Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/323830343a336333383a3a2f33322d3334203d3e20323636313937.roa
File:                     323830343a336333383a3a2f33322d3334203d3e20323636313937.roa (raw, json)
Hash identifier:          5tvmpbidUD3q15qy+fxKQA1K+VFM3v/AeJ27vEjd/c4=
Subject key identifier:   33:3D:57:2E:72:A0:C1:25:96:11:51:16:97:C1:49:BA:96:08:A4:3B
Certificate issuer:       /CN=C01B6E051024BDBFADF13A18BB1C97739E8D11AA
Certificate serial:       11D02CAAA6CF9DEC750C36BB2354E9077EA8534D
Authority key identifier: C0:1B:6E:05:10:24:BD:BF:AD:F1:3A:18:BB:1C:97:73:9E:8D:11:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/323830343a336333383a3a2f33322d3334203d3e20323636313937.roa
Signing time:             Wed 01 Oct 2025 01:16:38 +0000
ROA not before:           Wed 01 Oct 2025 01:11:38 +0000
ROA not after:            Wed 30 Sep 2026 01:16:38 +0000
asID:                     266197
IP address blocks:        2804:3c38::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.crl
                          rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d0:2c:aa:a6:cf:9d:ec:75:0c:36:bb:23:54:e9:07:7e:a8:53:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01B6E051024BDBFADF13A18BB1C97739E8D11AA
        Validity
            Not Before: Oct  1 01:11:38 2025 GMT
            Not After : Sep 30 01:16:38 2026 GMT
        Subject: CN=333D572E72A0C1259611511697C149BA9608A43B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:23:8e:96:aa:ef:14:87:96:1c:88:6d:4b:
                    e8:01:4f:73:0f:e2:c8:6c:4f:7f:c9:ee:42:d0:75:
                    f4:3f:72:1c:36:4a:33:b5:c3:7e:c2:c1:ff:0d:a4:
                    19:89:ef:62:30:56:9f:f5:31:c3:34:9b:7f:7a:86:
                    78:ee:0f:fe:47:6f:5c:24:e6:1d:cb:21:07:fe:db:
                    85:d9:22:35:64:58:95:24:19:63:5a:73:4d:19:6a:
                    9a:f7:8d:0c:b6:01:0c:20:9f:59:f8:55:f3:d0:fc:
                    f6:31:86:d3:b5:22:e1:dd:af:49:4d:d1:0a:3f:16:
                    16:d5:f6:80:1a:b9:17:3b:c8:22:08:9f:09:c5:d3:
                    70:5b:e2:80:15:85:af:ab:64:c4:d3:09:7a:84:52:
                    e2:fd:64:b8:d3:d5:dd:c7:8f:74:c8:fd:9e:b8:b2:
                    47:01:25:ed:06:84:7c:71:04:76:54:88:dd:e4:41:
                    fa:1f:4d:40:68:98:57:01:24:f6:37:bb:77:43:b3:
                    b8:51:78:f8:57:97:bc:37:3a:3d:47:6a:6a:55:61:
                    8f:12:89:bc:e6:a5:cd:dc:f8:6e:ca:b6:1f:5f:1c:
                    24:a6:33:5d:68:b8:c6:aa:53:63:a0:48:80:2f:c8:
                    de:e8:6c:0a:bf:72:e1:53:93:a1:de:69:aa:21:6a:
                    d4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3D:57:2E:72:A0:C1:25:96:11:51:16:97:C1:49:BA:96:08:A4:3B
            X509v3 Authority Key Identifier:
                keyid:C0:1B:6E:05:10:24:BD:BF:AD:F1:3A:18:BB:1C:97:73:9E:8D:11:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/323830343a336333383a3a2f33322d3334203d3e20323636313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:ff:cb:1b:57:da:93:26:ef:ef:31:a8:5b:19:07:76:d4:c1:
         e0:e0:aa:46:70:51:c1:fa:1f:0f:fc:71:83:51:f5:e3:02:ad:
         21:df:17:77:0e:28:20:ed:df:2c:93:32:e4:56:37:93:fa:33:
         15:17:93:66:a1:91:37:30:b8:2a:9f:53:6a:46:b5:f8:7a:b8:
         84:c8:14:9c:1a:23:ec:bb:a7:fe:ca:c2:15:bc:39:08:e7:bf:
         65:b9:83:a4:28:09:fb:15:c8:32:df:62:55:0b:f9:11:56:17:
         9c:99:bd:42:98:bc:9e:dd:8e:f4:58:6a:68:ad:53:ad:9b:42:
         89:f7:bd:15:71:66:65:a0:4c:b5:54:58:1b:7b:2d:f4:b4:00:
         ba:7e:7b:98:55:da:61:b7:2a:bd:0d:44:55:da:80:6b:76:cb:
         2e:ee:20:cd:6b:dc:ab:d5:97:22:b6:bd:0a:85:7d:41:9b:5f:
         1d:35:a6:76:d4:4d:05:0c:1c:cb:57:25:0a:b4:b1:1d:9c:a8:
         f1:0a:70:24:a6:d9:6c:92:02:6d:0e:94:a9:e0:50:dd:c9:04:
         53:28:15:e4:32:36:e7:da:90:53:32:a8:3a:fb:05:91:be:3e:
         43:39:25:eb:2a:0e:f3:7e:f1:a2:1d:26:26:db:4f:a0:5b:e8:
         65:43:26:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:52:21 2025 by rpki-client