Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/323830343a333631633a3a2f33322d3438203d3e20323636333237.roa
File:                     323830343a333631633a3a2f33322d3438203d3e20323636333237.roa (raw, json)
Hash identifier:          VaLj10Ov4jQTHVFE7MzNXb/XCikxd4U1YIZxdjh7MQ4=
Subject key identifier:   60:EE:04:E1:DE:3D:20:9A:F9:4B:0E:6C:EC:40:28:1A:C5:2A:07:38
Certificate issuer:       /CN=755280051315536279FF066378265E50085709C1
Certificate serial:       4C890B091FF21A3A80FC7CF9CA7E659D76E53E34
Authority key identifier: 75:52:80:05:13:15:53:62:79:FF:06:63:78:26:5E:50:08:57:09:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/755280051315536279FF066378265E50085709C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/323830343a333631633a3a2f33322d3438203d3e20323636333237.roa
Signing time:             Tue 14 Oct 2025 16:31:28 +0000
ROA not before:           Tue 14 Oct 2025 16:26:28 +0000
ROA not after:            Tue 13 Oct 2026 16:31:28 +0000
asID:                     266327
IP address blocks:        2804:361c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/755280051315536279FF066378265E50085709C1.crl
                          rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/755280051315536279FF066378265E50085709C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/755280051315536279FF066378265E50085709C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 02:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:89:0b:09:1f:f2:1a:3a:80:fc:7c:f9:ca:7e:65:9d:76:e5:3e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=755280051315536279FF066378265E50085709C1
        Validity
            Not Before: Oct 14 16:26:28 2025 GMT
            Not After : Oct 13 16:31:28 2026 GMT
        Subject: CN=60EE04E1DE3D209AF94B0E6CEC40281AC52A0738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:e2:e1:10:1a:c5:4d:f2:83:d9:79:ef:a4:
                    b8:54:d5:61:ba:f8:c4:f3:36:b4:40:71:50:81:35:
                    b2:ab:b7:d1:5e:a3:98:3c:09:55:28:04:cb:d2:da:
                    fc:8e:4d:e1:33:59:5b:06:d0:93:72:48:bd:25:96:
                    74:54:60:94:90:d3:d6:b3:6a:04:8f:33:83:1f:92:
                    19:87:ae:86:f0:69:1c:3b:ce:ce:c3:69:30:ee:b7:
                    0a:47:a0:36:ef:b6:31:06:59:28:16:b0:c8:21:1e:
                    88:9c:ce:82:96:12:ce:ae:2b:82:76:ca:a2:1a:ee:
                    3f:c6:00:29:58:52:eb:7c:a3:9e:9e:29:fc:1c:28:
                    16:e1:80:ff:c9:4c:d5:0e:d2:37:f2:19:4a:4d:5a:
                    3b:53:14:32:6b:1a:4b:f1:15:a3:24:39:43:8a:e0:
                    2f:3b:73:6b:b8:1c:71:93:f3:93:e5:2a:39:6d:ff:
                    91:19:0b:69:82:ee:2b:d8:c8:75:86:29:ce:41:8d:
                    60:ad:ca:80:c9:e7:d0:1f:fa:57:1c:0e:68:de:b5:
                    f7:40:85:ca:a0:70:20:6f:7f:28:9a:af:02:e7:33:
                    2f:c5:47:0c:df:6a:a8:46:e8:6f:f3:f8:f8:54:7b:
                    a0:4d:d4:82:f4:16:49:9a:10:cc:ff:f3:3a:61:c0:
                    2c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EE:04:E1:DE:3D:20:9A:F9:4B:0E:6C:EC:40:28:1A:C5:2A:07:38
            X509v3 Authority Key Identifier:
                keyid:75:52:80:05:13:15:53:62:79:FF:06:63:78:26:5E:50:08:57:09:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/755280051315536279FF066378265E50085709C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/755280051315536279FF066378265E50085709C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxeCH4MWATqxVw9myA1pQoYNsMuCBfxjrm743CVBX1G/0/323830343a333631633a3a2f33322d3438203d3e20323636333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:361c::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:6a:13:cd:9e:6f:cc:a5:94:90:42:6a:88:6e:58:e2:3a:03:
         70:bf:df:d1:04:7b:04:9a:b4:d5:62:de:60:0d:0f:97:f0:cf:
         d9:55:6a:ca:37:a2:bf:b8:e4:3e:c2:43:66:76:90:15:36:fe:
         68:32:d3:7a:e4:fd:1e:29:a2:8f:3f:be:7d:d6:f8:fd:24:f3:
         b6:ce:59:3f:87:4b:57:d8:6d:ad:47:16:03:ef:d6:c7:af:2e:
         f7:6d:ba:de:e5:96:e2:f7:14:4a:69:99:eb:54:1a:20:6d:87:
         cd:53:71:b2:44:fa:e5:17:4f:69:8c:a1:f1:49:d8:53:13:ba:
         ca:c0:2b:ff:55:6c:b8:18:73:3f:4b:24:a4:91:55:82:8d:01:
         09:30:9d:51:f5:ff:cb:9b:bf:a4:6b:ad:52:ee:4f:49:0e:81:
         d2:79:67:ec:45:f6:2e:29:7e:9e:73:1d:f5:07:95:c6:35:73:
         38:74:7a:8a:ed:e7:8e:af:30:cb:2a:3b:75:dc:52:19:a4:56:
         9e:74:a2:d6:47:ce:50:ed:ce:9f:1a:82:60:21:9c:22:f5:5e:
         b7:33:32:f5:0c:3f:b2:a9:d9:66:37:a0:40:3d:a2:f2:1b:17:
         25:e9:dc:55:cc:7b:a0:02:2a:97:69:06:51:bc:bd:49:72:f5:
         3c:74:c2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:54:18 2025 by rpki-client