Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a393030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a393030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          LjuN+3WvD7/vSlbkeQL6ISirrQ4jDMOfIc6zk9sJKss=
Subject key identifier:   00:68:AB:9E:39:EC:35:1A:09:3A:D9:DC:70:21:4B:32:1E:81:D6:5D
Certificate issuer:       /CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
Certificate serial:       1701943D2507014A67F6C70D99E057A76ABF145D
Authority key identifier: 7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a393030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Mon 06 Oct 2025 15:08:07 +0000
ROA not before:           Mon 06 Oct 2025 15:03:07 +0000
ROA not after:            Mon 05 Oct 2026 15:08:07 +0000
asID:                     268009
IP address blocks:        2804:5690:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 04:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:01:94:3d:25:07:01:4a:67:f6:c7:0d:99:e0:57:a7:6a:bf:14:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
        Validity
            Not Before: Oct  6 15:03:07 2025 GMT
            Not After : Oct  5 15:08:07 2026 GMT
        Subject: CN=0068AB9E39EC351A093AD9DC70214B321E81D65D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:a1:95:ac:12:15:9e:30:4a:b6:e8:db:6f:
                    0f:f5:34:4b:c2:33:9f:9c:6a:25:76:4e:4a:31:75:
                    3c:c8:9c:f0:41:10:16:f3:f5:1a:af:99:56:95:a0:
                    d4:61:cd:30:2d:0a:8b:b2:03:d0:e9:51:46:3e:b4:
                    87:2d:ba:76:75:2d:a9:67:f9:5b:c2:e8:9e:7d:d5:
                    6d:c3:64:0b:31:33:49:55:56:7f:bb:e0:0a:e0:74:
                    cd:60:ee:eb:bf:57:fa:45:32:83:d1:97:fb:11:f3:
                    d5:f4:2a:d4:74:aa:9e:be:1e:a3:2f:e2:a2:35:93:
                    85:2c:af:aa:cf:a8:05:31:84:be:3e:31:d5:f6:40:
                    b5:7b:89:76:d7:da:64:dd:ec:b4:c4:98:92:10:0f:
                    5a:a3:1f:e1:c1:cd:81:ab:a9:8a:a0:0d:dc:06:69:
                    d5:97:b8:fb:ca:32:24:fd:15:9d:6b:e0:c8:23:0c:
                    78:43:6a:1e:41:58:7d:06:6d:e2:f3:f4:e9:f6:28:
                    f4:21:02:30:d8:e0:95:dc:8f:ce:bf:fa:59:6c:fc:
                    31:d3:76:a5:6f:dc:22:85:9c:13:a7:c0:75:67:83:
                    5d:7e:c3:fe:0e:73:73:fc:22:2c:b7:67:8b:06:09:
                    18:8b:df:4d:9a:5e:c0:cf:a1:18:ae:12:78:2d:28:
                    67:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:68:AB:9E:39:EC:35:1A:09:3A:D9:DC:70:21:4B:32:1E:81:D6:5D
            X509v3 Authority Key Identifier:
                keyid:7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a393030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a9:66:54:49:a6:fc:c3:c4:db:7d:ab:01:5c:26:18:05:88:5f:
         ac:ab:10:80:51:0d:e8:3d:76:f8:40:99:a6:04:6d:2b:08:a8:
         de:7f:be:30:3a:cc:52:6e:07:2d:40:36:4e:33:8b:1e:ae:ae:
         89:41:17:93:07:74:18:34:26:5b:9a:eb:26:af:87:bf:82:a2:
         11:d1:35:ef:d1:a1:9e:dd:de:aa:d1:66:8e:52:56:fc:3a:ad:
         9e:6d:ed:2f:8b:b1:9b:60:7b:e9:15:90:e8:c6:7d:0d:be:27:
         44:a3:a0:2e:ce:e8:e8:cc:fe:39:6a:60:df:b6:6f:aa:ea:f9:
         ad:a2:ce:c7:d0:a2:1a:9b:5b:f9:1c:16:cf:ac:79:38:e8:12:
         5a:70:6f:a2:3a:25:db:47:d2:38:a7:e3:c3:04:b7:94:de:36:
         22:96:5e:78:87:2c:d2:58:4f:85:07:1b:07:fa:b4:dd:2b:bd:
         27:c6:a7:7f:71:90:c5:93:24:17:9c:36:fb:12:8d:23:8a:2b:
         5d:56:14:d6:3e:8c:ac:5a:b9:2a:95:b3:9b:75:99:63:f7:bc:
         35:f4:75:d3:02:53:86:a0:84:bd:09:fb:67:a0:81:96:86:0d:
         72:8a:7d:9c:5e:e9:83:73:a1:88:70:62:ff:02:c0:34:43:9c:
         03:b7:fe:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:36 2025 by rpki-client