Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33342d3334203d3e20323732353831.roa
File:                     323830343a383537383a3a2f33342d3334203d3e20323732353831.roa (raw, json)
Hash identifier:          Kz+qNOJo1gex4zcS+3Jq85bVEXkl1X8v0g7cMWndPMA=
Subject key identifier:   20:84:48:95:51:EB:A6:BF:7B:9E:6B:DB:54:73:8F:15:81:44:FB:BB
Certificate issuer:       /CN=C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1
Certificate serial:       4C235212DDA0F5CF6B6664991B0289F4BE0D35EA
Authority key identifier: C9:FB:3B:F7:40:A7:2E:4F:8F:F3:0F:75:F7:5D:58:9D:5F:FE:74:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33342d3334203d3e20323732353831.roa
Signing time:             Tue 07 Oct 2025 16:15:45 +0000
ROA not before:           Tue 07 Oct 2025 16:10:45 +0000
ROA not after:            Tue 06 Oct 2026 16:15:45 +0000
asID:                     272581
IP address blocks:        2804:8578::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.crl
                          rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 22:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:23:52:12:dd:a0:f5:cf:6b:66:64:99:1b:02:89:f4:be:0d:35:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1
        Validity
            Not Before: Oct  7 16:10:45 2025 GMT
            Not After : Oct  6 16:15:45 2026 GMT
        Subject: CN=2084489551EBA6BF7B9E6BDB54738F158144FBBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:64:ac:c0:50:54:0d:6f:39:48:1b:b1:a1:da:
                    87:6a:8a:9f:30:b1:a1:89:3d:db:55:89:ec:a3:73:
                    8b:9e:53:76:43:74:a3:76:be:c8:5b:ba:11:1a:59:
                    1a:29:7f:f6:04:c0:01:9a:0a:53:5e:be:d8:00:3c:
                    49:d0:9e:7a:9d:e6:e1:3d:a5:34:9d:19:74:b0:1d:
                    4f:23:75:36:f9:c0:5b:5a:f5:30:a0:d6:f4:ad:57:
                    2a:ea:a9:58:3b:a4:e5:07:f9:cd:2b:3b:83:f9:7d:
                    ea:87:d8:49:9f:07:c2:d1:bf:54:41:7d:a5:a1:25:
                    c0:c7:ff:a1:3a:4c:6b:a8:93:32:54:82:e5:22:4a:
                    a2:0d:49:a4:13:75:c5:98:5a:0f:1a:ea:c7:58:f6:
                    83:60:41:9e:94:88:71:9f:76:1f:e6:d5:3b:c8:4e:
                    c6:78:bd:31:2e:02:04:c6:a7:67:3d:da:c4:da:d3:
                    ca:a0:6f:21:56:ac:1f:20:d1:e9:37:e3:2c:73:1e:
                    b0:bc:5a:0a:1b:1f:f0:75:76:ab:62:f0:66:8a:26:
                    45:b7:5c:d7:39:a4:88:da:72:61:40:d7:77:31:52:
                    4d:fb:1e:34:0b:91:b9:3c:d4:72:f7:0c:0a:63:ba:
                    5f:95:76:ce:6e:89:75:12:2e:ca:98:c8:fb:ec:1c:
                    bb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:84:48:95:51:EB:A6:BF:7B:9E:6B:DB:54:73:8F:15:81:44:FB:BB
            X509v3 Authority Key Identifier:
                keyid:C9:FB:3B:F7:40:A7:2E:4F:8F:F3:0F:75:F7:5D:58:9D:5F:FE:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9FB3BF740A72E4F8FF30F75F75D589D5FFE74A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33342d3334203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:16:7f:61:c9:e9:6e:d6:f8:9b:c9:d5:5e:04:c7:cf:5f:98:
         70:f7:64:44:84:b4:5f:a7:b2:f8:45:a8:bb:fd:cd:ad:e2:0a:
         38:fc:f5:6f:51:08:06:57:d0:d9:49:c0:6b:12:d1:3e:ad:c1:
         f8:4c:b4:4f:c8:48:6a:0d:40:c8:15:77:2c:bf:79:22:11:b4:
         e0:49:e8:ea:1a:20:85:9c:32:a7:f7:3c:1f:0e:75:00:68:1e:
         a1:bf:4b:7a:ac:92:9b:04:87:b8:00:7c:60:7b:de:62:64:09:
         49:73:4a:d4:1b:79:03:af:19:73:30:93:a4:d8:24:23:11:72:
         77:f1:80:1f:3c:bd:9a:d4:0b:a4:3c:f3:9a:cd:ae:64:a1:89:
         05:97:6f:22:6f:41:55:df:99:c8:36:f1:6c:c7:63:9b:3c:c7:
         2f:ba:4f:13:e3:e9:5f:bb:46:ad:c9:84:3d:e7:77:06:6c:9b:
         1a:8d:03:69:78:b5:c1:16:21:df:cd:57:79:c6:9a:0f:d9:5e:
         63:2b:33:a6:7f:14:53:13:fb:cb:9e:3a:23:68:52:58:9e:6e:
         b2:4c:77:c2:44:6c:e2:6e:04:53:63:4e:a6:36:19:ff:83:96:
         b1:5c:33:e0:eb:70:17:d1:ab:3a:5b:6c:75:18:60:ba:d8:27:
         c9:ae:06:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:13:33 2025 by rpki-client