Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383034303a3a2f34342d3434203d3e20323634353039.roa
File:                     323830343a323062343a383034303a3a2f34342d3434203d3e20323634353039.roa (raw, json)
Hash identifier:          mxyo02+BSgXj6L7u+HmsEpBQx+AcZGZR+vOTUduQdog=
Subject key identifier:   7C:73:89:C7:8B:DB:04:F9:F7:52:D3:85:15:26:50:22:DF:51:18:46
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       2B1F0C074CA6CF450E27C3CAE13BA36E223D30A9
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383034303a3a2f34342d3434203d3e20323634353039.roa
Signing time:             Wed 01 Oct 2025 02:00:00 +0000
ROA not before:           Wed 01 Oct 2025 01:55:00 +0000
ROA not after:            Wed 30 Sep 2026 02:00:00 +0000
asID:                     264509
IP address blocks:        2804:20b4:8040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1f:0c:07:4c:a6:cf:45:0e:27:c3:ca:e1:3b:a3:6e:22:3d:30:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Oct  1 01:55:00 2025 GMT
            Not After : Sep 30 02:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:a6:b0:d1:e3:d2:91:b2:fc:40:6c:d8:70:
                    91:03:9b:43:53:0c:08:0d:71:3e:e8:bf:53:65:14:
                    34:ca:ac:b8:b2:ad:1c:99:6d:9b:db:7f:db:07:52:
                    56:ae:7e:44:9f:f8:6a:0c:cd:cd:93:51:a8:b9:d4:
                    8a:e5:dd:1c:93:36:7f:9b:6f:78:0c:c0:26:b3:a6:
                    e4:d2:a6:ba:69:07:c2:2d:c5:e4:8a:38:40:c6:0d:
                    54:a5:7b:50:ab:d4:9e:04:1e:8d:5e:24:65:83:c5:
                    1f:5d:23:86:71:b1:1d:5f:89:7a:e3:3e:74:83:51:
                    a9:c9:b6:c1:45:25:43:22:77:0c:fb:6f:2b:a3:cc:
                    d4:89:4e:d6:c7:62:52:63:24:45:6d:39:f3:92:73:
                    21:91:a8:b9:43:9e:16:38:29:13:87:9c:8a:6d:b8:
                    20:a4:cc:53:0d:a5:18:07:53:72:eb:78:1d:fd:42:
                    40:18:e4:86:a7:7d:13:94:a9:b5:63:09:4d:e1:36:
                    c4:f5:88:40:5d:c8:22:4d:70:20:c3:fa:f2:1b:c3:
                    8b:bd:9b:1a:d6:5c:48:25:e1:85:f0:35:f7:0b:f1:
                    5f:d9:c3:a1:90:80:89:43:81:ec:5d:7e:e4:cd:af:
                    30:56:32:c7:af:e5:38:89:6c:3e:4c:28:52:f4:f8:
                    ba:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:73:89:C7:8B:DB:04:F9:F7:52:D3:85:15:26:50:22:DF:51:18:46
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a383034303a3a2f34342d3434203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4:8040::/44

    Signature Algorithm: sha256WithRSAEncryption
         83:34:cc:97:f9:be:5f:89:f9:7d:df:bd:11:b9:5e:6c:e5:20:
         c7:ff:7e:9a:5d:d4:d9:85:36:c6:9d:04:1f:bb:53:30:85:87:
         71:9a:e2:51:0e:c9:48:66:8b:31:09:1a:ea:42:a1:33:7d:3d:
         b8:ce:1e:c3:5f:e9:6c:7a:0d:87:10:ec:ee:84:c7:11:d1:22:
         1c:9e:04:68:70:a3:36:da:b4:71:5f:94:6b:c3:99:64:2f:4b:
         a2:4d:a9:68:9f:b6:7a:97:67:94:82:53:9a:c8:1d:3a:74:47:
         f9:6c:fb:bd:2e:c5:22:bc:59:86:09:34:9f:7e:06:ac:d5:4e:
         62:c0:37:c5:35:fd:18:e0:e5:ad:f8:28:99:d0:dd:96:fc:a1:
         96:42:d3:0e:d0:82:ef:43:14:23:fa:cc:e3:7e:16:0d:51:2d:
         ff:f9:28:3b:bc:17:ee:45:d4:52:54:98:2b:90:06:cb:23:0f:
         55:04:05:15:10:90:88:66:05:7a:f0:08:fb:34:a7:f5:f9:01:
         86:47:e3:77:82:2c:d9:32:36:f4:91:aa:2e:59:f3:c3:a7:27:
         e9:8b:41:60:73:e9:76:e5:78:cd:3e:ac:76:1d:6a:3f:88:97:
         b9:24:d5:95:73:44:ec:3e:eb:16:26:0a:46:d2:f4:38:97:d3:
         56:da:7e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:59:39 2025 by rpki-client