Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/323830343a383337633a3a2f33322d3332203d3e20323732323031.roa
File:                     323830343a383337633a3a2f33322d3332203d3e20323732323031.roa (raw, json)
Hash identifier:          Q3YEtRo3xkXexNJe8+W+KK+do/HA/hyNxTXledKmbKg=
Subject key identifier:   43:E1:3F:CD:54:C5:99:3D:7B:F3:2B:63:62:5B:61:EA:C3:2F:37:CF
Certificate issuer:       /CN=4BFCE5FC9A3645DB029C80D748212328591F7EC7
Certificate serial:       2D98EE2663FDF7C2BA5053E4B509EE999AF22770
Authority key identifier: 4B:FC:E5:FC:9A:36:45:DB:02:9C:80:D7:48:21:23:28:59:1F:7E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCE5FC9A3645DB029C80D748212328591F7EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/323830343a383337633a3a2f33322d3332203d3e20323732323031.roa
Signing time:             Mon 06 Oct 2025 13:54:48 +0000
ROA not before:           Mon 06 Oct 2025 13:49:48 +0000
ROA not after:            Mon 05 Oct 2026 13:54:48 +0000
asID:                     272201
IP address blocks:        2804:837c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.crl
                          rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCE5FC9A3645DB029C80D748212328591F7EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:98:ee:26:63:fd:f7:c2:ba:50:53:e4:b5:09:ee:99:9a:f2:27:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BFCE5FC9A3645DB029C80D748212328591F7EC7
        Validity
            Not Before: Oct  6 13:49:48 2025 GMT
            Not After : Oct  5 13:54:48 2026 GMT
        Subject: CN=43E13FCD54C5993D7BF32B63625B61EAC32F37CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:70:ec:a1:28:53:d9:8b:af:2c:9a:2d:fa:
                    03:79:99:15:c4:96:51:e5:ba:ab:20:ba:5e:40:88:
                    40:09:bf:b6:53:5d:2e:8f:da:c7:a8:70:0b:8a:84:
                    04:21:03:8b:21:78:ad:bb:79:cd:59:75:14:21:8c:
                    64:26:9d:2c:45:b0:96:43:21:15:d8:0d:d3:69:91:
                    7d:19:3a:c5:33:32:94:1e:33:86:20:43:7b:a3:b0:
                    b7:a7:f6:7d:46:83:71:6b:a8:f2:e9:20:2f:b4:3f:
                    d5:44:f2:45:8d:a3:f3:06:5f:a1:b3:b1:70:65:2b:
                    3f:63:6b:76:81:ee:76:e6:ec:9d:9a:1b:68:6e:76:
                    57:74:28:81:c0:22:a7:6e:a7:6b:9a:9d:88:b6:21:
                    c1:c2:b9:75:c6:95:ec:bf:7f:c9:f0:91:5b:c8:e7:
                    98:2a:c1:15:83:1e:9c:ba:aa:61:9c:15:ac:df:c2:
                    1d:e8:b9:43:f2:95:06:7f:a2:0b:9f:e4:45:a2:43:
                    7f:f0:c2:68:8a:c3:71:d5:ac:0a:dd:51:1c:42:54:
                    ae:61:c3:7b:54:c7:c0:cf:0a:e1:90:28:b7:9e:6d:
                    e9:62:67:d3:f2:39:43:5c:d7:ae:8a:12:31:3b:cd:
                    ca:88:7d:b6:b2:1c:6a:5b:b2:c7:07:e4:3f:8b:cf:
                    d3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E1:3F:CD:54:C5:99:3D:7B:F3:2B:63:62:5B:61:EA:C3:2F:37:CF
            X509v3 Authority Key Identifier:
                keyid:4B:FC:E5:FC:9A:36:45:DB:02:9C:80:D7:48:21:23:28:59:1F:7E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCE5FC9A3645DB029C80D748212328591F7EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/323830343a383337633a3a2f33322d3332203d3e20323732323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:837c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:b4:3e:44:99:ba:69:c3:7e:ac:6e:f7:87:5e:5d:ef:2b:a2:
         82:04:1b:fb:13:ee:33:d0:23:bf:f9:67:ca:21:bb:51:57:1c:
         9e:7f:eb:47:e3:58:53:82:c2:c6:b0:86:59:b3:0d:00:8f:26:
         c1:c7:83:88:ee:0f:fc:04:60:e4:47:fe:61:9a:4c:30:1a:8b:
         67:d7:c1:a7:f9:60:a8:61:08:c1:f3:f7:be:49:65:a8:5c:c1:
         1d:cc:3e:5a:b3:da:fb:cf:a1:20:27:d6:5f:ac:dd:70:a6:1c:
         f9:b2:a2:e7:c2:74:52:f2:63:54:4c:6f:49:13:0d:b7:72:d9:
         ef:b8:5c:d8:82:a4:ac:1a:44:de:e8:c9:3e:bd:a4:b2:02:97:
         bb:1d:0f:9d:34:75:c6:97:7e:80:33:b4:b7:ff:30:ba:bb:70:
         e7:7e:eb:3a:ca:cf:3d:6a:bf:1e:05:b7:08:63:d4:bc:04:a0:
         e3:90:9e:66:15:2d:1d:df:aa:6d:1e:a1:6b:eb:95:c3:0e:bc:
         4f:83:92:d4:c8:c1:a2:f2:0f:a2:a7:a6:94:26:90:58:66:d4:
         e5:1a:cb:d0:98:69:a7:bd:cd:70:b3:82:aa:54:36:c3:05:cc:
         e3:29:9c:ad:64:cc:64:bf:b2:67:02:ed:56:4a:4a:2e:e8:e1:
         f2:64:10:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:15:02 2025 by rpki-client