Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/323830343a386630633a3a2f33322d313238203d3e20323733343634.roa
File:                     323830343a386630633a3a2f33322d313238203d3e20323733343634.roa (raw, json)
Hash identifier:          9gKx4FmAGC57whAxfE3deisrj6cUSjtLr0uLGq8UtiI=
Subject key identifier:   6D:93:A4:92:35:0D:4A:EF:A9:FF:71:F3:82:15:E5:BD:B6:DE:12:84
Certificate issuer:       /CN=39E88EBBC8FAC1977E42AF4BB8641A94DDCD5A20
Certificate serial:       6FE425C2A10D8CE1E13E80598776F5619A5A0264
Authority key identifier: 39:E8:8E:BB:C8:FA:C1:97:7E:42:AF:4B:B8:64:1A:94:DD:CD:5A:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E88EBBC8FAC1977E42AF4BB8641A94DDCD5A20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/323830343a386630633a3a2f33322d313238203d3e20323733343634.roa
Signing time:             Sat 04 Oct 2025 12:59:10 +0000
ROA not before:           Sat 04 Oct 2025 12:54:10 +0000
ROA not after:            Sat 03 Oct 2026 12:59:10 +0000
asID:                     273464
IP address blocks:        2804:8f0c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/39E88EBBC8FAC1977E42AF4BB8641A94DDCD5A20.crl
                          rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/39E88EBBC8FAC1977E42AF4BB8641A94DDCD5A20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E88EBBC8FAC1977E42AF4BB8641A94DDCD5A20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 04:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e4:25:c2:a1:0d:8c:e1:e1:3e:80:59:87:76:f5:61:9a:5a:02:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E88EBBC8FAC1977E42AF4BB8641A94DDCD5A20
        Validity
            Not Before: Oct  4 12:54:10 2025 GMT
            Not After : Oct  3 12:59:10 2026 GMT
        Subject: CN=6D93A492350D4AEFA9FF71F38215E5BDB6DE1284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:01:46:f0:b3:1e:0f:55:37:59:8e:9f:ce:68:
                    3f:5f:87:39:cb:e5:17:fc:91:ee:94:95:b7:90:af:
                    ce:3e:53:4c:a5:38:14:12:b8:ca:d2:f8:38:b5:74:
                    12:f8:a4:86:c6:24:c4:f6:c1:97:f4:33:07:b7:22:
                    20:16:36:6e:41:65:17:28:a2:1e:dd:78:79:6c:f6:
                    0d:60:22:71:53:12:2e:32:11:d4:aa:06:86:ba:1e:
                    44:99:10:bf:53:3d:23:31:e4:c0:91:8d:7b:8b:79:
                    e8:2a:97:4b:ef:40:0a:3c:42:59:e3:2b:65:3d:f5:
                    04:57:7c:e5:23:3b:3b:e5:a7:04:ed:2a:57:0b:fd:
                    dd:4b:e6:c9:15:05:26:ba:65:43:73:dc:67:c0:70:
                    8f:f2:a2:7b:46:3b:b8:4b:f3:bb:d9:48:14:be:20:
                    bc:0e:8f:fc:80:aa:87:52:d7:9e:24:ac:dc:2f:74:
                    92:6c:30:88:ef:4a:01:d9:7c:84:87:04:da:5b:05:
                    56:61:02:ff:d7:00:9e:14:6b:97:c8:66:a5:0d:02:
                    3c:b7:cd:71:ba:91:4f:e4:21:45:7c:04:ee:e0:2c:
                    1b:a0:71:dc:2e:b8:14:13:a8:23:02:a0:bd:92:b7:
                    b4:5a:0b:11:41:60:9e:90:6c:bf:ad:6a:a2:96:1d:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:93:A4:92:35:0D:4A:EF:A9:FF:71:F3:82:15:E5:BD:B6:DE:12:84
            X509v3 Authority Key Identifier:
                keyid:39:E8:8E:BB:C8:FA:C1:97:7E:42:AF:4B:B8:64:1A:94:DD:CD:5A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/39E88EBBC8FAC1977E42AF4BB8641A94DDCD5A20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E88EBBC8FAC1977E42AF4BB8641A94DDCD5A20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8F1gZavUZe1v2WFdJotuKoMPjG5zLgdfzFDhMVBggTd/0/323830343a386630633a3a2f33322d313238203d3e20323733343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:85:4b:79:2d:d8:70:d7:ff:7a:3d:05:65:ff:b7:d5:18:42:
         fa:d6:d1:9c:76:60:16:94:93:27:39:59:f7:b6:25:30:fe:d6:
         c1:cf:49:c3:1c:53:27:e2:44:a9:3d:72:7b:e9:d0:03:af:49:
         04:ac:d2:cc:f6:8e:5c:ad:1f:2a:e2:ea:d6:00:fe:f8:92:3c:
         8d:66:5a:c0:d0:92:95:87:f4:3b:ca:ec:93:61:23:7a:11:2c:
         87:ce:bb:54:2b:3d:e4:d9:5e:8a:c5:78:a7:46:43:31:23:50:
         44:94:87:f2:12:a5:2f:ec:fc:cd:50:ca:5e:ac:4a:5f:a0:71:
         9a:ff:f3:79:a3:05:46:ea:86:93:89:52:9e:64:cc:b6:b4:a8:
         a5:44:88:47:2d:0e:ff:b2:f9:4f:79:08:35:4e:5f:36:8a:0e:
         96:df:89:76:0a:36:32:0d:ae:9c:0f:dc:e1:60:13:62:6e:56:
         00:04:2b:34:66:81:28:df:13:68:56:81:07:50:e6:04:07:ad:
         5d:54:65:7e:16:43:19:2d:79:4a:33:5f:c4:2e:8e:d2:6e:14:
         31:96:cb:de:d9:3d:3e:60:dd:0a:ca:ab:91:72:49:87:77:69:
         b5:d7:91:dd:ab:bc:b3:6c:03:b4:53:44:f8:e1:22:de:53:fd:
         7a:06:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:36:31 2025 by rpki-client