Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/323830343a363830633a383030303a3a2f33332d3333203d3e20323639363637.roa
File:                     323830343a363830633a383030303a3a2f33332d3333203d3e20323639363637.roa (raw, json)
Hash identifier:          ayjMIjkTBUXq+eb0j87CZNi5kJx7JC8kYWUS3R6Fyqc=
Subject key identifier:   6B:5D:78:13:DE:00:99:13:22:64:F6:6D:2E:54:11:5E:37:20:16:05
Certificate issuer:       /CN=899188992E550CB7173DD65733F04F79CCF47641
Certificate serial:       27709A77A28C555050E47FEEF5B794BF7029691A
Authority key identifier: 89:91:88:99:2E:55:0C:B7:17:3D:D6:57:33:F0:4F:79:CC:F4:76:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/899188992E550CB7173DD65733F04F79CCF47641.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/323830343a363830633a383030303a3a2f33332d3333203d3e20323639363637.roa
Signing time:             Thu 16 Oct 2025 11:56:56 +0000
ROA not before:           Thu 16 Oct 2025 11:51:56 +0000
ROA not after:            Thu 15 Oct 2026 11:56:56 +0000
asID:                     269667
IP address blocks:        2804:680c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.crl
                          rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/899188992E550CB7173DD65733F04F79CCF47641.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:70:9a:77:a2:8c:55:50:50:e4:7f:ee:f5:b7:94:bf:70:29:69:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=899188992E550CB7173DD65733F04F79CCF47641
        Validity
            Not Before: Oct 16 11:51:56 2025 GMT
            Not After : Oct 15 11:56:56 2026 GMT
        Subject: CN=6B5D7813DE0099132264F66D2E54115E37201605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:93:dc:10:68:b6:22:1b:e5:4f:19:c8:7d:3f:
                    30:c4:34:d6:6e:9e:44:e9:5e:5e:48:71:f1:83:50:
                    d3:24:56:d6:84:2a:5f:d8:b8:de:44:60:c7:fd:9b:
                    80:32:89:a5:9f:a2:e3:fc:dc:79:15:29:3c:95:d5:
                    cb:c6:66:95:94:7c:ea:af:d0:32:f6:34:f0:4c:8a:
                    e8:a6:85:62:13:52:3a:77:bb:58:f4:59:0b:8a:5c:
                    52:15:08:c5:03:6d:08:f5:78:27:f3:5a:55:07:27:
                    b2:f3:23:c2:cf:33:4c:33:d9:d5:f5:0c:94:6f:05:
                    4e:ca:68:e8:84:d0:13:48:6b:24:7b:2f:49:6d:ea:
                    13:ab:47:0c:45:16:b2:70:b0:ee:17:39:b3:09:8f:
                    22:63:36:30:c5:c8:91:6e:fc:09:b8:53:81:b7:2e:
                    a0:f9:2d:d3:e3:14:9c:52:1d:01:11:d0:b2:73:ba:
                    9a:be:a4:7f:3c:fe:1c:82:81:cd:15:4d:26:f0:a8:
                    da:94:3c:86:6d:bb:71:6e:53:9a:7c:5e:7e:e5:a3:
                    b9:b0:24:e9:a2:6f:b4:10:72:c8:0b:51:49:14:1c:
                    ab:92:49:84:15:1a:b7:5c:47:f1:ed:25:42:af:94:
                    7c:eb:82:b8:f7:5b:23:fd:73:7f:95:69:62:26:b9:
                    38:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5D:78:13:DE:00:99:13:22:64:F6:6D:2E:54:11:5E:37:20:16:05
            X509v3 Authority Key Identifier:
                keyid:89:91:88:99:2E:55:0C:B7:17:3D:D6:57:33:F0:4F:79:CC:F4:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/899188992E550CB7173DD65733F04F79CCF47641.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/323830343a363830633a383030303a3a2f33332d3333203d3e20323639363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:680c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         24:9d:87:fd:64:eb:6e:96:16:78:20:c3:e9:59:7b:a2:7e:9f:
         52:98:66:c7:3e:09:42:a7:4e:ec:47:4e:fb:7a:8c:ce:0f:fb:
         c0:5d:ba:1e:b1:0e:20:7a:3f:a5:86:53:2d:bd:d9:dc:50:71:
         2a:cc:2e:9e:25:bf:53:13:1b:5b:01:4c:b2:05:8f:f0:b7:10:
         7c:6b:8c:19:0a:72:72:07:a3:d9:0c:4c:84:9e:16:c8:c7:10:
         16:69:66:b5:30:87:38:b7:09:93:e8:52:22:8b:ce:df:05:d8:
         27:a2:67:4f:c3:e1:f1:e0:7b:4a:81:02:eb:5e:f8:43:4d:36:
         b0:2b:b3:c2:76:36:93:f5:ed:4a:57:5c:fa:28:23:c7:f1:bc:
         50:cd:a2:3c:f7:f0:00:f6:c0:41:05:51:15:f9:b4:81:c5:20:
         72:44:0c:a9:3e:01:22:46:a7:c1:14:48:af:c4:93:45:aa:07:
         5f:13:cd:04:b8:24:f2:e5:ec:e1:33:de:87:f7:65:83:39:91:
         57:ea:ee:23:25:4c:a4:38:59:80:24:79:fc:ce:76:a6:a6:88:
         97:fd:8f:87:c1:85:6d:8c:9e:e0:d6:22:02:5c:56:43:ca:96:
         5c:4c:3b:13:3e:a9:dd:d6:cf:92:64:bb:80:12:4d:0c:e1:0f:
         28:65:e1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:28 2025 by rpki-client