Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/323830343a343062303a3a2f33322d3438203d3e20323635393735.roa
File:                     323830343a343062303a3a2f33322d3438203d3e20323635393735.roa (raw, json)
Hash identifier:          QPCBGPU47AVonH4huoGuffUnE8w2lE5zGEuxp9RKNN4=
Subject key identifier:   37:3C:00:85:6C:7A:C3:18:25:63:14:37:FE:18:47:B3:BD:4D:E7:93
Certificate issuer:       /CN=2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1
Certificate serial:       39821FC3E222204F7510A2424E2894DED136FA57
Authority key identifier: 2C:D1:1F:1C:63:9F:B5:D4:95:F1:A5:BA:66:FC:73:3D:44:CB:97:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/323830343a343062303a3a2f33322d3438203d3e20323635393735.roa
Signing time:             Fri 17 Oct 2025 14:25:27 +0000
ROA not before:           Fri 17 Oct 2025 14:20:27 +0000
ROA not after:            Fri 16 Oct 2026 14:25:27 +0000
asID:                     265975
IP address blocks:        2804:40b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.crl
                          rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 00:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:82:1f:c3:e2:22:20:4f:75:10:a2:42:4e:28:94:de:d1:36:fa:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1
        Validity
            Not Before: Oct 17 14:20:27 2025 GMT
            Not After : Oct 16 14:25:27 2026 GMT
        Subject: CN=373C00856C7AC31825631437FE1847B3BD4DE793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8d:cc:e1:6a:9a:db:04:f4:b3:ce:f3:58:5e:
                    9f:13:98:0a:b6:17:8a:f4:43:ed:25:c5:ef:de:af:
                    89:f3:8a:d4:9c:a8:0f:69:4c:8b:6a:80:5e:d0:02:
                    7c:cd:9b:2c:18:8d:be:6f:e9:af:8d:ad:ce:c3:b6:
                    2d:e2:dc:94:a0:ea:62:72:60:e8:3e:19:87:8f:79:
                    5f:48:83:69:3d:4f:17:3d:09:e6:4a:f6:7a:49:ae:
                    71:e9:ee:d1:72:63:33:ef:66:5e:75:4c:2d:84:6e:
                    61:bb:b4:a8:19:9c:04:79:b3:b8:eb:86:ef:a7:8e:
                    00:53:ac:95:9e:88:7e:22:ec:79:a6:cb:03:55:4d:
                    75:07:15:fe:59:05:c3:83:a8:63:b5:d3:a3:b1:89:
                    91:44:ca:5a:3e:4a:08:dd:4c:fc:4f:2e:cb:b3:33:
                    c5:54:c7:12:9b:0c:e5:eb:84:f3:5e:eb:94:95:27:
                    35:71:11:b7:3d:2c:55:9a:3b:02:fc:87:bf:0a:8b:
                    b7:71:37:e9:40:9f:65:02:e9:77:d5:ed:74:bf:8c:
                    05:53:9c:2c:67:fd:e3:42:92:e7:f6:a9:90:fb:94:
                    7a:5d:86:47:a9:ea:88:84:1c:9b:c2:15:e7:c5:aa:
                    46:61:37:fa:85:b2:da:f8:5f:7f:54:48:7a:8d:a7:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3C:00:85:6C:7A:C3:18:25:63:14:37:FE:18:47:B3:BD:4D:E7:93
            X509v3 Authority Key Identifier:
                keyid:2C:D1:1F:1C:63:9F:B5:D4:95:F1:A5:BA:66:FC:73:3D:44:CB:97:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/323830343a343062303a3a2f33322d3438203d3e20323635393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:78:d3:8f:ec:25:cb:d3:c7:50:e5:a7:0d:eb:30:29:9f:16:
         f3:09:ae:6d:ed:9b:22:2c:19:15:ba:a2:ed:dc:4b:3b:4a:b4:
         48:02:d2:89:47:b4:5e:c6:d3:c7:89:2a:2c:b0:6e:ae:f3:e8:
         0f:27:e8:9b:46:03:92:2d:83:a2:9c:6e:bb:89:3d:85:71:26:
         ea:81:09:6c:08:47:bd:f0:03:85:27:37:7f:d6:a1:0f:e7:0f:
         51:4d:09:90:27:fb:8d:b6:01:70:e6:4c:53:88:c9:6e:ef:c3:
         88:ff:62:b9:65:a6:5b:cd:87:4e:d0:9d:55:7e:05:12:dd:82:
         fe:a8:74:c9:23:5e:8a:a9:37:8f:6c:c7:89:26:cb:d9:a1:ea:
         1d:7b:bf:2e:4c:c0:70:b6:5c:73:bd:d2:63:db:19:b1:e2:39:
         43:a1:65:51:22:da:c3:47:bd:36:63:20:9c:2f:63:58:d6:e1:
         06:ff:7a:e1:e7:21:47:8c:15:66:56:ff:eb:98:4e:9b:d8:ea:
         8d:5f:ec:47:4a:57:19:a5:da:6f:21:e1:23:34:03:1c:0a:9c:
         76:9f:57:18:f6:1d:44:af:40:85:23:f0:10:14:2c:cc:d0:68:
         ae:90:d2:57:11:bd:ca:a5:88:d4:e1:16:b9:f2:c7:e1:2e:e8:
         84:53:8a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:49 2025 by rpki-client