Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a3a2f33372d3337203d3e20323632373739.roa
File:                     323830343a333231303a3a2f33372d3337203d3e20323632373739.roa (raw, json)
Hash identifier:          su5pgfOiKdLtiffcT8DLD92s7YPrV5A23ipNEcTL4Jo=
Subject key identifier:   AD:0C:56:55:B3:CA:7E:A1:AE:C4:38:40:5A:D1:70:78:99:26:E1:5E
Certificate issuer:       /CN=E4366A5F8A247EBD935D66B8B1B7618B7789D0B1
Certificate serial:       232D47DDD96AF4A56010EB2F79E1D04F42A3E923
Authority key identifier: E4:36:6A:5F:8A:24:7E:BD:93:5D:66:B8:B1:B7:61:8B:77:89:D0:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a3a2f33372d3337203d3e20323632373739.roa
Signing time:             Wed 08 Oct 2025 17:46:23 +0000
ROA not before:           Wed 08 Oct 2025 17:41:23 +0000
ROA not after:            Wed 07 Oct 2026 17:46:23 +0000
asID:                     262779
IP address blocks:        2804:3210::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.crl
                          rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2d:47:dd:d9:6a:f4:a5:60:10:eb:2f:79:e1:d0:4f:42:a3:e9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4366A5F8A247EBD935D66B8B1B7618B7789D0B1
        Validity
            Not Before: Oct  8 17:41:23 2025 GMT
            Not After : Oct  7 17:46:23 2026 GMT
        Subject: CN=AD0C5655B3CA7EA1AEC438405AD170789926E15E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:3e:36:32:e0:e1:3a:7f:3e:7a:9e:0f:35:
                    59:93:ce:ce:be:5e:1a:74:3d:2e:1b:a7:fb:17:1e:
                    ff:27:f3:85:66:b2:aa:71:69:71:e9:41:6b:d4:8e:
                    76:a8:f3:c6:24:ca:35:d3:21:84:a1:58:34:06:6a:
                    87:43:33:9b:95:a7:b7:fb:af:30:86:8f:9a:66:7a:
                    c3:bb:7c:c1:c2:c0:80:dc:4b:de:b8:7d:03:f5:d0:
                    7f:07:8b:c5:8c:aa:66:b5:ad:01:54:40:29:9e:a5:
                    ef:94:8c:06:13:e7:de:ec:28:3e:ca:83:de:76:f3:
                    97:1f:cf:ea:36:d0:a2:01:0d:85:cd:2f:03:9c:63:
                    d7:3c:1a:5c:ab:a0:98:46:a3:58:82:d1:d5:16:19:
                    68:f9:8b:af:85:93:69:a7:d7:87:48:5c:fa:91:8d:
                    04:59:83:73:d2:f8:29:cf:c6:eb:5a:a5:ba:de:49:
                    9f:71:b7:05:3f:ab:8f:d4:67:41:69:2f:43:2c:ea:
                    02:17:eb:47:9d:10:8f:bd:6f:34:46:26:05:e8:d0:
                    32:38:b3:da:95:33:09:95:6a:6b:f7:2f:20:9e:60:
                    f0:0c:a1:e2:1d:17:00:27:de:d9:fb:0d:d7:5c:d2:
                    1e:52:81:d2:17:8f:44:9c:a9:1d:35:fc:dc:5f:54:
                    dc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0C:56:55:B3:CA:7E:A1:AE:C4:38:40:5A:D1:70:78:99:26:E1:5E
            X509v3 Authority Key Identifier:
                keyid:E4:36:6A:5F:8A:24:7E:BD:93:5D:66:B8:B1:B7:61:8B:77:89:D0:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/323830343a333231303a3a2f33372d3337203d3e20323632373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3210::/37

    Signature Algorithm: sha256WithRSAEncryption
         c5:82:bb:5a:42:74:4b:97:59:c0:a5:78:0a:08:05:54:30:3b:
         6b:80:a1:e1:b4:fe:83:90:3b:69:d7:4e:1b:2d:44:90:79:a6:
         f8:be:ac:33:23:8f:af:11:dd:8c:af:6d:d7:27:c2:e3:37:30:
         0f:c1:70:32:d5:a7:2c:17:8c:be:1b:a3:4c:68:92:e1:07:3c:
         97:59:b6:63:9d:05:fc:72:54:f4:96:e6:c7:b7:4f:79:0f:b9:
         46:a6:91:5c:ef:7e:88:6f:8e:15:a6:ff:62:50:22:67:78:61:
         64:19:c8:48:18:d2:95:75:6e:b1:c6:84:84:31:1d:5a:ea:10:
         2b:3b:d5:52:14:10:b8:a9:03:0d:51:17:91:c9:b7:ae:22:aa:
         e0:02:2c:d7:ff:82:a1:2b:d6:e7:7b:18:56:c8:c3:ee:3c:d7:
         59:66:e0:1f:f6:0b:1f:8e:a8:29:8c:22:32:b3:48:6c:75:b6:
         27:ee:49:2a:15:8f:33:ac:2f:75:ad:61:3c:2e:75:cf:c3:af:
         c1:83:87:7a:48:1e:5a:db:d2:8d:cb:9e:89:54:b5:7f:b0:9e:
         ef:63:ad:cf:c2:19:22:dd:e4:cb:50:8c:01:75:37:7f:97:a7:
         f2:48:cc:6d:c9:33:28:05:b7:3a:f0:26:69:1b:8d:6a:0f:74:
         58:7b:bf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:49:08 2025 by rpki-client