Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87L2UMDHfRRePGsYAygtFuruKefmGuH6gqRV1fyHcetA/0/323830343a393466343a3a2f33322d3438203d3e20323734343839.roa
File:                     323830343a393466343a3a2f33322d3438203d3e20323734343839.roa (raw, json)
Hash identifier:          z8neVzcufuKvLLt06o+YK2TfR+MimiNXIQbGgxhpS3w=
Subject key identifier:   91:A5:B7:84:EF:E0:5C:AB:C1:65:11:2F:72:BB:79:63:BF:43:5A:E6
Certificate issuer:       /CN=37072EA273515CFCD5AA9BB85FAD1C138E10EE4C
Certificate serial:       1BEF4C20CBDEA1A333E7B20DF1E8EC640D8766F4
Authority key identifier: 37:07:2E:A2:73:51:5C:FC:D5:AA:9B:B8:5F:AD:1C:13:8E:10:EE:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37072EA273515CFCD5AA9BB85FAD1C138E10EE4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87L2UMDHfRRePGsYAygtFuruKefmGuH6gqRV1fyHcetA/0/323830343a393466343a3a2f33322d3438203d3e20323734343839.roa
Signing time:             Mon 13 Oct 2025 12:16:20 +0000
ROA not before:           Mon 13 Oct 2025 12:11:20 +0000
ROA not after:            Mon 12 Oct 2026 12:16:20 +0000
asID:                     274489
IP address blocks:        2804:94f4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87L2UMDHfRRePGsYAygtFuruKefmGuH6gqRV1fyHcetA/0/37072EA273515CFCD5AA9BB85FAD1C138E10EE4C.crl
                          rsync://rpki-repo.registro.br/repo/87L2UMDHfRRePGsYAygtFuruKefmGuH6gqRV1fyHcetA/0/37072EA273515CFCD5AA9BB85FAD1C138E10EE4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37072EA273515CFCD5AA9BB85FAD1C138E10EE4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ef:4c:20:cb:de:a1:a3:33:e7:b2:0d:f1:e8:ec:64:0d:87:66:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37072EA273515CFCD5AA9BB85FAD1C138E10EE4C
        Validity
            Not Before: Oct 13 12:11:20 2025 GMT
            Not After : Oct 12 12:16:20 2026 GMT
        Subject: CN=91A5B784EFE05CABC165112F72BB7963BF435AE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:f1:ed:3e:98:46:7c:ea:50:a1:06:9a:40:
                    35:4a:cc:f6:0f:e5:ae:fb:a6:df:61:b2:52:be:25:
                    38:49:a0:1b:ed:7f:46:a1:17:4b:93:ad:02:8a:6b:
                    75:5f:20:bd:20:fc:27:03:b8:8b:e1:a1:5a:1a:a2:
                    1f:fa:0a:24:fc:bd:f4:43:78:be:f3:78:9a:19:63:
                    9c:68:aa:29:6c:84:cc:fd:7e:c4:78:34:7a:53:bc:
                    51:3d:12:b6:cf:5a:28:27:7c:fd:74:8f:66:38:4a:
                    b9:f6:0d:f5:83:55:34:48:0c:6e:11:f2:4f:ee:56:
                    a6:7f:cc:dd:03:f1:50:af:45:84:7f:fb:42:11:2e:
                    25:de:57:a9:bf:c8:dc:46:a6:bd:90:b7:9b:bf:1f:
                    e0:d5:01:ef:58:ec:4a:48:33:93:f3:08:4f:36:85:
                    24:03:bc:09:fb:d6:1f:52:0b:b2:58:26:c2:df:44:
                    2e:ba:11:bd:ec:c1:f4:67:c8:98:56:cf:00:29:d3:
                    bd:27:cb:25:2a:53:75:4d:5e:08:65:83:d3:c4:2d:
                    32:f4:e9:ef:76:3b:e7:c4:7d:20:3e:c9:12:f4:7a:
                    53:54:50:79:ce:6d:71:89:48:f6:70:6b:3e:45:0e:
                    e5:06:0a:c1:0a:76:1f:ee:92:b1:54:ac:12:94:cc:
                    05:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A5:B7:84:EF:E0:5C:AB:C1:65:11:2F:72:BB:79:63:BF:43:5A:E6
            X509v3 Authority Key Identifier:
                keyid:37:07:2E:A2:73:51:5C:FC:D5:AA:9B:B8:5F:AD:1C:13:8E:10:EE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87L2UMDHfRRePGsYAygtFuruKefmGuH6gqRV1fyHcetA/0/37072EA273515CFCD5AA9BB85FAD1C138E10EE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37072EA273515CFCD5AA9BB85FAD1C138E10EE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87L2UMDHfRRePGsYAygtFuruKefmGuH6gqRV1fyHcetA/0/323830343a393466343a3a2f33322d3438203d3e20323734343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:94f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:9d:f2:48:c7:45:e4:a5:f0:6b:f3:5c:2d:40:d3:27:05:c5:
         43:66:00:23:85:15:42:d2:97:00:bc:96:b2:91:af:1e:0c:e7:
         a0:3f:72:f9:d5:58:68:ea:80:97:19:d0:b5:9c:24:6b:be:fa:
         87:cb:b8:32:2f:b7:0d:a9:39:65:ce:e4:c8:b3:2f:a7:e5:5c:
         0a:76:8c:b0:f5:4a:ac:fe:f0:50:70:37:e8:37:cf:30:4b:8b:
         a7:eb:d9:4f:03:b5:f7:37:a8:15:f3:ae:64:9c:74:13:5d:a3:
         bb:73:e8:03:18:17:ba:f2:37:76:0f:d6:a2:01:44:79:c5:84:
         7b:32:ff:e1:a6:3e:23:03:14:3e:c0:1f:e8:17:54:54:d1:bc:
         b0:74:11:73:3c:35:c3:79:53:ec:ea:21:28:18:15:d4:60:ce:
         19:98:80:b3:f4:c2:e6:3c:1c:ae:31:23:11:e5:0e:7d:cc:58:
         ea:47:23:17:1e:c9:ba:ba:af:27:13:0b:eb:60:a9:57:5c:43:
         17:dc:84:f8:f8:be:24:6f:54:af:26:af:ad:ee:8a:eb:1e:0a:
         5e:ce:52:12:48:c6:89:d1:e5:f5:47:59:4b:63:72:7f:bf:7e:
         71:a6:4b:5a:18:79:7b:b9:f4:e6:bc:34:90:a4:ca:be:54:67:
         5d:2d:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:48 2025 by rpki-client