e:f6:71:04:29:12:b6:
                    0d:b5:26:c2:fe:76:0e:50:89:1c:9b:ac:df:5b:f4:
                    8e:41:34:f8:57:2c:10:45:a8:74:9d:8b:f4:53:91:
                    da:fb:a5:4f:3d:9d:6e:79:10:22:77:f4:14:b0:8c:
                    c0:20:84:bf:81:a8:ff:7c:85:b7:47:ab:b2:4e:e7:
                    af:25:24:58:49:a4:3b:68:77:94:1d:65:7b:86:da:
                    52:ee:f2:19:ca:66:51:d3:59:cd:b7:a2:1f:75:37:
                    6a:7b:a1:be:12:95:53:41:e7:11:9b:3f:2b:75:f1:
                    02:c6:c0:a9:c2:bb:9e:01:e8:09:17:62:12:25:73:
                    f1:3c:07:c4:19:9d:0f:63:af:bd:b0:e5:63:b6:b8:
                    ef:1d:a9:b2:dc:fa:5d:d9:bd:8d:36:2e:e7:4b:47:
                    fe:4b:29:ea:ed:58:03:b7:e5:a7:66:f2:9b:99:83:
                    2d:59:83:39:1e:61:d6:a7:42:0b:96:19:97:65:90:
                    3e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2A:95:40:34:22:EE:D8:8B:3C:75:2B:16:AE:17:A3:A2:6A:DA:D5
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a323130313a3a2f34382d3438203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:2101::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:e5:2d:ef:55:3b:c9:d9:84:37:7a:90:a6:f3:ed:ae:6f:44:
         ff:fe:13:2b:53:a9:86:01:ec:a2:1c:6d:25:af:e7:82:8f:e3:
         72:8d:07:a0:15:3e:ec:e0:2b:4a:49:a7:8f:bb:f2:3f:fe:c7:
         5b:40:43:d7:81:76:62:ae:ec:20:80:9f:2b:55:ca:3c:2d:22:
         7e:e8:ce:57:6f:02:d3:a3:31:5d:8d:b1:a9:f7:6b:5f:47:57:
         5e:4f:c5:93:b2:6d:fd:34:84:77:bd:d0:af:27:47:c7:c9:d2:
         1b:6f:67:5f:2a:f1:03:09:ff:5f:94:07:91:f1:28:42:0e:80:
         24:25:97:52:09:7c:c9:05:c5:77:5d:cf:75:a0:7b:6d:3b:d0:
         e3:23:3f:b6:9d:3a:36:d6:86:e0:d4:00:ae:f5:2c:54:d6:ad:
         06:1e:3e:39:de:e7:9e:c7:8f:4d:7f:ef:03:f3:58:20:82:d6:
         34:cb:0e:0d:ab:9f:d2:fe:bb:75:16:fd:dc:04:9e:c6:14:e6:
         e5:d1:3f:71:c0:61:9a:b2:23:3f:54:5d:6d:ad:1d:88:26:32:
         19:41:1f:d1:b1:c5:b1:80:f8:d1:88:4d:c4:c9:8d:28:00:aa:
         26:a0:50:d1:92:4a:c8:c9:e7:1a:dc:d6:13:c7:54:66:a9:72:
         55:fd:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:05:55 2025 by rpki-client