Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/323830343a373835633a3a2f33322d3438203d3e20323731323337.roa
File:                     323830343a373835633a3a2f33322d3438203d3e20323731323337.roa (raw, json)
Hash identifier:          aRvaBBCO0cntwA2+Kz+mMu8boe9ywcCKXHaMThipubU=
Subject key identifier:   D8:18:00:24:16:C8:41:D0:9E:B7:E5:0A:20:44:28:64:E7:C6:70:DC
Certificate issuer:       /CN=D8974FE3803B34D073F25B6E9C453E2ABCEFAA94
Certificate serial:       171B762A420F64BC5704239CC1A7B93E542B342B
Authority key identifier: D8:97:4F:E3:80:3B:34:D0:73:F2:5B:6E:9C:45:3E:2A:BC:EF:AA:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/323830343a373835633a3a2f33322d3438203d3e20323731323337.roa
Signing time:             Mon 03 Nov 2025 19:19:12 +0000
ROA not before:           Mon 03 Nov 2025 19:14:12 +0000
ROA not after:            Mon 02 Nov 2026 19:19:12 +0000
asID:                     271237
IP address blocks:        2804:785c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.crl
                          rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1b:76:2a:42:0f:64:bc:57:04:23:9c:c1:a7:b9:3e:54:2b:34:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8974FE3803B34D073F25B6E9C453E2ABCEFAA94
        Validity
            Not Before: Nov  3 19:14:12 2025 GMT
            Not After : Nov  2 19:19:12 2026 GMT
        Subject: CN=D818002416C841D09EB7E50A20442864E7C670DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:26:09:9c:11:49:38:86:6e:ee:9f:a5:ff:4a:
                    40:aa:e3:28:46:3a:f4:75:eb:de:9b:53:5f:58:d4:
                    98:1a:3b:77:7c:ec:83:f4:51:4b:89:b3:59:2a:e6:
                    66:d3:f7:1d:6c:ff:14:bd:15:dc:fb:da:bb:30:e5:
                    e4:b7:dd:89:47:19:09:c7:2e:c9:66:55:88:fa:24:
                    40:b7:34:41:cf:75:39:fd:17:42:b4:f2:a9:37:9b:
                    3e:85:ad:01:b0:2c:80:53:98:34:24:ae:06:10:1c:
                    41:15:b9:16:de:b7:3a:0a:8a:1d:8e:6a:07:7a:60:
                    d1:87:f1:89:a7:44:b9:f2:69:b5:30:bb:fa:42:dc:
                    6a:ef:19:8a:7e:97:b7:11:a8:5e:70:4b:98:11:3d:
                    6b:33:2f:56:ca:ab:04:92:ea:e7:a5:c3:dc:56:88:
                    1d:f3:5b:84:df:ff:8d:f1:31:d5:d1:f9:36:79:c5:
                    c9:b7:cc:fe:15:5a:36:ae:9e:87:76:bd:39:f0:d1:
                    fb:cf:46:90:d9:9f:79:e9:21:15:1b:ee:e5:4f:74:
                    4b:4b:70:26:d1:61:c7:de:90:3f:92:7d:02:97:c3:
                    5e:74:ca:49:1f:20:00:f7:ff:ce:08:16:06:da:7b:
                    98:3d:16:5a:e0:53:52:66:6e:72:dd:b5:2c:fe:e0:
                    e3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:18:00:24:16:C8:41:D0:9E:B7:E5:0A:20:44:28:64:E7:C6:70:DC
            X509v3 Authority Key Identifier:
                keyid:D8:97:4F:E3:80:3B:34:D0:73:F2:5B:6E:9C:45:3E:2A:BC:EF:AA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/323830343a373835633a3a2f33322d3438203d3e20323731323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:785c::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:3a:63:27:d4:fb:2d:e7:75:b1:2a:4a:3a:a8:5b:c2:b6:cb:
         2f:08:54:97:78:dd:9a:ee:68:1d:47:55:b2:7b:31:55:c3:75:
         96:f1:6b:91:03:fc:79:59:47:29:d6:3e:c1:b6:58:c1:7a:e9:
         64:e1:42:a2:0e:63:c1:9a:9d:d9:9f:f8:b9:f0:fa:0f:63:f8:
         6a:a5:77:79:de:4b:0d:7e:47:64:90:92:ca:7b:b5:1f:17:39:
         4d:cf:1c:2c:15:58:c4:4d:7b:12:d3:b7:d9:51:3d:6a:8c:09:
         06:8a:5a:a9:bc:41:2f:e6:24:d2:6b:b9:f1:ec:fb:c7:b4:10:
         5e:eb:d5:58:d2:df:ee:71:cc:cf:a1:0e:76:89:c4:b6:05:ef:
         52:1e:ea:f9:40:ee:79:63:af:a4:0b:17:ac:2d:60:8e:d1:88:
         3f:7d:e5:d5:28:0f:1c:24:64:c1:3e:58:60:30:83:92:26:04:
         a6:ee:9a:9c:1c:a7:d2:cf:a6:bd:fe:03:27:8f:98:19:05:89:
         20:dd:97:f3:1f:91:63:e7:25:33:3c:9d:5d:a5:68:cd:46:31:
         33:9f:4a:ab:84:a3:4c:6d:ab:5c:1e:46:c7:05:27:18:58:bf:
         67:e2:f2:53:34:aa:76:2e:6b:b4:ac:f2:7c:14:05:8b:c2:ab:
         1b:ae:5c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:58:32 2025 by rpki-client