Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a313133343a3a2f33322d3332203d3e20323633363635.roa
File:                     323830343a313133343a3a2f33322d3332203d3e20323633363635.roa (raw, json)
Hash identifier:          o7ZXYUaKG6CLFwoYQcIALVYXwjHExB47howsx6XYQTU=
Subject key identifier:   D2:80:39:A2:AD:47:38:14:5F:1A:65:1A:ED:F8:B9:E6:4B:E3:3B:D7
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       66CF1958A89E95CD3F0C0084513202F7815540A8
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a313133343a3a2f33322d3332203d3e20323633363635.roa
Signing time:             Thu 09 Oct 2025 21:02:30 +0000
ROA not before:           Thu 09 Oct 2025 20:57:30 +0000
ROA not after:            Thu 08 Oct 2026 21:02:30 +0000
asID:                     263665
IP address blocks:        2804:1134::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:cf:19:58:a8:9e:95:cd:3f:0c:00:84:51:32:02:f7:81:55:40:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: Oct  9 20:57:30 2025 GMT
            Not After : Oct  8 21:02:30 2026 GMT
        Subject: CN=D28039A2AD4738145F1A651AEDF8B9E64BE33BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:a6:00:04:44:2c:2b:7c:d0:aa:97:7c:b0:
                    a8:ce:d1:ee:1b:40:be:a3:04:09:4e:00:83:1a:ea:
                    af:8c:83:f1:dc:05:eb:af:08:26:27:c2:7c:97:c1:
                    bf:8b:24:ff:0b:6d:75:a7:ca:4d:4a:93:78:a1:24:
                    18:30:3d:36:7d:8c:ea:f2:5a:38:6b:b7:4e:47:e3:
                    93:6e:d3:e5:79:10:e2:10:10:44:75:aa:b1:9f:45:
                    16:25:28:de:db:37:c7:46:8c:33:30:9f:08:21:ef:
                    7c:6f:b0:e4:05:86:97:23:54:d7:f3:27:1d:5d:42:
                    1f:df:4c:4f:3a:59:62:8d:47:a7:68:b2:6f:c4:e8:
                    4f:d9:e0:e7:4f:04:b0:36:20:3a:ec:1f:55:67:6e:
                    0e:16:98:cf:e1:dd:4f:cd:3d:83:00:cf:65:ab:4e:
                    25:4c:d2:cb:fd:58:56:3c:1d:54:fe:66:0e:e6:0e:
                    ac:22:1c:64:58:c9:1c:6e:a3:d5:e5:a3:79:1a:1b:
                    7f:27:c0:3f:db:9e:11:25:b5:97:f9:70:a5:4d:ef:
                    11:f1:42:55:ce:17:28:20:56:30:fe:10:67:00:dc:
                    94:2f:96:89:a4:94:96:85:25:ec:94:d6:4a:25:eb:
                    ae:0d:be:77:55:4d:74:3a:10:84:0a:fb:98:58:43:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:80:39:A2:AD:47:38:14:5F:1A:65:1A:ED:F8:B9:E6:4B:E3:3B:D7
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a313133343a3a2f33322d3332203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1134::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:d0:c0:af:bd:40:36:13:13:1d:48:47:e1:1b:42:a5:2b:d3:
         e2:a3:54:31:42:59:e9:10:ec:41:17:63:19:ca:33:62:7a:d9:
         33:ce:6b:54:0f:4f:28:0e:37:8f:ef:59:b9:4a:c1:4e:be:11:
         a7:bd:80:36:45:1f:98:35:a6:5d:a9:c2:c5:a0:be:aa:65:c1:
         93:19:d9:55:c4:ab:70:d5:76:29:c2:9f:5e:a8:64:7d:19:91:
         59:53:a6:e5:5b:50:73:36:4a:b8:a8:8a:8a:48:e8:3f:66:53:
         92:3d:d2:56:b1:c1:57:d6:1c:88:e5:6a:a9:ac:57:09:c6:4a:
         04:2c:02:f4:ca:8c:2b:23:2c:cf:03:a9:d2:9a:17:87:59:5f:
         28:5e:7c:cf:ac:24:8d:80:5b:0c:d7:5c:21:9f:82:a9:76:63:
         50:e2:3f:65:6f:07:f0:90:ad:b8:1f:43:b7:9f:6c:cb:83:93:
         53:57:32:0a:09:c4:e3:a0:5c:86:d9:ce:98:ee:48:0f:f6:4f:
         8e:fd:75:19:7b:9e:dc:a4:62:f7:e7:d3:b3:4b:3e:0d:78:21:
         9f:a4:14:a0:24:d7:97:18:1c:93:21:3f:3e:8a:99:47:a3:d8:
         7a:8e:50:b3:b9:b6:0c:82:d8:b1:5e:80:fd:8f:16:9e:36:72:
         dc:a8:ee:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:02:53 2025 by rpki-client