Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a3a2f33342d3334203d3e20323637303739.roa
File:                     323830343a343764343a3a2f33342d3334203d3e20323637303739.roa (raw, json)
Hash identifier:          TUQZz624SnOwH4JsEYwMH74ZUad6BfECFZYkYsyqzCI=
Subject key identifier:   F7:8F:81:3A:09:64:F8:5F:C8:EC:7D:ED:81:FF:0A:03:C9:DD:2E:2C
Certificate issuer:       /CN=A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398
Certificate serial:       2CA363B763B99C21EA2787C33D855489B812A144
Authority key identifier: A2:A4:1D:63:7E:87:1B:A0:DC:D8:B3:DB:98:BD:91:BC:AB:7C:E3:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a3a2f33342d3334203d3e20323637303739.roa
Signing time:             Tue 04 Nov 2025 18:57:31 +0000
ROA not before:           Tue 04 Nov 2025 18:52:31 +0000
ROA not after:            Tue 03 Nov 2026 18:57:31 +0000
asID:                     267079
IP address blocks:        2804:47d4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl
                          rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 14:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a3:63:b7:63:b9:9c:21:ea:27:87:c3:3d:85:54:89:b8:12:a1:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398
        Validity
            Not Before: Nov  4 18:52:31 2025 GMT
            Not After : Nov  3 18:57:31 2026 GMT
        Subject: CN=F78F813A0964F85FC8EC7DED81FF0A03C9DD2E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e4:f0:57:8b:a7:2d:f2:ee:92:ad:41:41:0a:
                    6b:a6:6b:7c:43:59:e2:d1:3f:ec:2a:a2:be:6d:22:
                    b7:31:5d:ef:f1:90:86:78:55:ff:b0:9f:9d:45:fd:
                    93:a4:4a:8a:4b:3f:f5:15:97:ed:22:c8:87:48:8e:
                    0e:8c:9a:24:6e:be:48:64:74:02:ef:92:b5:cb:cb:
                    f2:b3:8d:3c:64:25:61:c4:8f:a9:52:52:4d:de:66:
                    70:e7:7b:0a:76:2b:c0:5f:f4:f4:a7:29:28:1a:e7:
                    c5:66:41:75:20:98:eb:b3:2c:28:b6:01:0d:ce:a7:
                    f2:6d:d8:90:95:69:aa:a0:89:59:cd:5c:dd:ea:8c:
                    12:b3:7d:64:bb:19:43:46:43:df:f1:c2:ff:d2:b3:
                    34:13:13:3a:ab:51:6c:ca:c6:9e:35:24:f6:70:ff:
                    1d:3f:37:86:3a:10:eb:0d:53:df:e8:89:07:fa:ff:
                    6e:43:3b:9b:37:2e:5d:a1:21:70:6b:d5:ff:d1:89:
                    0d:03:19:1e:5b:ed:11:3d:e8:24:3b:9e:a5:3a:08:
                    0c:73:9d:8d:fb:da:b9:a9:5d:a8:80:3b:f1:5b:65:
                    6b:69:6b:74:40:f7:4c:e2:28:cb:81:6e:35:1c:13:
                    45:95:85:70:50:68:49:45:6d:ad:d9:b2:8f:0a:32:
                    ef:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8F:81:3A:09:64:F8:5F:C8:EC:7D:ED:81:FF:0A:03:C9:DD:2E:2C
            X509v3 Authority Key Identifier:
                keyid:A2:A4:1D:63:7E:87:1B:A0:DC:D8:B3:DB:98:BD:91:BC:AB:7C:E3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A41D637E871BA0DCD8B3DB98BD91BCAB7CE398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a3a2f33342d3334203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d4::/34

    Signature Algorithm: sha256WithRSAEncryption
         2d:bf:bc:0e:02:6c:9e:b8:db:90:f0:97:54:d0:f0:85:28:54:
         0c:7f:fd:0b:1d:02:6d:9f:c5:d6:e2:24:cf:26:62:94:2d:ab:
         66:21:96:c0:c4:ef:a4:c0:56:ee:6a:10:e7:01:7e:c0:cd:0d:
         c2:87:8d:80:8f:0a:21:a1:10:1f:ec:a9:14:77:d8:dd:ef:2f:
         a8:54:a4:dc:e2:e5:fd:6b:7b:7b:96:b0:d9:9a:2d:cc:7b:1e:
         2e:70:b8:69:3d:d8:a7:43:fa:c7:ac:f4:59:50:37:74:3d:61:
         fd:70:86:f9:5d:00:9c:5e:88:1b:76:bb:bd:0f:14:41:ef:3c:
         65:a3:36:b3:3a:df:f0:74:fb:b7:ef:63:32:d2:15:db:72:96:
         de:ef:95:4c:0b:96:4c:9b:0b:87:f0:7c:5a:45:f4:da:5d:a8:
         d7:5f:c8:e6:f8:15:33:0e:b5:e8:de:8c:e5:d4:f5:9c:36:96:
         2f:7f:7d:d1:70:87:88:5f:42:07:3b:89:5c:3d:ee:f3:9f:96:
         61:18:40:86:24:52:ec:26:cb:bf:91:cc:fb:11:78:6a:45:13:
         17:2d:55:c2:c0:4f:51:2b:02:1f:13:40:37:5b:18:7c:8f:85:
         bf:97:90:5f:6b:5d:f2:ef:58:de:6c:10:d8:92:1c:b5:75:85:
         85:13:4e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:51:16 2025 by rpki-client