Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a623a3a2f34382d313238203d3e20323636353332.roa
File:                     323830343a336437343a623a3a2f34382d313238203d3e20323636353332.roa (raw, json)
Hash identifier:          WLyTnYz818OmVCR4LGkt5xnsHkOXvCJsoJLXeS27Jkk=
Subject key identifier:   54:50:7F:E9:0F:49:2D:77:AE:53:98:61:84:0E:BF:57:C4:79:4A:B1
Certificate issuer:       /CN=2DC0F242ADDA7136D95141422051D1361143E486
Certificate serial:       68CDC445E0299FB98118D478C876F6076FFD6CAB
Authority key identifier: 2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a623a3a2f34382d313238203d3e20323636353332.roa
Signing time:             Wed 24 Sep 2025 20:27:59 +0000
ROA not before:           Wed 24 Sep 2025 20:22:59 +0000
ROA not after:            Wed 23 Sep 2026 20:27:59 +0000
asID:                     266532
IP address blocks:        2804:3d74:b::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:cd:c4:45:e0:29:9f:b9:81:18:d4:78:c8:76:f6:07:6f:fd:6c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DC0F242ADDA7136D95141422051D1361143E486
        Validity
            Not Before: Sep 24 20:22:59 2025 GMT
            Not After : Sep 23 20:27:59 2026 GMT
        Subject: CN=54507FE90F492D77AE539861840EBF57C4794AB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dc:a4:9b:36:d7:45:2d:28:30:3a:91:a5:02:
                    9c:cc:07:89:ec:b8:fc:fe:df:31:88:d1:0a:06:81:
                    ed:d3:ad:93:fe:e5:ac:1c:a8:2e:41:d6:7c:95:0c:
                    d7:06:b9:f5:6d:93:6f:65:b5:93:f0:a4:07:b2:57:
                    2d:2f:73:ec:79:b0:aa:a0:db:9e:07:7d:48:1d:da:
                    ea:14:b3:11:93:c6:f4:4c:01:1a:81:45:d0:68:27:
                    f5:ad:f9:5c:59:8a:3b:65:93:b3:7b:35:30:b2:a1:
                    a0:a7:f9:20:62:ad:cd:40:b4:8f:20:01:1f:e0:7e:
                    ff:30:93:fc:cf:da:03:d5:8d:22:ab:d2:e8:1a:28:
                    c7:ac:29:b4:4d:de:d8:b3:eb:24:12:f8:09:1b:56:
                    e0:5e:28:cc:27:bb:ac:33:4b:b1:bc:15:dc:4d:1f:
                    1b:03:37:87:ac:bb:a8:ff:78:74:c4:c7:f5:17:17:
                    6c:d4:3a:38:c2:41:35:89:dc:6d:46:ae:9f:20:f4:
                    8e:61:47:75:e6:1d:4c:4f:1f:0c:4b:26:3f:4f:8a:
                    f1:6c:d3:85:5c:e8:59:c7:73:8e:bf:d0:85:02:da:
                    9b:cd:2d:1d:a8:ef:63:87:20:c3:48:d7:e5:6f:20:
                    6b:5a:a1:0d:2f:8f:a9:8a:23:5e:d5:21:94:68:f0:
                    7e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:50:7F:E9:0F:49:2D:77:AE:53:98:61:84:0E:BF:57:C4:79:4A:B1
            X509v3 Authority Key Identifier:
                keyid:2D:C0:F2:42:AD:DA:71:36:D9:51:41:42:20:51:D1:36:11:43:E4:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/2DC0F242ADDA7136D95141422051D1361143E486.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DC0F242ADDA7136D95141422051D1361143E486.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/323830343a336437343a623a3a2f34382d313238203d3e20323636353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:20:ec:40:01:44:18:56:fb:2e:4c:95:1a:d6:1f:23:f0:1e:
         e1:84:c6:c2:48:a4:a7:d4:cc:4f:ec:d4:f0:f5:ba:21:14:61:
         b0:dc:b2:b7:c0:a7:40:c3:55:07:3b:b7:92:f8:aa:16:21:e8:
         06:5e:6c:9a:33:5e:04:3e:11:6d:ff:35:08:2e:16:3b:88:fe:
         3b:13:8a:f5:60:2b:3a:62:22:b8:19:ab:49:94:f4:dd:42:2f:
         f5:90:dc:80:0a:7e:1d:ee:4b:54:60:e8:c2:65:df:ce:e5:5c:
         ae:32:67:1c:f3:75:6e:84:bb:2e:90:1c:fc:bb:81:c5:12:54:
         88:ad:91:eb:8c:1b:8b:77:3e:e4:65:b8:84:c5:b9:8d:a4:ef:
         4c:bd:98:8f:10:b5:0e:3c:0c:cd:e5:83:03:79:9d:37:f7:86:
         09:43:ee:48:5b:8a:e4:74:6e:bd:0d:ac:10:db:ad:8d:23:8b:
         75:a9:b7:eb:75:fb:1a:05:7e:a1:ae:41:f3:ae:21:0f:e8:90:
         74:12:2a:91:2b:41:1e:ae:40:40:06:a8:c8:ec:bd:85:01:3e:
         95:3d:3c:07:38:cf:5e:7b:1b:87:75:8a:e2:b6:77:44:ff:e6:
         3e:0a:1a:5f:e7:da:d0:f5:26:fd:fb:61:ad:2c:6d:b5:84:7d:
         a8:3a:6f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:29:21 2025 by rpki-client