Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a3a2f33332d3333203d3e203631373937.roa
File:                     323830343a313937633a3a2f33332d3333203d3e203631373937.roa (raw, json)
Hash identifier:          mZUycKiYjxts2aYH3Mr4d+FHNz+zcqwMEZ+efOFQt9k=
Subject key identifier:   0E:ED:6B:5D:D4:34:44:50:E1:4D:C7:46:6E:9F:B1:A7:FA:EF:60:9B
Certificate issuer:       /CN=698DD058CC44A7087C5B128356D10FB024C7D778
Certificate serial:       18BE7EF0F6B96C4F2B95DF9DE63E93714E8B267C
Authority key identifier: 69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a3a2f33332d3333203d3e203631373937.roa
Signing time:             Mon 03 Nov 2025 15:07:14 +0000
ROA not before:           Mon 03 Nov 2025 15:02:14 +0000
ROA not after:            Mon 02 Nov 2026 15:07:14 +0000
asID:                     61797
IP address blocks:        2804:197c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:be:7e:f0:f6:b9:6c:4f:2b:95:df:9d:e6:3e:93:71:4e:8b:26:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698DD058CC44A7087C5B128356D10FB024C7D778
        Validity
            Not Before: Nov  3 15:02:14 2025 GMT
            Not After : Nov  2 15:07:14 2026 GMT
        Subject: CN=0EED6B5DD4344450E14DC7466E9FB1A7FAEF609B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a0:62:3c:5d:5a:61:a4:25:cc:82:27:dd:c9:
                    5c:c1:7e:ba:d6:55:49:7f:8b:9a:04:73:7f:7c:af:
                    2d:0c:10:50:90:e6:29:f4:19:04:8a:19:14:1b:0e:
                    40:ae:32:f8:02:c0:cc:8f:33:e7:7b:05:3f:b2:da:
                    5b:47:c4:fd:23:83:f5:f3:51:95:fc:44:b5:dd:9c:
                    e9:0a:7e:3f:22:3a:e2:55:7e:2b:25:6b:d9:bc:74:
                    6c:17:4a:0b:67:51:6c:1f:50:3f:33:7f:3f:79:15:
                    05:ca:5e:ad:db:f9:e0:db:da:67:74:41:a8:e9:ee:
                    fe:bb:ee:9d:35:ee:e3:73:b6:bc:46:d5:df:04:ed:
                    48:7e:e1:3a:8a:f9:72:0b:b0:70:c8:19:4e:a2:d0:
                    46:47:de:3b:24:e6:00:c0:61:0c:43:e0:91:11:11:
                    03:ad:cb:14:e5:dd:2c:ad:25:73:cb:fe:40:ee:0f:
                    a5:9d:29:66:54:a0:82:6c:f5:4d:cc:9a:f5:4b:88:
                    47:11:7d:6e:7b:13:be:02:d3:ac:8b:aa:b7:fb:0a:
                    91:ee:d2:19:08:5e:9b:e5:98:f5:2b:5b:1b:82:a8:
                    50:7d:ec:44:fb:89:80:dd:4f:eb:1d:cb:b2:52:c7:
                    4a:a0:e3:73:f0:1f:4c:11:b2:40:8f:06:14:65:48:
                    5a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:ED:6B:5D:D4:34:44:50:E1:4D:C7:46:6E:9F:B1:A7:FA:EF:60:9B
            X509v3 Authority Key Identifier:
                keyid:69:8D:D0:58:CC:44:A7:08:7C:5B:12:83:56:D1:0F:B0:24:C7:D7:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/698DD058CC44A7087C5B128356D10FB024C7D778.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698DD058CC44A7087C5B128356D10FB024C7D778.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/323830343a313937633a3a2f33332d3333203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:197c::/33

    Signature Algorithm: sha256WithRSAEncryption
         8e:54:8c:fd:9f:1e:e3:bf:33:9d:a9:9a:4e:3b:95:02:ed:fe:
         6a:3e:9f:a0:d2:98:13:24:67:e0:91:69:fe:50:22:8c:5a:51:
         e4:de:58:94:59:38:2e:d5:64:a9:15:0a:45:52:1e:ba:20:fc:
         ef:5e:f1:d0:a0:53:aa:98:3d:70:c5:df:7e:7f:87:d8:c9:11:
         00:27:5c:8c:47:28:c2:3c:a0:5f:be:49:07:47:06:fe:e4:b3:
         4c:83:58:11:31:d1:3c:dd:a9:94:2c:83:8d:17:a8:c8:f8:a2:
         cb:ab:e3:4a:0d:6f:96:c0:3b:0b:9d:c8:a3:85:81:bf:8d:98:
         55:37:70:2a:47:3e:5a:82:ed:cf:2e:74:2b:7f:e3:e6:16:ab:
         7c:83:e4:0d:d5:c6:fd:35:4d:57:8e:08:8e:e5:0d:31:42:71:
         43:11:0f:b8:0b:6b:74:5a:6b:7f:6b:57:8d:a6:98:62:74:6f:
         90:45:c4:3c:aa:3b:1f:82:f2:7b:20:8e:23:49:f9:b0:27:20:
         ac:3e:ed:18:51:12:9f:be:5e:40:f4:f9:46:90:a1:d7:84:01:
         5c:ac:76:0b:7d:45:ed:63:f6:74:16:11:38:6f:43:d1:77:44:
         f8:56:c0:59:3c:b0:47:00:f7:ff:f0:1b:16:de:b7:d3:2a:18:
         1c:17:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:04:15 2025 by rpki-client