Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/323830343a363738343a3a2f33322d3438203d3e20323639363333.roa
File:                     323830343a363738343a3a2f33322d3438203d3e20323639363333.roa (raw, json)
Hash identifier:          hjCqZgjh6U5euHUSypQobO6iZOKi4DB1cG3F9jAiqAU=
Subject key identifier:   D9:34:7F:7E:08:FF:B8:92:18:5C:C5:9F:22:F3:4B:62:28:A2:70:D9
Certificate issuer:       /CN=1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3
Certificate serial:       43E0F49E4DE2C8936ACDEC7D944307BCA3BF34BD
Authority key identifier: 1D:D3:EF:11:1F:81:64:1C:8B:BB:14:F0:B1:A2:FA:CB:16:E6:73:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/323830343a363738343a3a2f33322d3438203d3e20323639363333.roa
Signing time:             Fri 26 Sep 2025 12:35:31 +0000
ROA not before:           Fri 26 Sep 2025 12:30:31 +0000
ROA not after:            Fri 25 Sep 2026 12:35:31 +0000
asID:                     269633
IP address blocks:        2804:6784::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.crl
                          rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e0:f4:9e:4d:e2:c8:93:6a:cd:ec:7d:94:43:07:bc:a3:bf:34:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3
        Validity
            Not Before: Sep 26 12:30:31 2025 GMT
            Not After : Sep 25 12:35:31 2026 GMT
        Subject: CN=D9347F7E08FFB892185CC59F22F34B6228A270D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8d:21:0f:8d:e1:4e:a5:e1:9a:e9:a1:ad:db:
                    49:14:3e:49:8a:40:11:2f:2f:10:36:4d:8c:67:30:
                    05:22:4a:80:32:5f:95:d5:b7:d6:00:2e:71:dc:2d:
                    00:d6:b5:b4:56:7b:98:d4:d0:da:1d:91:5c:f7:e3:
                    7f:70:e4:17:90:7d:c0:b8:2b:47:9b:f4:7d:3b:2d:
                    08:0d:b6:58:e7:36:79:8e:3c:10:c5:fc:62:f4:24:
                    0d:29:e3:c9:63:08:d0:54:68:6d:e8:78:ab:81:13:
                    37:6d:f9:2e:95:d3:16:16:a4:5d:1b:76:11:6e:3c:
                    13:9b:92:d4:e5:31:49:bd:50:cd:b1:40:30:2e:a9:
                    4d:20:c7:41:57:ab:24:2f:fc:76:ca:03:61:d2:3b:
                    9e:9b:be:74:b1:4a:08:cc:cb:cd:44:72:e9:c4:61:
                    04:aa:bd:a8:33:07:97:13:a5:5b:6e:2e:4d:51:60:
                    b1:3b:41:92:20:34:0f:f1:c5:29:65:4b:47:80:09:
                    95:56:dc:ff:10:56:76:9d:59:11:40:83:4d:7f:cb:
                    21:36:17:27:0a:e9:6d:ad:00:58:c3:73:67:ba:a9:
                    ec:44:b4:f9:b3:a2:d2:e5:a9:e5:3e:ef:75:d8:fd:
                    a0:57:d7:e2:79:8c:6d:01:ff:f9:1c:8b:46:31:5c:
                    ca:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:34:7F:7E:08:FF:B8:92:18:5C:C5:9F:22:F3:4B:62:28:A2:70:D9
            X509v3 Authority Key Identifier:
                keyid:1D:D3:EF:11:1F:81:64:1C:8B:BB:14:F0:B1:A2:FA:CB:16:E6:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DD3EF111F81641C8BBB14F0B1A2FACB16E673E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D73FTEoPCQqsr4u17e8bRN4cA5puL1XMHyQzTJgNqf18/2/323830343a363738343a3a2f33322d3438203d3e20323639363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6784::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:2b:38:72:2d:d0:a1:35:b6:b9:2f:05:13:b9:fa:5c:d8:30:
         62:b9:87:c6:3c:95:70:99:cd:d6:e4:40:3a:f5:57:40:80:45:
         7b:1a:d3:05:43:28:2a:06:86:94:6f:c7:cf:7f:85:a0:83:1c:
         1e:57:a8:8d:00:d2:d9:cc:6b:2d:1f:1b:69:1c:1b:d8:dd:32:
         00:83:69:9b:43:86:ec:f9:75:58:ae:37:e0:9b:08:05:7d:f2:
         5d:49:fa:a9:90:01:96:98:29:3f:15:2b:ee:30:5b:10:3d:cc:
         3d:a9:de:1d:ed:2d:27:04:76:15:9f:0d:11:ab:45:dd:9e:43:
         03:54:18:55:3f:60:b8:ae:9b:30:b9:db:12:9e:b3:f5:e7:f8:
         33:c2:19:bb:09:eb:8e:a8:57:5b:a1:82:39:27:b0:cc:10:52:
         ff:c9:f1:2b:76:b6:11:3f:3c:94:54:9a:c7:3d:c5:9f:ff:c0:
         02:5f:c1:74:28:cc:ae:a9:b4:72:6d:31:f3:9a:3e:9f:82:85:
         5e:2c:f4:5a:3f:13:6c:d9:91:ad:5a:8e:63:5f:de:0f:8c:70:
         ba:6d:67:f8:ac:93:aa:a6:d5:38:12:0f:cb:e1:ce:c2:3f:5b:
         09:83:eb:7f:23:b8:a6:7c:2a:fa:d6:e6:f8:00:70:78:8c:92:
         39:61:fe:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:48:42 2025 by rpki-client