Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a3a2f33332d3333203d3e20323730363030.roa
File:                     323830343a366537633a3a2f33332d3333203d3e20323730363030.roa (raw, json)
Hash identifier:          hFm4ML6uQUfIDnfqr0SQ+Yuk9BEZRW5t/U724pULVts=
Subject key identifier:   DB:36:7A:02:82:25:72:29:37:F0:11:CB:E0:38:F2:EB:52:69:5E:41
Certificate issuer:       /CN=1039A4787256342E0DAFE021E2BC0D6A74EF0354
Certificate serial:       47207D4EBEEE5600014E1839E14D0D7372021B6D
Authority key identifier: 10:39:A4:78:72:56:34:2E:0D:AF:E0:21:E2:BC:0D:6A:74:EF:03:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a3a2f33332d3333203d3e20323730363030.roa
Signing time:             Fri 31 Oct 2025 12:45:53 +0000
ROA not before:           Fri 31 Oct 2025 12:40:53 +0000
ROA not after:            Fri 30 Oct 2026 12:45:53 +0000
asID:                     270600
IP address blocks:        2804:6e7c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.crl
                          rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 01:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:20:7d:4e:be:ee:56:00:01:4e:18:39:e1:4d:0d:73:72:02:1b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1039A4787256342E0DAFE021E2BC0D6A74EF0354
        Validity
            Not Before: Oct 31 12:40:53 2025 GMT
            Not After : Oct 30 12:45:53 2026 GMT
        Subject: CN=DB367A028225722937F011CBE038F2EB52695E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d1:0b:aa:2d:80:e6:d8:36:cd:9d:74:90:52:
                    fb:a0:4f:78:84:9f:c3:a2:aa:73:e9:5c:66:5f:0a:
                    70:dd:78:d8:c9:b9:c7:9e:2b:d1:2a:2b:e4:9e:a2:
                    92:4b:1c:72:61:d6:6a:44:1d:59:75:35:80:f3:5b:
                    0d:91:c4:5d:06:43:74:b5:7f:44:38:e0:6f:0f:96:
                    2d:8f:0d:d8:bc:83:14:a0:a3:e5:d6:d1:6d:da:b8:
                    ba:58:f1:b1:ab:68:f3:35:35:c4:b7:a3:44:c3:08:
                    f2:59:8b:78:06:54:1b:2b:7c:cb:9a:29:29:ed:bf:
                    fc:7e:7a:60:48:6b:c6:1e:85:cd:8e:ce:72:4b:c8:
                    0e:67:06:ac:21:87:28:a5:ea:2f:b3:26:ae:7a:38:
                    49:98:b8:5a:58:d6:c3:12:6f:ec:38:fe:87:19:e0:
                    2e:a4:d9:80:20:7a:6c:a1:3d:d1:38:8d:0b:7f:06:
                    7e:e2:27:2a:a0:c2:2f:04:3a:fb:ac:5d:a0:8e:2b:
                    99:d6:7d:fb:32:83:2b:cd:25:67:99:7a:80:9e:b7:
                    26:91:8c:65:d3:19:56:0b:15:24:d4:a8:29:4b:25:
                    50:4e:7c:c1:96:5c:bf:a4:30:4f:20:a8:65:71:48:
                    42:b6:99:29:ee:17:61:f3:aa:18:3e:4e:6e:fe:36:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:36:7A:02:82:25:72:29:37:F0:11:CB:E0:38:F2:EB:52:69:5E:41
            X509v3 Authority Key Identifier:
                keyid:10:39:A4:78:72:56:34:2E:0D:AF:E0:21:E2:BC:0D:6A:74:EF:03:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a3a2f33332d3333203d3e20323730363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e7c::/33

    Signature Algorithm: sha256WithRSAEncryption
         8c:8d:49:3f:81:df:e0:2b:c9:19:07:84:bf:40:24:33:3b:a3:
         14:16:8c:9f:29:94:68:dc:66:41:a4:0f:02:d1:4d:b0:33:83:
         a8:a5:1d:26:6b:13:b8:28:1c:cd:6a:ad:9d:9a:03:97:ee:89:
         d3:ce:30:1f:ef:a5:5e:35:9a:13:1b:3d:0c:94:02:8c:8b:09:
         b8:78:0a:fc:c1:81:18:eb:e9:12:74:a8:39:40:0b:a8:9d:fc:
         bd:13:69:a0:23:da:85:f8:cd:71:b4:a7:d3:87:4c:9c:4c:0c:
         96:67:16:72:65:e3:9d:52:c3:bb:ed:e0:b2:d6:08:fd:ec:0e:
         53:86:0d:03:46:89:2f:1e:78:02:97:5b:3a:ed:fd:a2:b8:cd:
         e9:1a:da:9b:36:22:ec:a9:7c:4d:ed:a1:3f:ae:32:40:9c:73:
         7a:79:69:3c:53:eb:ef:6c:9d:51:63:47:a0:f8:05:13:b3:ba:
         93:c1:dc:d5:02:16:25:d9:9b:e4:6c:51:ac:a2:c5:fd:63:65:
         db:bc:3b:95:d8:82:cd:69:51:ab:61:06:a6:eb:d4:cf:de:4a:
         c4:23:c4:14:b8:fd:5f:28:21:d2:84:e1:3b:7a:eb:84:0c:26:
         ca:d7:f3:02:3e:f8:ad:6c:74:8a:e0:b9:17:b3:a4:91:01:cd:
         9a:cb:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:05:55 2025 by rpki-client