Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/323830343a326533633a3a2f33322d313238203d3e20323635333334.roa
File:                     323830343a326533633a3a2f33322d313238203d3e20323635333334.roa (raw, json)
Hash identifier:          QF8VQwARJKuaS0v6ROc9Wa6I26Qc9yQxM436sBW0P3o=
Subject key identifier:   F4:FA:B1:BB:34:7E:1A:1D:A8:76:7C:3F:CF:A2:77:F9:06:BD:3A:5E
Certificate issuer:       /CN=36ACD44E2E3E16388FA2901E5BC9BB79A881BF80
Certificate serial:       7DF81EA3E7FC8BDF046082C1A838A2160FF6D87A
Authority key identifier: 36:AC:D4:4E:2E:3E:16:38:8F:A2:90:1E:5B:C9:BB:79:A8:81:BF:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/323830343a326533633a3a2f33322d313238203d3e20323635333334.roa
Signing time:             Mon 06 Oct 2025 02:08:39 +0000
ROA not before:           Mon 06 Oct 2025 02:03:39 +0000
ROA not after:            Mon 05 Oct 2026 02:08:39 +0000
asID:                     265334
IP address blocks:        2804:2e3c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.crl
                          rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 20:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f8:1e:a3:e7:fc:8b:df:04:60:82:c1:a8:38:a2:16:0f:f6:d8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ACD44E2E3E16388FA2901E5BC9BB79A881BF80
        Validity
            Not Before: Oct  6 02:03:39 2025 GMT
            Not After : Oct  5 02:08:39 2026 GMT
        Subject: CN=F4FAB1BB347E1A1DA8767C3FCFA277F906BD3A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:3d:76:19:9b:6f:79:c0:b5:c2:16:9d:8c:
                    b0:84:7a:37:0f:a8:ca:bf:5c:b6:8d:70:b9:b6:df:
                    50:65:36:6e:ca:70:ec:84:36:38:43:be:0e:63:31:
                    8d:7f:c0:7b:d4:2d:40:20:94:82:f1:b0:44:f7:ff:
                    aa:35:99:19:e7:fc:56:ff:f3:f6:cf:36:0b:e8:51:
                    5f:2f:ac:96:6d:f6:f2:b8:40:90:cc:b3:42:33:d8:
                    f6:61:eb:0e:61:2f:a6:8b:76:72:d8:5b:2c:b9:76:
                    3b:9e:95:38:cb:5e:f9:9f:60:70:0f:fd:20:84:e7:
                    37:89:f3:e1:a1:e5:21:bf:27:51:85:0f:16:f0:2d:
                    0a:f6:54:50:59:b6:c5:66:75:36:42:5e:fd:47:ad:
                    5c:66:32:10:80:de:af:79:78:2a:84:fb:d1:4f:53:
                    c8:d5:44:b1:fc:bb:e5:8a:5f:fe:9f:57:6b:d3:e0:
                    e9:e1:1f:3c:db:26:97:52:67:7c:b4:50:1b:64:30:
                    7a:7d:ee:48:83:36:68:20:20:7d:4c:96:1b:40:9e:
                    df:b6:2a:e5:ce:18:1f:07:eb:00:a7:c8:00:3c:75:
                    e4:22:71:c1:79:94:13:b0:3a:0a:dc:93:17:37:d8:
                    e5:47:80:aa:e6:56:4b:55:b3:71:17:d7:87:cf:c8:
                    27:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FA:B1:BB:34:7E:1A:1D:A8:76:7C:3F:CF:A2:77:F9:06:BD:3A:5E
            X509v3 Authority Key Identifier:
                keyid:36:AC:D4:4E:2E:3E:16:38:8F:A2:90:1E:5B:C9:BB:79:A8:81:BF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/323830343a326533633a3a2f33322d313238203d3e20323635333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:26:4a:e1:1b:39:2b:4b:c0:d9:c1:a5:15:cd:11:cd:f7:46:
         45:55:1c:29:f7:58:5d:b2:22:b6:ec:5f:0c:b1:6f:e5:5f:37:
         3f:7f:c1:a8:6f:ae:ee:7e:79:b2:79:28:c6:d0:c1:81:d0:03:
         49:d8:55:e3:b3:2f:56:bd:58:e1:dc:28:29:7b:2c:6d:81:6f:
         83:03:1c:83:c5:47:8a:b4:1d:bd:b7:b4:cb:02:fc:53:b3:e1:
         d5:64:d8:d6:b9:dc:8a:7d:eb:68:97:7a:f5:31:42:77:e0:a0:
         42:81:e9:34:36:07:1d:16:79:d1:c1:a1:86:5e:dd:1b:c9:09:
         e9:ce:4a:ed:0a:82:52:b3:88:ef:7a:f0:97:ec:3a:8d:78:68:
         73:21:dd:37:b5:36:28:7c:1a:b7:62:cf:78:7e:19:23:7b:d1:
         d5:82:6f:3d:d4:4b:67:79:e5:c8:d3:25:a8:d6:7e:83:99:67:
         31:eb:68:73:a6:68:04:2f:e2:bf:89:ca:2f:5a:6c:0a:4a:e6:
         2a:3f:b9:2e:fa:04:df:a4:f9:52:42:b0:b4:b6:d8:48:2d:f8:
         e3:02:74:12:ab:17:09:00:0b:71:1d:58:92:e2:bb:10:df:06:
         e6:46:a1:23:d1:52:99:03:17:ec:7d:0f:b8:dd:aa:40:39:88:
         cb:f6:a4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:44:43 2025 by rpki-client