Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/323830343a3963303a3a2f33322d3332203d3e20323632393839.roa
File:                     323830343a3963303a3a2f33322d3332203d3e20323632393839.roa (raw, json)
Hash identifier:          4/5IZLTTzzKaR5BjCEfk089AbvtCFULLEATUH3NsVpA=
Subject key identifier:   57:E0:25:6B:86:3E:4C:88:0B:DA:ED:5A:66:72:F1:05:D9:E7:9B:EA
Certificate issuer:       /CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
Certificate serial:       27240D2BE63E556E0ED94BA66B64B1D40038EFE8
Authority key identifier: 69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/323830343a3963303a3a2f33322d3332203d3e20323632393839.roa
Signing time:             Tue 07 Oct 2025 17:16:39 +0000
ROA not before:           Tue 07 Oct 2025 17:11:39 +0000
ROA not after:            Tue 06 Oct 2026 17:16:39 +0000
asID:                     262989
IP address blocks:        2804:9c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:24:0d:2b:e6:3e:55:6e:0e:d9:4b:a6:6b:64:b1:d4:00:38:ef:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8
        Validity
            Not Before: Oct  7 17:11:39 2025 GMT
            Not After : Oct  6 17:16:39 2026 GMT
        Subject: CN=57E0256B863E4C880BDAED5A6672F105D9E79BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f3:b4:bb:6c:25:01:da:69:ee:a1:0d:87:ba:
                    38:f8:2f:c9:7d:c1:7b:5e:67:54:e6:c9:14:ef:6c:
                    18:c5:8a:5a:c4:13:0b:00:77:e4:c0:43:5d:11:76:
                    27:b4:1c:13:e5:de:b1:fa:01:2b:e6:c4:d3:90:cd:
                    7e:5e:eb:5d:8b:80:21:4a:06:01:7e:a4:fd:ff:0b:
                    89:1a:dc:c3:0a:a8:06:91:dc:8c:6b:dc:11:42:3d:
                    85:17:83:c7:3c:03:6e:08:73:55:ad:61:9d:11:06:
                    1d:49:9d:93:56:1b:98:07:1b:6b:93:7b:41:93:47:
                    c5:36:b6:02:d4:c6:ef:38:e1:aa:a7:bd:60:4e:77:
                    23:a2:8c:a9:c4:65:09:7a:91:ed:ea:e7:62:69:5f:
                    e9:e6:31:0d:0a:73:85:de:87:47:d4:40:dd:65:08:
                    32:3d:80:57:bb:cc:d5:1c:cf:36:00:ab:07:84:56:
                    db:ef:a9:41:fa:1d:80:31:de:06:88:e9:fd:c1:48:
                    f7:fc:6f:f3:3c:73:00:2c:dd:eb:90:76:7d:61:c1:
                    60:a4:fd:20:26:43:15:2f:86:a7:ee:d9:72:22:53:
                    17:b6:ef:c8:be:57:fc:ce:fb:e2:c6:a9:84:43:d4:
                    d6:7a:c1:20:f8:cd:44:fd:b6:03:61:b2:c6:29:9d:
                    a4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E0:25:6B:86:3E:4C:88:0B:DA:ED:5A:66:72:F1:05:D9:E7:9B:EA
            X509v3 Authority Key Identifier:
                keyid:69:63:A2:B3:33:A0:3F:20:AD:DA:4F:0C:A2:C3:7A:AF:B0:26:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6963A2B333A03F20ADDA4F0CA2C37AAFB0268AB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/323830343a3963303a3a2f33322d3332203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:90:23:7d:23:67:f7:41:c0:9f:87:94:86:30:cd:6b:4e:13:
         6a:b0:94:1c:7e:f7:56:9b:9d:57:58:09:af:64:57:de:13:05:
         4f:4a:8a:38:ec:c0:fb:38:fb:95:a4:ef:88:4b:6f:d5:c6:18:
         65:fd:4f:cb:96:36:1a:98:d5:85:f8:72:6b:a4:54:1c:d6:99:
         ee:29:84:8f:9d:8a:c7:c3:80:fa:c2:fd:61:1f:52:c5:ad:90:
         4f:f6:b9:84:7f:ed:34:46:01:22:8b:11:23:34:38:97:6b:d9:
         ba:69:2e:66:b1:97:a5:65:04:11:59:e7:0d:db:c3:b1:82:35:
         76:74:44:c6:df:7f:2c:28:ca:31:67:35:dd:59:71:51:fa:af:
         ab:b4:7a:06:95:59:0c:90:82:4f:8c:79:b1:cc:e8:98:51:1c:
         86:b8:78:ba:43:2b:41:bf:27:46:be:85:29:cc:b0:3c:45:78:
         21:21:47:66:24:c2:b5:d8:72:2e:9b:0c:e7:2f:bb:2c:fa:44:
         25:19:f7:97:c3:3f:78:b8:97:31:a7:b6:a0:8a:d6:ff:6b:3d:
         75:6b:42:18:aa:cd:fe:bd:52:75:eb:4a:2b:5f:ea:72:d9:03:
         7a:d4:d8:95:5c:aa:e8:0f:1c:78:d2:83:68:d7:48:6c:b9:a3:
         3b:6a:36:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:28:19 2025 by rpki-client