Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/323830343a383464303a3a2f33322d3334203d3e20323732353432.roa
File:                     323830343a383464303a3a2f33322d3334203d3e20323732353432.roa (raw, json)
Hash identifier:          FtX7Dro4mbG3vpwCPY3zGYsNMDWPbwKL2JNC5qcUwGw=
Subject key identifier:   B7:9F:B6:77:F0:0F:40:AE:C8:7E:D7:CE:89:7D:3E:53:3E:FD:06:AA
Certificate issuer:       /CN=03360C354BF0A76D3F0C6022D902E9A4E301E510
Certificate serial:       03C8F155746A1EA21D07AF9E29F092CF42FCBADB
Authority key identifier: 03:36:0C:35:4B:F0:A7:6D:3F:0C:60:22:D9:02:E9:A4:E3:01:E5:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03360C354BF0A76D3F0C6022D902E9A4E301E510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/323830343a383464303a3a2f33322d3334203d3e20323732353432.roa
Signing time:             Tue 14 Oct 2025 23:58:24 +0000
ROA not before:           Tue 14 Oct 2025 23:53:24 +0000
ROA not after:            Tue 13 Oct 2026 23:58:24 +0000
asID:                     272542
IP address blocks:        2804:84d0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/03360C354BF0A76D3F0C6022D902E9A4E301E510.crl
                          rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/03360C354BF0A76D3F0C6022D902E9A4E301E510.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03360C354BF0A76D3F0C6022D902E9A4E301E510.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c8:f1:55:74:6a:1e:a2:1d:07:af:9e:29:f0:92:cf:42:fc:ba:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03360C354BF0A76D3F0C6022D902E9A4E301E510
        Validity
            Not Before: Oct 14 23:53:24 2025 GMT
            Not After : Oct 13 23:58:24 2026 GMT
        Subject: CN=B79FB677F00F40AEC87ED7CE897D3E533EFD06AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a4:53:c5:a2:17:f4:a5:04:3a:1a:b5:6d:6e:
                    a0:f1:0f:80:b2:f2:7e:9d:28:7f:c6:69:a4:09:26:
                    1e:08:f3:32:06:cd:7f:1a:31:28:0a:a8:ce:fa:ca:
                    68:c8:98:db:9d:bf:82:6b:ff:bc:78:ab:5c:d0:05:
                    5f:70:c6:34:01:97:26:b2:30:74:00:f8:bb:02:04:
                    7e:a9:f4:80:1d:14:75:70:6d:d8:ed:d3:70:18:8a:
                    a7:04:0e:99:87:a3:ca:22:f8:39:da:a7:c2:e2:80:
                    26:5c:4b:e3:c0:fe:8c:df:f0:0f:65:2a:c0:1a:72:
                    83:83:a5:e2:be:48:a4:06:e2:1a:dc:6e:f9:87:63:
                    7e:ae:47:74:2b:10:f0:a9:43:be:a3:2c:1d:6b:6c:
                    e9:a8:69:dc:93:c2:e1:dc:2a:dc:b2:d7:87:53:07:
                    80:08:12:7c:d9:ae:53:28:57:fa:9c:e5:28:fc:07:
                    ff:d8:49:cc:d7:6f:6c:ed:91:d1:4e:84:ce:32:10:
                    50:a2:e5:43:f5:d6:e7:97:81:67:bb:b6:d9:0c:59:
                    f1:18:e3:9c:03:b4:00:a8:00:56:5c:5d:cb:59:f5:
                    48:58:c1:e5:46:02:74:03:f3:1b:07:66:ad:5c:c8:
                    1e:48:94:b2:bf:03:e1:6c:fa:a1:ae:6c:17:d6:c1:
                    25:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9F:B6:77:F0:0F:40:AE:C8:7E:D7:CE:89:7D:3E:53:3E:FD:06:AA
            X509v3 Authority Key Identifier:
                keyid:03:36:0C:35:4B:F0:A7:6D:3F:0C:60:22:D9:02:E9:A4:E3:01:E5:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/03360C354BF0A76D3F0C6022D902E9A4E301E510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03360C354BF0A76D3F0C6022D902E9A4E301E510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tqVqfJ2tm6XQn7vuSGz2eoQoj7X1mCfJWmBM42dpaCe/0/323830343a383464303a3a2f33322d3334203d3e20323732353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:8d:4a:2c:74:26:fb:c4:fe:55:da:91:c1:74:73:bb:cf:99:
         15:eb:1a:35:2a:34:94:a2:2a:ba:26:fa:81:c1:06:e0:08:74:
         aa:1b:61:4c:6c:2c:ff:e9:04:64:cd:3f:4e:fd:d9:83:ff:ce:
         ab:11:b0:51:d4:4e:f5:ba:4b:88:98:1b:29:1f:b9:81:9f:45:
         e4:b6:fe:9e:24:0b:8f:ef:e7:1f:9d:e1:d5:f7:7b:fd:ea:45:
         64:79:50:98:fe:31:75:f5:25:9a:ab:62:f0:f8:c7:4d:64:b3:
         29:c6:65:67:0b:87:15:e7:1f:2f:3d:40:8d:0d:16:eb:93:ae:
         c3:dd:d5:89:19:1f:40:c5:de:db:c8:22:be:65:26:d2:5c:34:
         8b:b6:1d:c9:d2:bf:cc:4e:57:27:ed:cb:66:26:52:56:65:ef:
         3f:3f:74:c4:93:bd:ba:4e:95:3d:5f:82:10:66:09:ee:c2:05:
         a0:c4:54:a6:6a:6c:7a:93:bb:7f:6c:51:4b:c4:1a:30:b2:fe:
         89:4e:13:81:dc:b3:dd:2a:55:79:cf:de:2f:32:0f:de:ce:3b:
         72:c5:e7:ad:e8:fa:a8:cf:5f:9f:02:0d:0d:74:2f:47:99:96:
         20:0f:9d:70:de:dd:fa:43:94:cd:1a:13:52:00:51:8c:0b:ec:
         6a:05:84:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:31:27 2025 by rpki-client