Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3130303a3a2f34382d313238203d3e20323636353332.roa
File:                     323830343a336437343a3130303a3a2f34382d313238203d3e20323636353332.roa (raw, json)
Hash identifier:          OurFGdWzBTMjaeL+fT/NQy5HChPORqd9dIs6UVijoRg=
Subject key identifier:   AA:DB:8F:A5:3C:EA:BB:E9:B6:D2:7E:E1:1A:F1:19:79:2D:A3:43:68
Certificate issuer:       /CN=2DC0F242ADDA7136D95141422051D1361143E486
Certificate serial:       3096E1D50EC2BEA9B61F083AF8C5E4FCB502B4BC
Authority key identifier: 2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3130303a3a2f34382d313238203d3e20323636353332.roa
Signing time:             Wed 24 Sep 2025 20:28:32 +0000
ROA not before:           Wed 24 Sep 2025 20:23:32 +0000
ROA not after:            Wed 23 Sep 2026 20:28:32 +0000
asID:                     266532
IP address blocks:        2804:3d74:100::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:96:e1:d5:0e:c2:be:a9:b6:1f:08:3a:f8:c5:e4:fc:b5:02:b4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DC0F242ADDA7136D95141422051D1361143E486
        Validity
            Not Before: Sep 24 20:23:32 2025 GMT
            Not After : Sep 23 20:28:32 2026 GMT
        Subject: CN=AADB8FA53CEABBE9B6D27EE11AF119792DA34368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3c:d5:26:66:f2:b9:bf:4d:fa:67:c1:54:2d:
                    d5:0c:24:fe:2b:29:56:dd:92:be:d0:3e:39:73:ee:
                    0b:11:52:8d:d9:7d:12:15:3c:9f:89:3f:17:58:d6:
                    48:f5:2b:e0:51:04:32:6f:b9:a2:e4:e5:f4:80:70:
                    31:ce:e6:3a:30:07:ec:3d:4e:bb:56:cb:5c:89:f7:
                    98:3f:81:98:c4:31:90:c3:93:0b:8a:ee:c3:f4:c7:
                    17:79:33:01:0b:04:8f:cb:00:ce:a0:db:25:d0:22:
                    f3:06:1b:6b:3d:76:65:b1:c2:73:f5:72:3b:60:4e:
                    d5:1c:dc:69:07:73:84:8e:78:0b:08:43:4e:30:13:
                    e1:18:6d:4f:76:e7:d7:38:83:08:7b:cb:a9:9e:bf:
                    af:62:db:0a:2a:e9:9d:7a:88:cd:79:8b:9a:96:01:
                    6f:92:ab:0c:6c:7a:6d:68:4d:de:ef:5b:16:0f:9a:
                    40:4c:fa:b8:39:6b:00:e6:3b:1f:cd:65:3a:c8:f6:
                    20:0a:96:73:ba:1a:18:2b:37:65:56:24:f3:e4:88:
                    e6:86:ef:cf:88:79:3f:23:56:b6:b0:95:59:86:f7:
                    12:55:a0:ea:2b:f1:18:1b:93:4c:5e:bc:6b:4c:73:
                    be:62:d0:b6:63:13:40:a6:6f:50:47:1a:c6:37:f4:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DB:8F:A5:3C:EA:BB:E9:B6:D2:7E:E1:1A:F1:19:79:2D:A3:43:68
            X509v3 Authority Key Identifier:
                keyid:2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3130303a3a2f34382d313238203d3e20323636353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         dc:27:7a:c2:37:98:4a:7a:cc:e7:25:f5:1a:80:aa:fe:6a:88:
         9b:13:ba:9e:55:c1:d9:fe:f2:e9:8a:7a:16:70:f7:f3:d0:b3:
         73:3e:f0:c8:d6:20:f7:59:ed:56:5e:ca:66:a6:27:83:23:8f:
         c8:78:29:68:23:af:82:cd:b2:68:92:ae:88:96:64:ed:c4:75:
         f5:9c:56:a2:d1:21:91:2e:41:1b:06:97:e2:25:b0:a1:f2:a9:
         6f:be:96:4e:2d:33:b4:ba:26:b3:e6:8e:58:b7:d3:fc:1f:29:
         62:31:74:e7:de:e0:54:a9:90:21:8e:4a:ca:67:e3:11:b8:a4:
         60:78:8b:62:04:63:93:0f:81:50:17:4f:b3:c5:be:8d:49:c0:
         01:45:57:54:f4:51:89:76:44:d3:d4:7d:c1:35:88:17:2f:01:
         4f:70:e1:6b:86:62:e7:bd:31:ef:70:2a:fc:a3:64:6d:2f:ba:
         fc:80:c3:b6:7c:e7:2b:0d:47:19:76:27:da:09:cc:12:d2:06:
         94:5d:72:f1:d9:00:f3:3a:9c:5a:80:6f:7b:d6:e0:3e:33:0f:
         69:d4:28:c6:0c:3d:b2:6e:75:e7:c5:5c:13:c7:4e:24:a6:e5:
         51:51:52:e2:94:7b:2e:cf:76:f9:0a:7a:7c:f4:ca:3b:de:9e:
         f9:e1:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:29:20 2025 by rpki-client