Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/323830343a386338383a3a2f33322d3438203d3e20323733333131.roa
File:                     323830343a386338383a3a2f33322d3438203d3e20323733333131.roa (raw, json)
Hash identifier:          kwEv7gErYcASIrf6NWAJrxKoKHj5dipmcUm6QyhK6V8=
Subject key identifier:   85:49:74:B1:C9:41:67:06:18:91:85:4C:7F:32:DD:28:44:22:FC:2A
Certificate issuer:       /CN=8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0
Certificate serial:       69FBB0D9D20E35F6397F5AE639DC7B487DBB618E
Authority key identifier: 8B:9F:6B:2C:98:7C:ED:F2:C0:A5:81:37:E8:5C:DB:B7:67:9E:6B:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/323830343a386338383a3a2f33322d3438203d3e20323733333131.roa
Signing time:             Wed 08 Oct 2025 18:21:49 +0000
ROA not before:           Wed 08 Oct 2025 18:16:49 +0000
ROA not after:            Wed 07 Oct 2026 18:21:49 +0000
asID:                     273311
IP address blocks:        2804:8c88::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.crl
                          rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:fb:b0:d9:d2:0e:35:f6:39:7f:5a:e6:39:dc:7b:48:7d:bb:61:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0
        Validity
            Not Before: Oct  8 18:16:49 2025 GMT
            Not After : Oct  7 18:21:49 2026 GMT
        Subject: CN=854974B1C94167061891854C7F32DD284422FC2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:76:a5:dd:f2:81:7c:84:80:d3:24:26:33:
                    8c:ec:30:80:54:9c:ae:b2:8b:80:d9:21:13:34:52:
                    1c:eb:6f:fc:56:8c:7e:5c:e5:af:93:2c:50:b9:28:
                    33:a4:35:b4:3a:03:0e:cf:d8:ce:9d:a9:a1:d8:35:
                    1e:76:b0:e6:50:b1:08:b3:58:a1:27:36:34:dd:13:
                    a1:84:fa:8b:cb:f1:06:cc:92:31:7e:57:6b:7a:17:
                    04:44:6f:b7:87:d1:3b:75:e8:c6:3b:c9:69:ff:31:
                    61:38:85:c2:cc:36:7c:37:44:4a:f2:8d:b9:3c:ed:
                    26:7c:bd:9c:2d:4e:4f:09:cd:78:4c:4c:1f:d5:79:
                    a3:82:9f:7c:40:0f:81:16:56:c7:5a:84:11:52:02:
                    86:27:c9:87:43:11:13:a8:90:a2:15:13:10:1c:e8:
                    7a:c4:4d:40:87:22:a4:0b:0d:b2:39:8c:b4:81:b9:
                    5b:4d:c3:f3:ee:4b:95:70:4a:0a:f1:2f:30:ca:d6:
                    60:df:5c:e8:2f:7b:47:8c:9a:c3:79:d6:87:8b:e2:
                    d9:68:10:78:bb:78:83:c5:17:fb:a7:98:db:7f:1a:
                    c3:df:f4:1d:22:c9:71:d7:6b:1d:88:28:9c:3d:11:
                    d1:cc:0b:f8:8e:61:de:fe:b2:47:73:3f:44:35:3f:
                    2b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:49:74:B1:C9:41:67:06:18:91:85:4C:7F:32:DD:28:44:22:FC:2A
            X509v3 Authority Key Identifier:
                keyid:8B:9F:6B:2C:98:7C:ED:F2:C0:A5:81:37:E8:5C:DB:B7:67:9E:6B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B9F6B2C987CEDF2C0A58137E85CDBB7679E6BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4z3yijD1BBhiSFP7dW8FsGhsM3FrFvEmDL9cBamJRHTC/0/323830343a386338383a3a2f33322d3438203d3e20323733333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c88::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:ce:be:21:4b:02:20:3a:42:e4:6c:39:dd:93:e9:35:83:ad:
         b8:4e:6d:db:a9:ec:ef:6e:c1:55:bf:b0:1c:36:01:0d:cc:3e:
         a8:01:0f:d1:c9:9c:18:a4:9d:89:88:36:ae:e1:8b:93:e8:6b:
         8e:ac:38:f3:23:45:83:f4:77:da:48:ec:72:58:14:7c:1b:4a:
         2b:c5:25:23:7e:2c:a7:3e:f9:72:59:9d:30:70:d7:39:4d:a0:
         9f:dc:56:5e:fc:c6:0d:bc:a0:97:d7:bf:32:8f:0e:81:d7:df:
         d3:eb:34:aa:31:03:e1:9d:49:fa:7d:ad:a3:e3:b0:0e:6c:0a:
         30:c5:06:21:3c:8c:34:a1:23:f5:64:26:a3:b0:7f:50:78:ce:
         f9:ac:7d:b1:f3:ad:b0:7e:b1:34:a1:40:e0:63:14:80:97:41:
         7c:e6:d3:ef:53:4b:99:5d:1a:34:8e:2b:18:92:9a:df:f3:55:
         12:e6:4a:90:c9:09:e0:5e:93:38:1d:2a:5c:4a:40:44:93:c0:
         68:be:cb:7a:b1:3f:56:e8:d8:17:f4:c5:54:87:77:3a:21:d4:
         5f:a1:a6:9b:7e:27:a4:73:36:a6:22:07:8f:53:28:72:28:30:
         3e:46:60:3d:4f:1a:9f:57:58:81:a5:6b:51:4d:14:97:4d:7b:
         a2:25:32:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:59 2025 by rpki-client