Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/323830343a366563303a3a2f33322d313238203d3e203238323933.roa
File:                     323830343a366563303a3a2f33322d313238203d3e203238323933.roa (raw, json)
Hash identifier:          c/3sklDWNh8JDDiUEAFzZFZqzlYqC6cY3wKSXLAufyQ=
Subject key identifier:   49:AC:AC:98:5A:B0:19:25:43:D1:37:04:D1:B8:87:B4:A3:5B:68:CA
Certificate issuer:       /CN=DED9E8FD1D2DB868985876502664A4CA2989C2CF
Certificate serial:       7F3D4CAAFD9367606659CB7F4BE679A37B9E44AD
Authority key identifier: DE:D9:E8:FD:1D:2D:B8:68:98:58:76:50:26:64:A4:CA:29:89:C2:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DED9E8FD1D2DB868985876502664A4CA2989C2CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/323830343a366563303a3a2f33322d313238203d3e203238323933.roa
Signing time:             Thu 18 Sep 2025 14:43:44 +0000
ROA not before:           Thu 18 Sep 2025 14:38:44 +0000
ROA not after:            Thu 17 Sep 2026 14:43:44 +0000
asID:                     28293
IP address blocks:        2804:6ec0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.crl
                          rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DED9E8FD1D2DB868985876502664A4CA2989C2CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3d:4c:aa:fd:93:67:60:66:59:cb:7f:4b:e6:79:a3:7b:9e:44:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9E8FD1D2DB868985876502664A4CA2989C2CF
        Validity
            Not Before: Sep 18 14:38:44 2025 GMT
            Not After : Sep 17 14:43:44 2026 GMT
        Subject: CN=49ACAC985AB0192543D13704D1B887B4A35B68CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e4:ad:00:c3:d5:3f:38:b7:69:95:bd:f3:48:
                    22:e1:30:61:a6:12:65:8d:82:05:79:ac:e4:d8:97:
                    ce:04:fb:87:4c:78:95:69:22:ff:19:2f:10:39:63:
                    3d:d3:c8:76:b1:8c:79:a1:ac:0b:a4:a7:21:22:89:
                    b2:be:00:83:a6:99:fc:ec:c5:d3:77:e6:8d:78:e7:
                    75:81:e6:f3:f7:d9:f2:71:2f:df:2b:5b:5b:67:6b:
                    6e:32:ea:f3:c7:38:dc:03:8d:fa:14:7b:aa:26:47:
                    14:26:61:1e:87:bc:ec:76:70:c8:df:08:bb:02:93:
                    31:79:f0:10:16:3a:45:4d:1c:95:40:99:16:2c:a6:
                    07:a7:e3:6c:ac:fe:46:37:35:d1:82:62:5c:25:03:
                    46:a4:7f:36:52:89:25:15:35:18:6a:e0:a8:e8:f2:
                    d8:0a:dc:50:06:51:66:4d:4f:cb:96:a0:5d:14:bc:
                    32:6a:a6:5d:98:c4:dc:b1:7f:66:cb:0e:30:4e:fa:
                    99:32:43:e0:85:46:3d:52:1d:b0:46:8f:9d:a5:93:
                    aa:84:44:9b:eb:51:51:ce:a5:fa:09:c3:58:2a:79:
                    42:1c:3c:6a:ef:ad:c2:3a:f0:50:62:a1:25:af:12:
                    45:4c:29:86:6c:17:77:88:a2:39:c2:d7:54:ad:b5:
                    83:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AC:AC:98:5A:B0:19:25:43:D1:37:04:D1:B8:87:B4:A3:5B:68:CA
            X509v3 Authority Key Identifier:
                keyid:DE:D9:E8:FD:1D:2D:B8:68:98:58:76:50:26:64:A4:CA:29:89:C2:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/DED9E8FD1D2DB868985876502664A4CA2989C2CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DED9E8FD1D2DB868985876502664A4CA2989C2CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hnn3ReVmrZArAcBs9miuXMwZTic9hRAnF1tgnNNjRJcx/0/323830343a366563303a3a2f33322d313238203d3e203238323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:16:ef:e6:c9:ec:ff:20:74:32:ef:73:9a:2c:81:58:9c:78:
         dc:72:8a:35:0f:39:6d:d2:fa:d6:f0:a2:23:b4:d4:ca:50:23:
         81:db:d6:ef:72:78:49:e4:f4:03:3d:f0:59:d3:b3:12:72:57:
         97:4d:a9:cc:93:92:9b:ca:24:52:85:25:39:2a:32:63:24:2c:
         55:53:4d:48:8e:da:44:0d:d3:dc:55:25:6c:09:f1:4b:a7:f0:
         03:1e:88:71:1f:25:7d:58:9c:b2:c7:ee:da:c2:6d:cc:da:86:
         9c:e6:b3:9b:85:1e:a6:9f:3b:0f:08:0a:92:49:c1:25:7f:df:
         53:13:9f:7e:5b:fd:5a:02:42:76:45:e1:3b:6d:ff:e8:86:74:
         cf:47:ff:45:f1:15:d0:c4:96:de:57:53:b8:b4:7f:40:f6:83:
         18:c9:ab:44:77:47:0c:bd:5f:27:1a:f9:df:03:12:10:3f:8c:
         24:72:e3:a2:81:af:b5:06:38:56:12:6e:3e:e0:43:ba:90:1c:
         79:4b:b6:46:eb:fa:de:f1:ab:fa:6e:87:a1:e7:aa:fa:ed:cb:
         f6:c7:56:77:ee:a8:2e:dc:bb:18:05:36:ae:ef:b7:39:f8:5d:
         51:cd:3e:ab:80:04:77:a1:95:38:b4:86:19:6c:ab:82:ba:86:
         05:ad:86:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:55:05 2025 by rpki-client