Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3430303a3a2f34302d313238203d3e20323632363137.roa
File:                     323830343a336437343a3430303a3a2f34302d313238203d3e20323632363137.roa (raw, json)
Hash identifier:          +ObNk1En759gkb006BFhDoR0YjDG9cLJkyIcgwn//5M=
Subject key identifier:   82:EE:14:23:C8:87:D4:E8:E5:41:EA:AE:A3:DB:4C:BD:36:AE:BE:F4
Certificate issuer:       /CN=2DC0F242ADDA7136D95141422051D1361143E486
Certificate serial:       60046663CEC62403819F50C985972D22B67113D2
Authority key identifier: 2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3430303a3a2f34302d313238203d3e20323632363137.roa
Signing time:             Wed 24 Sep 2025 20:27:35 +0000
ROA not before:           Wed 24 Sep 2025 20:22:35 +0000
ROA not after:            Wed 23 Sep 2026 20:27:35 +0000
asID:                     262617
IP address blocks:        2804:3d74:400::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:04:66:63:ce:c6:24:03:81:9f:50:c9:85:97:2d:22:b6:71:13:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DC0F242ADDA7136D95141422051D1361143E486
        Validity
            Not Before: Sep 24 20:22:35 2025 GMT
            Not After : Sep 23 20:27:35 2026 GMT
        Subject: CN=82EE1423C887D4E8E541EAAEA3DB4CBD36AEBEF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1c:be:5d:ca:7b:d0:01:57:35:09:51:02:ec:
                    c5:6b:bd:78:b1:e3:89:c2:4d:ac:41:4d:6b:50:ea:
                    10:3c:9e:bf:08:c6:4b:6b:55:97:5a:13:43:d6:69:
                    e7:97:36:9d:5a:e3:08:f7:da:2e:9c:c1:3c:36:7a:
                    c7:35:92:b4:37:fd:d5:9e:35:7d:86:7a:6f:ab:73:
                    43:db:34:f1:af:71:2f:a3:05:78:69:41:2b:5b:b1:
                    29:c8:e5:38:85:2e:59:0b:1e:50:ae:aa:f3:92:4b:
                    a6:b2:8a:d1:8e:6a:13:94:79:59:f0:39:c2:d9:51:
                    cb:ea:23:99:f1:0e:ae:b1:aa:b2:b9:78:79:fd:57:
                    d2:af:06:c1:69:af:26:a0:e3:f2:a0:f3:31:db:bf:
                    0e:b9:b6:d6:34:03:70:52:1e:2a:ac:21:86:d8:13:
                    d2:6c:a7:48:b4:81:f2:41:38:27:e0:ee:4a:57:28:
                    1c:12:c3:5b:2e:66:73:cd:71:67:e4:39:3a:9e:ea:
                    73:08:f5:c2:10:51:cf:93:2f:71:28:0c:fa:ee:ad:
                    f1:0b:35:fd:c1:b9:72:b4:27:a7:3f:f2:37:66:a0:
                    3b:a0:87:d9:ad:0b:ad:ce:8c:a4:03:e3:e2:b9:2a:
                    87:bc:1b:54:2b:74:28:c0:13:2a:09:28:bf:2d:2a:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EE:14:23:C8:87:D4:E8:E5:41:EA:AE:A3:DB:4C:BD:36:AE:BE:F4
            X509v3 Authority Key Identifier:
                keyid:2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a3430303a3a2f34302d313238203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:22:39:c8:ef:66:af:5c:13:74:48:89:88:bc:20:cf:8c:03:
         1c:41:e7:6c:27:54:6d:8d:08:38:60:40:28:35:ce:66:54:96:
         ca:33:1a:2b:66:a7:1f:d9:91:b7:48:eb:ec:bd:b8:9b:40:31:
         d5:2b:ce:4f:e1:2d:d3:c1:53:f9:31:19:48:1b:0a:bd:ff:13:
         48:40:97:4e:54:e9:d4:43:68:92:72:b2:21:91:a1:0a:4b:95:
         3b:5d:a3:e4:65:06:db:9c:e6:a7:f7:df:0e:d4:fb:0a:c6:77:
         48:b4:0e:07:c3:d2:d7:63:88:cf:4e:dc:97:d3:e7:6a:f4:8b:
         0c:7c:1d:95:57:d5:21:3a:5b:98:27:6d:52:84:f1:20:18:ce:
         2c:ab:19:0c:8d:bc:f5:ee:81:54:93:25:14:4c:d5:77:b7:8d:
         a0:62:fb:0b:38:db:76:80:3c:dc:6b:85:7d:a8:8c:61:77:1c:
         de:91:86:01:9f:9b:c7:c8:a7:26:c5:21:a0:c6:0c:67:93:b7:
         0d:6b:80:8f:ad:af:b3:a3:5d:04:83:24:59:25:88:84:4f:c3:
         9e:11:ac:4c:aa:0e:22:4c:73:62:be:da:31:88:5e:f7:8f:43:
         4d:44:06:5b:de:bf:41:43:bc:6a:0a:f5:b8:9e:f0:80:d8:ff:
         37:63:99:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:29:18 2025 by rpki-client