Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a3a2f33342d3334203d3e20323637333630.roa
File:                     323830343a346334343a3a2f33342d3334203d3e20323637333630.roa (raw, json)
Hash identifier:          QE/1ESuLjHU7Kf63UTGAKTsp2nC5dLoGBX1vGp3iwJs=
Subject key identifier:   3B:33:D3:A0:C6:89:E9:D1:BA:E0:19:68:92:57:31:09:B5:A5:C1:0A
Certificate issuer:       /CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
Certificate serial:       5A93FEE20944D4A1551D897469E02C62166FD335
Authority key identifier: 29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a3a2f33342d3334203d3e20323637333630.roa
Signing time:             Tue 07 Oct 2025 19:35:09 +0000
ROA not before:           Tue 07 Oct 2025 19:30:09 +0000
ROA not after:            Tue 06 Oct 2026 19:35:09 +0000
asID:                     267360
IP address blocks:        2804:4c44::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl
                          rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:93:fe:e2:09:44:d4:a1:55:1d:89:74:69:e0:2c:62:16:6f:d3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
        Validity
            Not Before: Oct  7 19:30:09 2025 GMT
            Not After : Oct  6 19:35:09 2026 GMT
        Subject: CN=3B33D3A0C689E9D1BAE0196892573109B5A5C10A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:d2:d5:bb:56:57:c4:68:a7:54:0b:3e:bd:
                    d2:cb:f6:4b:6d:ec:aa:b9:ed:bd:3f:65:e6:a7:12:
                    6d:33:c4:61:27:a3:e4:be:a8:46:36:03:fb:25:e5:
                    fa:25:7e:dc:bc:4f:af:18:d0:55:4a:45:fe:c0:85:
                    4b:fe:0d:5a:b0:59:10:a6:a9:fb:0f:1c:63:78:19:
                    8a:31:8e:cc:65:a8:28:a7:6f:a6:2a:eb:7e:af:54:
                    47:db:81:de:e9:de:f6:31:3f:9a:a0:65:36:41:ce:
                    54:32:8f:47:e3:b9:ee:b4:f4:c2:5d:82:d2:81:c5:
                    37:fa:5d:db:ee:42:cf:94:2e:b2:56:85:4b:3a:4e:
                    f6:81:9a:ed:3d:d5:ac:42:a4:94:a2:6d:a7:a5:a2:
                    fa:27:f2:59:23:28:76:77:4f:65:ec:60:6e:d2:6e:
                    98:4d:83:18:c7:d2:1b:ab:38:b6:35:a8:ce:d4:c2:
                    ec:c0:be:f5:7e:7b:73:f6:bc:ca:11:4a:6e:15:3e:
                    6a:c5:7b:47:71:2f:36:0e:3d:36:e0:a2:c4:f5:e8:
                    5e:86:f5:2e:10:27:cd:ce:66:5e:28:92:0a:6e:fb:
                    51:0a:a7:d3:85:ec:93:2a:72:9f:95:5c:3e:86:78:
                    f8:7a:20:a9:cf:04:6a:bb:15:2d:23:c1:aa:f1:69:
                    c2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:33:D3:A0:C6:89:E9:D1:BA:E0:19:68:92:57:31:09:B5:A5:C1:0A
            X509v3 Authority Key Identifier:
                keyid:29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a3a2f33342d3334203d3e20323637333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c44::/34

    Signature Algorithm: sha256WithRSAEncryption
         3c:fa:74:1b:13:a9:7d:89:90:95:e6:f2:e4:6b:d0:be:b6:22:
         1c:35:b5:31:1d:85:22:9d:48:5b:c1:11:e0:e9:3e:9a:ae:ea:
         a2:d2:4e:f1:97:70:67:d3:3d:cd:db:fa:4d:79:90:22:c0:ba:
         42:45:1d:53:32:92:be:35:fe:86:57:bc:7e:47:88:62:23:b5:
         c5:2a:1f:8e:66:74:ae:99:11:81:5f:1b:b3:a8:5b:f6:66:b7:
         b4:0c:56:dc:e3:2f:22:f5:6e:e9:26:ae:c5:ef:af:56:65:7f:
         35:87:0d:0d:99:d0:40:22:8a:03:bd:6a:b1:1f:0e:97:07:72:
         38:fc:b6:a8:cb:be:11:e0:ad:dc:f5:58:c0:c0:29:a2:25:78:
         e1:c0:14:77:5e:41:ed:c1:d1:8b:ab:be:67:9a:fa:e7:61:16:
         90:20:e4:b9:1e:e2:67:e4:89:88:d3:37:30:6a:3b:ef:aa:cf:
         11:7e:15:77:34:07:f8:de:65:99:6c:3f:07:d3:fd:73:00:9a:
         14:41:22:15:d3:ef:6c:ad:43:a0:20:20:85:a2:98:55:b6:70:
         4a:e7:0b:71:0f:be:33:51:31:24:2e:b4:64:15:61:2e:f7:45:
         ab:35:a0:8a:66:23:a8:59:ec:6e:f4:0f:c1:ec:73:e4:2f:90:
         39:91:43:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:29 2025 by rpki-client