Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a3a2f33322d3332203d3e20323733333339.roa
File:                     323830343a386432383a3a2f33322d3332203d3e20323733333339.roa (raw, json)
Hash identifier:          L1UF3zEiqYnJAlA2Azz55TEbyDNNGJXd+kTpRkni9a8=
Subject key identifier:   25:5D:79:89:C9:D3:CF:2B:08:3A:0E:AE:9E:A5:DE:17:82:57:CB:A4
Certificate issuer:       /CN=A7C3FCD410E53CBCF7F64DC367269EF9625997A7
Certificate serial:       0537451C28AB164399B42E1DB303958E4C3D63B1
Authority key identifier: A7:C3:FC:D4:10:E5:3C:BC:F7:F6:4D:C3:67:26:9E:F9:62:59:97:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a3a2f33322d3332203d3e20323733333339.roa
Signing time:             Fri 05 Sep 2025 16:32:41 +0000
ROA not before:           Fri 05 Sep 2025 16:27:41 +0000
ROA not after:            Fri 04 Sep 2026 16:32:41 +0000
asID:                     273339
IP address blocks:        2804:8d28::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.crl
                          rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:37:45:1c:28:ab:16:43:99:b4:2e:1d:b3:03:95:8e:4c:3d:63:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7C3FCD410E53CBCF7F64DC367269EF9625997A7
        Validity
            Not Before: Sep  5 16:27:41 2025 GMT
            Not After : Sep  4 16:32:41 2026 GMT
        Subject: CN=255D7989C9D3CF2B083A0EAE9EA5DE178257CBA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:ed:94:57:82:e8:a4:d9:92:89:3c:22:a7:
                    8b:95:ec:30:c4:14:39:79:39:18:0f:3e:81:f3:ab:
                    2a:5a:d2:db:a5:a1:66:a4:41:00:b3:6c:f0:63:64:
                    cf:be:b3:a0:18:8b:a7:e6:c4:1d:fe:22:5a:b8:0e:
                    3d:29:a8:e5:a9:1c:61:86:da:60:a0:ad:40:b4:1a:
                    f8:00:8e:ab:46:1c:9c:32:5f:33:09:68:b2:51:ca:
                    7e:00:86:17:ee:6b:b8:83:c9:e2:39:16:98:9a:87:
                    0d:59:14:03:f4:0a:db:7f:44:35:6e:5a:97:0f:ba:
                    b9:13:d0:ba:ca:d8:d7:a5:87:d6:05:37:cc:e0:55:
                    24:5b:1b:f1:bc:0d:3c:e4:57:90:61:f8:fa:08:57:
                    0e:94:5a:88:24:93:eb:8e:9a:3f:45:c2:d2:95:55:
                    0b:4f:56:ac:8b:5d:9f:85:01:3b:15:b4:b1:35:f0:
                    1f:b7:ad:14:78:ec:2b:b8:59:41:6d:fb:6d:a3:07:
                    05:0d:cc:d7:5c:1d:d4:1e:07:78:ab:f2:e3:c0:37:
                    89:c2:44:4c:70:35:ea:59:3f:b1:2e:86:de:5c:d6:
                    3b:e4:71:c4:a8:2b:49:53:6f:19:47:ff:7e:0c:de:
                    7e:58:12:14:d4:e7:07:55:36:1b:64:27:f8:2b:69:
                    36:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5D:79:89:C9:D3:CF:2B:08:3A:0E:AE:9E:A5:DE:17:82:57:CB:A4
            X509v3 Authority Key Identifier:
                keyid:A7:C3:FC:D4:10:E5:3C:BC:F7:F6:4D:C3:67:26:9E:F9:62:59:97:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C3FCD410E53CBCF7F64DC367269EF9625997A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a3a2f33322d3332203d3e20323733333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d28::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:3e:ad:79:54:85:1d:10:18:29:f3:bd:a7:26:43:cc:27:10:
         9a:0f:fd:66:57:1e:6f:d5:bc:8d:ac:08:90:41:1c:d3:66:1f:
         8c:fb:a1:46:1a:30:96:dc:5e:db:17:dc:15:6d:96:46:60:c9:
         f0:7d:3b:66:b7:38:7b:fc:3e:ba:65:7c:cb:52:48:90:c3:bd:
         9a:0c:05:d8:63:ca:ec:91:92:49:5d:84:e2:08:b0:9d:b4:47:
         7d:af:4c:32:ae:75:25:58:a4:37:c7:50:67:2f:aa:dc:fe:d8:
         41:5e:b1:57:84:c2:41:a0:3c:c8:88:76:ab:7e:ad:c8:71:b0:
         a6:f3:55:56:d7:9b:3e:c2:2a:96:3d:a4:b4:51:6d:59:f1:42:
         c3:c0:db:47:a7:20:d6:37:05:8e:3b:e3:1a:45:19:49:4c:63:
         83:b2:ca:2e:9d:f4:ec:b0:f2:b3:e6:f6:bc:2b:47:45:8d:d3:
         b9:ef:97:11:ab:21:9c:d7:1d:2c:f2:30:26:8f:99:6c:a3:e8:
         2d:55:50:73:cc:b6:15:f9:02:cd:77:6c:e5:5b:2b:61:6d:b5:
         71:d6:cd:48:4d:78:16:08:78:9b:be:0b:3b:fb:90:b0:7f:a5:
         23:2d:b7:63:6d:be:97:d5:d6:22:3e:62:b2:b8:89:50:27:a3:
         ed:a6:74:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:30:23 2025 by rpki-client