Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/323830343a363736383a3a2f33322d3332203d3e20323639363236.roa
File:                     323830343a363736383a3a2f33322d3332203d3e20323639363236.roa (raw, json)
Hash identifier:          0qpcJ+tbNfWi5cp85Npzhc8FUFW4hSjAueswNczbmUE=
Subject key identifier:   7B:73:9F:BD:3C:83:DA:12:35:A5:30:24:A6:EB:C6:85:55:16:42:69
Certificate issuer:       /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
Certificate serial:       2DDD42AB0EB453F990BA68B46D843A40143A1341
Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/323830343a363736383a3a2f33322d3332203d3e20323639363236.roa
Signing time:             Sat 02 Aug 2025 20:35:20 +0000
ROA not before:           Sat 02 Aug 2025 20:30:20 +0000
ROA not after:            Sat 01 Aug 2026 20:35:20 +0000
asID:                     269626
IP address blocks:        2804:6768::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl
                          rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:dd:42:ab:0e:b4:53:f9:90:ba:68:b4:6d:84:3a:40:14:3a:13:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
        Validity
            Not Before: Aug  2 20:30:20 2025 GMT
            Not After : Aug  1 20:35:20 2026 GMT
        Subject: CN=7B739FBD3C83DA1235A53024A6EBC68555164269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:2f:31:e5:5b:ae:ef:fe:e8:56:a9:f6:e1:
                    c1:3c:23:22:32:8d:7b:64:b0:28:02:4a:33:0b:35:
                    03:0c:4d:c7:06:7e:be:e7:e5:45:04:0a:4c:63:cb:
                    bc:cb:89:c8:50:2f:f0:3a:81:55:96:d7:83:9c:be:
                    35:e5:15:a2:49:87:14:b6:e6:72:a8:7d:3e:ef:3c:
                    15:b3:13:aa:ab:53:2b:80:60:85:c5:5c:d3:26:9a:
                    44:3d:99:48:a5:13:6e:fd:a0:42:83:47:b4:27:00:
                    80:62:ae:d9:2c:ce:8a:2d:b8:24:d4:42:2e:1e:f4:
                    95:2d:6a:62:f4:c8:92:43:e6:74:4f:ef:81:e5:fe:
                    7d:ff:3e:1b:09:20:82:e5:74:cc:44:21:36:67:76:
                    da:2c:09:6f:82:fd:80:fc:66:83:a6:6d:84:4f:b2:
                    1e:b6:a7:4c:ab:8b:b4:dd:79:ac:53:6d:b6:63:c8:
                    5a:47:53:0a:92:c9:23:41:ba:5d:28:bc:70:ac:3d:
                    63:ca:bb:d8:26:b2:dd:f8:bd:98:f4:1a:48:c7:af:
                    a5:95:80:a5:b3:f2:42:28:75:83:88:ea:ab:51:03:
                    65:c0:7a:b2:be:21:60:23:df:cf:ed:9a:30:4e:04:
                    a2:b8:b3:43:2b:7e:d8:e3:8c:77:3c:27:79:2e:02:
                    8a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:73:9F:BD:3C:83:DA:12:35:A5:30:24:A6:EB:C6:85:55:16:42:69
            X509v3 Authority Key Identifier:
                keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/323830343a363736383a3a2f33322d3332203d3e20323639363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6768::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:bf:dd:96:5d:6e:db:9d:0d:97:20:7b:ff:81:28:a6:dc:88:
         1a:83:11:6a:bf:6e:ea:fd:3d:33:ec:d7:a9:2b:71:cb:c5:57:
         03:9a:36:b1:d6:8a:4b:2e:a8:ec:eb:f9:00:46:84:04:d2:c1:
         aa:49:30:cd:b6:80:94:c9:88:a6:df:20:63:b2:ed:c5:c3:b2:
         12:cb:67:19:8c:a4:45:27:35:72:74:c2:50:50:77:14:c1:e6:
         1a:07:1d:f0:7d:f3:5f:24:22:bd:23:d5:6e:4b:1b:61:1b:73:
         67:82:12:75:82:da:a5:ae:b9:80:8a:2b:c6:6a:d8:f7:a3:70:
         3c:b4:9f:3f:76:fc:ca:10:52:73:9f:b8:92:fc:c1:40:35:91:
         58:10:06:c8:05:43:2c:3b:b4:61:e3:0f:2d:e1:ec:24:dc:b7:
         dc:75:72:03:14:88:3f:b7:c3:81:b7:54:da:e2:e6:f3:ba:97:
         34:11:67:ce:9a:eb:31:84:eb:a0:7d:58:c6:b0:70:18:d6:1d:
         17:ba:48:54:e4:b4:c6:e0:cd:8c:7a:55:05:b5:38:16:3f:64:
         29:76:e4:fe:e6:6b:5c:9f:a5:5c:0c:94:91:9a:40:51:95:03:
         6a:5f:2a:a1:78:9d:82:89:17:6b:1b:32:ef:2a:74:3d:5b:e4:
         27:ca:22:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:49:58 2025 by rpki-client