Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/323830343a323935383a336630303a3a2f34302d3430203d3e20323634303130.roa
File:                     323830343a323935383a336630303a3a2f34302d3430203d3e20323634303130.roa (raw, json)
Hash identifier:          qoVsYzodRoXHVgSMM+D+NBRd9ipmQVbdeOQSs8Hr8lE=
Subject key identifier:   FF:D1:82:0E:8E:E7:93:A5:A8:95:83:44:E7:B2:D2:51:4A:BD:96:20
Certificate issuer:       /CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87
Certificate serial:       0538EC23A39BEB799636806B343461D18374201F
Authority key identifier: 37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/323830343a323935383a336630303a3a2f34302d3430203d3e20323634303130.roa
Signing time:             Sat 06 Sep 2025 15:01:46 +0000
ROA not before:           Sat 06 Sep 2025 14:56:46 +0000
ROA not after:            Sat 05 Sep 2026 15:01:46 +0000
asID:                     264010
IP address blocks:        2804:2958:3f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl
                          rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:38:ec:23:a3:9b:eb:79:96:36:80:6b:34:34:61:d1:83:74:20:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87
        Validity
            Not Before: Sep  6 14:56:46 2025 GMT
            Not After : Sep  5 15:01:46 2026 GMT
        Subject: CN=FFD1820E8EE793A5A8958344E7B2D2514ABD9620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:e0:cd:eb:b5:12:20:6d:81:d5:cb:d4:d1:
                    89:fe:a3:e8:f8:dc:31:95:1e:cd:83:16:b9:20:ef:
                    0d:a4:27:4f:29:f6:b7:d9:4b:90:3f:99:1c:83:6c:
                    67:42:27:73:c9:3e:ed:30:7d:d4:34:ba:b0:04:0c:
                    91:e0:e5:f2:24:5c:e3:43:6a:b2:66:d1:85:cf:05:
                    b0:3b:44:eb:e4:00:e5:0e:bf:04:19:ab:2c:09:35:
                    10:01:93:31:06:f0:85:6e:9c:b9:e3:29:e0:1c:10:
                    2a:6b:f3:20:80:88:f4:f3:2f:ca:6b:26:b7:a2:d2:
                    8a:72:97:0f:1a:8d:a5:ec:9c:d6:8d:b3:7e:79:6e:
                    f2:09:e5:b6:6a:82:7e:e6:2e:98:77:96:3a:bc:de:
                    ea:d4:45:6f:58:2d:7d:0d:90:a3:5e:5c:a8:ce:f8:
                    74:d5:12:7b:b1:a6:97:08:d2:d9:e3:af:f2:5f:75:
                    91:29:3b:96:9f:c9:b0:54:c3:e2:b4:17:cc:80:d5:
                    b9:9c:50:91:1b:54:04:e6:22:dc:e9:f6:27:72:e8:
                    c6:94:a7:0e:24:b1:ec:09:75:fa:b8:4b:91:25:fa:
                    d4:d6:a1:1c:08:24:4a:d4:35:63:16:0b:1b:00:5d:
                    67:8b:7b:21:38:cf:b3:d0:e3:0c:48:d1:b2:f7:06:
                    db:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D1:82:0E:8E:E7:93:A5:A8:95:83:44:E7:B2:D2:51:4A:BD:96:20
            X509v3 Authority Key Identifier:
                keyid:37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/323830343a323935383a336630303a3a2f34302d3430203d3e20323634303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2958:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a1:2a:f9:c9:bc:47:6c:09:54:76:55:9d:c2:af:ad:9a:45:67:
         55:ba:7b:e5:33:bc:2c:3c:76:d4:3e:6e:d5:f0:01:7e:8c:cd:
         4e:fd:81:c0:17:58:4c:c9:9d:c2:ec:e2:3b:d5:b9:a5:76:35:
         f8:6a:e4:da:94:75:f0:86:19:33:c6:01:26:62:66:1c:af:7c:
         16:8e:09:65:b5:30:6f:05:4a:00:18:2c:57:df:de:48:45:7c:
         79:8f:37:dd:99:bb:b1:cb:62:50:15:88:cb:ac:15:4e:e1:50:
         da:fb:70:2c:4f:15:c7:55:c8:68:4e:ff:09:0b:d8:48:a3:c9:
         25:67:7b:52:09:1f:71:67:ff:4a:43:62:de:96:14:b4:b0:fe:
         72:fe:93:f2:6f:e1:0f:9b:4a:17:4a:69:10:5f:de:5a:60:27:
         ff:fe:f0:ea:8e:22:5f:25:36:0a:cd:41:ac:da:8c:7f:e7:26:
         b9:49:9b:5e:45:0f:09:13:f5:f7:83:ef:2d:9d:aa:62:4f:fc:
         c9:5f:05:6f:85:86:d7:24:3f:0b:ff:ff:e6:53:99:38:49:b5:
         18:30:b1:bb:91:f7:0e:80:4d:13:93:5c:85:bf:4a:41:1e:c6:
         21:ac:2e:30:51:27:7d:5f:85:55:ff:2c:9f:b6:8d:ed:71:bc:
         87:7a:64:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:45 2025 by rpki-client