Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3630303a3a2f34302d3430203d3e20323638353933.roa
File:                     323830343a353339343a3630303a3a2f34302d3430203d3e20323638353933.roa (raw, json)
Hash identifier:          aZr2WMUYWMe4QH+F1n2n5nUYnD/iAYd2j86/CzWOPhI=
Subject key identifier:   A1:66:3B:EF:B4:68:D2:17:73:29:BF:36:5A:DC:33:7C:DE:A1:86:EE
Certificate issuer:       /CN=D96D671118BFCD5B1FA9225976AA2DE3A8A52F78
Certificate serial:       2A8F3654CBD2C212CA4C8B34EB53A1F9970B5420
Authority key identifier: D9:6D:67:11:18:BF:CD:5B:1F:A9:22:59:76:AA:2D:E3:A8:A5:2F:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3630303a3a2f34302d3430203d3e20323638353933.roa
Signing time:             Tue 07 Oct 2025 00:53:25 +0000
ROA not before:           Tue 07 Oct 2025 00:48:25 +0000
ROA not after:            Tue 06 Oct 2026 00:53:25 +0000
asID:                     268593
IP address blocks:        2804:5394:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.crl
                          rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8f:36:54:cb:d2:c2:12:ca:4c:8b:34:eb:53:a1:f9:97:0b:54:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D96D671118BFCD5B1FA9225976AA2DE3A8A52F78
        Validity
            Not Before: Oct  7 00:48:25 2025 GMT
            Not After : Oct  6 00:53:25 2026 GMT
        Subject: CN=A1663BEFB468D2177329BF365ADC337CDEA186EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:7c:65:28:a1:9d:56:bd:b3:f9:88:4b:d5:
                    d1:05:29:74:68:28:bc:7d:b7:5e:ed:07:08:b7:e3:
                    12:4a:67:ee:ff:97:21:5d:d1:54:16:9c:3f:c4:a9:
                    f5:fa:bb:5e:c3:2f:fd:3f:c1:ac:21:3e:b3:89:2b:
                    c9:ec:78:b0:d3:db:00:fa:67:6c:a0:1b:c0:a1:4b:
                    a2:86:0f:44:e0:83:73:f7:9e:90:f7:43:03:51:a6:
                    e3:58:f1:00:0d:d0:26:a0:be:f3:7a:81:ff:80:01:
                    2a:1e:00:d9:82:90:62:e5:de:80:5f:5a:44:55:f2:
                    05:f7:79:9d:87:fc:49:f5:5c:86:7a:53:a7:7c:80:
                    bd:67:b6:bb:e7:92:60:81:43:55:36:2a:d9:9b:5c:
                    2c:18:9b:4e:24:9f:a7:0a:08:e1:a2:c9:5e:79:1e:
                    55:62:f7:26:79:ee:2c:43:09:f0:31:2b:ec:20:b9:
                    4c:d9:1a:bc:bb:4f:10:83:96:73:6c:20:84:a4:9a:
                    9a:9b:ed:9e:94:ee:5c:64:2d:28:e3:97:8e:c2:be:
                    4a:1e:7e:66:18:3b:89:9d:0d:10:00:89:85:52:96:
                    65:b8:ab:2c:19:6f:65:50:f2:ba:c4:52:72:b3:b3:
                    78:01:84:c4:a4:3d:bb:8d:98:11:25:71:63:eb:83:
                    74:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:66:3B:EF:B4:68:D2:17:73:29:BF:36:5A:DC:33:7C:DE:A1:86:EE
            X509v3 Authority Key Identifier:
                keyid:D9:6D:67:11:18:BF:CD:5B:1F:A9:22:59:76:AA:2D:E3:A8:A5:2F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D96D671118BFCD5B1FA9225976AA2DE3A8A52F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TPurjPDm8A7EY1ZLLrJinm1EPcj6KtpNGgo1SF5Mwyn/0/323830343a353339343a3630303a3a2f34302d3430203d3e20323638353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5394:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         a6:62:ef:3b:f7:f4:ae:00:f4:59:eb:00:97:4b:24:ed:68:f5:
         31:b9:ec:3c:3c:fa:5a:d5:c4:59:21:0b:93:f3:45:6c:ae:3d:
         0a:2b:64:65:ed:c0:7f:bd:25:75:be:12:88:08:4a:ad:45:19:
         5a:d5:12:12:22:88:04:13:ef:eb:03:a9:10:7f:9f:1c:f1:bf:
         6c:38:7f:df:23:77:97:5b:94:35:66:48:35:ef:4b:dd:4a:63:
         96:f3:05:c5:30:b0:5a:dc:54:ab:22:13:86:1c:67:99:12:31:
         04:34:59:91:10:78:f5:be:6b:d9:cc:b4:82:d1:21:de:50:4a:
         ea:05:e9:4e:4a:28:9f:88:21:89:42:19:3c:e0:7e:9c:e6:21:
         58:bb:e4:30:27:01:cf:0b:7e:56:2b:ed:22:a0:1c:1a:b0:0f:
         c0:34:bb:57:f4:60:0b:37:bc:59:40:6d:3e:0e:78:ed:f1:d6:
         b0:be:e0:5e:ad:0f:e9:33:d7:15:37:aa:6c:7b:4d:7f:94:1a:
         b2:27:96:44:4e:81:b3:98:5f:fa:48:34:ce:32:d7:22:bb:e9:
         1a:2b:26:fa:1f:09:d4:22:e5:df:4c:04:f8:ef:60:2b:f3:c3:
         9d:67:c5:7d:b3:b2:0a:ac:5e:3a:d4:6f:73:d9:fc:76:f3:9a:
         33:5b:b9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:02:40 2025 by rpki-client