Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/323830343a346462303a3a2f33322d3332203d3e20323638323133.roa
File:                     323830343a346462303a3a2f33322d3332203d3e20323638323133.roa (raw, json)
Hash identifier:          SZSAqVslfoIeZ8CsTmwiFp0IQTONHzAfigBL/Esv6sQ=
Subject key identifier:   D9:3B:97:DC:B0:63:37:92:79:A5:EC:81:F3:EA:9F:28:DE:9F:DB:F3
Certificate issuer:       /CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
Certificate serial:       7BD113D5EBEA7F4CA60F4BB82ED06FE3DD90EB4F
Authority key identifier: C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/323830343a346462303a3a2f33322d3332203d3e20323638323133.roa
Signing time:             Fri 10 Oct 2025 19:01:40 +0000
ROA not before:           Fri 10 Oct 2025 18:56:40 +0000
ROA not after:            Fri 09 Oct 2026 19:01:40 +0000
asID:                     268213
IP address blocks:        2804:4db0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl
                          rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d1:13:d5:eb:ea:7f:4c:a6:0f:4b:b8:2e:d0:6f:e3:dd:90:eb:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22
        Validity
            Not Before: Oct 10 18:56:40 2025 GMT
            Not After : Oct  9 19:01:40 2026 GMT
        Subject: CN=D93B97DCB063379279A5EC81F3EA9F28DE9FDBF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a2:c0:1b:75:19:02:3f:9e:ed:e2:8b:bc:74:
                    a6:f2:b9:d5:b7:cf:ec:b7:a7:fe:6e:a8:b1:bf:a4:
                    6a:e9:67:77:14:a7:d8:6f:09:9e:40:f1:79:56:a4:
                    15:6d:4e:a5:f0:2e:7e:58:54:18:c1:cb:3b:9c:8c:
                    ec:08:e2:85:79:80:0a:38:cd:71:4c:60:a8:9c:89:
                    d7:b7:fc:27:7b:bf:6b:e3:b1:b3:50:7f:c4:2a:87:
                    64:f1:74:01:db:2b:80:c5:df:53:24:4a:59:d3:c2:
                    04:06:db:ab:c3:51:c0:60:5e:d3:2e:e4:26:0a:63:
                    62:57:f1:0f:a6:a3:68:1a:e1:f6:ff:49:e8:bc:42:
                    95:5e:8e:63:7e:0e:a2:f2:f2:be:22:43:18:13:4c:
                    00:9f:da:94:11:85:0e:10:d3:2c:d5:65:41:c0:05:
                    ad:02:a1:3b:24:f9:7f:95:5e:88:5c:27:08:1b:8e:
                    53:09:51:f5:af:df:4a:5f:8a:dc:fc:83:56:4b:22:
                    ed:f2:c7:93:42:cd:81:fd:41:0b:0a:34:8b:c5:33:
                    6f:f9:4e:1b:cc:78:34:d4:94:ab:ae:ce:69:5a:13:
                    89:e8:a9:29:2a:60:ad:d1:59:f5:83:a8:0e:87:21:
                    04:63:c5:65:e7:0e:82:f7:fc:b8:54:fa:e8:8a:a5:
                    9e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3B:97:DC:B0:63:37:92:79:A5:EC:81:F3:EA:9F:28:DE:9F:DB:F3
            X509v3 Authority Key Identifier:
                keyid:C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/323830343a346462303a3a2f33322d3332203d3e20323638323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:f0:16:49:63:a4:53:47:8e:a1:b9:48:e3:bd:c6:3b:b0:7b:
         9d:f6:a7:80:c5:29:f7:e9:09:87:35:92:df:fd:d5:c9:e8:28:
         55:7f:f3:c5:08:a8:a2:8a:38:35:f3:a5:13:30:78:49:f6:96:
         e0:6a:32:6e:13:46:8b:42:4f:1b:d4:d5:35:cd:4a:30:44:9b:
         5f:f3:ca:f0:5c:39:73:f4:71:af:55:bc:39:60:96:7b:f7:9f:
         5b:63:58:94:4e:9c:a6:3b:44:fb:ef:86:57:e7:b0:dc:67:f2:
         80:a3:17:f4:31:fe:ca:ab:c1:b5:1b:11:19:fc:c9:da:80:bb:
         0f:4b:76:df:e1:c5:0e:38:f4:50:65:18:47:ac:4d:d7:ed:8b:
         a3:11:2f:65:d9:05:47:60:fa:0d:63:be:a3:6a:85:6d:d7:5f:
         1e:d0:a3:a7:f4:b6:b4:45:ae:48:05:5e:04:7f:3e:d3:0e:d7:
         a0:42:07:f7:7a:f1:b5:95:e6:7a:70:64:4a:e4:90:1a:36:d6:
         17:e3:d7:b1:bf:a5:a7:a0:71:a0:b6:19:01:74:cd:9a:c7:33:
         61:ef:fc:c2:c6:2f:99:12:d8:a1:f7:ae:f2:bf:d8:ad:2c:7a:
         52:68:0d:d7:cd:15:ea:ea:c6:51:d6:a1:e8:86:9f:1b:d7:14:
         48:41:b4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:12:05 2025 by rpki-client