Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/323830343a356630633a3a2f33322d3332203d3e20323639303733.roa
File:                     323830343a356630633a3a2f33322d3332203d3e20323639303733.roa (raw, json)
Hash identifier:          BvonjstbFxEaI5k1u/yWxXBHu1xAIxX9va5t4Z3stQk=
Subject key identifier:   27:BC:12:9F:D1:9D:DE:3C:A8:F4:74:6D:F6:26:4D:CC:94:9F:86:7A
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       4A1B1B9E29EE554BCD4FB12D15826582281E3844
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/323830343a356630633a3a2f33322d3332203d3e20323639303733.roa
Signing time:             Tue 23 Sep 2025 15:19:31 +0000
ROA not before:           Tue 23 Sep 2025 15:14:31 +0000
ROA not after:            Tue 22 Sep 2026 15:19:31 +0000
asID:                     269073
IP address blocks:        2804:5f0c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1b:1b:9e:29:ee:55:4b:cd:4f:b1:2d:15:82:65:82:28:1e:38:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Sep 23 15:14:31 2025 GMT
            Not After : Sep 22 15:19:31 2026 GMT
        Subject: CN=27BC129FD19DDE3CA8F4746DF6264DCC949F867A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:4f:34:7f:05:82:cb:d8:50:e6:ea:42:77:
                    a9:04:b0:ed:b4:0b:73:0c:87:12:17:c7:16:a1:12:
                    47:16:ac:77:2b:55:b1:6b:8d:95:68:ea:45:07:7c:
                    69:7c:52:ed:b1:fa:72:09:cb:0d:15:38:0f:5e:b6:
                    a4:40:a8:33:a7:01:05:65:f5:02:07:ca:dc:2b:5f:
                    61:6c:e4:f8:20:a9:3b:a4:c4:68:57:02:01:f6:a0:
                    e8:c2:cd:08:1a:4c:79:46:e5:5d:d8:e6:a7:88:c8:
                    dc:c1:ad:19:7c:64:10:da:3c:16:cc:9a:5a:01:f6:
                    e2:f9:ed:e4:f0:d5:d1:e8:ec:61:26:4a:5b:54:53:
                    3b:69:43:36:45:ae:e2:7f:59:7d:48:e1:78:cf:14:
                    7f:81:58:8c:16:2a:cf:c6:8c:41:90:e4:bf:ac:9f:
                    ec:86:c0:02:56:56:42:2f:7e:7e:70:87:e9:c6:5c:
                    c0:8b:f7:f3:39:3a:2e:89:33:16:74:38:67:5a:9f:
                    42:09:b9:5c:09:29:28:dc:df:84:90:c8:a9:f3:01:
                    0d:14:eb:27:e7:05:88:85:07:03:09:ba:91:1b:30:
                    05:de:cf:49:11:73:0c:52:07:64:13:b7:69:3b:52:
                    98:67:3f:0c:2a:5c:28:e7:86:e7:a3:97:a0:02:ae:
                    4b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BC:12:9F:D1:9D:DE:3C:A8:F4:74:6D:F6:26:4D:CC:94:9F:86:7A
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/323830343a356630633a3a2f33322d3332203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:05:d0:57:3b:88:f6:a6:4e:90:d3:6c:41:42:cb:e7:d3:cb:
         9f:d8:6b:9a:73:98:e4:f6:75:e4:76:13:34:2b:5c:53:72:e9:
         57:52:4b:da:81:db:0b:6e:8c:e0:e0:ac:ed:78:a4:6f:95:1c:
         8b:74:60:8f:99:e9:db:64:85:8b:61:aa:e5:e1:c4:ff:8e:f7:
         e9:ed:2f:5a:ac:89:d3:61:e8:1e:3d:e4:b7:14:62:36:fe:8e:
         ad:8e:2e:ec:ee:6a:7f:07:f6:49:1d:d2:7d:c6:7b:d6:18:30:
         bb:eb:85:4f:07:05:a2:9e:a1:01:8a:b6:e5:04:0b:d7:c6:f3:
         77:f1:b7:6e:80:99:71:b7:18:76:99:74:b1:28:92:4d:26:ed:
         9d:24:cd:71:28:30:17:02:10:7b:1e:01:c8:84:f1:20:d0:23:
         8d:8d:78:54:91:ef:eb:8a:ed:50:16:d9:1d:91:b3:f2:5d:6b:
         91:39:97:81:b1:67:50:f9:b0:f8:89:8c:a4:7b:70:7e:18:62:
         08:04:66:24:8c:e7:2d:cb:e9:29:a9:b6:e5:de:59:d5:71:61:
         a9:59:4a:39:6e:3d:21:70:db:c4:26:cf:c7:7e:d4:d6:e1:3a:
         4e:67:f4:a0:a6:3f:a8:b4:a6:d7:96:3e:3c:01:7f:6e:4f:82:
         af:e4:7c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:05:05 2025 by rpki-client