Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a323030303a3a2f33352d3335203d3e20323635333131.roa
File:                     323830343a326465383a323030303a3a2f33352d3335203d3e20323635333131.roa (raw, json)
Hash identifier:          rhL1Q4mx00DzDhRlbd9IyNShjTbBlxCou3ZWkdS2VH4=
Subject key identifier:   55:08:8D:20:FF:A9:C7:D7:33:0E:90:B0:58:E9:AB:93:51:68:67:7D
Certificate issuer:       /CN=F24241E6982A012648294002B697451627DFF661
Certificate serial:       4E1FEC70045B60B0D7618A20C9504D46C515101D
Authority key identifier: F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a323030303a3a2f33352d3335203d3e20323635333131.roa
Signing time:             Mon 22 Sep 2025 23:49:03 +0000
ROA not before:           Mon 22 Sep 2025 23:44:03 +0000
ROA not after:            Mon 21 Sep 2026 23:49:03 +0000
asID:                     265311
IP address blocks:        2804:2de8:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl
                          rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1f:ec:70:04:5b:60:b0:d7:61:8a:20:c9:50:4d:46:c5:15:10:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24241E6982A012648294002B697451627DFF661
        Validity
            Not Before: Sep 22 23:44:03 2025 GMT
            Not After : Sep 21 23:49:03 2026 GMT
        Subject: CN=55088D20FFA9C7D7330E90B058E9AB935168677D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7a:e9:af:ab:62:6b:90:50:1c:0a:72:52:41:
                    9c:31:3b:d9:88:7e:31:c4:a9:73:31:39:4c:b1:c0:
                    40:d2:1d:1a:e5:74:8e:96:5c:25:ae:02:7a:f9:86:
                    55:ef:fc:19:78:cd:ee:38:b7:08:2d:74:70:82:54:
                    47:c7:f7:58:79:67:34:41:22:0b:6d:71:96:1e:1d:
                    46:a2:7a:54:7a:7a:6e:c7:fd:a1:6f:ac:c1:0b:47:
                    a0:20:9b:7f:b7:ef:fc:e5:5a:43:12:61:e0:5f:df:
                    65:eb:0a:8f:1b:de:2d:6f:f8:88:c8:34:fd:d7:f3:
                    1d:a6:fa:f4:03:55:74:51:08:7e:52:7d:da:3b:75:
                    bc:f1:ca:01:f9:12:6a:42:ff:b0:ad:71:75:23:f7:
                    69:5c:ea:f1:6a:90:ed:78:35:cf:cf:83:fd:09:9d:
                    d0:61:b6:60:4a:a5:9c:81:5b:38:58:b3:96:33:d8:
                    7b:e8:49:bf:77:e8:4a:79:ee:01:cc:7f:eb:f3:ad:
                    95:08:71:1a:98:87:79:56:ea:30:96:f5:70:23:2c:
                    d7:14:fe:06:5a:df:e1:29:a6:e4:3e:dd:42:a0:04:
                    a6:ce:a4:7b:3e:da:8d:41:59:87:97:7d:3d:0a:6c:
                    04:8c:69:e3:ba:dd:8c:68:fc:51:5b:8c:b2:28:b7:
                    ec:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:08:8D:20:FF:A9:C7:D7:33:0E:90:B0:58:E9:AB:93:51:68:67:7D
            X509v3 Authority Key Identifier:
                keyid:F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a323030303a3a2f33352d3335203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2de8:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         7c:03:04:64:73:ac:d8:63:9a:5a:17:5e:e6:59:1b:ac:2a:b5:
         f4:05:17:6a:90:41:2c:5a:35:b8:0e:ad:a2:9a:c1:3f:8e:6e:
         4b:4c:5d:fc:94:49:39:e2:c2:9a:ea:2c:c8:9c:d0:66:3b:92:
         4b:23:1f:b8:8e:55:37:45:0a:f2:c3:45:84:60:52:f0:3b:5f:
         fb:6e:44:21:e0:33:35:65:a9:0d:73:9d:91:85:61:62:ad:f9:
         de:a3:2e:41:56:a9:1c:b5:7f:92:6f:d8:2e:6e:1c:90:84:07:
         1b:ac:c1:61:21:57:78:fd:50:8d:87:7d:0c:d0:e0:42:89:97:
         f9:54:2a:5b:70:61:5e:3b:d5:69:11:4c:25:42:0c:86:4e:5b:
         28:fc:11:85:de:dc:6b:82:88:30:03:3e:62:17:6d:40:bd:bc:
         9b:61:f4:aa:de:65:7b:17:95:aa:54:66:24:5b:be:25:de:97:
         27:a8:6c:91:13:f5:00:ea:34:a7:15:3a:12:8b:76:28:fa:5f:
         12:a9:09:b6:66:f5:0a:ee:44:b9:b8:64:11:56:00:d1:41:7b:
         68:26:d1:f6:fa:a6:e0:e5:a1:2e:84:bd:fe:a9:30:a3:34:7c:
         e3:38:9a:b9:f5:da:74:c7:42:88:8b:ea:f4:20:e8:a2:bd:a5:
         e4:07:7e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:15:18 2025 by rpki-client