Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/323830343a383337633a3a2f33332d3333203d3e20323732323031.roa
File:                     323830343a383337633a3a2f33332d3333203d3e20323732323031.roa (raw, json)
Hash identifier:          ++2LIdnH40IAkrTxkDaokLEKVnE5dtYjBRStGMrWkZo=
Subject key identifier:   E3:C4:2D:3C:89:2D:6D:40:50:1B:C0:29:92:AC:8C:AE:CC:EA:A7:C7
Certificate issuer:       /CN=4BFCE5FC9A3645DB029C80D748212328591F7EC7
Certificate serial:       633CA428ED25D027054F7ABF43C45A50E3BBE0E3
Authority key identifier: 4B:FC:E5:FC:9A:36:45:DB:02:9C:80:D7:48:21:23:28:59:1F:7E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCE5FC9A3645DB029C80D748212328591F7EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/323830343a383337633a3a2f33332d3333203d3e20323732323031.roa
Signing time:             Mon 06 Oct 2025 13:54:51 +0000
ROA not before:           Mon 06 Oct 2025 13:49:51 +0000
ROA not after:            Mon 05 Oct 2026 13:54:51 +0000
asID:                     272201
IP address blocks:        2804:837c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.crl
                          rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCE5FC9A3645DB029C80D748212328591F7EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3c:a4:28:ed:25:d0:27:05:4f:7a:bf:43:c4:5a:50:e3:bb:e0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BFCE5FC9A3645DB029C80D748212328591F7EC7
        Validity
            Not Before: Oct  6 13:49:51 2025 GMT
            Not After : Oct  5 13:54:51 2026 GMT
        Subject: CN=E3C42D3C892D6D40501BC02992AC8CAECCEAA7C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fa:63:33:40:ad:22:cd:ad:fe:9f:32:9b:94:
                    40:67:58:bd:24:ce:26:41:37:8b:84:17:89:5a:c8:
                    24:7f:5b:28:75:58:72:78:ad:a3:69:28:ca:d5:dc:
                    65:1c:aa:e6:7e:07:27:de:54:8d:ce:8d:f0:7f:46:
                    36:b8:90:3d:f0:5a:b7:b8:f8:ac:de:39:e0:6e:8b:
                    d9:c2:95:11:6f:2c:55:08:bb:cf:bd:e9:29:60:10:
                    3b:3e:14:83:77:f2:b0:5f:05:ce:7d:48:d5:73:da:
                    f5:f4:f5:b1:3a:e6:46:2b:7f:20:fa:31:50:27:a5:
                    1a:ad:84:57:d4:94:38:9b:ac:b5:71:dc:5e:ee:b7:
                    de:59:30:6f:02:5b:fc:ab:a0:4f:16:bc:b5:ea:aa:
                    99:59:5a:de:af:29:13:f5:4f:ea:83:10:a5:80:0c:
                    1d:29:d2:e5:0f:73:37:42:a7:a3:52:7f:87:ee:a4:
                    5d:f2:10:5c:89:e4:58:90:bf:3d:91:c3:22:06:73:
                    8a:2d:9e:07:ca:b6:b9:e5:e5:0f:d5:3d:c6:95:86:
                    6f:bc:2c:f8:68:e7:37:8d:1c:35:d9:17:5f:ef:9b:
                    4e:0b:d3:2e:b3:cd:f5:7e:40:d2:94:97:68:3e:ac:
                    d3:9c:06:6f:8f:82:09:d6:03:5b:70:18:2a:86:30:
                    6c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C4:2D:3C:89:2D:6D:40:50:1B:C0:29:92:AC:8C:AE:CC:EA:A7:C7
            X509v3 Authority Key Identifier:
                keyid:4B:FC:E5:FC:9A:36:45:DB:02:9C:80:D7:48:21:23:28:59:1F:7E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/4BFCE5FC9A3645DB029C80D748212328591F7EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCE5FC9A3645DB029C80D748212328591F7EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3esXRHkgyGpfhwcwhqaMVuBKh8RN9LTHqhi1VFBu5Q6Q/0/323830343a383337633a3a2f33332d3333203d3e20323732323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:837c::/33

    Signature Algorithm: sha256WithRSAEncryption
         37:05:1e:1f:d1:a3:7b:ef:f4:74:17:e5:18:f5:9e:40:bf:a9:
         91:dd:c8:4a:b9:aa:bd:dc:fc:c0:02:95:34:c7:9d:d6:99:ce:
         3a:6c:ee:4e:29:ab:1d:4c:65:11:39:76:1b:67:ed:84:35:48:
         ac:9c:43:3a:48:46:04:65:8c:90:ea:1c:db:54:72:c8:63:b0:
         47:ce:a0:26:9a:dc:97:72:8d:47:82:88:7a:5a:57:65:38:ac:
         c9:56:c6:4e:9d:90:2e:41:3b:d8:ef:c5:3d:67:69:d7:17:77:
         d7:86:c0:e8:9a:4a:15:b9:d3:3c:a0:79:b1:08:0d:4b:99:bc:
         d5:03:8f:30:30:ae:ec:8a:7d:fb:e1:59:02:aa:a7:a6:97:4e:
         11:ea:6c:20:07:48:b0:ab:e8:44:16:4e:bb:b5:30:2b:af:d1:
         05:b2:81:8e:f5:d0:9f:b3:6c:ec:87:bc:9e:f1:cb:dc:26:74:
         35:28:78:51:68:dc:03:54:4b:8c:22:78:af:23:0f:f9:dd:88:
         49:7b:40:79:fb:67:8a:8b:e0:5e:4d:60:8a:e1:b1:0d:c7:c7:
         72:76:94:97:98:7a:77:45:30:58:a3:6e:5f:5e:39:b9:df:8b:
         34:b8:b8:55:4b:42:57:9f:ad:8e:44:c7:51:27:41:65:14:8e:
         97:dd:81:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:14:59 2025 by rpki-client