Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/323830343a3232343a3a2f33322d3434203d3e20323632373932.roa
File:                     323830343a3232343a3a2f33322d3434203d3e20323632373932.roa (raw, json)
Hash identifier:          x+WyCqlEwX8gfhjdikGxKqHpljt23eetIQoyj3amLQw=
Subject key identifier:   82:AC:F2:AC:68:AB:80:D5:6D:3C:CC:F8:62:97:86:0C:CE:80:CD:4F
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       530BFFBABD160FB9DC6774A391D0E118096FFDF9
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/323830343a3232343a3a2f33322d3434203d3e20323632373932.roa
Signing time:             Tue 02 Sep 2025 18:57:37 +0000
ROA not before:           Tue 02 Sep 2025 18:52:37 +0000
ROA not after:            Tue 01 Sep 2026 18:57:37 +0000
asID:                     262792
IP address blocks:        2804:224::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
                          rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0b:ff:ba:bd:16:0f:b9:dc:67:74:a3:91:d0:e1:18:09:6f:fd:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Sep  2 18:52:37 2025 GMT
            Not After : Sep  1 18:57:37 2026 GMT
        Subject: CN=82ACF2AC68AB80D56D3CCCF86297860CCE80CD4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bb:80:f3:d3:b2:ca:be:5f:ba:dd:07:80:3f:
                    61:32:2d:70:d9:cf:ac:8b:62:3a:9c:0e:23:e7:94:
                    ab:8b:95:22:73:be:f3:0f:49:43:8d:5b:2e:53:ea:
                    71:2d:e1:4f:ec:c3:72:e6:c7:bb:b8:32:72:a2:12:
                    d5:9a:13:92:4e:11:a2:dc:88:a2:d8:bf:03:f9:67:
                    ba:ee:8d:87:1e:88:94:53:d9:0e:b8:03:24:47:37:
                    eb:5b:22:f7:07:15:4c:4a:a5:97:9e:54:1c:e3:67:
                    bb:0e:fa:bd:e1:f2:c4:65:d0:b1:10:0f:ec:f1:30:
                    ee:4d:08:df:70:65:51:0f:97:d0:1f:b6:e6:01:7b:
                    28:2e:48:1d:d0:2c:54:e0:ca:a2:4c:be:d3:64:73:
                    59:82:d1:7c:70:f3:e2:e4:3e:81:f4:11:c7:f3:f7:
                    a9:41:bc:1c:b3:1c:a0:3d:9c:5b:a8:b8:a2:3d:6f:
                    d3:11:dc:78:e1:d8:47:d1:a1:71:94:c5:01:25:f0:
                    21:44:c6:07:31:be:0a:9b:80:c8:38:e9:26:8b:60:
                    c4:ea:f3:3f:57:b4:9a:53:df:5a:81:2d:0e:f6:ed:
                    6d:0e:58:ec:76:a3:27:ee:cf:3a:21:75:fc:00:c3:
                    94:36:6b:89:dc:93:84:f7:0c:a4:64:b3:7f:98:06:
                    c4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AC:F2:AC:68:AB:80:D5:6D:3C:CC:F8:62:97:86:0C:CE:80:CD:4F
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/323830343a3232343a3a2f33322d3434203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:224::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:60:55:a4:73:16:98:97:74:1f:c5:e9:78:02:9c:c0:92:b8:
         5a:91:7b:56:d9:f7:8c:69:ec:e6:27:b9:14:90:13:14:6b:1b:
         84:19:9b:58:aa:73:2f:d1:ab:e0:4f:78:b8:2f:1e:83:90:b5:
         98:d8:52:64:67:23:af:d3:49:97:7b:92:41:bc:10:e9:dc:2d:
         bd:6f:f9:ef:d3:1a:e2:4a:a0:d0:3d:91:61:51:71:6c:7f:6b:
         c0:96:eb:d6:26:f8:88:47:b8:98:23:36:65:9d:f3:d3:ca:db:
         35:a1:54:10:65:33:ab:47:de:b1:30:9a:07:c9:7d:2a:2c:12:
         8f:67:83:15:73:5f:f0:9e:ad:bb:e7:4e:b0:78:f3:d3:6b:6d:
         c1:38:8e:02:82:e1:8c:45:94:a0:cd:d1:41:91:1f:59:c9:7e:
         e0:fa:10:fe:e4:d7:ab:42:6d:55:b9:6a:28:4c:2d:0f:c4:ac:
         f7:46:a1:92:48:d1:d2:3e:eb:f8:20:87:70:16:49:3b:a0:b2:
         ab:b7:94:d3:05:57:d4:6e:a1:cf:d7:27:75:53:6b:dc:45:f6:
         33:e8:d2:7b:43:86:61:80:af:a5:c1:96:de:68:61:94:0e:f5:
         52:fd:79:65:db:9b:fd:51:48:cf:f6:59:63:c9:8d:80:1d:9a:
         7c:16:ae:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:13:57 2025 by rpki-client