Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a633030303a3a2f33342d3334203d3e20323637333630.roa
File:                     323830343a346334343a633030303a3a2f33342d3334203d3e20323637333630.roa (raw, json)
Hash identifier:          i2Zqa6EevPWEtRdnBNKHm8+IHqmea5wYw4HmpEbBCuo=
Subject key identifier:   91:10:54:F1:68:AE:8A:75:5B:BD:DA:09:F6:46:3D:E0:80:73:B4:83
Certificate issuer:       /CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
Certificate serial:       2F0B04D0C29550487756FE7159D1E3E843B7C2E1
Authority key identifier: 29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a633030303a3a2f33342d3334203d3e20323637333630.roa
Signing time:             Tue 07 Oct 2025 19:35:12 +0000
ROA not before:           Tue 07 Oct 2025 19:30:12 +0000
ROA not after:            Tue 06 Oct 2026 19:35:12 +0000
asID:                     267360
IP address blocks:        2804:4c44:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl
                          rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0b:04:d0:c2:95:50:48:77:56:fe:71:59:d1:e3:e8:43:b7:c2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
        Validity
            Not Before: Oct  7 19:30:12 2025 GMT
            Not After : Oct  6 19:35:12 2026 GMT
        Subject: CN=911054F168AE8A755BBDDA09F6463DE08073B483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:c6:c5:62:43:af:eb:28:4e:af:1e:2e:c2:
                    75:1c:d3:0a:84:bb:db:dd:70:c0:d0:d6:9a:98:67:
                    3d:a1:42:35:90:eb:b7:60:04:88:68:37:b0:87:0c:
                    63:23:86:17:e7:6b:74:bc:27:fd:16:d2:47:7c:11:
                    30:f6:e5:84:a2:b2:cd:58:e0:2a:3c:0b:ae:e2:dd:
                    96:47:56:3a:f8:e3:72:d2:60:57:ba:50:f9:50:15:
                    f9:53:8b:1e:62:8e:3c:b5:29:ba:e4:f8:2f:f7:98:
                    6e:b5:64:f4:67:2b:da:0b:17:9d:71:c0:e1:7c:be:
                    06:9f:c8:e6:29:70:0d:60:1c:b2:ff:15:a4:42:05:
                    07:98:d0:8e:58:f9:6e:bd:ba:57:13:fc:b8:fa:f1:
                    21:2a:3a:5e:be:c3:af:5a:87:e9:b3:9a:23:c8:00:
                    8f:d1:cf:90:5d:f7:b1:52:24:83:17:57:2f:ab:75:
                    b3:4a:52:90:e7:1b:be:6a:59:d4:bb:03:cc:22:b6:
                    f3:28:e7:3f:e3:0c:72:44:d5:67:45:14:eb:54:bb:
                    a4:85:5b:1a:4f:1b:f1:53:a1:c6:2f:c7:54:84:4b:
                    59:77:dc:9b:eb:c8:2e:57:42:09:2a:06:6d:b3:ca:
                    1e:52:63:e7:d3:d7:94:52:f7:26:6c:b1:8a:d9:ad:
                    94:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:10:54:F1:68:AE:8A:75:5B:BD:DA:09:F6:46:3D:E0:80:73:B4:83
            X509v3 Authority Key Identifier:
                keyid:29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a633030303a3a2f33342d3334203d3e20323637333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c44:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ae:67:60:18:3f:bd:af:52:de:fb:cc:8d:7c:0d:e1:73:9a:5b:
         1d:e6:96:2b:c3:69:80:68:7f:85:00:a7:5a:cf:fa:dc:9c:b3:
         c0:81:cb:e4:8c:e9:7f:3f:28:05:26:1d:97:65:77:72:e3:e9:
         e6:6f:95:db:b6:7f:b5:a0:77:be:af:cd:ea:21:de:e8:32:a3:
         5f:92:4c:7d:ba:f4:16:e4:25:5b:e1:6b:31:b4:bd:8b:bd:72:
         05:f3:a5:f3:0a:37:cb:5a:7f:87:8e:7e:58:65:68:a8:7e:39:
         46:47:47:c3:9e:a1:24:3c:b8:fa:34:9a:09:35:65:a4:3f:32:
         77:5b:19:e4:4f:91:1c:6b:15:17:4c:18:bb:b2:8a:a4:74:6d:
         90:cb:13:7b:38:6d:88:6f:24:fd:92:02:b7:95:29:d7:a2:07:
         e7:70:70:29:98:d6:ea:17:59:17:23:51:d3:54:14:b5:72:57:
         7e:4b:36:45:6f:6f:2e:c9:a4:ce:05:fb:d5:8b:fa:d6:47:35:
         e0:6f:cb:1f:eb:98:48:ac:d0:71:b5:2a:50:37:b4:8f:42:e6:
         f6:98:6e:5a:eb:60:68:1e:16:c4:f0:8e:09:11:e7:ed:49:69:
         36:18:f2:6d:bf:81:81:87:7c:d4:ee:4d:25:16:d6:4c:40:ae:
         f0:18:9d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:38:28 2025 by rpki-client