Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/323830343a383666343a3a2f33342d3334203d3e20323732363737.roa
File:                     323830343a383666343a3a2f33342d3334203d3e20323732363737.roa (raw, json)
Hash identifier:          1H4Njegq50Ogk2SmC1VgkspNPO0SqrKrNMRNGqFwLp0=
Subject key identifier:   DD:63:8C:CF:6C:07:43:E7:DF:41:6A:D2:7F:00:D8:DD:59:0D:B6:DE
Certificate issuer:       /CN=3C20D4743A457C18DB0FEAEA3025E1CCD51A4793
Certificate serial:       580F58DBEB106AFC47FA7086BA7D936154057274
Authority key identifier: 3C:20:D4:74:3A:45:7C:18:DB:0F:EA:EA:30:25:E1:CC:D5:1A:47:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/323830343a383666343a3a2f33342d3334203d3e20323732363737.roa
Signing time:             Fri 12 Sep 2025 02:41:53 +0000
ROA not before:           Fri 12 Sep 2025 02:36:53 +0000
ROA not after:            Fri 11 Sep 2026 02:41:53 +0000
asID:                     272677
IP address blocks:        2804:86f4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.crl
                          rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 03:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0f:58:db:eb:10:6a:fc:47:fa:70:86:ba:7d:93:61:54:05:72:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C20D4743A457C18DB0FEAEA3025E1CCD51A4793
        Validity
            Not Before: Sep 12 02:36:53 2025 GMT
            Not After : Sep 11 02:41:53 2026 GMT
        Subject: CN=DD638CCF6C0743E7DF416AD27F00D8DD590DB6DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:d7:5b:13:08:30:61:b9:9c:04:8e:cb:a7:
                    9d:b2:c2:5a:5a:94:f9:16:40:a2:9f:ec:38:aa:b1:
                    b1:fb:b9:ef:fd:3b:b1:7e:a7:e3:7a:d4:8e:ea:50:
                    8a:7b:c2:54:1e:18:38:d9:6f:13:6e:b0:6b:ca:6b:
                    51:c0:37:f4:55:44:a7:b8:52:54:1d:8f:12:9b:18:
                    5e:76:8d:d3:62:89:97:a9:a2:0e:c3:81:27:b7:21:
                    f6:e9:88:fd:47:c3:f2:07:c3:8b:22:72:26:a3:42:
                    4b:82:25:5b:65:e2:66:02:ac:15:13:e9:85:df:51:
                    02:36:42:03:d2:95:3e:08:51:0b:06:a7:6c:30:a3:
                    4d:2e:c8:22:40:a7:a6:78:23:31:24:e4:d7:fe:e3:
                    ff:24:87:8d:06:b7:91:86:4f:5a:fe:b1:1d:9f:37:
                    05:3d:72:59:28:4f:d5:4e:fb:cc:44:7e:89:4f:61:
                    81:ef:5b:eb:92:ce:c5:b3:24:27:0b:33:56:2d:53:
                    46:da:5d:a3:a8:58:60:da:37:ab:25:62:e6:7b:71:
                    9f:de:5d:5c:94:22:6f:30:cc:fe:00:98:da:ae:a1:
                    ab:d5:4b:9b:da:72:94:17:d0:84:70:fa:62:00:65:
                    27:b6:11:71:9c:ae:a7:6c:44:3f:63:22:b0:df:8a:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:63:8C:CF:6C:07:43:E7:DF:41:6A:D2:7F:00:D8:DD:59:0D:B6:DE
            X509v3 Authority Key Identifier:
                keyid:3C:20:D4:74:3A:45:7C:18:DB:0F:EA:EA:30:25:E1:CC:D5:1A:47:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/323830343a383666343a3a2f33342d3334203d3e20323732363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86f4::/34

    Signature Algorithm: sha256WithRSAEncryption
         6f:4c:4e:9a:32:33:c4:5b:3b:df:b6:32:60:14:a3:62:56:42:
         fc:54:f4:1c:21:79:dc:cb:56:92:9c:f6:de:bd:40:62:e5:62:
         fb:1e:b2:87:57:57:84:5a:ae:ff:91:77:86:f4:2d:c7:64:cf:
         86:d0:89:42:97:45:20:59:13:fc:ec:41:71:37:9e:6c:e4:36:
         d3:50:72:c6:67:33:db:93:49:cc:e8:ad:c0:16:06:bd:23:13:
         a8:c1:e9:c6:ea:94:b7:62:fc:36:72:13:0e:41:52:2f:35:6b:
         1c:12:a9:00:b0:84:b5:50:06:0e:82:1b:9f:88:44:5c:4a:35:
         41:c6:86:d0:63:9a:b8:34:75:f1:a5:5d:ad:0c:8f:d8:17:9b:
         d2:a7:c3:15:d7:60:9b:61:c9:61:9c:9a:63:a1:9a:2f:0d:68:
         db:0b:b9:70:8c:6b:db:60:b0:e5:ea:b3:d8:4b:74:6f:df:48:
         45:08:c4:08:8f:53:b3:cc:07:85:26:6c:1c:e3:33:91:8a:c5:
         67:59:d7:40:22:92:2c:5a:d6:23:e3:38:96:a0:69:a5:77:59:
         00:24:21:ce:ea:9d:8e:ff:01:4b:8a:ed:00:f7:16:34:2d:d7:
         24:5b:31:5c:a8:e3:8a:0d:7f:f6:29:6b:59:68:56:14:fa:0a:
         08:30:bb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:54:06 2025 by rpki-client