Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/323830343a393136633a3a2f33322d3335203d3e20323734363430.roa
File:                     323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (raw, json)
Hash identifier:          WI9HCs6eGX9p1jo/mhyWY838lgd+KptHbbco/K1Lluw=
Subject key identifier:   16:14:55:39:C2:6D:44:BE:98:2C:21:8F:46:00:B8:41:7C:65:82:26
Certificate issuer:       /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Certificate serial:       500D6C341E983174A34C5AC515B0121B2B926A6F
Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/323830343a393136633a3a2f33322d3335203d3e20323734363430.roa
Signing time:             Wed 08 Oct 2025 15:33:42 +0000
ROA not before:           Wed 08 Oct 2025 15:28:42 +0000
ROA not after:            Wed 07 Oct 2026 15:33:42 +0000
asID:                     274640
IP address blocks:        2804:916c::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl
                          rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0d:6c:34:1e:98:31:74:a3:4c:5a:c5:15:b0:12:1b:2b:92:6a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
        Validity
            Not Before: Oct  8 15:28:42 2025 GMT
            Not After : Oct  7 15:33:42 2026 GMT
        Subject: CN=16145539C26D44BE982C218F4600B8417C658226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ba:31:2f:a2:1d:e2:de:c2:9f:0b:3c:ad:dc:
                    e5:24:eb:5a:ed:09:29:e1:85:10:90:a0:a0:a5:5d:
                    77:3a:03:82:a4:5b:92:e0:29:b6:7a:87:e3:09:7c:
                    d2:0f:ec:6e:f5:09:06:79:05:17:d2:29:d6:8f:54:
                    7c:e8:86:b3:7f:b7:34:35:19:75:2a:e3:5b:e7:f2:
                    0a:a1:3a:2f:23:ed:00:98:1f:61:c5:44:5b:0a:1a:
                    7e:e6:08:3c:68:81:03:73:61:d2:5f:43:ef:3c:8d:
                    c7:33:59:95:fc:9e:36:32:11:70:19:6b:2f:94:0f:
                    17:e4:0b:21:0e:56:9e:74:3e:4b:8e:f9:81:f5:78:
                    40:13:04:c2:ec:1b:12:43:75:42:f6:94:22:3e:a0:
                    b6:bd:e3:3a:b3:ad:c6:9b:fc:1c:21:2c:70:92:e9:
                    ff:71:70:74:c1:65:75:03:d8:c2:8f:b1:15:1f:61:
                    7f:28:1f:d4:82:60:cf:4f:90:7f:11:3c:08:a9:83:
                    65:10:58:6b:78:ce:ae:b9:70:b4:cb:6f:13:99:ab:
                    63:63:dd:80:c9:4e:39:4c:82:aa:59:64:ec:b0:c3:
                    78:da:f0:42:f7:46:f6:a9:e3:7b:28:98:3f:25:12:
                    e0:21:91:4d:7a:45:db:16:dd:20:ac:ec:e3:f8:df:
                    16:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:14:55:39:C2:6D:44:BE:98:2C:21:8F:46:00:B8:41:7C:65:82:26
            X509v3 Authority Key Identifier:
                keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/323830343a393136633a3a2f33322d3335203d3e20323734363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:916c::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:ef:6c:fb:67:cc:19:43:3b:0f:06:07:82:ab:3a:52:fd:e4:
         cb:69:68:fb:a8:6c:72:ac:7b:59:2b:5f:9c:f7:a8:7b:21:4f:
         28:4d:f6:e2:8b:ea:3d:c0:64:c7:c6:84:ac:23:9a:fc:43:d7:
         aa:ed:e8:0f:3b:cb:28:0b:21:99:7b:93:d5:e1:34:8d:8c:4c:
         e9:d7:b7:ef:61:d0:39:22:a8:d7:01:53:a2:4f:1e:8c:84:a3:
         7c:b2:cf:11:34:88:5c:ba:c8:b6:80:f5:b8:fc:73:2a:12:56:
         31:b1:bf:24:8b:fd:77:c3:44:cc:fe:c2:93:0d:35:21:e6:25:
         88:1f:db:db:6d:03:90:d6:ad:e8:17:2b:fb:41:d5:0e:0e:83:
         77:bd:8c:68:7c:69:3a:f4:b0:41:08:d4:3f:81:c4:23:8c:d3:
         7e:07:85:98:d4:d9:98:7e:e4:60:65:ea:15:82:14:da:23:21:
         06:58:f3:84:30:95:3b:22:1e:b6:86:2f:15:ca:7e:4a:18:92:
         a5:20:10:fb:ce:88:f6:23:01:54:bb:de:bf:f5:22:be:45:e1:
         0d:c7:a0:b8:8d:70:c9:22:a1:05:b8:95:14:cb:bb:db:a7:49:
         69:d7:be:b9:ee:e2:43:a3:8d:cc:25:ef:79:6b:3f:87:75:bb:
         24:11:b8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:51 2025 by rpki-client