Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/323830343a383034343a3a2f33322d313238203d3e20323731373430.roa
File:                     323830343a383034343a3a2f33322d313238203d3e20323731373430.roa (raw, json)
Hash identifier:          Ya/47MOAyoHpeLSDa+2hJ2bWgEyRz3FHr6pezB/J6Eo=
Subject key identifier:   68:30:1C:DC:8B:A0:91:56:81:2A:AA:17:B9:2B:2B:AB:3B:62:DF:8F
Certificate issuer:       /CN=BB69C30AFE3000AA40C5CA42919493B9257CBF23
Certificate serial:       34BBF420AF1CA6B7388FA76B8231D002AFAD4CEB
Authority key identifier: BB:69:C3:0A:FE:30:00:AA:40:C5:CA:42:91:94:93:B9:25:7C:BF:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB69C30AFE3000AA40C5CA42919493B9257CBF23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/323830343a383034343a3a2f33322d313238203d3e20323731373430.roa
Signing time:             Fri 03 Oct 2025 19:24:11 +0000
ROA not before:           Fri 03 Oct 2025 19:19:11 +0000
ROA not after:            Fri 02 Oct 2026 19:24:11 +0000
asID:                     271740
IP address blocks:        2804:8044::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/BB69C30AFE3000AA40C5CA42919493B9257CBF23.crl
                          rsync://rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/BB69C30AFE3000AA40C5CA42919493B9257CBF23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB69C30AFE3000AA40C5CA42919493B9257CBF23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bb:f4:20:af:1c:a6:b7:38:8f:a7:6b:82:31:d0:02:af:ad:4c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB69C30AFE3000AA40C5CA42919493B9257CBF23
        Validity
            Not Before: Oct  3 19:19:11 2025 GMT
            Not After : Oct  2 19:24:11 2026 GMT
        Subject: CN=68301CDC8BA09156812AAA17B92B2BAB3B62DF8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:91:cf:53:46:0d:39:e7:68:5e:7e:24:d9:
                    60:e4:6c:58:9b:14:68:57:7e:c1:9b:22:f0:19:7c:
                    11:c2:79:53:e0:01:9c:02:fc:2e:36:59:93:71:92:
                    66:32:b4:76:bd:7a:23:26:f7:8a:e2:c6:33:28:4c:
                    32:56:41:47:9a:75:88:e3:23:62:c1:bd:2e:94:13:
                    0d:65:3b:f9:2d:4a:e1:e8:7e:ac:94:ca:c9:fc:eb:
                    76:5c:d9:ff:7e:70:08:29:dd:fc:4a:f7:8a:2c:31:
                    ab:b7:a4:98:57:49:f3:75:a6:3b:cb:b1:3c:b1:d3:
                    82:0b:73:12:d4:66:fb:30:31:f5:fb:ad:e1:38:cb:
                    8f:5d:48:78:90:dc:c3:9a:4a:67:ed:f1:89:0d:5c:
                    48:03:fd:fc:86:ae:2c:49:9f:10:0a:e0:d6:43:44:
                    b1:4b:27:a6:2f:86:13:99:ce:62:d4:94:e8:b8:8f:
                    ce:24:b9:c9:c2:54:6e:c1:ec:89:01:7d:af:ec:0f:
                    21:2a:3c:f1:5c:b2:0d:6c:b1:77:08:3c:86:c1:bd:
                    86:11:82:2d:2d:0e:d2:9c:9d:ce:37:fd:62:f8:04:
                    36:5e:e3:7b:dc:f6:fc:0e:01:fc:c9:9c:e6:94:f2:
                    e3:06:6b:e4:6e:34:f3:26:3b:33:69:fa:72:a6:ce:
                    80:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:30:1C:DC:8B:A0:91:56:81:2A:AA:17:B9:2B:2B:AB:3B:62:DF:8F
            X509v3 Authority Key Identifier:
                keyid:BB:69:C3:0A:FE:30:00:AA:40:C5:CA:42:91:94:93:B9:25:7C:BF:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/BB69C30AFE3000AA40C5CA42919493B9257CBF23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB69C30AFE3000AA40C5CA42919493B9257CBF23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7SJGduP7QWRqCRvTofYhEqkdEYrfy1a8WXSv9jf935Ce/0/323830343a383034343a3a2f33322d313238203d3e20323731373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8044::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:3a:e7:0f:42:0b:c9:35:62:59:d1:0c:a0:ba:0e:d4:13:97:
         d0:59:56:bc:0d:08:a2:be:0b:5d:9c:cd:07:eb:b8:a6:8d:37:
         94:fb:ae:77:87:2e:6d:40:0f:57:c2:e7:33:ee:f2:ef:8c:54:
         ed:8e:c5:a6:fe:60:97:de:b6:9e:4d:46:16:f9:b0:fd:86:01:
         21:79:64:cd:fa:14:f6:c9:3d:83:02:cb:f7:3a:57:1d:59:a1:
         fd:30:da:15:05:52:7d:8e:65:f7:eb:29:a7:a3:f2:6b:d3:8f:
         d1:e1:9a:e3:4b:ef:e3:d5:50:4f:12:4f:26:cf:78:cd:cd:58:
         66:37:52:37:a6:5e:29:06:00:35:2e:ad:52:80:f7:fa:72:a9:
         29:b0:74:1c:1e:5d:79:06:d3:3c:a5:1b:37:3c:59:ea:9a:ac:
         06:46:b7:ff:b4:cb:9b:21:32:78:b9:1a:32:71:f7:b2:8a:2b:
         a4:d1:e4:a3:9c:1e:75:b3:da:75:55:6d:8f:95:09:42:cb:8a:
         71:5f:96:dd:7d:13:21:e3:9c:82:9d:66:c9:7e:bd:07:da:9f:
         88:e4:7b:4c:f2:af:c4:68:be:07:52:73:95:8f:4b:0c:55:ec:
         ad:d5:87:de:3b:7a:f4:78:45:57:1a:a1:00:02:f1:47:61:fd:
         44:ad:2e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:26:00 2025 by rpki-client