Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a3a2f33322d3332203d3e20323637333630.roa
File:                     323830343a346334343a3a2f33322d3332203d3e20323637333630.roa (raw, json)
Hash identifier:          yaVSa7/Ta2quaYo9fCa4KbFwYSfErJlqjlSDqJSieyc=
Subject key identifier:   1C:66:6A:28:BA:28:23:2B:5B:0D:C3:FE:AE:7D:CD:72:4B:A9:42:79
Certificate issuer:       /CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
Certificate serial:       7E2656DB3DCF556E2F48C12330E873D71BFAE476
Authority key identifier: 29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a3a2f33322d3332203d3e20323637333630.roa
Signing time:             Tue 07 Oct 2025 19:35:11 +0000
ROA not before:           Tue 07 Oct 2025 19:30:11 +0000
ROA not after:            Tue 06 Oct 2026 19:35:11 +0000
asID:                     267360
IP address blocks:        2804:4c44::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl
                          rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:26:56:db:3d:cf:55:6e:2f:48:c1:23:30:e8:73:d7:1b:fa:e4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
        Validity
            Not Before: Oct  7 19:30:11 2025 GMT
            Not After : Oct  6 19:35:11 2026 GMT
        Subject: CN=1C666A28BA28232B5B0DC3FEAE7DCD724BA94279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:6d:df:99:9e:43:08:d6:a4:52:3f:fd:75:
                    e5:53:17:08:60:ad:9c:6a:9e:06:68:12:44:b9:f5:
                    f8:66:22:51:50:ef:3b:35:d5:a1:bd:a8:61:94:fc:
                    6d:42:7d:ad:e3:13:fa:a3:2a:94:e6:c9:13:22:8d:
                    eb:5a:3b:2c:04:87:e6:ed:fa:82:c7:1c:f3:9c:ee:
                    39:3d:9f:e9:8b:b4:5d:2e:42:4e:31:89:68:1f:a1:
                    b1:75:63:8c:72:f0:25:9a:31:ae:98:cf:11:24:d0:
                    09:ed:30:40:1f:e4:e2:7f:49:9c:04:67:c9:31:7d:
                    11:e4:6e:f1:1e:15:56:69:24:a0:64:97:a5:2c:6b:
                    1a:e1:36:7a:e2:63:61:02:e5:73:d0:37:9a:73:8b:
                    10:94:70:e6:2d:58:c9:3c:7b:10:c8:7c:e6:37:ec:
                    58:0e:c6:39:76:2a:34:6c:77:4d:4d:1f:72:d2:61:
                    a5:8f:fd:8d:0a:58:0f:e7:f0:c9:50:e0:f3:68:01:
                    9c:bb:10:29:63:77:02:51:df:f3:d2:8a:f4:05:67:
                    9e:86:f4:f3:4e:21:d0:05:bc:1f:dd:09:db:35:87:
                    fe:f9:1a:d3:9c:50:a4:9a:a7:05:c0:8d:04:fb:e3:
                    4b:a3:15:49:09:f7:c5:4d:c9:b7:c7:1a:fa:ed:39:
                    32:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:66:6A:28:BA:28:23:2B:5B:0D:C3:FE:AE:7D:CD:72:4B:A9:42:79
            X509v3 Authority Key Identifier:
                keyid:29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a3a2f33322d3332203d3e20323637333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c44::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:b1:c6:26:55:21:b3:d2:08:d7:0c:85:47:65:5a:7c:d1:89:
         db:a2:8c:43:8f:57:bb:a6:4a:83:71:7e:e3:eb:72:8e:ab:88:
         e0:91:b3:66:09:01:35:74:24:05:17:f5:43:48:b7:74:f9:0c:
         94:da:71:98:30:6b:db:24:62:79:db:97:e6:c3:75:57:5a:21:
         51:d4:27:06:bf:42:97:9a:35:de:21:bf:e4:5f:28:82:b6:5f:
         b7:5d:d9:fd:fa:cb:0c:be:24:bc:8b:34:48:8b:ed:b3:5e:92:
         9c:c7:0f:00:cc:c6:bd:e3:c8:28:6a:96:75:a6:a3:5a:10:6b:
         c6:35:ed:ec:f3:d5:af:92:88:fa:ce:37:0b:e4:6c:a3:b8:d8:
         c7:4a:15:a5:36:9e:08:8b:76:23:a7:c1:7e:a6:f3:cf:41:f6:
         2b:79:b6:31:24:5a:b1:f9:6a:b3:fa:9d:a0:f6:89:c4:bf:56:
         81:49:b0:b2:93:73:de:7b:74:4f:d9:09:13:e3:c7:9d:fc:40:
         17:9a:49:2e:d8:a0:88:5a:82:65:05:18:3a:9b:77:98:1e:0f:
         41:2e:7f:0a:b6:ea:c7:b0:aa:ec:08:bc:36:fc:41:ad:7b:4e:
         7c:4b:e4:15:64:75:7f:74:7d:30:01:e1:fe:ff:ad:b6:51:e3:
         b5:f2:47:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:27 2025 by rpki-client