Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a613a3a2f34382d313238203d3e20323636353332.roa
File:                     323830343a336437343a613a3a2f34382d313238203d3e20323636353332.roa (raw, json)
Hash identifier:          us2DcMOTb2Z9kbSNUL9Ss4wzGf7K1g/iVqm9aLZFCZg=
Subject key identifier:   DD:2B:5C:C7:13:C6:DE:8D:70:ED:DF:94:03:A4:9B:5A:8B:22:85:78
Certificate issuer:       /CN=2DC0F242ADDA7136D95141422051D1361143E486
Certificate serial:       602E3F1E47D6133594F93293B32110A333872B0E
Authority key identifier: 2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a613a3a2f34382d313238203d3e20323636353332.roa
Signing time:             Wed 24 Sep 2025 20:27:46 +0000
ROA not before:           Wed 24 Sep 2025 20:22:46 +0000
ROA not after:            Wed 23 Sep 2026 20:27:46 +0000
asID:                     266532
IP address blocks:        2804:3d74:a::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:2e:3f:1e:47:d6:13:35:94:f9:32:93:b3:21:10:a3:33:87:2b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DC0F242ADDA7136D95141422051D1361143E486
        Validity
            Not Before: Sep 24 20:22:46 2025 GMT
            Not After : Sep 23 20:27:46 2026 GMT
        Subject: CN=DD2B5CC713C6DE8D70EDDF9403A49B5A8B228578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:75:f7:05:bb:bb:37:11:7d:15:f8:9c:31:c0:
                    0f:3b:97:cb:9b:d6:95:6d:c8:a2:b1:a2:0c:ae:5a:
                    96:c5:0f:c8:48:82:32:23:77:aa:68:36:b6:e7:38:
                    44:5a:92:8f:d0:0e:5f:65:b7:35:0b:e7:00:31:b9:
                    4d:02:09:d4:8a:3f:9e:8e:ef:2a:5a:db:b7:d2:66:
                    3f:d1:84:d7:24:a8:99:05:41:9e:fd:0d:62:b3:bb:
                    e9:5d:a2:80:95:72:a7:fe:b2:30:fb:2a:68:96:7a:
                    ac:4e:45:98:0f:32:ba:c2:49:ce:f0:15:02:bd:a3:
                    de:ae:ef:f5:5d:66:88:91:f9:a2:5b:af:f1:4a:c3:
                    b1:b1:89:d7:5c:38:43:31:25:2c:24:f1:b0:b5:c7:
                    95:d8:6d:5b:81:2f:ac:ab:55:7d:b6:4c:f3:80:37:
                    04:10:67:c4:bb:71:85:cf:4a:25:25:eb:19:cc:0f:
                    3f:28:b9:a5:87:56:dc:e2:ec:1f:a9:a3:12:39:94:
                    50:d0:ff:a0:c9:02:ad:e3:61:2a:4b:c3:d5:f4:55:
                    20:79:9f:bd:0b:68:6f:cd:08:77:db:b1:95:d5:9d:
                    1e:9f:62:a8:35:8c:81:54:13:6a:77:04:60:13:f5:
                    2a:aa:19:db:a6:b7:99:4c:b1:d5:2c:f9:a3:bf:85:
                    1e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2B:5C:C7:13:C6:DE:8D:70:ED:DF:94:03:A4:9B:5A:8B:22:85:78
            X509v3 Authority Key Identifier:
                keyid:2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a613a3a2f34382d313238203d3e20323636353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:ae:0b:07:7c:e3:68:80:a0:a3:52:30:4b:81:44:ec:01:ba:
         e7:ca:7e:d8:ef:42:63:a6:e5:49:5c:a3:b7:2d:57:f0:5b:74:
         0a:aa:fc:95:b9:35:60:a7:3c:12:ff:15:52:16:69:8b:f4:9a:
         c8:11:4d:c4:99:7e:e5:e2:40:88:2c:35:f7:f5:0a:51:d2:88:
         72:2b:28:e7:8e:2c:a8:d9:2b:c5:62:99:de:45:59:97:c7:5b:
         c3:04:2e:ee:2f:b7:24:6b:7f:15:1d:c0:e3:13:14:fc:86:91:
         ad:f2:a9:68:a3:bd:c4:95:b6:5a:79:8d:fd:7c:18:8b:39:ca:
         a1:27:41:85:e8:e9:66:57:1f:bf:46:3f:55:88:38:ac:da:56:
         55:e5:b5:c1:29:30:80:12:b6:32:57:7b:e9:8f:f4:ea:06:3a:
         05:b6:cf:d5:0e:7b:de:51:b4:6c:63:24:04:c5:c9:ea:bd:01:
         b0:72:c6:0a:8f:f6:d1:26:d8:a1:58:4f:59:c7:0a:5a:2e:2a:
         af:fe:e3:27:a4:01:ce:c5:12:f9:07:bf:54:a0:fb:6d:b5:28:
         5b:f1:1d:4a:e4:af:2a:f3:9a:2b:eb:46:fb:73:99:1a:3c:f6:
         47:f0:4e:6a:2b:7b:97:b5:8e:34:41:63:6b:ce:0e:92:52:25:
         2b:c8:b8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:29:21 2025 by rpki-client