Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/323830343a346630633a666530303a3a2f34302d3430203d3e20323638333030.roa
File:                     323830343a346630633a666530303a3a2f34302d3430203d3e20323638333030.roa (raw, json)
Hash identifier:          jUt5QzrAK2ErJdIV3fcOyXqdu1t+hX80/yu/yYbj3Ik=
Subject key identifier:   40:06:E4:32:C4:FB:A2:22:72:92:49:C7:44:CE:43:1E:27:72:47:82
Certificate issuer:       /CN=443681E3ADAB56666689B0FFC0971A173CEEB409
Certificate serial:       7803E136D99F5B353C84243B8DA2A5FD88FCC857
Authority key identifier: 44:36:81:E3:AD:AB:56:66:66:89:B0:FF:C0:97:1A:17:3C:EE:B4:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/323830343a346630633a666530303a3a2f34302d3430203d3e20323638333030.roa
Signing time:             Mon 01 Sep 2025 14:58:20 +0000
ROA not before:           Mon 01 Sep 2025 14:53:20 +0000
ROA not after:            Mon 31 Aug 2026 14:58:20 +0000
asID:                     268300
IP address blocks:        2804:4f0c:fe00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.crl
                          rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:03:e1:36:d9:9f:5b:35:3c:84:24:3b:8d:a2:a5:fd:88:fc:c8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443681E3ADAB56666689B0FFC0971A173CEEB409
        Validity
            Not Before: Sep  1 14:53:20 2025 GMT
            Not After : Aug 31 14:58:20 2026 GMT
        Subject: CN=4006E432C4FBA222729249C744CE431E27724782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bf:de:12:db:64:25:a7:12:64:fb:8b:77:23:
                    53:ae:8d:c6:91:fa:ae:e4:55:ca:7f:b2:66:44:e4:
                    bc:7a:ac:80:bb:c0:04:f6:68:52:ab:e6:68:88:ce:
                    0f:72:4a:3f:ce:ec:ff:e4:c3:3a:ed:99:5b:11:81:
                    8e:82:68:bf:9c:39:d9:8d:c1:27:5b:3e:a5:80:75:
                    42:6b:c0:d6:99:0e:02:3f:38:83:15:ae:e2:82:18:
                    80:e2:74:4d:72:4f:18:ab:a3:c2:e2:ac:5a:f4:d8:
                    65:83:51:f7:8f:dc:11:6e:8f:88:a2:6d:74:1a:08:
                    ce:fb:90:05:c6:e5:7a:7b:69:e5:74:59:c4:b9:18:
                    c5:86:76:6d:7d:9a:23:64:bb:48:40:78:7d:0e:45:
                    fc:43:2d:67:70:66:3b:2b:2f:64:b2:bc:ff:aa:a5:
                    62:80:34:38:1c:41:b6:c9:09:51:f9:7d:b5:54:ea:
                    aa:52:ac:d2:00:80:1d:96:89:d2:c7:d8:82:7a:22:
                    5f:09:73:5e:44:2f:56:86:04:ab:25:7a:35:70:7e:
                    74:df:a3:99:ee:b2:0f:7d:b2:1e:f8:c8:4d:96:b7:
                    35:e9:e3:8a:e1:30:66:45:6b:aa:6b:68:6a:30:45:
                    60:bf:eb:be:7c:41:86:81:2b:ef:dc:7c:ed:5d:fe:
                    4d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:06:E4:32:C4:FB:A2:22:72:92:49:C7:44:CE:43:1E:27:72:47:82
            X509v3 Authority Key Identifier:
                keyid:44:36:81:E3:AD:AB:56:66:66:89:B0:FF:C0:97:1A:17:3C:EE:B4:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/323830343a346630633a666530303a3a2f34302d3430203d3e20323638333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f0c:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:16:0b:6a:9b:d4:65:e2:74:df:b3:65:bf:2b:ad:89:50:07:
         d3:6f:77:97:63:f7:22:fa:d4:f5:3f:47:2d:6c:61:3c:c6:5c:
         8e:95:ad:c3:9a:21:9c:a9:83:3f:b3:aa:50:38:68:7e:05:2a:
         b1:16:0e:30:7c:18:bb:a5:a1:86:ca:d1:2b:a6:fa:35:b3:4c:
         5f:99:ac:7b:ad:7b:2d:73:a7:db:08:56:f0:b4:39:3e:be:6f:
         82:c2:93:3c:5f:6a:37:37:45:de:e7:a5:64:63:47:03:d8:7c:
         0f:00:f5:40:6a:96:2d:3c:b7:18:00:22:42:5b:80:80:9e:0f:
         27:12:bf:b6:6f:e4:30:96:69:25:96:ed:c9:2f:f2:52:7c:04:
         6a:e4:77:96:02:6c:0c:bb:27:11:d3:31:cf:e5:c2:f8:7f:28:
         61:fd:12:a2:f6:4d:47:ac:c6:46:7a:4f:6a:ea:2a:83:24:73:
         ef:1a:54:af:59:66:a9:7a:cb:23:22:12:22:ad:78:2f:92:7a:
         5d:6b:ee:5c:7e:89:36:b6:7f:69:71:10:24:38:6b:d1:c9:ea:
         47:77:f2:2c:bb:47:88:61:63:be:d2:09:8d:50:4b:2b:34:f3:
         04:d9:5c:66:e2:44:c2:ba:57:5e:11:2d:bb:69:9a:95:b9:87:
         b2:4e:c9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:40:23 2025 by rpki-client