Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/323830343a323738303a3a2f33322d3334203d3e20323633393035.roa
File:                     323830343a323738303a3a2f33322d3334203d3e20323633393035.roa (raw, json)
Hash identifier:          56hiDQJz7DPztx5lZlqeTXai+RNb2R69Hh8Nu7xk9pI=
Subject key identifier:   8D:B4:CE:B7:A1:B3:7B:4D:7F:B0:73:52:32:05:3C:5D:68:46:55:4A
Certificate issuer:       /CN=2987D670913962CF69181F73C94FE8C279E038DA
Certificate serial:       34ACD975D948788D3C742041C4C75359CD43DFA1
Authority key identifier: 29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/323830343a323738303a3a2f33322d3334203d3e20323633393035.roa
Signing time:             Tue 14 Oct 2025 14:00:20 +0000
ROA not before:           Tue 14 Oct 2025 13:55:20 +0000
ROA not after:            Tue 13 Oct 2026 14:00:20 +0000
asID:                     263905
IP address blocks:        2804:2780::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl
                          rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ac:d9:75:d9:48:78:8d:3c:74:20:41:c4:c7:53:59:cd:43:df:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2987D670913962CF69181F73C94FE8C279E038DA
        Validity
            Not Before: Oct 14 13:55:20 2025 GMT
            Not After : Oct 13 14:00:20 2026 GMT
        Subject: CN=8DB4CEB7A1B37B4D7FB0735232053C5D6846554A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d0:ad:dc:f6:90:0b:d9:9a:90:d4:a7:0b:a6:
                    29:3f:c3:97:e4:5f:99:0b:c0:56:c8:d7:e8:a0:14:
                    89:be:be:f5:b5:74:af:01:d1:02:be:4d:56:81:ae:
                    8c:6e:a6:1e:2c:2c:2e:b8:b3:fa:d0:4f:c6:7d:d8:
                    b0:ac:38:fc:76:7a:b3:a3:cd:db:a6:45:dc:5f:58:
                    70:f6:5d:e1:bb:7c:a1:3c:d1:28:cd:19:c3:30:55:
                    84:a9:ff:5d:be:c4:6d:f0:55:2d:7f:80:f4:42:ea:
                    69:da:37:ad:cd:32:43:ae:52:e0:0e:ee:c8:53:e7:
                    71:bd:82:22:57:ba:05:13:cd:a4:82:80:23:d0:19:
                    df:a5:4e:dc:14:86:af:53:f5:09:cf:d9:bd:72:fa:
                    81:09:50:b5:a3:c7:23:e4:b0:4a:2d:d2:f0:3a:e6:
                    65:c2:14:e0:74:5c:69:12:e4:81:08:50:9c:8b:64:
                    7c:e2:f5:eb:fb:14:e8:b1:f6:39:8e:1d:59:58:f3:
                    22:5b:1a:1f:14:33:21:05:26:4c:e9:43:73:10:65:
                    59:74:35:33:63:4f:0d:b1:22:8b:87:14:5c:de:a1:
                    11:92:52:fe:d3:06:49:67:d4:0d:db:64:d0:f9:47:
                    6a:08:0b:5f:52:4a:c7:76:03:53:c5:a1:16:42:44:
                    74:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B4:CE:B7:A1:B3:7B:4D:7F:B0:73:52:32:05:3C:5D:68:46:55:4A
            X509v3 Authority Key Identifier:
                keyid:29:87:D6:70:91:39:62:CF:69:18:1F:73:C9:4F:E8:C2:79:E0:38:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/2987D670913962CF69181F73C94FE8C279E038DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2987D670913962CF69181F73C94FE8C279E038DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/323830343a323738303a3a2f33322d3334203d3e20323633393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2780::/32

    Signature Algorithm: sha256WithRSAEncryption
         d7:23:f4:63:63:58:53:91:f9:ea:65:22:3b:39:f6:6e:1f:5a:
         aa:88:50:9d:ff:3d:67:db:3a:9e:09:8b:d9:5f:e4:24:cc:27:
         8f:ba:cc:ed:ee:8c:7e:b2:59:bb:5b:0e:00:bb:cf:e1:84:dd:
         39:33:32:27:ef:e6:f3:3c:3f:17:86:55:34:1a:df:b6:c5:d3:
         7a:c6:31:ee:d1:23:b2:11:2b:ea:8f:5e:06:18:73:ce:0b:83:
         2f:1b:43:a8:cc:27:89:d0:57:c7:65:1f:81:05:a4:2a:aa:9c:
         97:e8:8f:db:0c:57:a7:7e:75:1e:d4:eb:47:5d:af:16:96:cf:
         69:a4:1c:ee:35:ac:19:a9:d3:9f:b6:83:ee:35:9e:66:e1:1c:
         c0:19:8d:ac:91:f4:37:f9:c6:b4:97:ce:5d:95:a9:f4:9a:1c:
         e0:45:80:ba:91:53:d1:7a:c9:e0:c7:90:76:98:10:32:e6:4e:
         9a:e2:92:57:a3:28:1a:bd:91:58:7d:24:c5:53:88:32:1c:b6:
         1d:f2:75:24:11:ce:bb:cd:a3:a2:b3:32:12:ae:02:f9:02:76:
         b5:44:b5:d3:27:30:f7:62:2f:48:40:e1:fa:6a:7e:e9:5e:95:
         5f:96:6f:c9:55:01:a1:2f:76:9c:1c:99:23:ed:14:fa:ca:7c:
         2c:84:62:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:40 2025 by rpki-client