Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a383030303a3a2f33342d3334203d3e20323637333630.roa
File:                     323830343a346334343a383030303a3a2f33342d3334203d3e20323637333630.roa (raw, json)
Hash identifier:          2XTGLRcLjvwUckFIQAphWhPvtcIVow3Cd4u+8ujRWPQ=
Subject key identifier:   3E:F8:34:A7:B9:4E:AC:71:A4:0B:03:79:38:AF:22:45:AC:E8:EB:38
Certificate issuer:       /CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
Certificate serial:       03EEBD736DA77D3FF1AC9A1BAEFFFCDE52E53D0A
Authority key identifier: 29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a383030303a3a2f33342d3334203d3e20323637333630.roa
Signing time:             Tue 07 Oct 2025 19:35:08 +0000
ROA not before:           Tue 07 Oct 2025 19:30:08 +0000
ROA not after:            Tue 06 Oct 2026 19:35:08 +0000
asID:                     267360
IP address blocks:        2804:4c44:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl
                          rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ee:bd:73:6d:a7:7d:3f:f1:ac:9a:1b:ae:ff:fc:de:52:e5:3d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
        Validity
            Not Before: Oct  7 19:30:08 2025 GMT
            Not After : Oct  6 19:35:08 2026 GMT
        Subject: CN=3EF834A7B94EAC71A40B037938AF2245ACE8EB38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3a:05:26:31:36:a8:c2:0d:19:c2:5f:62:10:
                    11:3a:01:89:e2:29:be:04:f3:78:6c:b3:9a:4f:cc:
                    5f:d1:49:99:37:ea:dc:20:64:41:6a:63:66:b3:81:
                    89:b6:17:38:88:25:ea:8a:0c:e8:bb:a7:5a:4e:2f:
                    0d:42:42:c0:a2:52:69:26:9f:39:cb:48:2f:93:c2:
                    97:c9:4c:76:8c:d8:b0:92:86:70:61:b5:37:2a:70:
                    b8:73:74:27:61:79:0b:c8:08:f0:d8:f8:f8:19:1d:
                    e9:f7:02:d4:54:cc:02:28:61:12:97:1b:ff:4d:fd:
                    b2:d4:fa:4f:5b:be:86:63:e5:0c:d9:74:9d:45:34:
                    41:da:11:25:b8:29:25:f9:03:5c:0a:ef:21:7d:cf:
                    42:e4:3e:34:63:7b:4f:3f:ba:3d:bd:06:8f:22:9a:
                    3a:74:0c:76:28:92:0e:31:c1:ec:6b:fe:3f:49:08:
                    06:25:c2:d1:b6:7f:f5:c5:4d:b4:e0:93:23:37:38:
                    00:4d:a5:ba:6c:fa:4b:a8:14:40:4d:f5:d4:d4:45:
                    6b:dd:b1:d0:d4:f2:e8:5a:55:5d:87:1c:45:16:21:
                    5f:37:4e:e3:a8:69:1b:1d:4f:99:4b:f0:be:d5:ee:
                    1d:c6:2f:d3:b3:b0:33:07:6d:36:cf:37:e8:b1:5b:
                    58:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F8:34:A7:B9:4E:AC:71:A4:0B:03:79:38:AF:22:45:AC:E8:EB:38
            X509v3 Authority Key Identifier:
                keyid:29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a383030303a3a2f33342d3334203d3e20323637333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c44:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         63:64:78:03:30:45:b8:c9:16:1b:06:30:6c:b4:0f:5a:dd:52:
         f1:89:b8:a5:98:8e:39:05:53:f8:ba:d6:2b:9f:bd:92:22:46:
         98:8b:fc:db:37:48:46:af:4b:a0:0a:8e:4a:2c:11:be:0b:7d:
         0b:41:ab:5b:e5:ca:07:ae:cf:06:d6:a2:86:fb:ed:28:a4:61:
         ac:84:cd:92:77:97:bf:cb:04:65:8d:cb:cd:50:e9:78:7d:34:
         1f:ca:f5:bc:e8:79:e5:9f:bd:44:ef:eb:45:a6:60:e5:59:a1:
         0a:e4:65:59:87:b7:47:71:ba:32:34:e2:2f:1b:e1:74:8f:5c:
         94:be:c9:a8:06:a5:cf:52:b1:47:1b:59:26:47:04:1b:59:7f:
         cb:5e:b0:2b:b1:4d:e2:41:c7:0b:ab:4b:cf:d4:33:af:c3:e0:
         22:46:0d:6d:11:2f:69:7a:10:ea:23:fb:d0:e3:3f:80:60:30:
         b6:c0:7f:6d:5b:c2:a6:4d:c4:58:27:10:5f:09:42:18:6b:c1:
         4a:68:0a:61:66:2d:c3:8c:74:ba:07:c9:5a:6b:f0:88:b3:a9:
         19:f8:23:11:9d:39:09:a6:2a:6c:ba:b3:db:c0:f6:b7:3e:d0:
         e7:2c:af:f7:9e:ba:09:07:78:e2:03:53:cb:3d:22:d4:09:25:
         77:ba:c4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:26 2025 by rpki-client