Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/323830343a3931633a3a2f33322d3634203d3e203532383737.roa
File:                     323830343a3931633a3a2f33322d3634203d3e203532383737.roa (raw, json)
Hash identifier:          OHO6Wx692w0lzVoYhuUmb0j0Y+S4c1BM1IIF4HtppJg=
Subject key identifier:   D4:25:E8:17:0D:7E:B8:F3:B2:4C:84:C2:CD:06:65:DD:4F:34:9C:5E
Certificate issuer:       /CN=CE199B761AB444E82DC4918B4D38917C16AEC7B8
Certificate serial:       343027F836F8585B79E91E38DD8C6B26E0E2BC0E
Authority key identifier: CE:19:9B:76:1A:B4:44:E8:2D:C4:91:8B:4D:38:91:7C:16:AE:C7:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/323830343a3931633a3a2f33322d3634203d3e203532383737.roa
Signing time:             Tue 07 Oct 2025 18:35:00 +0000
ROA not before:           Tue 07 Oct 2025 18:30:00 +0000
ROA not after:            Tue 06 Oct 2026 18:35:00 +0000
asID:                     52877
IP address blocks:        2804:91c::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.crl
                          rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:30:27:f8:36:f8:58:5b:79:e9:1e:38:dd:8c:6b:26:e0:e2:bc:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE199B761AB444E82DC4918B4D38917C16AEC7B8
        Validity
            Not Before: Oct  7 18:30:00 2025 GMT
            Not After : Oct  6 18:35:00 2026 GMT
        Subject: CN=D425E8170D7EB8F3B24C84C2CD0665DD4F349C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:1d:5a:72:30:13:a0:a1:7f:60:59:c2:4e:
                    10:19:22:70:04:1c:43:a2:d9:b5:2d:41:89:1c:d8:
                    a9:fe:25:23:06:e8:29:a1:ac:01:22:23:74:7b:12:
                    42:95:90:b2:9c:ac:7c:b0:48:04:d4:5c:ab:4b:7e:
                    74:1f:e8:df:2c:1b:6c:85:06:2e:ef:e5:8c:a1:0b:
                    4e:53:73:90:23:bb:36:ae:3f:45:0d:05:45:95:f7:
                    24:85:5a:77:cd:ba:78:00:22:27:c8:17:0b:a2:49:
                    4a:6d:e5:9b:0b:9d:ab:a7:e6:c8:65:8f:93:96:1b:
                    83:cd:a8:1d:39:ec:81:a2:73:79:ed:cd:f0:24:ef:
                    b0:2f:b8:c4:cf:aa:52:77:6d:8a:cd:0a:ff:1f:25:
                    e3:65:68:f0:72:b9:57:d0:b4:9f:9b:17:96:51:59:
                    4c:77:20:d3:b8:41:6f:c0:3d:7f:f1:14:8d:fe:18:
                    3d:59:d0:1e:0c:0a:be:8d:b5:de:40:d3:20:5d:0d:
                    77:93:67:f9:7d:ea:59:e3:52:cc:a2:6b:2e:26:ce:
                    cc:55:b8:21:7e:fe:10:20:2c:95:90:47:a3:5f:d0:
                    f2:d8:3c:f6:ec:71:c5:4c:16:7e:cb:41:44:4b:c1:
                    75:70:dc:7e:06:e2:5c:ee:d3:3e:86:ad:e9:00:fb:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:25:E8:17:0D:7E:B8:F3:B2:4C:84:C2:CD:06:65:DD:4F:34:9C:5E
            X509v3 Authority Key Identifier:
                keyid:CE:19:9B:76:1A:B4:44:E8:2D:C4:91:8B:4D:38:91:7C:16:AE:C7:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/323830343a3931633a3a2f33322d3634203d3e203532383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:25:22:e7:b8:3b:f1:f1:53:4c:38:9d:17:e3:1d:6d:19:71:
         3e:5d:7d:35:d1:23:ca:ca:94:10:44:1c:ed:da:1f:0f:f5:85:
         ae:61:8e:05:77:49:1f:91:7d:1c:43:05:25:61:34:e8:17:4e:
         4f:0b:18:f2:90:0f:54:ac:e2:c1:43:d8:d3:11:11:a6:69:8e:
         12:40:16:0f:fe:3f:9f:49:a2:07:92:1a:0a:f8:ba:40:7b:78:
         58:9c:fa:05:09:fe:99:92:9b:18:cb:c3:36:ac:be:4c:94:b4:
         29:12:13:4a:86:6c:45:91:01:39:2a:fc:2b:5a:27:52:f6:5f:
         12:32:f6:20:69:e5:71:0f:c6:ca:7e:14:78:a8:d7:07:8c:4f:
         0b:bc:bb:88:73:94:62:de:ba:97:55:04:e0:54:e1:92:67:29:
         c4:48:7d:22:a0:f0:04:6d:41:9a:12:43:04:d7:3e:e0:0d:41:
         e3:86:ea:cc:66:e5:89:e4:7f:7c:04:06:66:d8:a2:0d:11:31:
         fa:77:d9:3b:e5:03:d4:50:89:ab:71:43:15:e3:b4:4e:40:7c:
         b3:15:3d:09:81:a8:c7:eb:57:78:fc:9d:de:84:33:72:a7:68:
         75:e8:34:16:6f:65:a7:54:0c:b1:4c:af:6d:96:9b:db:14:10:
         9b:2a:6e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:20:56 2025 by rpki-client