Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/323830343a373431303a3a2f33322d313238203d3e20323730393536.roa
File:                     323830343a373431303a3a2f33322d313238203d3e20323730393536.roa (raw, json)
Hash identifier:          lU6VrvpBYvmFhj9XMV8wCL1iuM4M5kJ+oQfWSvxRzlc=
Subject key identifier:   A0:74:09:A6:E4:18:E7:C1:30:EA:62:D4:30:A1:00:09:A8:32:E1:30
Certificate issuer:       /CN=CF357620357B25129A68E7D55D716CED7E4E1516
Certificate serial:       793AE413269CE76910F27D91DC3296AA3B558BF2
Authority key identifier: CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/323830343a373431303a3a2f33322d313238203d3e20323730393536.roa
Signing time:             Wed 01 Oct 2025 17:27:51 +0000
ROA not before:           Wed 01 Oct 2025 17:22:51 +0000
ROA not after:            Wed 30 Sep 2026 17:27:51 +0000
asID:                     270956
IP address blocks:        2804:7410::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl
                          rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3a:e4:13:26:9c:e7:69:10:f2:7d:91:dc:32:96:aa:3b:55:8b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF357620357B25129A68E7D55D716CED7E4E1516
        Validity
            Not Before: Oct  1 17:22:51 2025 GMT
            Not After : Sep 30 17:27:51 2026 GMT
        Subject: CN=A07409A6E418E7C130EA62D430A10009A832E130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d8:b0:e3:2a:81:3b:1c:69:93:e0:03:84:ca:
                    25:07:a1:83:1a:e0:12:95:63:cc:ce:0a:48:dd:e7:
                    a3:3d:04:a7:f6:6b:d2:86:dd:7d:15:a8:56:5b:36:
                    92:f8:83:f3:b7:6d:84:ae:a7:6f:ea:db:33:13:5b:
                    39:fd:b6:a1:38:28:01:96:3e:30:8f:ed:74:e7:3f:
                    7a:06:39:54:d7:45:49:7e:4c:60:48:64:af:9e:46:
                    5d:d7:89:75:4b:09:55:25:ce:8f:ec:15:60:34:30:
                    ec:74:a9:e7:dc:e8:61:ed:3c:7f:1e:17:c7:04:09:
                    ab:5d:03:62:26:38:ef:45:83:64:13:b5:23:40:90:
                    82:3c:45:9a:10:27:2e:09:0e:76:10:47:74:1c:0c:
                    41:4d:b3:6f:4b:f0:20:d1:88:29:41:12:2f:11:bd:
                    da:e2:42:89:f7:f5:2f:e5:55:fb:70:69:91:83:bb:
                    31:54:50:db:17:1d:3f:65:26:61:f9:e2:36:4a:84:
                    b9:40:19:82:c9:88:91:d1:fa:cf:df:8a:74:83:dc:
                    59:e5:2a:6f:47:35:c6:27:09:b7:69:06:c6:c3:ad:
                    37:2a:0c:35:b1:7b:25:8b:f6:61:b8:e1:e3:73:84:
                    28:36:64:69:ff:37:6d:d4:f3:b9:b6:94:70:aa:f1:
                    4b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:74:09:A6:E4:18:E7:C1:30:EA:62:D4:30:A1:00:09:A8:32:E1:30
            X509v3 Authority Key Identifier:
                keyid:CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/323830343a373431303a3a2f33322d313238203d3e20323730393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7410::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:37:3b:94:05:c2:f2:8f:53:e1:fc:77:b0:eb:b9:20:78:9f:
         07:c8:5a:43:98:97:43:30:ae:39:34:44:68:dc:c5:1c:f6:83:
         f9:47:41:6a:fc:1b:88:9a:ce:26:1b:c5:77:bf:47:16:8b:2f:
         34:d5:01:1b:78:f4:70:93:0c:1c:60:c6:95:41:df:aa:86:30:
         6b:d0:a7:d1:49:0f:99:41:d4:a9:8b:1a:cb:64:02:78:6d:c7:
         18:9b:87:65:c1:f3:d4:83:8b:24:65:ce:18:b7:ae:85:0e:8e:
         fa:f6:e0:b2:91:91:96:63:a9:50:15:a6:ef:82:9b:32:94:0d:
         77:4f:eb:4a:b9:c8:7c:b9:af:08:4a:1f:f3:e0:97:7e:f8:46:
         09:a8:fc:99:90:ef:4c:e3:41:b3:ce:19:e3:14:7b:97:cc:0c:
         e5:28:ed:a4:92:be:15:90:84:b2:18:81:53:96:53:85:c1:08:
         ba:16:67:12:46:e6:17:bd:a2:02:f5:58:60:e6:cb:f3:38:83:
         90:d1:0e:3e:48:30:05:d3:bd:fc:52:85:5e:4c:12:85:40:9d:
         18:ef:c5:f4:d4:89:4f:b6:95:41:a6:60:e5:fa:86:32:1a:f6:
         42:22:b8:7c:c6:c3:28:7a:59:1d:8c:8c:2c:13:dc:f0:58:90:
         30:79:47:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:43:51 2025 by rpki-client