Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/323830343a393539303a3a2f33322d3332203d3e20323734353330.roa
File:                     323830343a393539303a3a2f33322d3332203d3e20323734353330.roa (raw, json)
Hash identifier:          ud8H+LPpJrRZjxw5rTInN+2D3gurLBaqifOfHqRbUko=
Subject key identifier:   AC:56:A4:CF:A1:37:61:29:29:9E:A2:AB:33:6E:05:52:E0:E3:4B:04
Certificate issuer:       /CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8
Certificate serial:       4ADBBD4BCBD123300941CB8D4EC544195AECE4B7
Authority key identifier: AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/323830343a393539303a3a2f33322d3332203d3e20323734353330.roa
Signing time:             Wed 08 Oct 2025 12:16:00 +0000
ROA not before:           Wed 08 Oct 2025 12:11:00 +0000
ROA not after:            Wed 07 Oct 2026 12:16:00 +0000
asID:                     274530
IP address blocks:        2804:9590::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl
                          rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:db:bd:4b:cb:d1:23:30:09:41:cb:8d:4e:c5:44:19:5a:ec:e4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8
        Validity
            Not Before: Oct  8 12:11:00 2025 GMT
            Not After : Oct  7 12:16:00 2026 GMT
        Subject: CN=AC56A4CFA1376129299EA2AB336E0552E0E34B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d7:da:5b:72:67:cc:72:74:1e:0e:ff:a5:3c:
                    5a:1c:8d:f9:f0:35:f2:29:65:1d:ca:3c:70:36:cf:
                    d8:22:b7:bb:5c:82:16:41:4c:9a:1b:db:15:c0:96:
                    a8:40:fb:c7:1c:48:57:d9:a9:63:f6:19:0e:15:7c:
                    f0:90:69:ae:53:fd:bf:22:5f:6d:ab:26:e1:5f:54:
                    6d:1a:05:cf:19:cc:f5:19:f3:e5:46:9f:69:f3:a3:
                    8a:2e:03:86:bd:5d:e5:55:59:12:5b:a0:87:10:45:
                    90:97:ba:81:ee:93:be:02:57:8f:8e:33:f0:22:97:
                    55:6a:1d:97:d3:a2:10:e1:b3:17:17:68:b8:38:3f:
                    93:af:35:af:9d:27:9a:bc:22:5b:db:c5:9e:2a:4b:
                    ab:74:58:30:17:fa:9e:4e:fe:45:b2:ff:4b:a7:60:
                    9e:a4:06:ea:c8:3a:0f:1f:ba:72:03:2e:8f:69:73:
                    55:c6:b6:3e:1e:7b:5d:dd:35:06:16:31:29:48:6d:
                    b9:94:f8:ad:5f:d1:31:c1:b3:c4:c9:36:9e:43:1b:
                    8b:15:cf:ae:1b:5d:32:89:e3:c0:4a:35:8b:34:d2:
                    5e:79:0f:24:ab:33:1e:ba:f2:a2:f8:87:b8:4e:f6:
                    f9:a2:15:6e:c3:ec:4d:fc:98:92:55:76:6f:4c:2b:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:56:A4:CF:A1:37:61:29:29:9E:A2:AB:33:6E:05:52:E0:E3:4B:04
            X509v3 Authority Key Identifier:
                keyid:AA:72:ED:85:A9:3B:5A:AB:E6:C7:DF:84:4A:D9:9D:16:A9:0E:14:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA72ED85A93B5AABE6C7DF844AD99D16A90E14C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pvH4MHZJZas4zHEgK2hMoy5gE5iQjdPTDp4EF96vecg/0/323830343a393539303a3a2f33322d3332203d3e20323734353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9590::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:9b:a7:b0:de:f0:fd:89:a3:1c:d3:e4:f4:92:34:4d:fb:15:
         bf:6a:33:84:fa:35:5c:e4:9a:f2:a2:34:55:f7:1b:e9:3e:4e:
         48:1a:8a:f7:f9:5e:3a:04:58:73:ba:b6:37:29:53:c0:cf:29:
         9b:b5:25:f4:86:1d:70:da:bd:1c:f3:9a:72:e3:6e:41:86:9d:
         58:e9:92:4b:e6:5c:6f:8a:98:73:0a:d8:5b:4e:15:55:5f:99:
         1a:1a:35:3c:94:4e:d1:b3:3a:57:fa:a9:78:a5:cc:89:24:af:
         54:a0:42:25:6f:25:d1:56:b6:0a:e2:28:a9:45:5f:55:fc:22:
         1d:44:a3:fc:83:5e:9a:32:20:8b:2f:b5:10:7e:b8:d9:ad:52:
         b8:ff:ac:86:25:ee:1a:49:62:29:2b:d4:61:de:96:8a:32:18:
         1e:48:c9:c5:70:c5:9b:e0:65:ba:d5:6f:4e:b0:0c:85:95:3d:
         0c:65:eb:76:b7:08:84:f6:af:2d:ca:e3:63:bb:41:9c:73:6d:
         bc:92:ad:0c:a3:44:41:f3:2a:8d:42:0a:c1:0f:71:09:3c:67:
         cf:54:5d:46:76:24:f1:08:53:65:c4:d4:7e:34:d0:80:9e:ff:
         5b:3b:f0:1c:51:3a:1b:5c:4f:c6:e7:76:29:51:b3:d3:9f:c6:
         4b:fe:26:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:15:27 2025 by rpki-client