Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33342d3334203d3e20323730373933.roa
File:                     323830343a373138303a3a2f33342d3334203d3e20323730373933.roa (raw, json)
Hash identifier:          aU4U86iGV84DuEw4neEIYH1JT+mCBQZq3vEvnQq8R3A=
Subject key identifier:   B3:5C:1C:FA:E5:D7:E7:A8:2F:D5:66:7D:7B:86:84:B9:53:E1:0E:24
Certificate issuer:       /CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
Certificate serial:       401D0EB3B26D6614ACF8B22D1B76634572D09A2E
Authority key identifier: 4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33342d3334203d3e20323730373933.roa
Signing time:             Thu 25 Sep 2025 13:04:14 +0000
ROA not before:           Thu 25 Sep 2025 12:59:14 +0000
ROA not after:            Thu 24 Sep 2026 13:04:14 +0000
asID:                     270793
IP address blocks:        2804:7180::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1d:0e:b3:b2:6d:66:14:ac:f8:b2:2d:1b:76:63:45:72:d0:9a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
        Validity
            Not Before: Sep 25 12:59:14 2025 GMT
            Not After : Sep 24 13:04:14 2026 GMT
        Subject: CN=B35C1CFAE5D7E7A82FD5667D7B8684B953E10E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:d3:5a:bc:1e:69:45:20:3f:bc:0f:70:15:
                    de:db:08:cf:6f:35:1d:74:ff:15:f1:3b:33:17:02:
                    f8:bb:09:7d:28:3a:cf:b5:81:20:aa:22:5c:3e:61:
                    f1:25:4f:51:9b:1f:a1:8e:93:fc:ae:74:fd:71:a5:
                    4a:fe:1d:fc:9c:24:72:3c:12:52:40:f4:d7:14:25:
                    31:62:e8:af:91:75:b1:7d:02:ed:eb:d1:e9:b7:5a:
                    da:09:cd:d4:42:7c:78:89:01:87:75:89:bf:5f:51:
                    2b:fd:c1:9e:23:d3:f0:1c:3a:5f:0f:20:ed:fc:4b:
                    61:6e:9b:5b:70:47:32:08:1e:53:5e:1a:cf:6a:7e:
                    b9:7f:b3:71:e3:95:af:ed:76:ca:9b:78:40:e1:cb:
                    e6:5b:20:38:33:b5:3b:6b:5a:ac:fb:86:a0:60:b4:
                    45:94:11:fe:bd:1f:be:72:d6:25:35:38:e0:35:7e:
                    f4:0a:8a:59:6c:77:43:69:54:17:1d:59:27:1d:ab:
                    eb:50:cf:bd:8c:98:77:76:1f:ef:84:a4:07:b4:f1:
                    e6:aa:86:c0:ac:67:ce:b3:d8:12:87:6e:ad:d4:e6:
                    6f:d5:3f:0c:6a:da:b7:52:d8:98:b4:c4:0d:59:5b:
                    ff:37:d3:42:d8:cb:fa:8c:0e:fc:77:d9:13:4f:38:
                    63:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5C:1C:FA:E5:D7:E7:A8:2F:D5:66:7D:7B:86:84:B9:53:E1:0E:24
            X509v3 Authority Key Identifier:
                keyid:4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33342d3334203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7180::/34

    Signature Algorithm: sha256WithRSAEncryption
         83:7e:ef:d7:5d:61:5e:c1:01:89:65:37:a5:cb:fd:98:ed:b7:
         b1:62:06:00:78:be:26:65:51:1a:73:47:f2:9c:1f:0e:6d:dd:
         06:47:3f:8f:e4:e0:c2:bf:3a:5f:4c:fd:4d:08:33:1c:45:2a:
         b4:89:7c:a5:88:13:85:f6:de:82:fe:7c:ab:73:49:72:8e:28:
         54:6f:57:5e:d4:a0:75:98:91:80:ff:21:45:95:4a:11:34:86:
         60:be:82:25:e1:7f:49:52:fe:1d:05:2c:ae:85:2c:8b:e6:c6:
         f3:36:7a:50:6f:2f:6e:03:fb:fe:fb:04:cc:04:c1:2a:c9:9d:
         d4:22:74:b7:bc:de:89:94:bc:56:36:fa:fa:6a:1a:1d:fc:8f:
         91:5f:a1:c5:f7:e2:5d:fe:21:cf:da:3d:d4:95:e8:7b:44:7c:
         32:a1:17:71:b3:9d:41:b2:29:65:4d:48:a8:36:59:67:7c:42:
         1a:80:65:a4:14:ee:8a:96:bf:7c:0c:eb:2f:d0:c7:32:f1:f3:
         ec:1c:ec:1e:f9:f2:57:92:cd:92:df:b9:ed:e1:bd:5c:f3:76:
         bf:70:fb:7c:ae:79:2d:04:d9:21:b4:73:12:68:63:bd:4f:62:
         ad:80:00:97:20:79:8d:d7:b4:bb:66:49:d2:88:90:2c:ff:54:
         ca:e4:06:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:28 2025 by rpki-client