Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a633030303a3a2f33342d3334203d3e20323637343536.roa
File:                     323830343a343163383a633030303a3a2f33342d3334203d3e20323637343536.roa (raw, json)
Hash identifier:          lrY041SXWz6DZjG/Q4nveLurMRzuWJ3VGrraEpl6CgM=
Subject key identifier:   DE:2A:1A:24:5F:45:08:8A:D5:2F:20:C7:DA:09:D0:9B:4E:5A:5D:04
Certificate issuer:       /CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
Certificate serial:       1CA060BCE6D994CD11A4B71CB8EAA9F73696854C
Authority key identifier: 76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a633030303a3a2f33342d3334203d3e20323637343536.roa
Signing time:             Thu 16 Oct 2025 03:46:13 +0000
ROA not before:           Thu 16 Oct 2025 03:41:13 +0000
ROA not after:            Thu 15 Oct 2026 03:46:13 +0000
asID:                     267456
IP address blocks:        2804:41c8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl
                          rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:40:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a0:60:bc:e6:d9:94:cd:11:a4:b7:1c:b8:ea:a9:f7:36:96:85:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
        Validity
            Not Before: Oct 16 03:41:13 2025 GMT
            Not After : Oct 15 03:46:13 2026 GMT
        Subject: CN=DE2A1A245F45088AD52F20C7DA09D09B4E5A5D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1a:80:1c:c5:4d:7f:b1:1e:92:cc:ed:67:fd:
                    23:4e:df:0c:11:47:b2:0a:a3:8b:20:2d:ef:d3:9c:
                    42:16:d1:1e:ea:7f:09:e6:af:0f:78:26:1d:0c:23:
                    3a:24:cb:23:a5:32:11:78:65:93:d7:55:63:5d:1c:
                    c0:ca:de:79:81:01:fd:e6:a4:92:23:a1:95:ce:23:
                    5e:43:7d:37:b6:cb:59:ac:19:ae:c4:96:03:42:09:
                    5c:bc:b0:1e:66:f1:ba:0e:bc:17:a5:a3:c4:3f:18:
                    e0:51:84:d8:5f:28:9b:48:f5:10:51:d2:d0:4e:4c:
                    77:b5:67:2f:75:73:7e:1e:a3:92:b0:55:85:aa:43:
                    42:5a:7c:b7:cc:c6:9e:66:e6:f4:d9:86:5f:22:76:
                    a0:67:5d:9f:db:aa:39:7a:a9:52:a4:c3:b6:bb:f7:
                    f6:6e:06:8d:47:dc:4a:37:79:c0:a8:f5:30:cf:f0:
                    e3:d4:b6:3d:8a:79:59:6d:84:46:2e:f7:79:c9:94:
                    38:de:69:ef:b7:78:7a:36:37:81:d2:4d:c9:71:7e:
                    a2:c9:41:29:30:9b:4e:b6:94:e5:79:93:63:df:a7:
                    ee:18:d7:1c:e5:51:ec:a2:03:df:60:c1:da:5e:2a:
                    3d:0a:b5:3b:a9:e6:f0:b1:be:d6:42:ff:0f:d6:87:
                    7f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2A:1A:24:5F:45:08:8A:D5:2F:20:C7:DA:09:D0:9B:4E:5A:5D:04
            X509v3 Authority Key Identifier:
                keyid:76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a633030303a3a2f33342d3334203d3e20323637343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41c8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         25:7e:e0:74:a6:88:9a:c7:e9:b9:16:fc:53:f6:d7:97:b7:17:
         7c:13:12:73:0f:86:bc:de:8d:53:85:32:5f:94:b9:ec:42:82:
         34:a5:d0:f6:23:62:c4:5a:4a:40:d6:03:3c:a2:87:b0:59:af:
         97:dd:90:ce:d3:c6:a9:10:57:42:32:9a:24:15:9e:77:c2:43:
         35:07:34:1b:9e:05:81:b9:93:7d:79:b8:06:69:4a:89:d2:d4:
         f9:f0:f9:51:49:5f:c6:5d:ec:ae:31:b4:3c:a1:d8:d2:39:b4:
         9d:eb:9f:4f:fc:e0:82:89:f6:a0:9e:a3:25:8a:e2:36:76:67:
         37:a8:5e:cc:5f:cd:87:48:46:81:b1:f7:e6:d9:c2:e9:ec:16:
         5e:c2:d0:95:9a:49:92:15:f2:47:fa:7c:79:5b:03:49:dd:07:
         46:7f:4d:2d:63:e8:56:dd:ad:06:f7:56:e1:9b:03:4c:ee:95:
         07:cc:4b:92:29:5b:c9:06:ce:86:e7:ec:28:e8:e4:a7:25:6a:
         2a:1b:2a:29:28:7d:a6:4f:78:21:60:f7:be:94:fe:76:e2:9a:
         3f:2b:f3:7d:5b:9e:be:b2:fb:7d:85:01:cd:31:4d:5c:f9:98:
         b3:9a:cc:9d:c8:87:a7:3f:f3:ab:fa:96:6a:93:68:fe:69:c1:
         d4:f7:e2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:31:19 2025 by rpki-client