Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/0/323830343a323330383a3a2f33322d3634203d3e20323634313338.roa
File:                     323830343a323330383a3a2f33322d3634203d3e20323634313338.roa (raw, json)
Hash identifier:          ZhIhxAJwHjezMMD5K3rmHe81s/P9VI6PlC0qxF7eLXM=
Subject key identifier:   A9:83:2D:5D:0B:A6:5B:71:14:B6:2E:73:39:33:74:D1:DF:11:AB:22
Certificate issuer:       /CN=066C4A67C4AAF5E36A550A1FE82432034BCAE927
Certificate serial:       2C24D7B8D0DBE8DFA77A5E870DF5D16F852988DF
Authority key identifier: 06:6C:4A:67:C4:AA:F5:E3:6A:55:0A:1F:E8:24:32:03:4B:CA:E9:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/066C4A67C4AAF5E36A550A1FE82432034BCAE927.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/0/323830343a323330383a3a2f33322d3634203d3e20323634313338.roa
Signing time:             Tue 07 Oct 2025 18:35:01 +0000
ROA not before:           Tue 07 Oct 2025 18:30:01 +0000
ROA not after:            Tue 06 Oct 2026 18:35:01 +0000
asID:                     264138
IP address blocks:        2804:2308::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/0/066C4A67C4AAF5E36A550A1FE82432034BCAE927.crl
                          rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/0/066C4A67C4AAF5E36A550A1FE82432034BCAE927.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/066C4A67C4AAF5E36A550A1FE82432034BCAE927.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:24:d7:b8:d0:db:e8:df:a7:7a:5e:87:0d:f5:d1:6f:85:29:88:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066C4A67C4AAF5E36A550A1FE82432034BCAE927
        Validity
            Not Before: Oct  7 18:30:01 2025 GMT
            Not After : Oct  6 18:35:01 2026 GMT
        Subject: CN=A9832D5D0BA65B7114B62E73393374D1DF11AB22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:97:98:a2:83:93:e1:74:7b:b1:80:d8:0e:e5:
                    72:a2:24:12:d6:0b:8a:5a:14:fe:5f:55:ad:03:9e:
                    61:ff:19:8b:4d:3f:a3:35:08:f9:0f:a5:32:b9:21:
                    ad:f8:38:3c:69:42:99:ba:64:8d:28:ad:19:a9:0e:
                    6b:b1:4c:6a:b0:5d:7c:9a:5b:d0:c6:da:54:e8:0e:
                    22:0f:a7:66:0d:f8:0f:72:cf:87:4e:83:b7:d7:1a:
                    e0:b7:c9:55:8c:f9:dc:7b:cf:ee:43:cd:25:d1:2c:
                    7a:ef:f1:a4:c2:aa:15:7c:71:53:44:4a:df:d9:7a:
                    3e:a7:ce:84:4b:1a:79:b0:57:82:18:56:cc:4d:db:
                    90:91:b9:5a:46:84:a0:56:dc:78:5c:28:3e:c0:ff:
                    2a:83:35:23:68:d5:6d:55:f7:cc:2e:e9:a1:b1:f5:
                    e3:22:ee:47:b9:b7:f3:fe:86:fc:12:d2:3c:9d:cb:
                    df:49:03:f0:f3:3d:8b:41:7b:d9:54:c8:87:c5:2f:
                    39:fa:e3:eb:a7:76:e4:13:45:c1:11:24:a8:5b:46:
                    c4:3b:92:24:94:b8:e7:65:0e:54:de:54:1e:9b:d5:
                    f7:ab:9a:f6:9f:98:88:20:4e:0b:4b:92:0d:92:6e:
                    09:c1:e7:fe:46:18:51:cb:ef:88:8c:b4:82:86:05:
                    57:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:83:2D:5D:0B:A6:5B:71:14:B6:2E:73:39:33:74:D1:DF:11:AB:22
            X509v3 Authority Key Identifier:
                keyid:06:6C:4A:67:C4:AA:F5:E3:6A:55:0A:1F:E8:24:32:03:4B:CA:E9:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/0/066C4A67C4AAF5E36A550A1FE82432034BCAE927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/066C4A67C4AAF5E36A550A1FE82432034BCAE927.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/0/323830343a323330383a3a2f33322d3634203d3e20323634313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2308::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:93:5e:53:17:21:23:f4:30:82:e9:f6:1e:15:87:61:5d:e8:
         bd:0b:0e:eb:cb:ad:29:a0:3b:61:20:69:09:dd:39:74:bf:05:
         02:f3:d6:7a:b6:0b:b9:15:da:b3:08:52:a7:49:4e:e8:2a:58:
         da:97:b5:07:50:13:21:cb:a8:79:3c:05:73:e9:3a:36:1d:41:
         72:4c:bf:ad:93:98:4d:b9:74:dc:26:08:d0:92:7d:49:8b:36:
         94:88:74:6e:02:7e:d6:64:69:ba:7a:3e:13:49:f3:b4:ac:27:
         ec:60:6a:35:7d:d7:69:33:d5:0e:9b:75:7c:f8:b1:68:65:1b:
         bc:73:6c:c0:73:90:8f:07:17:6e:da:8d:0c:e4:34:ec:14:7d:
         98:83:1d:78:c3:d7:a7:a9:0d:e7:5d:88:37:eb:c1:77:46:29:
         fd:3a:70:21:ed:9e:b4:e9:80:4a:51:ea:3e:93:1d:90:d4:9c:
         8b:7f:16:a4:e1:ae:ec:c7:b6:80:a6:58:6e:97:ff:a4:57:6c:
         0d:51:df:f6:7c:24:ca:a4:1e:e7:51:12:f6:3d:c8:38:86:2b:
         72:aa:17:7b:e3:e1:16:ff:64:61:f0:15:fc:57:05:78:a5:85:
         93:a2:eb:50:46:05:86:c6:a0:4d:ee:39:02:c7:c6:f4:f8:2d:
         36:28:ed:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:23:37 2025 by rpki-client