Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/323830343a393134633a3a2f33322d3332203d3e20323734363332.roa
File:                     323830343a393134633a3a2f33322d3332203d3e20323734363332.roa (raw, json)
Hash identifier:          DvD9mUDQGbID1Fj3RmQTkwTUsJ5MXscX3LhKAmPGVSc=
Subject key identifier:   BC:BA:F7:07:EB:D7:1B:68:2D:81:43:C9:0B:AB:2B:B1:7D:2C:2A:ED
Certificate issuer:       /CN=D2EAFBBDD27515C2E642A28C64C61A932A14BD02
Certificate serial:       52BCD0D6106B0FFA8C5F22F2E6906501BE20E335
Authority key identifier: D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/323830343a393134633a3a2f33322d3332203d3e20323734363332.roa
Signing time:             Tue 09 Sep 2025 16:00:00 +0000
ROA not before:           Tue 09 Sep 2025 15:55:00 +0000
ROA not after:            Wed 09 Sep 2026 16:00:00 +0000
asID:                     274632
IP address blocks:        2804:914c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl
                          rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:bc:d0:d6:10:6b:0f:fa:8c:5f:22:f2:e6:90:65:01:be:20:e3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2EAFBBDD27515C2E642A28C64C61A932A14BD02
        Validity
            Not Before: Sep  9 15:55:00 2025 GMT
            Not After : Sep  9 16:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0a:e4:f0:5a:56:d0:ad:5b:64:61:dc:b4:0b:
                    52:b9:a2:b2:5a:34:af:9e:96:94:14:59:e2:11:6f:
                    03:96:e2:47:39:98:42:40:26:d6:cd:72:74:93:c0:
                    aa:e6:d0:68:3a:e5:69:49:55:60:da:7d:83:5c:c1:
                    b3:74:94:9e:cb:b3:40:4b:32:ad:04:bb:a8:f5:43:
                    b2:a9:b4:e1:2d:04:ce:e6:31:b1:24:87:3e:f6:c6:
                    d1:24:a1:89:c3:cc:94:80:52:47:cf:92:bd:03:8a:
                    a7:cf:8b:53:f0:f9:43:8e:d3:5d:4d:9f:3d:af:86:
                    4c:5b:1c:98:f8:5e:5f:bc:3a:74:b0:67:ba:d9:ef:
                    4f:cb:3f:7f:d3:52:93:e7:96:00:f0:4e:55:2e:ae:
                    0d:32:1d:72:83:d5:3c:e4:c5:07:6f:aa:ac:a6:98:
                    71:88:35:57:1c:e9:58:f9:d1:96:6a:4a:a8:92:35:
                    b2:61:03:b4:fa:ab:53:2e:c2:cf:a9:1b:eb:73:0d:
                    b6:04:1e:7b:57:19:36:d7:88:d7:4a:2f:68:06:54:
                    f4:95:08:c3:0d:23:3d:cd:9e:09:ef:89:35:43:a3:
                    bd:30:e8:e5:43:29:b7:94:19:2f:e1:b6:d9:9f:72:
                    0d:58:fe:bd:26:13:87:d8:3b:f3:eb:40:79:76:30:
                    03:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BA:F7:07:EB:D7:1B:68:2D:81:43:C9:0B:AB:2B:B1:7D:2C:2A:ED
            X509v3 Authority Key Identifier:
                keyid:D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/323830343a393134633a3a2f33322d3332203d3e20323734363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:914c::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:5b:d4:e7:d3:90:1c:8e:3f:97:f1:d3:e3:b8:8a:45:12:99:
         3a:37:ac:32:90:3d:62:fe:71:75:8d:97:38:61:48:d0:3a:e0:
         dc:cc:d1:50:77:7b:38:56:77:c9:11:db:3f:f9:2e:d0:0e:ff:
         c9:4a:c5:f1:e2:06:19:90:e2:a3:3c:2d:ba:32:6c:5e:12:45:
         52:d3:4e:94:7c:de:de:27:e5:5b:5a:4b:ce:7e:8f:08:53:2d:
         e5:2f:e4:b2:9b:12:0a:54:77:fb:4b:d4:0b:56:6d:e9:e2:3d:
         85:26:66:a3:ae:85:44:11:24:26:e8:fb:c9:c1:b0:a1:e6:bb:
         5f:28:5e:0a:31:cc:1e:25:ea:cf:35:2f:5f:20:43:90:79:11:
         7e:af:32:66:c0:f9:05:e1:36:7e:e0:52:ad:84:79:24:77:b8:
         91:38:03:fc:59:da:9f:bc:8e:7e:ee:63:99:b8:8f:8c:c3:ce:
         fb:c3:13:04:7f:f2:a4:85:4e:46:40:d9:ec:4c:a0:5f:59:a5:
         6d:a5:a0:86:56:ef:89:34:1f:de:ae:8b:b9:9c:d3:26:6c:45:
         97:29:e1:1f:09:25:bf:fc:79:b7:c2:52:08:a8:ad:eb:98:79:
         75:a9:b4:7d:ca:a4:25:0c:f5:82:25:bc:c7:39:1d:1d:bd:11:
         5b:fb:34:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:35:20 2025 by rpki-client