Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a3a2f33322d313238203d3e20323731343239.roa
File:                     323830343a376236343a3a2f33322d313238203d3e20323731343239.roa (raw, json)
Hash identifier:          XolUHUlY6jdNuIxVFQjUhMZWs3eUyRBUMNsOx6ZqbwA=
Subject key identifier:   BB:E0:48:03:9F:BA:A3:0A:C1:86:5F:DF:13:9E:7A:62:40:D9:46:21
Certificate issuer:       /CN=1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7
Certificate serial:       77688D02B991515E70266FAFB37B60CA731CE13A
Authority key identifier: 1B:B5:40:69:7C:6A:86:FD:B0:EE:C3:1F:1C:4D:55:D4:99:F3:EC:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a3a2f33322d313238203d3e20323731343239.roa
Signing time:             Mon 13 Oct 2025 16:47:50 +0000
ROA not before:           Mon 13 Oct 2025 16:42:50 +0000
ROA not after:            Mon 12 Oct 2026 16:47:50 +0000
asID:                     271429
IP address blocks:        2804:7b64::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.crl
                          rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:68:8d:02:b9:91:51:5e:70:26:6f:af:b3:7b:60:ca:73:1c:e1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7
        Validity
            Not Before: Oct 13 16:42:50 2025 GMT
            Not After : Oct 12 16:47:50 2026 GMT
        Subject: CN=BBE048039FBAA30AC1865FDF139E7A6240D94621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0f:9b:28:4c:b1:ae:ee:55:a5:d2:11:07:75:
                    42:07:52:ec:2d:7c:4b:09:36:d0:9e:6c:31:19:4a:
                    df:f1:b4:c2:4c:f6:f1:09:cb:17:28:9f:8e:9d:aa:
                    d5:77:cb:fe:ea:14:08:05:71:76:af:09:bd:41:05:
                    7c:f5:a1:d5:ce:2d:e7:f4:42:6e:f1:4e:a7:12:b5:
                    3c:23:dc:e6:21:4e:57:32:d2:9a:c5:9e:9a:ca:a1:
                    db:a2:92:9c:07:81:a5:9d:c5:3d:0d:c8:26:25:b2:
                    9c:2a:de:5c:ea:bd:c8:8d:36:55:52:d2:a6:57:93:
                    94:33:42:01:16:8b:a2:9a:6a:95:f6:e2:18:ac:48:
                    9e:5d:c4:ee:6c:54:5a:4e:2c:19:06:da:17:3e:e3:
                    3d:0a:98:91:a4:85:d3:d3:ff:d7:aa:84:7b:22:62:
                    14:ae:97:e5:f3:1d:08:a3:e9:81:63:ad:0b:76:be:
                    12:1f:5d:ff:78:40:3d:3b:a9:f5:53:14:6e:31:bb:
                    06:bc:75:f7:f2:8c:a9:76:38:fe:49:ff:a8:d7:12:
                    d7:4a:76:d8:7c:bc:5b:b4:c3:80:d4:12:70:64:df:
                    a4:14:ce:b4:f3:c0:a8:79:03:97:8c:35:41:7d:89:
                    fa:e5:c9:5d:2e:d6:eb:8a:5a:6c:e7:61:c5:bd:8e:
                    0a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E0:48:03:9F:BA:A3:0A:C1:86:5F:DF:13:9E:7A:62:40:D9:46:21
            X509v3 Authority Key Identifier:
                keyid:1B:B5:40:69:7C:6A:86:FD:B0:EE:C3:1F:1C:4D:55:D4:99:F3:EC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB540697C6A86FDB0EEC31F1C4D55D499F3ECD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ahKkg64Hph34SVepFo6dULZVMGaCLCqDP4JJPiSLxx9/0/323830343a376236343a3a2f33322d313238203d3e20323731343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b64::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:60:f9:dc:d2:1e:cb:4e:48:ee:81:fd:59:b5:93:61:43:cc:
         9e:32:1f:8a:2e:49:9e:b0:6d:e8:89:70:4f:21:65:1a:7f:ba:
         4a:be:3a:4e:4e:8d:21:4c:ac:32:16:96:e1:ff:80:ab:45:35:
         c9:ba:71:a1:29:06:ab:9c:42:17:8e:51:56:4f:eb:01:71:09:
         34:7e:ff:f8:e5:0c:a8:d9:c0:62:f0:ff:0f:d4:2c:c7:95:af:
         0d:26:9f:33:48:ff:b5:2c:12:ff:5f:59:94:a8:0c:8c:5c:d6:
         2c:21:85:18:2f:c6:97:29:8a:6f:1c:67:f0:60:54:34:ac:81:
         64:41:3a:c5:3f:05:fe:d4:07:4f:e5:63:29:1d:8b:5f:00:4c:
         ed:f5:22:9a:86:0f:ba:f7:a3:4a:ff:95:40:7d:a8:58:d0:b3:
         6d:6a:b7:49:25:ba:92:ea:5d:4a:9f:71:50:a8:29:17:7d:06:
         8b:fc:60:5a:43:ad:b8:cb:0f:38:c6:90:d9:fa:67:1c:8e:d5:
         67:aa:01:d2:b5:b0:07:99:95:9e:d0:98:42:07:4c:ac:61:34:
         cb:0c:d7:e1:d3:7e:56:18:37:b9:da:71:d6:3d:49:d4:03:5e:
         fd:9b:e9:87:37:eb:4d:41:57:a5:c8:1e:9b:78:c3:f0:06:ae:
         a4:61:dd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:10:04 2025 by rpki-client