Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a383030303a3a2f33342d3334203d3e20323639353332.roa
File:                     323830343a363631343a383030303a3a2f33342d3334203d3e20323639353332.roa (raw, json)
Hash identifier:          +7oiW0zye6Rgloh3B+kiJMXg1EPeAjBOcF3AWfk5Q34=
Subject key identifier:   81:BD:D7:5F:BB:9C:78:BD:8B:3E:16:04:2B:82:CE:E6:90:DF:1E:53
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       77D6F995E48F5D036F85387D9EC796DF14DB3B4D
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a383030303a3a2f33342d3334203d3e20323639353332.roa
Signing time:             Fri 19 Sep 2025 18:03:37 +0000
ROA not before:           Fri 19 Sep 2025 17:58:37 +0000
ROA not after:            Fri 18 Sep 2026 18:03:37 +0000
asID:                     269532
IP address blocks:        2804:6614:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl
                          rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d6:f9:95:e4:8f:5d:03:6f:85:38:7d:9e:c7:96:df:14:db:3b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Sep 19 17:58:37 2025 GMT
            Not After : Sep 18 18:03:37 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:24:d9:60:7b:1b:1b:9c:83:8f:6c:87:01:25:
                    0e:78:2b:b0:64:3b:72:34:2f:e7:71:d7:01:35:d8:
                    ac:63:7c:77:97:e2:a6:99:5e:02:58:a2:35:6d:4f:
                    85:17:0b:af:90:08:c6:57:09:ab:52:64:6d:8e:5b:
                    55:0e:52:ec:c2:c0:ff:76:4b:82:ae:58:71:89:26:
                    5a:01:48:2e:55:32:a1:f8:78:58:5f:06:5e:ad:50:
                    3f:82:b8:83:e9:3c:37:08:b4:8d:d1:70:96:a9:58:
                    dd:29:36:fb:40:e8:0d:15:c4:64:e4:3e:b0:b0:9c:
                    43:f9:d3:29:29:6f:57:4f:a9:bb:03:bf:0b:d0:ac:
                    f7:41:82:58:cd:03:9a:a8:ec:b6:8d:20:85:90:fb:
                    60:a3:e7:88:1c:9a:00:1e:96:45:34:2f:6a:b4:e4:
                    63:da:bf:15:71:b7:fd:f8:ff:0d:10:23:16:1d:15:
                    71:a7:6f:73:55:75:90:43:66:15:99:27:95:cb:eb:
                    0b:63:fe:fc:fc:4e:66:de:a4:21:9f:c7:93:ea:49:
                    59:41:49:a4:59:15:7a:07:03:4e:cf:c6:76:13:e2:
                    4b:64:1e:23:4f:4b:f9:cf:ab:8d:f0:74:e2:4e:dd:
                    80:3b:e9:15:63:2a:05:4c:39:ef:a3:69:6f:36:0c:
                    75:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BD:D7:5F:BB:9C:78:BD:8B:3E:16:04:2B:82:CE:E6:90:DF:1E:53
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a383030303a3a2f33342d3334203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6614:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a5:b2:ed:7e:0e:bb:47:5d:9d:91:9c:62:b2:cd:79:20:40:d2:
         8b:99:1f:e5:a2:d6:e2:e9:55:39:d3:2f:3d:ff:68:02:b2:74:
         75:0d:42:28:44:46:3f:20:7f:72:b0:c5:67:f8:c9:59:b1:12:
         91:91:62:e1:44:df:61:31:d2:17:f2:d2:dd:95:45:c4:cf:c1:
         7e:42:ee:13:ac:87:e3:b3:d9:88:ae:c2:d4:4e:8d:83:53:97:
         88:10:e6:2e:69:4a:ea:c1:59:94:56:57:34:36:eb:77:79:27:
         ad:d6:93:e6:81:cc:bb:0c:03:61:20:da:af:d1:9a:c8:c1:42:
         c0:af:d0:da:c3:fe:2d:10:96:49:25:31:79:13:0f:e4:ba:e7:
         f0:c1:b8:be:3f:19:67:9d:16:72:78:71:af:07:6d:03:85:32:
         e6:e4:e6:9b:f2:1d:86:d2:4b:f6:8d:66:92:e0:0c:02:62:12:
         be:94:24:4d:2e:15:9a:85:1f:2a:0e:1d:bd:a6:41:b2:bf:c5:
         8b:f6:99:3c:cc:15:01:58:53:7a:d5:17:ed:75:8a:d3:32:df:
         f1:07:1c:75:1b:1c:17:e0:3b:d2:b5:63:38:3c:9e:7a:83:29:
         0c:9a:a8:ef:75:21:b9:67:02:5a:d3:e1:c4:0d:b2:98:a7:d0:
         a5:8a:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:04 2025 by rpki-client