Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a3a2f33322d3332203d3e203631373937.roa
File:                     323830343a313937633a3a2f33322d3332203d3e203631373937.roa (raw, json)
Hash identifier:          0ZSVLdUq3+tVxkp+5Jk8JwLj/OtpzcZr2/itSS/qQt0=
Subject key identifier:   23:A6:CF:0D:C8:1F:BF:5E:E6:0C:5F:D9:F4:85:DA:C4:8E:BF:B3:ED
Certificate issuer:       /CN=698DD058CC44A7087C5B128356D10FB024C7D778
Certificate serial:       36000C688E156F739315F374BE9676E637853A03
Authority key identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a3a2f33322d3332203d3e203631373937.roa
Signing time:             Mon 03 Nov 2025 15:07:23 +0000
ROA not before:           Mon 03 Nov 2025 15:02:23 +0000
ROA not after:            Mon 02 Nov 2026 15:07:23 +0000
asID:                     61797
IP address blocks:        2804:197c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:00:0c:68:8e:15:6f:73:93:15:f3:74:be:96:76:e6:37:85:3a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698DD058CC44A7087C5B128356D10FB024C7D778
        Validity
            Not Before: Nov  3 15:02:23 2025 GMT
            Not After : Nov  2 15:07:23 2026 GMT
        Subject: CN=23A6CF0DC81FBF5EE60C5FD9F485DAC48EBFB3ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f9:ea:8e:56:5d:1f:20:18:a1:92:e8:10:28:
                    d3:0a:5c:be:3c:a9:c0:2d:55:4b:e1:f6:f6:a6:f2:
                    13:4b:57:78:7c:4c:ca:c2:39:41:f1:e8:26:45:ed:
                    20:32:cf:bb:2c:b8:b5:6a:83:78:20:b3:96:85:cb:
                    ed:b0:38:91:59:d8:66:bd:f7:e2:52:06:dc:c7:1a:
                    d8:fe:28:1a:c1:5f:69:1e:ad:f2:b6:6d:41:90:2e:
                    b2:1a:d0:b8:bf:1a:03:f3:d6:bf:f3:07:65:08:0b:
                    b5:89:55:43:a5:4e:c9:ff:4a:5b:95:f0:23:46:f6:
                    84:55:88:38:8e:aa:6e:2f:47:bb:9b:f5:f8:3c:0b:
                    70:b5:56:2e:96:8b:a4:cd:a0:38:7b:2d:f0:e3:09:
                    06:0e:68:b9:78:74:81:35:7f:28:bf:b6:19:9d:4b:
                    b1:d1:b2:50:ce:80:aa:ab:09:08:64:78:f9:9c:c9:
                    59:a9:a7:47:7c:a3:ee:a0:90:7a:75:0e:94:d8:04:
                    6f:40:eb:77:47:bf:89:0a:26:00:f4:d9:1b:03:16:
                    6e:d7:46:07:59:ec:7a:ed:ff:0c:ac:6a:a1:57:01:
                    60:67:f8:0a:0d:aa:94:1a:01:e6:a6:0c:8b:51:5f:
                    83:ba:57:df:73:f7:a2:61:7b:46:c8:ca:5d:d4:c8:
                    d8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A6:CF:0D:C8:1F:BF:5E:E6:0C:5F:D9:F4:85:DA:C4:8E:BF:B3:ED
            X509v3 Authority Key Identifier:
                keyid:69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a3a2f33322d3332203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:197c::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:94:0b:a0:31:da:9c:2f:9d:67:a9:fa:20:6b:bc:9d:8b:7b:
         1f:33:ea:a2:28:99:c1:5e:3f:e6:70:3f:9e:fc:f8:26:a4:ce:
         a9:d6:49:f2:f5:45:2a:ee:f0:b7:2a:54:80:9f:8b:a0:0d:7f:
         ca:89:05:d0:9d:24:36:33:c4:cc:70:e5:f2:67:bb:a7:8f:71:
         48:b1:b6:71:cc:ed:5c:47:d2:b7:a6:77:c2:72:97:b4:74:b3:
         2c:34:c6:11:65:87:0d:ed:46:9e:c4:44:ce:3d:17:8e:9d:e4:
         6a:1f:6a:68:4a:ed:c3:e6:e9:1f:e1:0b:f5:d1:33:16:50:b7:
         70:f3:1f:54:97:f4:1e:a4:e3:b0:8a:79:3f:b1:c9:54:a2:71:
         de:b2:ee:1a:41:ae:6c:c9:2e:e4:ac:91:4c:21:ef:8c:0f:ba:
         f4:d8:f2:b4:68:22:a7:bd:af:e4:ab:f3:c4:30:ad:56:16:94:
         ab:32:a5:61:9b:3d:23:2a:4b:f4:f5:fe:20:70:34:e0:98:76:
         77:64:f9:8b:d0:b1:08:b5:64:4f:b8:92:4e:80:ce:0e:48:28:
         b3:3e:3d:3e:e0:93:96:ed:7e:e8:d3:82:75:79:f8:8e:16:d7:
         5a:64:eb:eb:ad:93:c8:a8:dc:2c:3c:52:a3:a9:c6:50:e0:09:
         fd:13:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:48:54 2025 by rpki-client