Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/323830343a343339303a3a2f33322d3438203d3e203238313934.roa
File:                     323830343a343339303a3a2f33322d3438203d3e203238313934.roa (raw, json)
Hash identifier:          YKvuDNIHyw3NBnRCbWj16Uwongrcmr0GD6QVxxTjIG4=
Subject key identifier:   01:D1:4F:8E:FF:9A:EA:25:AE:E8:88:9C:D7:24:D8:1D:60:96:38:7F
Certificate issuer:       /CN=3C935E1CA93E646630F422D7A5C05C4398641455
Certificate serial:       464AF15EF18D5FD76BF1344697399B5353CDD36A
Authority key identifier: 3C:93:5E:1C:A9:3E:64:66:30:F4:22:D7:A5:C0:5C:43:98:64:14:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C935E1CA93E646630F422D7A5C05C4398641455.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/323830343a343339303a3a2f33322d3438203d3e203238313934.roa
Signing time:             Tue 05 Aug 2025 15:36:30 +0000
ROA not before:           Tue 05 Aug 2025 15:31:30 +0000
ROA not after:            Tue 04 Aug 2026 15:36:30 +0000
asID:                     28194
IP address blocks:        2804:4390::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3C935E1CA93E646630F422D7A5C05C4398641455.crl
                          rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3C935E1CA93E646630F422D7A5C05C4398641455.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C935E1CA93E646630F422D7A5C05C4398641455.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Aug 2025 12:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4a:f1:5e:f1:8d:5f:d7:6b:f1:34:46:97:39:9b:53:53:cd:d3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C935E1CA93E646630F422D7A5C05C4398641455
        Validity
            Not Before: Aug  5 15:31:30 2025 GMT
            Not After : Aug  4 15:36:30 2026 GMT
        Subject: CN=01D14F8EFF9AEA25AEE8889CD724D81D6096387F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:32:12:01:ef:76:d6:9c:59:c7:65:58:48:
                    c4:85:9f:44:60:54:46:17:fc:aa:e3:80:21:d7:5d:
                    c6:e5:5c:1a:fa:e7:77:2e:9d:5e:ae:67:8e:f4:b8:
                    67:9a:29:bf:dd:cb:e4:9b:4f:8f:6c:e9:a0:ea:bb:
                    7e:76:23:e2:f5:6e:e4:54:bb:a1:20:92:fa:dc:cc:
                    41:bb:f6:a9:76:a9:ac:f6:28:03:f9:88:71:e9:c5:
                    47:26:59:9c:6f:30:b6:f6:d9:9e:41:c6:b3:ff:55:
                    e8:66:97:1a:da:a0:10:66:8c:7d:16:82:7f:3e:da:
                    be:95:0b:57:86:7b:a6:7b:b7:b0:dc:d9:59:62:0c:
                    e7:71:1c:bf:b7:4e:a6:a8:e6:d4:a5:aa:32:fa:57:
                    20:82:00:d5:68:52:84:cf:2e:44:4e:7f:5e:af:2a:
                    2b:6a:90:07:31:08:ef:e2:3f:99:d6:17:df:93:8e:
                    c3:8d:68:ea:23:56:55:50:0e:7d:e8:4a:de:75:df:
                    3e:d9:56:b1:72:76:aa:7a:06:51:52:09:83:41:a3:
                    42:c3:63:44:c5:fb:85:6c:8b:6a:00:9d:41:97:17:
                    3d:16:59:f2:6d:49:06:a4:86:75:3f:9c:0a:44:4b:
                    39:ba:6f:fc:13:e5:fb:7d:1a:39:66:54:af:74:01:
                    10:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D1:4F:8E:FF:9A:EA:25:AE:E8:88:9C:D7:24:D8:1D:60:96:38:7F
            X509v3 Authority Key Identifier:
                keyid:3C:93:5E:1C:A9:3E:64:66:30:F4:22:D7:A5:C0:5C:43:98:64:14:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3C935E1CA93E646630F422D7A5C05C4398641455.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C935E1CA93E646630F422D7A5C05C4398641455.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/323830343a343339303a3a2f33322d3438203d3e203238313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4390::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:dd:12:ee:62:b2:f0:ee:b5:f6:be:8a:7f:fb:55:29:39:08:
         ce:e8:b4:53:8d:9f:93:39:75:82:94:33:90:bb:44:41:ec:46:
         cf:33:75:7b:f0:2f:ed:38:da:a6:5b:57:60:4f:ba:f0:35:72:
         29:85:2e:6d:97:de:36:49:5f:d6:d8:97:ad:e1:e5:11:9f:4a:
         68:d0:42:ac:f0:29:ca:49:00:7f:5c:c6:5b:b3:95:fe:f6:18:
         8e:3a:71:c9:66:be:91:19:3f:56:12:e5:82:91:af:18:6a:b6:
         63:43:f3:9e:a9:dd:b8:fd:ca:90:4e:d9:41:4e:fe:2b:87:5a:
         e3:4b:ec:8f:85:71:cb:34:c1:64:08:2a:db:95:70:1a:8d:3a:
         ea:7e:c8:21:ea:09:8a:ba:ac:ca:fc:c0:d6:34:33:38:cc:15:
         8f:62:90:18:8b:c8:8d:41:95:70:cd:9a:dd:34:23:bf:6f:63:
         ed:f3:6b:cd:57:ad:43:a7:34:74:f9:96:46:d4:d0:f5:fe:50:
         f0:72:58:b6:1e:9b:3c:30:a3:05:23:27:a3:2d:17:bc:f9:43:
         af:d3:94:d5:ae:eb:a4:c2:01:10:7a:25:1d:a6:81:d1:f4:bb:
         82:91:fe:4d:5f:97:c2:a9:65:55:33:e8:37:9a:c3:b0:de:94:
         0e:7a:31:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 03:53:38 2025 by rpki-client