Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hn2chKRGj7pz17RE6TFeh7RtgPdXsyAxBH78XQp4yb3z/0/323830343a333663383a3a2f33322d3438203d3e20323636333731.roa
File:                     323830343a333663383a3a2f33322d3438203d3e20323636333731.roa (raw, json)
Hash identifier:          4wotF9Me/fRf7AHZFrEwcgC/6B38STiExwiVFi5vxAA=
Subject key identifier:   DB:87:10:25:A0:4B:06:47:25:1E:66:C4:58:60:99:EF:6E:D2:35:DB
Certificate issuer:       /CN=64614BD72D644B2CB67701A6219148A841E184CD
Certificate serial:       202FC929E40CF680A9BE9E162206502191E0BCA3
Authority key identifier: 64:61:4B:D7:2D:64:4B:2C:B6:77:01:A6:21:91:48:A8:41:E1:84:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64614BD72D644B2CB67701A6219148A841E184CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hn2chKRGj7pz17RE6TFeh7RtgPdXsyAxBH78XQp4yb3z/0/323830343a333663383a3a2f33322d3438203d3e20323636333731.roa
Signing time:             Mon 13 Oct 2025 22:21:31 +0000
ROA not before:           Mon 13 Oct 2025 22:16:31 +0000
ROA not after:            Mon 12 Oct 2026 22:21:31 +0000
asID:                     266371
IP address blocks:        2804:36c8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hn2chKRGj7pz17RE6TFeh7RtgPdXsyAxBH78XQp4yb3z/0/64614BD72D644B2CB67701A6219148A841E184CD.crl
                          rsync://rpki-repo.registro.br/repo/Hn2chKRGj7pz17RE6TFeh7RtgPdXsyAxBH78XQp4yb3z/0/64614BD72D644B2CB67701A6219148A841E184CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64614BD72D644B2CB67701A6219148A841E184CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 20:51:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2f:c9:29:e4:0c:f6:80:a9:be:9e:16:22:06:50:21:91:e0:bc:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64614BD72D644B2CB67701A6219148A841E184CD
        Validity
            Not Before: Oct 13 22:16:31 2025 GMT
            Not After : Oct 12 22:21:31 2026 GMT
        Subject: CN=DB871025A04B0647251E66C4586099EF6ED235DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:25:d9:40:9a:7e:5b:51:c7:d9:c3:54:3a:
                    ae:7b:4a:a3:b7:26:da:f4:eb:09:4f:92:89:e4:64:
                    87:05:21:fc:a2:f0:aa:57:63:88:15:fb:0f:94:b0:
                    40:9b:0f:ef:2f:c1:16:f4:cb:e4:28:74:00:08:c6:
                    8c:4a:41:de:71:e0:36:5e:cd:ce:b2:46:4d:e4:3e:
                    45:e9:26:be:63:78:a5:17:29:26:62:76:67:ac:77:
                    c9:1a:80:c9:cf:f1:c5:19:1e:2e:48:7e:23:80:8a:
                    4a:d3:e1:2c:91:c3:bc:13:ec:66:75:64:b6:bf:64:
                    78:9b:79:02:99:86:c9:86:3a:86:a9:54:12:e4:55:
                    01:bf:c7:4c:90:58:5f:d2:60:c0:27:07:23:1d:eb:
                    d4:26:0e:fc:be:90:e5:00:b5:b1:67:c3:08:e9:64:
                    09:7a:96:ff:fd:57:17:3c:1c:6c:bc:fd:0f:39:0a:
                    61:80:8e:57:23:e0:dd:84:09:cb:48:b9:e3:f5:31:
                    06:53:db:e7:8f:03:7e:50:89:f6:62:16:00:e9:d8:
                    b8:73:79:6c:4f:d4:bb:6c:97:a2:e5:82:9a:21:9f:
                    ab:c5:17:95:c9:d1:e5:22:da:99:82:73:0c:a4:2f:
                    45:17:83:c8:7e:18:a1:24:cc:98:9b:21:25:14:64:
                    8d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:87:10:25:A0:4B:06:47:25:1E:66:C4:58:60:99:EF:6E:D2:35:DB
            X509v3 Authority Key Identifier:
                keyid:64:61:4B:D7:2D:64:4B:2C:B6:77:01:A6:21:91:48:A8:41:E1:84:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hn2chKRGj7pz17RE6TFeh7RtgPdXsyAxBH78XQp4yb3z/0/64614BD72D644B2CB67701A6219148A841E184CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64614BD72D644B2CB67701A6219148A841E184CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hn2chKRGj7pz17RE6TFeh7RtgPdXsyAxBH78XQp4yb3z/0/323830343a333663383a3a2f33322d3438203d3e20323636333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:a7:46:20:34:6a:69:05:cf:80:f8:2b:f3:f1:85:4a:b6:17:
         d1:aa:bc:43:77:38:91:83:52:40:5b:3a:71:00:a5:7f:97:bc:
         d1:2f:11:f4:9e:cf:23:fc:7a:ff:e4:4b:f0:5a:b2:14:77:53:
         31:ce:de:42:0b:52:a1:bb:d0:c7:de:83:8e:88:94:67:b5:9a:
         7d:48:58:66:51:3d:d3:13:af:6f:a3:5e:05:ef:7e:65:d4:7f:
         1c:2b:ce:26:c7:33:2b:64:cb:81:da:a9:04:2b:08:24:51:cf:
         55:9f:44:db:f4:43:cb:e6:16:98:50:3e:5d:45:38:84:8d:90:
         e3:50:5e:f1:56:2a:10:2c:9d:aa:ef:1d:47:ba:85:1e:92:15:
         fd:fd:3e:9d:32:08:ba:64:7c:35:92:13:0f:b5:3a:e6:03:03:
         ae:14:1f:3d:00:e4:f0:59:8a:c9:39:b5:f7:ab:5e:f3:10:5a:
         03:a0:c1:06:56:3c:36:3c:ba:92:67:b2:c5:4d:a1:82:3e:00:
         cc:83:9e:ac:db:22:91:cc:92:c6:8d:56:74:87:49:99:70:fa:
         3d:a0:f5:21:a9:eb:bf:ed:cd:d0:8c:f5:67:03:fa:48:cb:e8:
         28:55:6c:7a:2b:27:c1:c8:a3:eb:d8:df:4c:96:80:8b:91:ea:
         32:2e:8f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:46:41 2025 by rpki-client