Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a6330303a3a2f33382d3338203d3e20323637323831.roa
File:                     323830343a346231303a6330303a3a2f33382d3338203d3e20323637323831.roa (raw, json)
Hash identifier:          so3kq643rYwMksZK2ukUC6RDVZt3LVQQnDvGujXqy3I=
Subject key identifier:   63:50:1C:E7:C8:6A:3A:3D:4F:A6:A8:C8:8F:56:63:C0:1E:C4:E3:33
Certificate issuer:       /CN=0FF30EC686201018DE081110542623BAED2ADF49
Certificate serial:       0D1D183D775B5FFCBFBA5CD2A1B7D14C86183151
Authority key identifier: 0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a6330303a3a2f33382d3338203d3e20323637323831.roa
Signing time:             Tue 14 Oct 2025 18:48:12 +0000
ROA not before:           Tue 14 Oct 2025 18:43:12 +0000
ROA not after:            Tue 13 Oct 2026 18:48:12 +0000
asID:                     267281
IP address blocks:        2804:4b10:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl
                          rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1d:18:3d:77:5b:5f:fc:bf:ba:5c:d2:a1:b7:d1:4c:86:18:31:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF30EC686201018DE081110542623BAED2ADF49
        Validity
            Not Before: Oct 14 18:43:12 2025 GMT
            Not After : Oct 13 18:48:12 2026 GMT
        Subject: CN=63501CE7C86A3A3D4FA6A8C88F5663C01EC4E333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:46:c8:74:35:3b:50:2f:1a:22:33:3d:aa:3a:
                    6b:40:f8:e7:d2:66:f6:1a:22:4d:bd:08:ee:32:66:
                    dd:b6:93:6a:31:79:f5:58:7d:4b:08:47:44:fa:b8:
                    d1:28:fa:cf:ca:68:8a:a2:e6:3e:f3:ee:2e:f2:72:
                    80:28:6e:3f:fe:19:de:3c:4a:0f:26:8d:77:be:a0:
                    56:a4:29:db:d8:5c:9f:e7:bd:61:8d:82:0c:1d:b9:
                    7f:a8:f7:46:95:ff:b3:6d:75:43:3f:8c:93:bb:45:
                    4a:6a:42:81:e7:a4:71:c8:af:04:9f:49:15:36:f9:
                    e4:e1:c7:9d:0f:70:60:c8:6b:69:30:9c:54:d0:53:
                    e9:96:5c:db:f3:7e:51:31:a7:5f:2e:08:33:0b:25:
                    22:1d:0e:92:74:6d:a0:c4:5a:d5:04:e8:33:2e:9e:
                    fe:7d:88:d0:a7:e7:0c:3c:dc:2b:11:a4:07:7e:2d:
                    31:ea:e4:1b:31:05:11:41:59:46:76:41:b9:24:7e:
                    16:75:05:c8:44:01:b4:df:bc:40:63:53:10:47:1a:
                    68:b2:c0:eb:a9:ca:68:dd:32:0e:8d:92:95:19:46:
                    25:f6:95:0a:9d:b5:d1:4d:48:7b:ef:2e:ec:e2:0b:
                    69:db:1b:4c:78:58:09:1c:6c:46:7c:3c:80:8d:7f:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:50:1C:E7:C8:6A:3A:3D:4F:A6:A8:C8:8F:56:63:C0:1E:C4:E3:33
            X509v3 Authority Key Identifier:
                keyid:0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a6330303a3a2f33382d3338203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b10:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         4e:69:4b:30:5f:5c:71:9d:75:de:f6:ee:43:05:a6:c1:d8:ad:
         b6:0b:57:78:32:ea:81:6e:11:c1:6b:77:8d:b9:d0:de:76:61:
         3f:0e:70:8c:f8:34:0f:f5:f3:c3:4a:3d:40:e3:9e:8f:8c:28:
         a6:52:0c:72:aa:47:bb:9b:4c:b1:64:b9:36:76:f3:6c:2d:18:
         b5:60:5a:3e:34:b2:db:30:26:85:cc:7a:56:c6:f0:62:6e:5c:
         58:d1:8a:80:2c:cf:51:91:70:fd:40:0d:d9:4b:8b:9f:da:bd:
         58:85:cf:d4:b1:9e:68:9d:92:21:86:c5:53:16:34:65:00:fd:
         91:c4:1c:c7:59:d1:b5:80:6d:4e:12:86:e3:47:4b:a6:1b:99:
         fe:d1:2e:09:90:9e:8e:f5:f3:cb:fb:6e:70:73:fc:21:25:5e:
         ac:7e:98:f6:67:72:ba:74:ba:11:45:d2:e7:c9:3a:45:fc:ef:
         c4:b2:bc:6b:92:ad:df:00:11:2b:53:6e:9c:1d:03:c8:ea:70:
         b4:a5:1c:02:a3:bc:52:9d:2d:ce:ff:83:7c:09:4e:f3:fa:9c:
         86:22:8e:37:12:c2:98:2c:97:17:98:ed:77:a9:b5:80:c5:c5:
         f4:55:a7:5c:7e:43:a5:61:a4:9a:d0:cb:f0:7a:2f:ac:19:20:
         36:6c:16:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:28:36 2025 by rpki-client