Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/323830343a336665343a3a2f33322d3438203d3e203236363136.roa
File:                     323830343a336665343a3a2f33322d3438203d3e203236363136.roa (raw, json)
Hash identifier:          tymaYqKKAAJSsYPTeIUQKLfz2ToYvJ1AmX7k0ccvB60=
Subject key identifier:   34:40:FF:50:00:B4:82:4C:D7:26:FD:E5:58:0F:98:7D:92:CA:BA:4A
Certificate issuer:       /CN=E7700F13658CA0FAD21A568C7195309EAC2021BA
Certificate serial:       3A2B9A5FFD45519DFF9BD52DABE06634653DE12F
Authority key identifier: E7:70:0F:13:65:8C:A0:FA:D2:1A:56:8C:71:95:30:9E:AC:20:21:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7700F13658CA0FAD21A568C7195309EAC2021BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/323830343a336665343a3a2f33322d3438203d3e203236363136.roa
Signing time:             Wed 01 Oct 2025 03:05:48 +0000
ROA not before:           Wed 01 Oct 2025 03:00:48 +0000
ROA not after:            Wed 30 Sep 2026 03:05:48 +0000
asID:                     26616
IP address blocks:        2804:3fe4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.crl
                          rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7700F13658CA0FAD21A568C7195309EAC2021BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2b:9a:5f:fd:45:51:9d:ff:9b:d5:2d:ab:e0:66:34:65:3d:e1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7700F13658CA0FAD21A568C7195309EAC2021BA
        Validity
            Not Before: Oct  1 03:00:48 2025 GMT
            Not After : Sep 30 03:05:48 2026 GMT
        Subject: CN=3440FF5000B4824CD726FDE5580F987D92CABA4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:f7:14:09:99:d4:3b:a7:16:7c:cc:3c:0d:
                    70:d3:e0:a5:18:fa:6b:82:a0:56:76:80:ec:29:f5:
                    e0:d8:34:5e:78:54:cc:16:ac:fe:a1:5d:b9:49:7b:
                    57:0f:d2:89:31:6d:33:2e:1e:59:8e:11:e1:10:ef:
                    b1:49:11:04:38:4e:2e:50:fc:78:09:5d:8e:07:0a:
                    fd:5f:8c:96:54:1c:c1:32:d4:79:82:66:23:e0:91:
                    a0:4b:d3:3f:6c:52:5b:43:e1:a3:7c:57:12:91:7c:
                    11:8a:97:dd:ac:05:5f:35:a8:6a:f6:3c:78:f5:a6:
                    30:00:fd:68:db:37:e6:20:5c:24:19:5e:03:81:a7:
                    86:30:0b:e0:0a:f0:8f:c7:91:31:ee:81:d3:1a:5f:
                    80:2d:4a:68:e2:1e:a1:31:a6:cb:32:cd:e0:bd:3c:
                    5f:95:9e:6e:7b:d7:d4:45:a0:c5:1f:9b:75:62:65:
                    b0:b7:4d:a0:26:e2:b6:ac:8e:ae:16:fb:c2:c9:21:
                    7d:cb:75:27:4a:52:ed:86:86:d3:13:69:3c:97:9e:
                    5e:de:9b:9a:d1:97:56:d7:bb:2b:aa:07:ed:d3:4c:
                    63:09:10:4b:48:0c:02:81:ac:ac:f3:c3:74:ad:f9:
                    bb:c9:5c:66:d7:36:ee:a5:3b:11:dc:10:d0:9c:d4:
                    f5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:40:FF:50:00:B4:82:4C:D7:26:FD:E5:58:0F:98:7D:92:CA:BA:4A
            X509v3 Authority Key Identifier:
                keyid:E7:70:0F:13:65:8C:A0:FA:D2:1A:56:8C:71:95:30:9E:AC:20:21:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/E7700F13658CA0FAD21A568C7195309EAC2021BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7700F13658CA0FAD21A568C7195309EAC2021BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VQUaJmmxLxfncFx7Ln1ALpSZjBbhubxo5BNTzVjgMvU/0/323830343a336665343a3a2f33322d3438203d3e203236363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fe4::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:08:45:41:6f:8a:4e:08:54:02:a7:93:90:8c:12:3a:11:5a:
         3c:3f:a1:d0:07:66:00:ae:b8:db:be:9f:94:31:a6:94:26:86:
         1b:bd:b0:2b:f0:cb:52:f8:49:23:6d:c9:c7:38:b7:ab:d5:a7:
         51:cc:16:5c:0e:51:ad:1c:b8:3c:db:ce:98:4b:b3:7e:a2:63:
         f6:bc:a1:20:41:02:9f:6e:7b:8d:d2:65:f2:0e:bd:27:14:72:
         c1:18:23:ad:0e:dd:7a:d4:84:09:d5:d1:91:48:d2:c4:9d:6c:
         94:80:66:b0:1f:3d:26:d0:18:18:bb:9b:b6:5d:48:c3:b9:f4:
         8e:6f:e8:0b:f7:03:c3:3f:84:13:cb:f5:2d:34:44:56:39:5b:
         e4:d9:b2:e5:ac:34:86:36:61:58:9e:24:b4:bb:06:31:65:76:
         0d:31:ee:13:86:c8:5d:3e:e9:9e:2c:8b:25:54:ce:d9:07:72:
         dd:b1:df:ab:1d:b5:58:2d:8d:bc:db:24:a8:2c:70:96:d5:b7:
         9b:32:b8:a0:29:d6:86:c6:87:f5:44:ce:f9:93:86:1c:55:c5:
         9a:a1:4c:ea:dd:71:20:1c:2e:93:80:cf:4d:cb:9c:e2:1b:d1:
         d1:1f:81:a5:38:51:9e:6a:cc:9f:ab:81:c6:d6:81:05:ec:a3:
         7f:c0:65:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:46:54 2025 by rpki-client