Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a3a2f33322d3332203d3e20323635343638.roa
File:                     323830343a333439633a3a2f33322d3332203d3e20323635343638.roa (raw, json)
Hash identifier:          sLKaxFvzfXSizgQ6Qz6dXjZoU13dlfFIdwXk3wUuVy8=
Subject key identifier:   B4:32:2D:23:56:4B:50:FB:BF:23:3E:AC:0C:C0:80:94:C2:C1:D6:D4
Certificate issuer:       /CN=14115659F5BEF5DE4FB458DCB8485788EF7B5306
Certificate serial:       033AB18BC0F80EC985D07E25472C1F6501F4F9D1
Authority key identifier: 14:11:56:59:F5:BE:F5:DE:4F:B4:58:DC:B8:48:57:88:EF:7B:53:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a3a2f33322d3332203d3e20323635343638.roa
Signing time:             Thu 30 Oct 2025 17:56:18 +0000
ROA not before:           Thu 30 Oct 2025 17:51:18 +0000
ROA not after:            Thu 29 Oct 2026 17:56:18 +0000
asID:                     265468
IP address blocks:        2804:349c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 19:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3a:b1:8b:c0:f8:0e:c9:85:d0:7e:25:47:2c:1f:65:01:f4:f9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14115659F5BEF5DE4FB458DCB8485788EF7B5306
        Validity
            Not Before: Oct 30 17:51:18 2025 GMT
            Not After : Oct 29 17:56:18 2026 GMT
        Subject: CN=B4322D23564B50FBBF233EAC0CC08094C2C1D6D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0a:c9:e1:28:a6:c3:d4:c0:fc:ce:5a:f2:61:
                    65:e4:d1:65:a4:8a:6f:c3:53:ca:0c:bd:e4:68:25:
                    50:56:97:cb:c5:2a:45:83:4c:85:75:b6:81:69:6b:
                    51:1b:54:ea:73:11:5c:73:eb:0a:03:c1:82:db:4c:
                    be:9d:47:f8:80:a4:f2:e0:da:02:71:de:42:1d:3d:
                    bc:48:38:4f:09:6b:7b:4e:30:f9:ab:06:09:0d:ef:
                    af:d6:9c:f4:e4:05:c7:88:65:f4:48:f6:a6:78:4c:
                    0c:a9:b4:b7:e7:fc:1b:05:7a:03:c8:0a:dd:74:7c:
                    2c:d4:ea:bc:1b:fb:5f:c5:0a:ed:95:f5:d8:d0:7a:
                    e0:76:c5:81:cb:22:cf:7c:a5:56:4b:47:66:8b:78:
                    3b:2c:8a:99:95:e0:1d:ac:4a:83:57:c3:d5:89:28:
                    2f:4c:8a:d3:7e:a9:75:74:59:5c:5a:e9:ec:00:d1:
                    06:38:55:8e:d1:c7:1c:fd:9a:46:bd:59:62:e7:02:
                    45:7a:b4:08:3b:2b:5c:58:22:2c:b2:db:fd:6c:e6:
                    0e:a3:78:c7:8c:95:7e:e5:46:27:9b:3b:6f:2d:dd:
                    1a:dd:ec:13:e1:fa:e9:8b:81:79:2d:70:76:1e:54:
                    d5:27:24:25:48:84:29:22:ea:4e:6b:48:31:e3:65:
                    23:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:32:2D:23:56:4B:50:FB:BF:23:3E:AC:0C:C0:80:94:C2:C1:D6:D4
            X509v3 Authority Key Identifier:
                keyid:14:11:56:59:F5:BE:F5:DE:4F:B4:58:DC:B8:48:57:88:EF:7B:53:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a3a2f33322d3332203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:349c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:a1:1c:05:7a:e0:0b:e0:4c:c7:25:c3:1f:54:a0:5f:e9:5f:
         3c:d0:ce:4d:df:c9:c8:24:4b:1c:89:be:f9:fd:e0:c0:88:f1:
         21:24:15:f8:bc:9e:16:88:7c:bb:0e:71:45:5b:99:c2:90:78:
         a1:10:15:ba:9c:ac:e8:83:23:78:4f:e5:ed:52:6a:31:d7:ee:
         50:8a:a6:a3:24:ea:c2:8d:14:12:58:17:db:10:31:93:17:bb:
         07:6f:bc:9e:e5:b3:ee:90:61:86:a9:4e:51:18:fd:99:1d:57:
         46:bb:ee:41:79:6b:27:18:ba:57:d5:dd:12:09:43:66:63:00:
         1e:b1:40:9f:a0:db:be:da:ac:f8:9e:0b:cc:c0:32:74:8c:92:
         a7:ef:a6:c7:86:39:b7:31:5b:9d:73:2d:ac:69:98:3c:b0:0d:
         13:4d:af:de:a3:d4:e8:28:f5:24:24:07:b5:7d:5b:88:55:5f:
         9b:47:cb:25:de:86:eb:f3:00:03:dd:fb:9f:81:6b:77:38:47:
         77:3b:66:87:0f:c3:61:bf:1b:02:0e:15:87:f9:fb:bb:81:d6:
         cc:00:58:25:b4:5c:ae:57:cb:9f:3b:3e:21:6d:2b:d2:a1:92:
         75:b3:22:24:6e:fa:d7:ca:60:c4:0f:b3:ab:ce:89:95:9a:8d:
         e4:69:17:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:24:14 2025 by rpki-client