Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3430303a3a2f33382d3338203d3e20323637323831.roa
File:                     323830343a346231303a3430303a3a2f33382d3338203d3e20323637323831.roa (raw, json)
Hash identifier:          bNJ3OcDZFv6BFTdxM2Pc/JWRl7XDk6SijMQlCmDjlvw=
Subject key identifier:   F6:CC:26:FD:B4:54:38:CE:6F:1A:EC:7B:EB:4B:7B:5F:54:66:D1:04
Certificate issuer:       /CN=0FF30EC686201018DE081110542623BAED2ADF49
Certificate serial:       50756B38C7A2FFE9EC23A90B41790B409AA5D590
Authority key identifier: 0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3430303a3a2f33382d3338203d3e20323637323831.roa
Signing time:             Tue 14 Oct 2025 18:48:13 +0000
ROA not before:           Tue 14 Oct 2025 18:43:13 +0000
ROA not after:            Tue 13 Oct 2026 18:48:13 +0000
asID:                     267281
IP address blocks:        2804:4b10:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl
                          rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:75:6b:38:c7:a2:ff:e9:ec:23:a9:0b:41:79:0b:40:9a:a5:d5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF30EC686201018DE081110542623BAED2ADF49
        Validity
            Not Before: Oct 14 18:43:13 2025 GMT
            Not After : Oct 13 18:48:13 2026 GMT
        Subject: CN=F6CC26FDB45438CE6F1AEC7BEB4B7B5F5466D104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d3:92:93:62:15:1d:33:d8:04:bf:6f:7b:1a:
                    d5:50:84:cd:28:71:54:90:ed:dc:43:a2:eb:99:7a:
                    02:17:6a:d5:80:44:dc:89:65:e8:04:b5:35:77:b4:
                    99:92:cd:14:0e:a2:8a:f1:33:4a:e2:52:30:c8:59:
                    4a:05:df:53:bb:fc:80:3f:58:55:98:6d:2f:1b:62:
                    16:21:e2:75:91:0a:c1:ba:c5:53:72:49:8c:65:35:
                    b9:d6:7a:6d:ed:d8:46:7e:b7:fc:9e:f8:d4:ed:99:
                    0b:16:a3:f9:c3:2e:95:e6:bf:6b:25:f7:b2:69:a3:
                    28:dc:79:91:70:9d:d5:57:6a:39:db:4c:62:35:5e:
                    76:f1:3b:8a:8d:b0:63:b7:b3:58:94:6c:1a:f7:f5:
                    10:15:9d:cc:7e:30:ee:fe:33:84:9c:e6:e4:08:42:
                    77:21:00:70:f5:18:a7:1c:16:99:79:bd:4a:99:d9:
                    5b:22:eb:fc:fe:96:aa:33:18:b1:c1:e5:38:4b:cd:
                    c6:a9:43:b1:80:3c:5b:bc:c0:47:09:80:4f:2e:77:
                    c1:a7:d8:8e:c0:7d:32:21:79:8b:24:3d:7b:9c:82:
                    0f:6d:2c:fa:ed:cf:9f:aa:72:6e:d3:0e:66:6e:fb:
                    e7:fc:06:2c:d9:98:a7:45:4f:86:b6:31:e5:10:31:
                    33:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CC:26:FD:B4:54:38:CE:6F:1A:EC:7B:EB:4B:7B:5F:54:66:D1:04
            X509v3 Authority Key Identifier:
                keyid:0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3430303a3a2f33382d3338203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b10:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         48:46:a1:59:53:c8:64:7b:13:48:d2:e1:12:88:5c:ff:ef:d1:
         9d:05:a1:0c:f7:30:fe:97:e0:de:7c:df:81:ec:89:5b:f6:fc:
         7d:d2:e9:f6:b5:dd:d4:4a:f5:29:57:fc:01:5b:f3:cb:3f:52:
         c3:ce:5b:a9:89:ed:81:5b:13:b4:fe:71:1c:02:09:a3:07:18:
         0b:fa:fe:df:85:56:8d:39:8d:af:82:32:c3:c9:18:7a:08:87:
         4b:54:c0:43:96:49:cd:77:2b:15:03:be:e5:7c:9d:58:82:6c:
         0d:02:64:59:76:39:19:8a:1f:67:36:ae:b6:e4:42:d3:5f:e2:
         d0:61:3b:3b:16:e9:ea:48:19:a6:0d:9a:94:45:be:a1:e8:49:
         bb:03:c0:04:e6:0e:af:b9:a3:64:1b:5e:aa:fa:a6:f0:fd:0d:
         b7:d8:83:da:e4:85:83:c5:d5:bb:5d:bf:6d:6b:bb:c4:d8:52:
         24:3a:f6:81:57:d2:78:11:2a:a7:1d:2b:f5:3e:f7:6f:19:50:
         11:36:f9:6e:8e:e3:cd:eb:85:82:51:dd:f8:05:d8:1a:e7:34:
         ce:0f:2d:05:83:c0:d5:18:ff:b0:3e:e1:bf:f8:83:41:8f:74:
         40:56:54:c2:78:1c:1d:6e:a4:10:77:e7:69:85:15:53:b3:b1:
         6f:d5:a7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:28:26 2025 by rpki-client