Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a3a2f33342d3334203d3e20323634313337.roa
File:                     323830343a323330343a3a2f33342d3334203d3e20323634313337.roa (raw, json)
Hash identifier:          Mpk/6GZ8t0lG8w41fYsmtBkuGZXZhMKsxOjQt0PFm3o=
Subject key identifier:   AB:0D:5C:C2:1E:3A:1E:AB:44:77:03:60:3A:E7:AD:2B:AD:93:B7:16
Certificate issuer:       /CN=4D619024AD8A4913FDD5314422929A34F6B4B740
Certificate serial:       69AF2D992AD55F96CB2F947E9F3AA66266EC6DD1
Authority key identifier: 4D:61:90:24:AD:8A:49:13:FD:D5:31:44:22:92:9A:34:F6:B4:B7:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D619024AD8A4913FDD5314422929A34F6B4B740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a3a2f33342d3334203d3e20323634313337.roa
Signing time:             Tue 04 Nov 2025 12:18:38 +0000
ROA not before:           Tue 04 Nov 2025 12:13:38 +0000
ROA not after:            Tue 03 Nov 2026 12:18:38 +0000
asID:                     264137
IP address blocks:        2804:2304::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/4D619024AD8A4913FDD5314422929A34F6B4B740.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/4D619024AD8A4913FDD5314422929A34F6B4B740.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D619024AD8A4913FDD5314422929A34F6B4B740.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 15:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:af:2d:99:2a:d5:5f:96:cb:2f:94:7e:9f:3a:a6:62:66:ec:6d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D619024AD8A4913FDD5314422929A34F6B4B740
        Validity
            Not Before: Nov  4 12:13:38 2025 GMT
            Not After : Nov  3 12:18:38 2026 GMT
        Subject: CN=AB0D5CC21E3A1EAB447703603AE7AD2BAD93B716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:72:8a:b3:78:bd:e9:68:22:ba:c6:73:ed:
                    ec:14:77:d9:04:99:f7:a9:36:fd:ec:9f:d6:91:02:
                    2d:66:41:da:74:61:4d:a5:e2:03:55:95:0f:32:4e:
                    55:6e:2e:46:6d:2d:d0:3d:2c:6f:4e:83:fc:8f:f2:
                    58:51:68:82:fc:ed:d6:88:d7:ef:7a:99:f5:b7:7b:
                    18:43:bd:b4:aa:c6:d9:94:60:24:bc:85:80:00:9f:
                    65:ca:3b:a2:a9:7c:02:a5:a3:db:11:76:93:09:84:
                    53:8b:0d:c3:ea:c8:10:34:04:32:6d:a2:4b:1d:ea:
                    03:ea:70:0d:0f:a2:39:86:cb:b2:f3:51:90:17:fd:
                    a5:fd:9f:f4:ef:ae:5e:18:82:1e:49:05:8e:f2:8c:
                    b6:b1:40:55:76:ad:66:93:32:bf:df:e0:b8:4d:f0:
                    2e:ac:2b:db:a9:9e:ad:75:26:b5:df:ac:30:e2:a7:
                    5f:8f:02:4a:b5:e6:a9:7a:b0:c1:4a:fd:bf:76:e4:
                    fc:39:f6:5e:a6:67:15:8c:c4:5f:56:c8:bb:41:3f:
                    53:12:d0:7b:52:c4:a7:7e:51:90:a4:83:97:65:0d:
                    ee:e1:a3:47:03:06:ae:86:53:fb:64:1c:52:94:df:
                    95:12:e6:1d:16:7d:f3:96:76:84:46:38:05:08:bf:
                    07:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0D:5C:C2:1E:3A:1E:AB:44:77:03:60:3A:E7:AD:2B:AD:93:B7:16
            X509v3 Authority Key Identifier:
                keyid:4D:61:90:24:AD:8A:49:13:FD:D5:31:44:22:92:9A:34:F6:B4:B7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/4D619024AD8A4913FDD5314422929A34F6B4B740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D619024AD8A4913FDD5314422929A34F6B4B740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a3a2f33342d3334203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304::/34

    Signature Algorithm: sha256WithRSAEncryption
         76:1d:94:f7:f9:4c:3b:93:ee:5a:a3:cd:e1:45:9e:4e:e3:f2:
         23:fa:c2:d4:bf:c1:a1:4f:e6:4a:46:b3:8e:4b:14:9e:97:b8:
         42:f7:f9:78:fc:20:ee:43:c5:d2:a0:3c:f9:70:bd:2c:75:18:
         8c:4c:e3:0f:b3:0d:0c:74:eb:3d:7e:27:bd:66:df:be:6d:b2:
         87:e3:00:07:87:2c:36:4c:c4:d3:75:37:2f:e3:7e:a8:08:b1:
         7b:35:77:da:71:b4:5e:3f:2a:06:ab:78:fc:fb:09:aa:5e:86:
         5e:86:d0:ec:92:8c:2e:10:fc:84:b8:9e:e3:cf:37:9d:2a:63:
         21:37:0a:c0:c5:84:be:05:d7:dc:a7:bd:2a:47:48:45:e1:80:
         c3:9a:ba:fa:b0:4b:9e:f2:da:04:69:7c:7b:ca:6e:73:f6:ca:
         b2:a5:0a:51:98:83:f9:72:6b:f1:8f:20:e0:93:c9:64:c4:7e:
         d1:4e:e1:10:0a:45:6c:45:6a:05:00:b2:06:c1:3e:69:7d:61:
         5d:eb:a9:4e:e9:05:54:79:27:55:22:cc:b7:03:b1:5d:07:e8:
         85:2b:02:b0:72:65:70:8e:9d:6b:4b:2f:31:73:e5:a2:31:60:
         81:b8:5e:fa:b2:80:aa:2a:23:fd:86:10:d8:81:b4:f6:f9:b4:
         c1:6f:f5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:20:47 2025 by rpki-client