Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/323830343a343262633a3a2f33322d313238203d3e20323637353232.roa
File:                     323830343a343262633a3a2f33322d313238203d3e20323637353232.roa (raw, json)
Hash identifier:          8xzwPAo+FNvPmaSyZDxWwZvwCqYxVqGG1JlaWeQ5kt8=
Subject key identifier:   D3:FE:65:49:C4:D2:85:92:F0:04:CE:13:41:08:16:64:6D:C6:73:6B
Certificate issuer:       /CN=780D2A522A22ECFA9760DD7673746F9DF1038BC4
Certificate serial:       1EB04BD4D49E3275FAEF0DB032D5C1DA59318E35
Authority key identifier: 78:0D:2A:52:2A:22:EC:FA:97:60:DD:76:73:74:6F:9D:F1:03:8B:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780D2A522A22ECFA9760DD7673746F9DF1038BC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/323830343a343262633a3a2f33322d313238203d3e20323637353232.roa
Signing time:             Fri 17 Oct 2025 17:55:59 +0000
ROA not before:           Fri 17 Oct 2025 17:50:59 +0000
ROA not after:            Fri 16 Oct 2026 17:55:59 +0000
asID:                     267522
IP address blocks:        2804:42bc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/780D2A522A22ECFA9760DD7673746F9DF1038BC4.crl
                          rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/780D2A522A22ECFA9760DD7673746F9DF1038BC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780D2A522A22ECFA9760DD7673746F9DF1038BC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b0:4b:d4:d4:9e:32:75:fa:ef:0d:b0:32:d5:c1:da:59:31:8e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780D2A522A22ECFA9760DD7673746F9DF1038BC4
        Validity
            Not Before: Oct 17 17:50:59 2025 GMT
            Not After : Oct 16 17:55:59 2026 GMT
        Subject: CN=D3FE6549C4D28592F004CE13410816646DC6736B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:79:49:34:6a:d6:5b:79:e3:ca:f0:8b:b1:f2:
                    d2:35:0d:6c:d3:04:2c:30:87:ce:df:ac:07:87:bd:
                    01:98:5e:f3:ff:a6:48:8f:9e:6e:f6:01:a1:cb:c2:
                    75:a3:0e:93:4a:ed:9f:27:54:da:b7:6f:ff:99:3b:
                    b3:22:fa:ac:0a:da:60:76:cd:b0:d6:d2:a0:cc:17:
                    5e:c6:d3:e2:95:5d:a7:0e:55:bf:8a:6d:07:97:81:
                    42:2b:58:85:c6:a7:eb:78:dc:4d:13:2c:aa:8b:f6:
                    a0:71:3f:c2:ba:13:ee:a5:c2:18:56:50:49:a1:44:
                    a1:37:1f:03:ac:08:11:7d:89:58:d5:a6:26:58:7e:
                    8d:fc:67:d1:bf:fd:a3:7f:6c:92:1e:01:15:6e:5c:
                    84:7d:93:bf:97:8a:3d:ed:7c:93:39:97:e5:4d:e7:
                    50:1e:cc:90:9c:1c:78:28:2b:3c:68:b2:04:26:10:
                    05:05:31:04:fc:7c:d3:6f:38:4e:76:2c:13:33:40:
                    98:18:0b:42:65:f6:c1:de:26:48:d6:50:75:a6:e3:
                    2b:50:41:e1:da:7c:20:51:45:82:47:bc:9c:4f:3a:
                    eb:5f:4e:58:32:c8:d3:0c:1c:ac:e4:eb:4b:67:47:
                    53:29:9f:88:8b:e1:5d:55:da:6a:45:98:1c:da:38:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FE:65:49:C4:D2:85:92:F0:04:CE:13:41:08:16:64:6D:C6:73:6B
            X509v3 Authority Key Identifier:
                keyid:78:0D:2A:52:2A:22:EC:FA:97:60:DD:76:73:74:6F:9D:F1:03:8B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/780D2A522A22ECFA9760DD7673746F9DF1038BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780D2A522A22ECFA9760DD7673746F9DF1038BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rjrWh1xSxCyJpEzvzakm6wyk913FSYifgj3jzxzdRWQ/0/323830343a343262633a3a2f33322d313238203d3e20323637353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:42bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:88:ea:16:01:04:c0:5e:77:03:00:a9:02:4f:b0:c3:04:67:
         19:a8:81:ea:9d:7a:46:a7:1d:cb:0f:13:28:b5:54:0c:42:6f:
         bd:4f:33:e5:e8:92:27:77:66:12:d9:d1:4e:8e:3d:b9:a4:50:
         b6:c8:81:25:fa:62:56:23:30:e9:db:13:01:53:71:30:97:04:
         f9:cc:5f:71:1f:00:c6:79:be:0b:a5:71:8e:11:a4:18:0d:a9:
         80:fb:37:a9:43:2e:94:e6:55:40:1a:30:0e:cd:5e:46:b4:63:
         f8:29:be:65:af:e8:3c:ff:94:5a:24:0a:07:a5:fa:75:a1:21:
         c6:23:87:b7:61:ed:96:95:b9:4c:3d:70:d5:a8:61:d8:69:9e:
         d8:c0:e4:c6:f4:b3:6d:88:69:99:3c:cd:90:bf:fa:4f:92:7a:
         1a:f8:c8:0a:d9:a2:fc:8d:b4:12:cf:e7:19:90:1c:10:89:13:
         26:78:94:ff:39:1b:f3:f9:8e:8b:04:71:af:f9:a5:63:c8:e2:
         cc:18:69:62:a8:1f:43:79:d9:c9:5b:fa:9a:64:20:c6:d1:ac:
         21:8b:eb:c4:f3:54:dc:25:04:6f:70:f1:27:26:4f:ec:45:8e:
         1b:2a:47:f5:0a:33:a6:ef:f7:0f:14:f0:e9:f4:e0:f4:20:01:
         34:8c:3b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:06 2025 by rpki-client