Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a633030303a3a2f33342d3334203d3e20323636333735.roa
File:                     323830343a333664343a633030303a3a2f33342d3334203d3e20323636333735.roa (raw, json)
Hash identifier:          5c9FBChLGzTlBDtBonKhLxGkH9YajNq+Ds/YJXvozXA=
Subject key identifier:   22:AB:A9:F1:C9:14:0E:E9:A1:58:CD:16:D6:AC:80:54:A4:AB:2D:C0
Certificate issuer:       /CN=373AA600A42BCF5792AF8D4124740F5E66B9D44A
Certificate serial:       19B257C0F5341DC32E45BE755913FA48A639A853
Authority key identifier: 37:3A:A6:00:A4:2B:CF:57:92:AF:8D:41:24:74:0F:5E:66:B9:D4:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/373AA600A42BCF5792AF8D4124740F5E66B9D44A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a633030303a3a2f33342d3334203d3e20323636333735.roa
Signing time:             Thu 25 Sep 2025 13:20:03 +0000
ROA not before:           Thu 25 Sep 2025 13:15:03 +0000
ROA not after:            Thu 24 Sep 2026 13:20:03 +0000
asID:                     266375
IP address blocks:        2804:36d4:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/373AA600A42BCF5792AF8D4124740F5E66B9D44A.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/373AA600A42BCF5792AF8D4124740F5E66B9D44A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/373AA600A42BCF5792AF8D4124740F5E66B9D44A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b2:57:c0:f5:34:1d:c3:2e:45:be:75:59:13:fa:48:a6:39:a8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373AA600A42BCF5792AF8D4124740F5E66B9D44A
        Validity
            Not Before: Sep 25 13:15:03 2025 GMT
            Not After : Sep 24 13:20:03 2026 GMT
        Subject: CN=22ABA9F1C9140EE9A158CD16D6AC8054A4AB2DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:57:0f:1b:88:d1:82:3e:fb:77:ec:56:89:
                    78:84:5b:05:3b:fd:d2:85:7c:c3:13:69:41:3c:af:
                    89:cc:ae:25:8a:6a:4e:0d:7e:ae:af:d5:b3:08:7f:
                    00:e1:8b:de:64:ac:c4:13:a0:85:7b:60:96:b6:b0:
                    5f:72:05:fe:ed:4a:60:92:67:15:ea:f4:c6:82:4a:
                    86:c2:fb:f7:7b:72:54:9a:a8:43:a7:a7:97:99:44:
                    13:8f:91:30:83:db:d4:90:86:63:18:4a:48:b7:bb:
                    bc:78:f3:00:6f:d2:47:11:21:64:2f:68:bd:12:85:
                    82:b3:63:7b:75:ae:f4:24:d2:70:25:35:81:5b:cf:
                    3e:56:ef:79:ec:16:32:3e:96:33:40:2a:aa:37:44:
                    20:38:7c:1c:97:60:f4:28:d3:59:15:0d:33:a3:f3:
                    45:c5:ef:3a:ab:02:a2:9d:18:fa:ac:5d:f3:87:b8:
                    66:ed:18:43:80:8a:53:e7:72:47:09:90:b6:52:1e:
                    5c:7a:e4:66:cf:13:fc:85:ee:5e:e2:b9:5c:f5:27:
                    8f:3e:63:e0:e2:3f:27:94:c8:b4:04:0c:26:79:b7:
                    5f:56:ea:f2:94:f9:ff:03:4e:99:74:52:c9:84:9d:
                    e6:ef:c1:46:25:d9:17:6c:02:44:ae:1f:b6:75:b5:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AB:A9:F1:C9:14:0E:E9:A1:58:CD:16:D6:AC:80:54:A4:AB:2D:C0
            X509v3 Authority Key Identifier:
                keyid:37:3A:A6:00:A4:2B:CF:57:92:AF:8D:41:24:74:0F:5E:66:B9:D4:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/373AA600A42BCF5792AF8D4124740F5E66B9D44A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/373AA600A42BCF5792AF8D4124740F5E66B9D44A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a633030303a3a2f33342d3334203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         89:8d:37:e5:d2:99:15:0c:c3:7f:51:2c:cc:5d:40:8d:b7:47:
         4c:f6:44:cd:a0:89:09:92:7a:46:bf:89:18:f6:e3:e0:c8:dd:
         01:e8:5d:87:e7:25:7a:fc:61:ec:9e:34:48:d6:4d:3d:57:ce:
         14:5d:23:20:88:c5:51:4b:f4:f8:c8:05:d1:c0:09:dd:ac:29:
         7f:1d:58:bc:5f:98:5e:63:52:ef:51:39:6b:1b:5a:c3:12:fe:
         fc:ea:70:e8:6d:b3:11:c8:fc:f7:45:cf:6e:88:e3:f0:f4:88:
         10:e9:0c:18:15:9f:bb:6c:c8:5a:0f:aa:c1:43:34:4a:cc:e6:
         8a:79:74:9f:83:18:e8:15:e5:f0:61:33:ba:27:cb:95:ad:3a:
         36:c8:87:a6:2d:fc:f9:f5:72:f4:a6:8b:14:cc:f9:89:46:ad:
         0f:39:da:be:f0:ef:30:8c:90:9f:02:b3:26:0e:ee:fd:10:3c:
         30:08:7b:c7:9e:0d:1b:51:da:21:f8:b5:1d:09:9f:db:38:2c:
         f4:89:93:0d:df:a0:94:31:ca:ca:05:01:e7:1b:84:af:30:52:
         c1:82:43:8e:b7:d4:cf:b5:d5:fc:53:14:f7:09:14:a5:3f:7d:
         d3:11:30:d0:a8:87:c8:c5:06:f0:2f:89:f4:88:8f:01:72:34:
         f6:e3:33:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:08:42 2025 by rpki-client