Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/323830343a326439343a666130303a3a2f34302d3430203d3e20323635323930.roa
File:                     323830343a326439343a666130303a3a2f34302d3430203d3e20323635323930.roa (raw, json)
Hash identifier:          NuES/p5zdtlcVvqdl+3ByjpMNejdqw1ZB8I1DvCu3tI=
Subject key identifier:   BB:32:61:15:16:5D:09:47:A3:E9:D7:05:69:93:F3:9F:DC:CB:A9:D6
Certificate issuer:       /CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
Certificate serial:       14303887AD516D8E7AD08E8ACE3596787DE6294C
Authority key identifier: D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/323830343a326439343a666130303a3a2f34302d3430203d3e20323635323930.roa
Signing time:             Sat 11 Oct 2025 12:06:50 +0000
ROA not before:           Sat 11 Oct 2025 12:01:50 +0000
ROA not after:            Sat 10 Oct 2026 12:06:50 +0000
asID:                     265290
IP address blocks:        2804:2d94:fa00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl
                          rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 20:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:30:38:87:ad:51:6d:8e:7a:d0:8e:8a:ce:35:96:78:7d:e6:29:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73B6EB9B972D5F3B7353A32BBF11CADB6207D38
        Validity
            Not Before: Oct 11 12:01:50 2025 GMT
            Not After : Oct 10 12:06:50 2026 GMT
        Subject: CN=BB326115165D0947A3E9D7056993F39FDCCBA9D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e2:56:cf:79:a1:34:c4:b2:a0:74:8f:9c:df:
                    29:c4:b0:ad:12:96:44:45:e3:e8:24:35:30:44:20:
                    a8:5f:ca:0f:42:9f:d5:eb:26:2e:2e:97:16:e4:34:
                    c4:0b:2a:e9:07:79:14:2a:8f:c3:0d:42:16:2a:6a:
                    a0:72:4c:88:fe:8e:11:10:f8:84:60:8d:66:db:b7:
                    a1:7b:c3:f1:82:bb:9c:8a:d5:d1:ab:38:68:d8:ee:
                    26:ee:1f:70:32:a2:41:35:53:7c:e9:65:c4:4f:cf:
                    f1:01:d3:28:a2:8a:76:25:28:84:84:a1:7b:af:77:
                    f6:7e:9e:f3:a9:bf:73:d1:9b:54:b7:5e:e4:f6:39:
                    78:38:cf:d8:88:47:05:7a:bf:46:30:56:40:ee:6e:
                    7b:78:0e:98:e2:a1:8b:39:f6:87:d9:b3:d6:26:d5:
                    50:c5:26:50:74:24:37:10:b6:b5:6f:4b:b8:2a:67:
                    db:a8:2a:db:88:4c:4d:b2:02:a8:74:20:08:5b:e9:
                    b1:41:12:72:ec:1d:5c:e9:fa:b9:dc:28:d8:57:19:
                    8d:f9:31:79:29:3e:7e:ed:7f:3e:e6:e7:43:e0:90:
                    6e:52:e6:65:36:6f:c8:b5:de:f3:cb:ee:ab:43:84:
                    9a:69:86:ae:15:85:20:5c:98:c6:59:15:5f:c1:27:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:32:61:15:16:5D:09:47:A3:E9:D7:05:69:93:F3:9F:DC:CB:A9:D6
            X509v3 Authority Key Identifier:
                keyid:D7:3B:6E:B9:B9:72:D5:F3:B7:35:3A:32:BB:F1:1C:AD:B6:20:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D73B6EB9B972D5F3B7353A32BBF11CADB6207D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYnXQG3ZWERjmntgyHX7RAp1HxQcn3JhDD5vUzRYTRQK/2/323830343a326439343a666130303a3a2f34302d3430203d3e20323635323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d94:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:79:fd:99:cd:b5:44:b0:42:b5:6d:26:80:59:05:7f:b0:24:
         05:a7:35:4e:be:7d:e3:90:1b:7a:12:c0:f8:78:3f:df:3b:b1:
         8a:58:fb:4d:45:5b:f7:3a:9b:f9:08:91:bd:9d:cb:ea:3f:ad:
         45:9e:cc:2c:aa:67:9a:ff:21:6d:7d:43:aa:19:0b:37:26:8f:
         74:24:ca:66:14:2e:31:6e:34:d4:94:d5:59:2c:f1:86:fb:c5:
         71:65:f9:4e:04:25:a0:1d:1a:d1:d2:be:db:d6:70:c2:c1:a0:
         de:95:8f:89:5e:36:a8:e1:31:6b:6f:ce:a5:98:26:3b:ad:44:
         8e:27:5a:b1:af:38:dc:af:64:92:57:37:03:c6:b0:7b:12:f5:
         57:08:6f:89:2d:20:a8:a4:c0:64:8c:da:dd:a0:72:94:12:02:
         14:03:38:62:01:d2:21:40:97:0a:f3:db:9d:77:30:d5:f1:41:
         ff:bd:c6:27:a2:99:06:51:99:83:08:9a:14:c2:9b:74:7d:29:
         f3:01:1f:23:a6:44:26:b4:55:cd:48:10:07:33:ff:b4:f1:b2:
         94:9c:7b:38:e6:10:4b:6e:05:8d:a8:2a:6d:9d:79:48:8b:d8:
         50:69:6d:4a:46:88:14:21:52:ff:b6:63:f3:83:ca:24:25:30:
         76:ca:63:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:15:19 2025 by rpki-client