Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33322d3332203d3e203631363337.roa
File:                     323830343a316331383a3a2f33322d3332203d3e203631363337.roa (raw, json)
Hash identifier:          eAtV1weM1ZZttng6X45YjCaAFANkAaXB2ztdXi1DEFY=
Subject key identifier:   F9:75:BD:63:60:08:5E:CB:95:75:BD:4F:7F:36:85:62:A7:00:58:43
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       6E9822601B37053F55D1DCCEA95409A9CAA8F848
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33322d3332203d3e203631363337.roa
Signing time:             Fri 05 Sep 2025 23:07:40 +0000
ROA not before:           Fri 05 Sep 2025 23:02:40 +0000
ROA not after:            Fri 04 Sep 2026 23:07:40 +0000
asID:                     61637
IP address blocks:        2804:1c18::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 14:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:98:22:60:1b:37:05:3f:55:d1:dc:ce:a9:54:09:a9:ca:a8:f8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Sep  5 23:02:40 2025 GMT
            Not After : Sep  4 23:07:40 2026 GMT
        Subject: CN=F975BD6360085ECB9575BD4F7F368562A7005843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:46:11:f5:ec:89:5f:27:e1:28:a2:68:03:12:
                    d8:3f:c0:2d:d4:b0:7b:10:d9:5b:eb:8c:f1:39:de:
                    7c:9b:3f:d5:e2:1a:9e:22:d5:3d:db:a5:76:46:d6:
                    47:d3:49:9b:1a:59:56:a8:f9:e4:cf:28:6c:43:4f:
                    f9:21:31:93:5d:46:07:1a:ba:15:bb:29:c5:13:c4:
                    d1:4f:25:24:f4:49:3d:98:b5:7b:00:49:5e:0d:ec:
                    fc:18:67:3e:62:e6:31:45:3f:64:5e:e3:0d:98:77:
                    60:9d:03:4b:fb:a8:b5:36:a3:3d:08:b1:fd:d0:fe:
                    92:4b:cd:a5:aa:30:26:ed:94:38:b3:87:8c:ac:98:
                    c6:74:af:cd:66:13:68:eb:df:4f:0b:40:28:ef:eb:
                    e6:06:f4:34:df:d6:94:8e:0e:4b:86:46:bf:d0:6f:
                    75:75:80:12:91:da:f0:03:ad:a9:b4:09:50:5f:df:
                    19:cc:65:7d:d0:90:50:14:da:8f:4a:3d:4b:1b:bb:
                    05:e2:8c:68:b3:63:42:89:0e:1c:b8:42:f6:27:59:
                    7e:dd:a5:24:cb:38:6d:4f:2b:d1:91:5e:70:4c:b0:
                    fe:2f:63:3b:27:75:e6:57:5c:95:b5:de:cc:a8:31:
                    5a:2a:d9:0d:be:e6:ea:c0:d4:e6:ba:e7:43:ee:00:
                    49:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:75:BD:63:60:08:5E:CB:95:75:BD:4F:7F:36:85:62:A7:00:58:43
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33322d3332203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:69:48:c1:73:e2:6e:07:37:e5:99:13:64:7c:00:76:11:54:
         d1:f3:42:cf:fe:7b:59:98:d8:3d:a4:bf:68:65:d8:2d:7a:a6:
         31:be:3b:82:65:d6:be:db:79:7c:32:63:d3:83:7d:1e:82:0e:
         87:d4:fa:04:bf:5b:0b:aa:bb:af:0f:ff:13:bc:01:94:3d:e0:
         82:19:db:62:78:f7:5a:2b:05:33:b8:0d:2f:a5:5c:d9:59:e2:
         2c:bb:82:87:5a:3b:ec:27:1d:b1:98:09:d1:6f:8b:ec:75:01:
         7f:28:9c:88:bd:74:66:af:47:6a:db:7a:86:3b:23:81:d9:56:
         ec:fc:f5:fc:3f:15:9b:a3:e1:62:45:49:73:6e:b5:b3:16:80:
         13:94:f2:e4:14:fd:d9:94:d0:8e:30:9f:b5:05:c5:ce:36:1e:
         28:ee:4c:15:51:54:d9:5e:05:4d:8e:39:28:8a:85:40:12:20:
         8b:88:f9:f2:37:9e:dc:54:f8:a6:2a:5e:a7:d6:95:92:e7:4d:
         86:e3:e6:2d:a7:b5:f7:c5:ba:dd:7f:4d:30:0c:a6:c4:f6:7e:
         f7:af:8f:9b:ba:7f:b9:b1:99:12:03:34:51:69:81:6a:13:b2:
         d9:0a:85:0d:d3:ca:9e:21:c1:0d:56:fe:8c:ea:5a:ff:5a:18:
         65:e5:5a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:22:14 2025 by rpki-client