Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/323830343a323739343a3a2f33322d3332203d3e20323633393131.roa
File:                     323830343a323739343a3a2f33322d3332203d3e20323633393131.roa (raw, json)
Hash identifier:          bK0gtO0JmiAg0I608Iz5A+xFCE8tZKl4orwDjiL6AJU=
Subject key identifier:   24:05:D5:E1:21:77:F5:F0:FE:47:5F:B6:4E:45:A3:3E:A6:FA:6A:82
Certificate issuer:       /CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60
Certificate serial:       3563FD4702B831204BFA053D9D620F6A0871928B
Authority key identifier: BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/323830343a323739343a3a2f33322d3332203d3e20323633393131.roa
Signing time:             Wed 08 Oct 2025 15:54:57 +0000
ROA not before:           Wed 08 Oct 2025 15:49:57 +0000
ROA not after:            Wed 07 Oct 2026 15:54:57 +0000
asID:                     263911
IP address blocks:        2804:2794::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl
                          rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:63:fd:47:02:b8:31:20:4b:fa:05:3d:9d:62:0f:6a:08:71:92:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60
        Validity
            Not Before: Oct  8 15:49:57 2025 GMT
            Not After : Oct  7 15:54:57 2026 GMT
        Subject: CN=2405D5E12177F5F0FE475FB64E45A33EA6FA6A82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:a0:f2:21:7c:7e:da:c7:c5:d8:b5:df:55:
                    68:c2:bc:85:bf:0d:15:5a:71:e0:8a:e9:35:91:ef:
                    34:cd:77:3a:89:ae:b7:75:ac:51:e2:04:a6:f2:64:
                    55:83:e7:c8:47:0f:9e:8f:aa:a7:b8:34:06:a1:22:
                    1e:0d:7b:f2:0d:19:ab:e3:29:74:00:55:94:00:05:
                    56:0d:00:53:22:65:da:c9:86:c4:81:89:c6:f5:71:
                    4d:18:2b:c5:32:6e:de:74:38:4e:86:e6:0d:06:8c:
                    55:19:05:e2:22:99:94:f5:78:ff:96:ac:56:48:90:
                    ee:15:77:46:a5:a8:e5:df:69:fa:09:c5:94:f7:1b:
                    5a:18:5d:a1:d9:f5:48:20:15:82:0b:12:d6:50:2d:
                    40:90:76:84:a8:ea:14:75:ca:1c:10:d0:12:e2:57:
                    0f:4c:2f:b8:8c:df:f1:c8:8b:fc:62:c2:1f:34:47:
                    2a:00:fd:1c:ed:e0:b1:61:04:8b:5d:a0:72:72:f2:
                    67:5f:c8:d6:bc:d7:5e:19:fc:06:f3:1d:d3:6e:eb:
                    db:cd:ee:66:c6:36:d7:b2:c1:c6:e1:47:b3:33:e3:
                    ed:eb:d7:d5:09:74:02:14:cb:17:c8:30:3e:e1:58:
                    63:a1:01:23:5f:6d:b0:b6:10:c4:ef:7c:43:68:a6:
                    9f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:05:D5:E1:21:77:F5:F0:FE:47:5F:B6:4E:45:A3:3E:A6:FA:6A:82
            X509v3 Authority Key Identifier:
                keyid:BC:7F:E0:D9:01:25:5D:71:21:32:7E:FF:CA:01:F0:B4:D1:E0:AC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC7FE0D901255D7121327EFFCA01F0B4D1E0AC60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/323830343a323739343a3a2f33322d3332203d3e20323633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2794::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:ef:20:95:c1:20:89:19:83:56:7b:b4:70:c7:e8:14:7a:70:
         ee:95:82:c6:92:d3:08:87:36:3e:2d:4e:ac:05:37:e7:ad:31:
         a4:90:b5:6c:45:ca:a1:4a:24:22:42:fc:6e:c3:d0:59:86:5c:
         68:df:3c:fe:a6:2e:00:4a:79:cc:93:ce:cf:25:e4:9e:42:73:
         7a:0f:6f:cf:43:40:e6:f7:b2:3e:d3:a7:e7:b8:e9:ae:ee:b5:
         97:0c:80:eb:7e:99:da:e3:14:b4:dd:67:bb:11:7c:43:76:70:
         a2:cc:8a:41:b8:15:28:0a:f3:01:52:cc:36:77:bc:fb:76:6d:
         41:99:3e:9b:cc:bc:d3:78:dd:27:df:73:ac:b1:1f:c1:63:99:
         63:16:68:a1:f0:19:89:d5:33:a2:cd:d3:af:94:10:36:fd:01:
         52:46:c8:d3:fa:4b:d8:30:cc:b5:4f:ac:70:a6:c3:bf:7e:6f:
         8b:cd:6b:86:ca:ff:60:54:92:00:01:f3:2a:ea:0f:95:78:cf:
         86:65:64:bd:dc:3c:b6:2d:16:07:49:16:3a:71:d1:60:e6:3a:
         5d:d0:c0:61:e3:f6:27:14:1c:80:20:1b:87:85:d1:fe:0b:df:
         b7:b6:6b:9c:2c:a2:14:b4:5b:10:21:18:99:eb:f4:65:0b:4b:
         67:a3:79:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:28:18 2025 by rpki-client