Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/323830343a326361343a3a2f33322d3430203d3e20323635323332.roa
File:                     323830343a326361343a3a2f33322d3430203d3e20323635323332.roa (raw, json)
Hash identifier:          6cwMVC3ddk7R3SpaH2JcunIc09MYZVKxWu6b9AbSm2k=
Subject key identifier:   31:D3:1D:79:FC:55:92:92:E4:E2:B0:48:77:A9:1F:66:82:57:EF:9B
Certificate issuer:       /CN=F94C7199AB41496AEFC27C30365DF0A239117A73
Certificate serial:       350A7E79BB5AE7D3AF707FFF145761ED6C498F1F
Authority key identifier: F9:4C:71:99:AB:41:49:6A:EF:C2:7C:30:36:5D:F0:A2:39:11:7A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F94C7199AB41496AEFC27C30365DF0A239117A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/323830343a326361343a3a2f33322d3430203d3e20323635323332.roa
Signing time:             Tue 09 Sep 2025 20:47:35 +0000
ROA not before:           Tue 09 Sep 2025 20:42:35 +0000
ROA not after:            Tue 08 Sep 2026 20:47:35 +0000
asID:                     265232
IP address blocks:        2804:2ca4::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/F94C7199AB41496AEFC27C30365DF0A239117A73.crl
                          rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/F94C7199AB41496AEFC27C30365DF0A239117A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F94C7199AB41496AEFC27C30365DF0A239117A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0a:7e:79:bb:5a:e7:d3:af:70:7f:ff:14:57:61:ed:6c:49:8f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F94C7199AB41496AEFC27C30365DF0A239117A73
        Validity
            Not Before: Sep  9 20:42:35 2025 GMT
            Not After : Sep  8 20:47:35 2026 GMT
        Subject: CN=31D31D79FC559292E4E2B04877A91F668257EF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:52:6b:49:c2:ba:66:19:d3:f5:40:b0:55:bb:
                    01:ac:fb:b9:a3:27:fb:bf:de:16:61:59:12:b9:07:
                    d7:6e:69:e2:b2:ff:34:1b:9e:ae:17:c6:d8:29:ab:
                    54:01:86:52:93:9f:62:2a:4b:98:ad:31:06:71:e2:
                    29:ba:47:84:f6:0c:38:ec:79:a8:bc:12:85:ea:e0:
                    c7:ef:66:1b:7b:d8:91:ce:95:c5:36:19:2a:ab:07:
                    09:cc:7d:6a:1f:35:b8:8f:bf:95:27:66:57:f8:30:
                    6c:cf:40:e4:46:a6:b5:71:63:61:da:65:7d:59:4b:
                    61:aa:cb:80:f3:80:67:c4:85:06:18:30:8d:75:40:
                    48:99:94:7c:7d:73:1b:27:f4:05:e0:34:48:52:55:
                    9e:8d:3e:45:e6:14:15:58:a4:54:d7:60:90:5d:ff:
                    51:ab:91:15:2d:bb:af:d3:df:09:35:ad:f9:d8:6c:
                    97:0b:06:63:00:d5:8e:6a:78:c8:b5:01:3b:2f:25:
                    6a:e2:d0:9d:21:f2:66:1f:52:1f:34:f4:d5:54:e7:
                    c0:37:e7:5d:df:85:f0:93:a5:7a:bc:de:99:57:b4:
                    5a:ac:a9:02:04:7d:6c:61:aa:b6:9e:ad:9e:2c:2a:
                    c2:ed:fe:1c:7e:25:b1:4b:31:30:af:31:b9:c6:1e:
                    6d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D3:1D:79:FC:55:92:92:E4:E2:B0:48:77:A9:1F:66:82:57:EF:9B
            X509v3 Authority Key Identifier:
                keyid:F9:4C:71:99:AB:41:49:6A:EF:C2:7C:30:36:5D:F0:A2:39:11:7A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/F94C7199AB41496AEFC27C30365DF0A239117A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F94C7199AB41496AEFC27C30365DF0A239117A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/323830343a326361343a3a2f33322d3430203d3e20323635323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ca4::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:71:95:8c:64:c1:d3:b1:dc:ac:57:57:2d:ed:84:3e:5d:59:
         79:a9:8f:0c:a4:08:35:52:ad:40:8e:11:92:e0:0f:39:46:0b:
         f4:09:28:f8:3d:d0:d8:44:30:ce:6b:3e:5d:8e:3e:be:29:88:
         e4:26:7d:72:a5:1a:d1:89:dc:6a:1c:f8:3c:d3:09:af:db:d2:
         e3:45:05:08:69:b9:75:83:cf:f5:42:b5:e7:7e:7d:4f:18:2c:
         58:b1:7f:f2:51:90:f4:9b:cf:c7:be:6e:89:55:07:1c:df:58:
         ee:f9:f2:a2:36:d9:66:23:1f:e8:f4:a4:d9:b1:25:99:c0:b8:
         23:b8:d9:5a:c2:34:d8:87:85:3a:46:a6:42:4e:82:35:41:d5:
         8d:f5:5c:d4:d9:fa:ae:05:ca:ef:51:b6:ce:b1:9f:5b:13:b1:
         46:fa:3c:a7:81:89:80:03:79:64:7c:a2:fe:fd:3b:8e:a2:fa:
         fe:a5:6b:5a:a4:aa:35:db:02:63:02:a4:56:34:44:f1:4b:c5:
         50:b9:9a:66:f4:5f:00:58:87:be:f6:16:af:dd:d4:02:65:8d:
         53:d3:7a:d7:46:44:c2:a9:11:9e:ae:0b:6e:08:b0:09:a5:34:
         3f:e4:7b:81:52:40:2e:35:ec:04:5b:9a:13:83:00:6a:69:80:
         52:8e:a9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:56:38 2025 by rpki-client