Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/323830343a363732383a393030303a3a2f34302d3430203d3e20323639363038.roa
File:                     323830343a363732383a393030303a3a2f34302d3430203d3e20323639363038.roa (raw, json)
Hash identifier:          fBL1JWE9Y4mLMxX4kamehY/Uz9XmTMPYb6jHdARZH60=
Subject key identifier:   69:39:1E:5D:FE:03:A4:9B:7D:E5:11:F8:05:98:5C:B6:5F:DB:8C:52
Certificate issuer:       /CN=141D0D9BF25D7F0F2EE720E63711904974FDDC7F
Certificate serial:       254F93E2FEB6491D7360234D430AF7B4B1DF9E74
Authority key identifier: 14:1D:0D:9B:F2:5D:7F:0F:2E:E7:20:E6:37:11:90:49:74:FD:DC:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/323830343a363732383a393030303a3a2f34302d3430203d3e20323639363038.roa
Signing time:             Tue 30 Sep 2025 13:13:05 +0000
ROA not before:           Tue 30 Sep 2025 13:08:05 +0000
ROA not after:            Tue 29 Sep 2026 13:13:05 +0000
asID:                     269608
IP address blocks:        2804:6728:9000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.crl
                          rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 23:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4f:93:e2:fe:b6:49:1d:73:60:23:4d:43:0a:f7:b4:b1:df:9e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=141D0D9BF25D7F0F2EE720E63711904974FDDC7F
        Validity
            Not Before: Sep 30 13:08:05 2025 GMT
            Not After : Sep 29 13:13:05 2026 GMT
        Subject: CN=69391E5DFE03A49B7DE511F805985CB65FDB8C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:94:72:a0:28:89:a5:d3:65:49:50:c6:04:
                    44:f6:bf:b8:98:50:24:74:3c:56:8b:b8:14:02:77:
                    e0:0d:e2:a7:33:0f:af:98:7a:70:bb:ac:e3:de:9e:
                    f9:2e:86:17:1f:e2:f3:c8:d7:44:fd:77:ed:88:5c:
                    6d:85:33:3b:92:00:c3:31:7d:7d:94:ac:52:fb:26:
                    0e:07:b5:3a:c3:e5:5b:73:50:fa:8f:91:26:19:d5:
                    41:78:bd:e4:4f:b1:a4:9e:ec:d5:7f:c8:18:8d:94:
                    20:51:6b:9c:90:35:91:24:ae:6b:21:74:b2:7d:f6:
                    80:c7:92:eb:61:4b:00:e8:7f:fd:6a:fa:84:2b:64:
                    21:a3:5b:08:72:c0:d9:c3:35:6e:2f:d6:0d:2f:8d:
                    91:d3:14:1f:16:fd:2a:ca:74:d0:f7:67:04:73:98:
                    a3:45:f8:f9:53:28:9b:08:cb:14:70:2f:4d:6a:66:
                    b6:60:76:32:02:63:a6:6a:a2:72:c8:1a:6a:32:fb:
                    5b:d6:6d:d5:97:6d:71:a2:c5:ae:09:44:6f:13:d6:
                    d7:51:76:6d:b2:0c:3b:ec:cd:57:fb:5d:94:93:e8:
                    36:a4:93:b9:93:18:f0:16:0e:bb:27:be:19:b9:3c:
                    d4:b0:5f:47:8c:42:6e:7c:d7:8b:4e:ff:10:cb:43:
                    6f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:39:1E:5D:FE:03:A4:9B:7D:E5:11:F8:05:98:5C:B6:5F:DB:8C:52
            X509v3 Authority Key Identifier:
                keyid:14:1D:0D:9B:F2:5D:7F:0F:2E:E7:20:E6:37:11:90:49:74:FD:DC:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/141D0D9BF25D7F0F2EE720E63711904974FDDC7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/323830343a363732383a393030303a3a2f34302d3430203d3e20323639363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6728:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:bb:43:df:7f:d3:83:ca:d5:09:c6:21:2c:dd:76:32:5d:e3:
         33:80:0d:18:f6:a9:49:e5:21:8b:32:e3:16:cb:a6:ff:b5:e2:
         79:1c:8a:e1:04:42:01:0b:09:dd:8b:5b:14:55:79:7c:b4:c2:
         67:21:c1:6a:2c:8c:fa:23:db:d4:3a:3e:6e:7d:ac:59:fe:d8:
         3e:d6:75:46:1e:b7:19:9b:08:fe:48:70:0e:cf:a0:99:52:9c:
         75:e9:61:7e:3d:38:12:84:91:8e:b7:74:e7:a7:d0:eb:e5:67:
         82:f5:34:60:6c:b1:3e:1a:4f:e1:61:ef:8f:02:58:19:ca:8f:
         d2:37:9f:49:23:9b:db:87:a9:97:39:cb:ea:8e:a7:d5:e0:08:
         4b:19:bf:e0:27:ae:ee:05:b0:47:fc:d6:5c:79:12:b6:ac:de:
         06:dc:94:c2:e4:a0:23:34:8a:15:70:c2:7b:90:f4:95:04:de:
         ec:79:3a:b4:f1:f7:24:28:8e:05:3a:dc:b0:8a:15:3f:27:f6:
         d8:32:3d:76:69:34:61:1d:75:4b:02:42:98:1a:26:b0:cd:36:
         0b:0c:41:92:53:9c:b0:e1:60:d2:7b:d7:a3:da:e0:9e:20:e2:
         35:88:33:22:02:f9:c3:ed:6b:88:18:0d:28:83:86:77:ad:86:
         4a:cc:8e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:15:15 2025 by rpki-client