Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/323830343a343036633a3a2f33322d3334203d3e20323635393538.roa
File:                     323830343a343036633a3a2f33322d3334203d3e20323635393538.roa (raw, json)
Hash identifier:          nwZpfdiD9lmHVEfGr7y7ft3lumKfAxBvAzwQfB72Avg=
Subject key identifier:   7C:D7:13:0E:CE:13:AD:16:B7:D9:24:38:12:29:55:74:9E:71:52:2C
Certificate issuer:       /CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC
Certificate serial:       3B94D91CC63CE7D90EDE37493C0AC73C567D4539
Authority key identifier: 64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/323830343a343036633a3a2f33322d3334203d3e20323635393538.roa
Signing time:             Tue 14 Oct 2025 19:01:53 +0000
ROA not before:           Tue 14 Oct 2025 18:56:53 +0000
ROA not after:            Tue 13 Oct 2026 19:01:53 +0000
asID:                     265958
IP address blocks:        2804:406c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl
                          rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:94:d9:1c:c6:3c:e7:d9:0e:de:37:49:3c:0a:c7:3c:56:7d:45:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC
        Validity
            Not Before: Oct 14 18:56:53 2025 GMT
            Not After : Oct 13 19:01:53 2026 GMT
        Subject: CN=7CD7130ECE13AD16B7D92438122955749E71522C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a8:97:b3:36:2e:7a:9a:e4:1f:a7:12:ba:6c:
                    5c:0d:84:91:d9:e6:8f:90:83:0b:88:59:b4:a0:d4:
                    b0:b0:2b:2a:9f:5d:05:b3:d8:60:56:1e:39:de:39:
                    6c:56:b9:ba:48:3a:e9:99:bd:41:1d:ec:3c:f1:de:
                    21:37:a7:74:6f:d8:9a:b2:9c:91:4b:2e:d2:47:36:
                    c8:5c:12:e1:e9:b3:f1:80:f0:20:9d:bd:0b:18:78:
                    a4:30:eb:55:b5:81:21:be:c4:5d:2e:78:0f:47:42:
                    2a:27:4b:70:78:79:6c:dc:fd:27:06:7a:01:55:9d:
                    8b:05:dd:41:e9:b8:82:8a:1b:e3:d5:f7:d0:bc:b5:
                    f7:35:e1:bc:e1:fe:b7:2b:68:d7:42:52:cb:c4:20:
                    97:53:65:17:b8:ec:b7:22:a3:8a:65:7f:55:4d:3b:
                    88:2d:ed:05:0b:e0:9b:0d:4e:d7:a1:69:57:be:44:
                    db:76:52:71:d4:ba:55:86:14:35:aa:cd:44:a9:00:
                    06:bb:d7:8f:89:db:02:f1:65:27:67:31:36:17:c5:
                    0a:27:e6:f7:b0:54:83:e0:db:44:6b:4b:d0:07:19:
                    85:00:91:b8:9b:e6:08:a6:df:53:cb:28:8f:ba:c6:
                    50:2d:6c:47:82:e5:74:cd:3d:07:c2:cb:fe:e6:03:
                    ae:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D7:13:0E:CE:13:AD:16:B7:D9:24:38:12:29:55:74:9E:71:52:2C
            X509v3 Authority Key Identifier:
                keyid:64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/323830343a343036633a3a2f33322d3334203d3e20323635393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:406c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:81:d5:f8:ab:54:93:44:b7:0c:9d:90:56:67:a8:d4:4a:5a:
         ad:66:c2:9c:f0:8f:81:7f:53:1b:ac:1e:8d:c8:46:f4:19:a2:
         24:94:e1:11:98:90:8d:22:3a:43:05:33:a5:66:af:30:55:ae:
         f2:a1:79:66:81:4d:57:97:c2:ef:2d:dc:c0:63:1c:d5:8a:f9:
         1d:19:9a:a9:b5:e9:25:15:6c:7e:51:08:99:a3:54:fd:fb:60:
         c6:6f:3f:a4:4c:4f:11:3f:4d:85:51:29:85:7b:be:3d:22:cc:
         10:c5:41:9d:ad:82:be:f9:4c:b5:aa:71:11:78:28:00:f1:31:
         21:e5:5b:a1:ec:e0:a0:06:c6:59:4e:68:4f:32:f8:15:d5:7f:
         de:fa:b7:2d:c4:7d:68:f6:1e:31:e7:92:50:b1:c5:8a:5d:c8:
         2f:8f:f5:89:41:ce:15:24:3d:89:8c:f8:0a:f1:07:96:1c:88:
         93:7d:03:39:1c:3f:04:8b:d2:ae:62:46:37:39:75:04:7c:e7:
         a1:d2:4f:37:50:e1:dc:79:27:a2:73:a9:a6:e5:76:14:60:aa:
         18:9b:2d:d7:c8:4b:6b:b7:2d:f1:7b:17:7e:a1:10:6e:2c:a1:
         69:f1:bb:99:e4:81:6e:f3:e5:75:57:5f:72:b8:47:04:89:b8:
         f7:d2:a5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:57 2025 by rpki-client