Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3a2f33322d313238203d3e20323632353838.roa
File:                     323830343a323930343a3a2f33322d313238203d3e20323632353838.roa (raw, json)
Hash identifier:          Ql6MXz7sNhTEaV2AQIKeVREm8sq9lGZYeq9HnqYoCt0=
Subject key identifier:   97:07:E3:36:44:A5:18:D3:A3:12:0D:FF:02:C8:1E:88:EE:EB:F4:EE
Certificate issuer:       /CN=947E29F37C387A9590C135AE83DBF68B102E9E57
Certificate serial:       2892B9DB0835603686B062BC671BC01C4A3496EF
Authority key identifier: 94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3a2f33322d313238203d3e20323632353838.roa
Signing time:             Tue 23 Sep 2025 21:28:21 +0000
ROA not before:           Tue 23 Sep 2025 21:23:21 +0000
ROA not after:            Tue 22 Sep 2026 21:28:21 +0000
asID:                     262588
IP address blocks:        2804:2904::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl
                          rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:92:b9:db:08:35:60:36:86:b0:62:bc:67:1b:c0:1c:4a:34:96:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947E29F37C387A9590C135AE83DBF68B102E9E57
        Validity
            Not Before: Sep 23 21:23:21 2025 GMT
            Not After : Sep 22 21:28:21 2026 GMT
        Subject: CN=9707E33644A518D3A3120DFF02C81E88EEEBF4EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:df:ce:9f:da:d4:1d:89:64:a5:a9:47:3d:e8:
                    d6:0e:7c:aa:83:a3:68:1e:60:c9:26:24:98:e2:39:
                    20:60:65:ac:62:b5:10:1e:2b:a0:32:c2:23:3e:f0:
                    89:37:8c:2c:39:ef:91:ec:53:f7:72:bf:88:bc:8e:
                    fb:51:69:d3:e0:ee:77:35:97:70:95:c5:aa:90:f3:
                    34:0f:04:fe:1e:b0:4a:7b:8b:2e:b3:51:29:55:d2:
                    2b:b1:90:90:a8:4f:7f:92:8c:be:2b:a8:c7:84:0b:
                    eb:07:07:d8:ca:19:bb:26:d2:4f:84:1f:76:e2:99:
                    9c:60:5e:97:cb:50:3d:2c:e0:e5:1d:cd:ed:d8:93:
                    57:56:02:03:e0:bb:c7:9d:cf:2c:0e:26:29:7a:10:
                    ee:36:8f:33:58:4a:3a:b0:11:2a:50:13:58:99:9f:
                    87:b0:5b:ce:f3:8e:a7:22:48:83:de:33:69:b8:80:
                    bb:eb:09:d6:bc:28:3f:2c:8b:74:97:65:61:d1:d4:
                    dd:ba:a5:be:2d:76:92:0d:04:b3:ba:0a:2d:59:08:
                    cc:0a:d9:10:5e:77:4b:44:4c:b6:ac:a5:c7:78:77:
                    ff:13:8e:d4:50:f3:86:73:b9:d1:96:fc:99:23:ca:
                    01:5a:33:83:9d:4e:64:4b:d1:ff:d3:93:1d:05:fe:
                    0c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:07:E3:36:44:A5:18:D3:A3:12:0D:FF:02:C8:1E:88:EE:EB:F4:EE
            X509v3 Authority Key Identifier:
                keyid:94:7E:29:F3:7C:38:7A:95:90:C1:35:AE:83:DB:F6:8B:10:2E:9E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/947E29F37C387A9590C135AE83DBF68B102E9E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/947E29F37C387A9590C135AE83DBF68B102E9E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/323830343a323930343a3a2f33322d313238203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2904::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:be:bb:d2:9e:45:18:75:ec:84:f6:92:c8:56:b3:7b:71:87:
         85:ab:87:c2:b7:df:78:27:ab:e1:c3:cf:34:9a:94:cc:07:6f:
         3f:3a:e8:dd:78:8b:89:a0:d9:ac:5f:d5:47:0f:9d:f2:5b:d2:
         11:1d:ac:df:e0:73:ac:aa:f6:54:f5:92:f1:b1:b0:8c:a6:20:
         37:61:3a:fa:a1:3f:e1:7c:9a:d5:2c:36:39:2d:b8:86:be:47:
         19:63:fe:ad:01:1f:3e:a2:5f:19:79:88:93:71:ba:1b:c3:b3:
         65:c9:e0:59:72:df:7b:aa:82:6c:df:1e:37:4c:bf:52:36:0c:
         b2:b0:07:f2:a2:50:30:89:e7:cf:a8:92:f0:90:8a:32:d8:3a:
         a3:37:85:ab:fd:c6:08:73:6b:7c:d9:71:e6:db:f2:80:1f:e4:
         91:81:a3:68:0e:cd:bb:95:61:f3:3d:56:67:52:ea:92:4c:f1:
         64:e8:e3:f2:17:63:08:7d:b0:7b:45:b3:b6:53:08:e4:f1:f4:
         1b:75:ae:a1:01:70:4f:fa:8d:2d:06:c0:19:d6:da:e5:fd:e0:
         aa:eb:22:b0:c0:71:55:46:f2:d8:20:b1:9d:15:8a:7d:a0:d6:
         23:83:e5:b3:23:56:7d:e4:7a:bc:ac:4f:3d:e6:39:f3:82:77:
         f9:09:5f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:34:41 2025 by rpki-client