Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a343030303a3a2f33342d3334203d3e20323635343633.roa
File:                     323830343a333438343a343030303a3a2f33342d3334203d3e20323635343633.roa (raw, json)
Hash identifier:          5QOTX0M/+Gzy4ViIxxAyoOC0e4S7yXCIH25mFqmKbY0=
Subject key identifier:   15:D6:F1:83:3A:CE:29:A2:D1:9B:CE:6F:36:7A:2E:3F:34:53:CB:AB
Certificate issuer:       /CN=62B51F20D88182C58CED03A4D282DE24A08CAE6E
Certificate serial:       460E1E102B14859DF12E027CC5BFF45876F6A581
Authority key identifier: 62:B5:1F:20:D8:81:82:C5:8C:ED:03:A4:D2:82:DE:24:A0:8C:AE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B51F20D88182C58CED03A4D282DE24A08CAE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a343030303a3a2f33342d3334203d3e20323635343633.roa
Signing time:             Sat 20 Sep 2025 12:53:43 +0000
ROA not before:           Sat 20 Sep 2025 12:48:43 +0000
ROA not after:            Sat 19 Sep 2026 12:53:43 +0000
asID:                     265463
IP address blocks:        2804:3484:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/62B51F20D88182C58CED03A4D282DE24A08CAE6E.crl
                          rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/62B51F20D88182C58CED03A4D282DE24A08CAE6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B51F20D88182C58CED03A4D282DE24A08CAE6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0e:1e:10:2b:14:85:9d:f1:2e:02:7c:c5:bf:f4:58:76:f6:a5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62B51F20D88182C58CED03A4D282DE24A08CAE6E
        Validity
            Not Before: Sep 20 12:48:43 2025 GMT
            Not After : Sep 19 12:53:43 2026 GMT
        Subject: CN=15D6F1833ACE29A2D19BCE6F367A2E3F3453CBAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:7c:b9:1a:bf:49:38:01:84:d1:3e:60:83:8d:
                    ce:c3:1a:e0:46:57:dd:0b:ac:5b:8c:a6:20:5a:8e:
                    a9:da:03:0c:1f:33:49:01:6b:e1:32:e5:a1:f2:b7:
                    6a:45:d7:ff:6c:6f:3e:98:ce:72:c7:37:1b:02:48:
                    a2:f6:d9:5c:84:86:2c:ff:8a:05:94:9d:8f:67:75:
                    20:ff:1b:24:8f:42:76:f0:d8:13:96:ed:8c:9b:6d:
                    e1:9f:c9:58:cd:6b:a3:e0:9c:fa:db:bd:3d:cb:bf:
                    e0:1f:15:4f:e8:22:cb:30:51:9b:e6:00:0f:e7:a1:
                    d1:fa:b8:01:69:8c:f1:0b:a2:6b:50:65:0b:e3:1e:
                    4e:df:11:92:5c:90:a7:70:4b:07:97:49:56:65:fa:
                    23:0e:8f:90:20:2f:c9:b9:e6:bd:e4:88:f4:ec:11:
                    cd:8e:39:a4:7b:75:d0:27:bd:44:26:e2:f1:1e:33:
                    df:0b:9a:30:0f:82:ff:bb:7b:a2:71:52:a7:4e:79:
                    bb:18:2e:fb:c6:fa:ad:ed:47:3c:e6:b8:5d:67:3b:
                    9c:25:85:9b:df:4e:d3:d5:58:d6:a9:ba:67:ab:fc:
                    d9:2f:50:0c:69:2e:1a:64:33:1c:2b:a5:20:09:28:
                    a0:37:9f:53:a7:f8:2d:5b:13:5c:8a:31:1a:9e:2e:
                    b8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D6:F1:83:3A:CE:29:A2:D1:9B:CE:6F:36:7A:2E:3F:34:53:CB:AB
            X509v3 Authority Key Identifier:
                keyid:62:B5:1F:20:D8:81:82:C5:8C:ED:03:A4:D2:82:DE:24:A0:8C:AE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/62B51F20D88182C58CED03A4D282DE24A08CAE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62B51F20D88182C58CED03A4D282DE24A08CAE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/323830343a333438343a343030303a3a2f33342d3334203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3484:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         69:7b:b6:82:4c:6a:98:69:92:14:d2:d4:cd:6e:4a:f8:a9:a0:
         e2:70:8a:b1:65:94:cc:05:95:ce:6e:6c:96:33:55:cf:56:48:
         27:10:5e:4c:22:8a:c5:43:9f:34:64:df:21:da:f4:5d:8f:e8:
         88:aa:07:d0:55:bb:81:20:a9:59:ff:01:db:f5:c0:bd:ce:8e:
         49:62:3d:76:dc:bf:1a:04:ae:f1:2b:28:ed:ad:19:6f:1f:a4:
         7e:19:1b:81:68:08:7b:e4:f6:6e:3f:45:9d:e8:5b:c2:9c:bd:
         19:f4:a5:40:f3:af:dd:1d:0b:5f:76:07:74:4f:4d:a2:b6:10:
         f6:3b:33:87:cd:03:7b:97:d6:9d:1a:24:4e:0c:ed:e5:5c:aa:
         cf:5d:5c:6d:54:ab:20:d6:4d:36:f2:e3:6c:1b:10:09:79:40:
         7f:1d:65:65:22:8c:f3:96:3f:ce:fc:f3:cb:2c:9b:31:53:82:
         e5:c5:de:88:1b:bf:60:37:16:5f:f4:f1:21:22:d5:f2:15:0b:
         cf:f2:2d:64:3e:1c:8f:40:b7:fc:5c:f1:37:c8:ba:e1:cf:1a:
         e5:b6:06:4d:9a:cf:f7:18:b2:fc:b1:ad:2a:89:ed:31:1f:58:
         1c:04:f1:10:f8:23:0e:20:81:ae:40:6d:25:59:a1:81:1f:a3:
         58:ce:95:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:37:16 2025 by rpki-client