Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33322d313238203d3e203631373536.roa
File:                     323830343a316265383a3a2f33322d313238203d3e203631373536.roa (raw, json)
Hash identifier:          pqgsM2ASUBh1TC0/RYOz8T+lL73SNCUA6ljQ57Xb+SQ=
Subject key identifier:   40:B2:5E:8E:91:D9:BA:84:F6:35:96:A6:80:D2:DA:67:12:2B:31:E1
Certificate issuer:       /CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3
Certificate serial:       2B38F49236376238764D23BA222656153C6B0FDC
Authority key identifier: 04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33322d313238203d3e203631373536.roa
Signing time:             Wed 24 Sep 2025 19:41:22 +0000
ROA not before:           Wed 24 Sep 2025 19:36:22 +0000
ROA not after:            Wed 23 Sep 2026 19:41:22 +0000
asID:                     61756
IP address blocks:        2804:1be8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:38:f4:92:36:37:62:38:76:4d:23:ba:22:26:56:15:3c:6b:0f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041FA0A408AD57E9384DA331B3040B91FDE00BE3
        Validity
            Not Before: Sep 24 19:36:22 2025 GMT
            Not After : Sep 23 19:41:22 2026 GMT
        Subject: CN=40B25E8E91D9BA84F63596A680D2DA67122B31E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:32:c9:ff:e5:40:99:b5:2c:ef:e4:56:ce:f4:
                    b1:57:db:eb:0e:a3:f0:0c:d9:99:fe:e7:92:ac:c4:
                    35:47:33:50:c5:dd:bb:e6:b2:49:60:16:68:67:4e:
                    e4:08:a3:05:ca:78:9b:f5:67:9c:e2:b9:b6:e8:57:
                    60:0a:09:ec:0e:b1:8f:09:45:b6:52:b3:5b:12:d9:
                    63:ab:61:5e:6d:ef:d3:16:19:ef:20:a6:b7:d0:08:
                    0f:51:0c:46:5a:24:e2:f6:6f:1e:87:05:5c:ba:60:
                    e7:7e:50:fe:ad:57:02:05:4f:bf:a0:1d:6b:e2:d0:
                    11:67:48:0c:52:06:84:03:c3:4e:1b:b5:a0:f9:0c:
                    8c:cd:8e:cf:c4:85:5a:b7:eb:8c:48:22:c9:70:b7:
                    d6:29:0d:bd:1a:24:bf:36:98:0a:43:e6:6e:04:2a:
                    f6:3c:e7:e5:3f:f0:ac:fc:31:f0:4b:20:2b:db:4d:
                    eb:ef:3c:90:fe:ba:93:e4:f4:ac:63:6c:6a:db:ae:
                    81:63:7e:36:0d:9b:33:14:8f:2c:7d:a4:d1:a5:27:
                    da:13:8a:a2:3c:98:5f:7f:89:29:b9:f6:1d:9d:83:
                    5e:aa:a2:d9:12:c9:12:39:47:fd:06:e9:2c:65:e8:
                    b2:88:9f:13:4d:8e:ec:64:4f:26:b4:0a:ca:66:db:
                    fe:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B2:5E:8E:91:D9:BA:84:F6:35:96:A6:80:D2:DA:67:12:2B:31:E1
            X509v3 Authority Key Identifier:
                keyid:04:1F:A0:A4:08:AD:57:E9:38:4D:A3:31:B3:04:0B:91:FD:E0:0B:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/041FA0A408AD57E9384DA331B3040B91FDE00BE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041FA0A408AD57E9384DA331B3040B91FDE00BE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/323830343a316265383a3a2f33322d313238203d3e203631373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1be8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:0d:81:c3:9d:74:77:9d:49:fa:d6:ed:3f:86:67:bb:62:03:
         fb:3b:72:0b:b9:08:1d:c2:88:80:3e:4c:f3:16:b2:78:4c:ae:
         36:56:69:c1:e7:57:63:89:f7:19:88:38:26:31:28:6a:96:ac:
         9d:a8:a9:d4:d1:62:f6:e9:93:26:5b:73:6b:97:d4:2c:18:b9:
         1f:16:90:de:3d:3e:8d:71:46:1d:72:d3:1a:6f:63:a2:e0:46:
         5b:d2:95:0a:af:68:90:6e:d4:b6:ed:22:ac:e4:f9:f1:dc:5e:
         43:06:e3:e3:52:61:61:12:91:1c:63:db:66:67:38:a6:ed:67:
         59:e3:dc:83:7b:36:3b:6c:30:7e:ad:53:18:66:a7:a3:f6:5c:
         42:ac:05:3e:05:f1:a2:70:c6:8f:38:97:9a:33:0f:e8:1e:ad:
         79:ed:01:d7:c8:0e:7c:ed:ab:d3:17:a2:51:d1:ad:a1:f1:0c:
         f8:1d:1d:ca:67:ca:bc:f9:f0:78:50:a2:dc:66:4f:52:23:24:
         44:e7:ea:8a:d2:53:2a:17:e0:d6:b3:01:cb:d9:bd:fc:62:bf:
         fb:52:dd:89:7b:62:79:2e:50:4e:04:26:15:b4:69:a4:e5:dd:
         88:a9:ee:1c:75:16:cb:1f:b7:49:7a:d2:b0:7e:e1:8f:8c:60:
         0d:8b:ef:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:02:07 2025 by rpki-client