Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa
File:                     323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa (raw, json)
Hash identifier:          WUY2r5UI5VK0+n8ir7GRfzVDlAr4drnPQEMzG1qSmUs=
Subject key identifier:   AA:E0:33:6C:27:D2:1C:8B:47:BD:4B:A5:7B:23:1D:2C:68:15:8E:33
Certificate issuer:       /CN=7B7CC473200A160EB6B26066FF168BAABFCD7A93
Certificate serial:       6B6AFF757DE0FB3083FED95553787A93A7DCFDC8
Authority key identifier: 7B:7C:C4:73:20:0A:16:0E:B6:B2:60:66:FF:16:8B:AA:BF:CD:7A:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CC473200A160EB6B26066FF168BAABFCD7A93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa
Signing time:             Wed 05 Nov 2025 22:25:41 +0000
ROA not before:           Wed 05 Nov 2025 22:20:41 +0000
ROA not after:            Wed 04 Nov 2026 22:25:41 +0000
asID:                     265384
IP address blocks:        2804:3340:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/7B7CC473200A160EB6B26066FF168BAABFCD7A93.crl
                          rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/7B7CC473200A160EB6B26066FF168BAABFCD7A93.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CC473200A160EB6B26066FF168BAABFCD7A93.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 01:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6a:ff:75:7d:e0:fb:30:83:fe:d9:55:53:78:7a:93:a7:dc:fd:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B7CC473200A160EB6B26066FF168BAABFCD7A93
        Validity
            Not Before: Nov  5 22:20:41 2025 GMT
            Not After : Nov  4 22:25:41 2026 GMT
        Subject: CN=AAE0336C27D21C8B47BD4BA57B231D2C68158E33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:8f:b3:e5:3e:a7:33:89:bc:fd:41:31:93:
                    16:81:fd:36:5d:a9:7f:13:28:89:0d:63:bb:45:36:
                    8c:a6:ce:b4:5f:f0:22:66:e9:cc:05:f9:2c:cc:93:
                    6b:5b:6b:74:b9:5a:36:7d:5c:37:12:ea:ee:d4:c9:
                    53:96:b3:6b:64:95:68:2f:ee:fd:f0:0d:1d:31:7b:
                    ba:ae:64:5b:ed:2f:45:eb:79:54:f1:00:34:05:f9:
                    75:27:aa:1f:c5:b8:16:10:cd:36:8a:9f:06:a4:95:
                    ce:38:bc:4c:2d:51:e2:5d:85:9d:5b:bc:1e:91:d5:
                    f9:c1:d7:2d:61:7d:6d:6b:42:46:0f:0f:0b:28:61:
                    ad:5f:b1:ae:f7:9d:f8:37:c7:26:53:b7:df:d7:5f:
                    81:d5:98:27:6d:dc:f2:a7:5b:7c:30:14:d3:62:4a:
                    0c:9a:90:38:a1:16:c2:81:30:9b:5c:3b:76:09:54:
                    be:e7:9a:eb:46:eb:21:e5:b4:5d:a7:02:c5:f0:12:
                    5e:11:63:ef:fd:c6:7e:38:f0:64:7e:98:80:c9:84:
                    fa:a6:74:31:2b:99:ba:13:c3:2c:1f:18:88:f2:d3:
                    22:eb:77:24:30:ed:11:12:51:e1:10:39:12:6a:e1:
                    f0:16:e2:ef:0f:d6:99:3d:b0:35:30:94:fa:62:46:
                    73:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E0:33:6C:27:D2:1C:8B:47:BD:4B:A5:7B:23:1D:2C:68:15:8E:33
            X509v3 Authority Key Identifier:
                keyid:7B:7C:C4:73:20:0A:16:0E:B6:B2:60:66:FF:16:8B:AA:BF:CD:7A:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/7B7CC473200A160EB6B26066FF168BAABFCD7A93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CC473200A160EB6B26066FF168BAABFCD7A93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a323030303a3a2f34302d3430203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3340:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:29:a9:68:32:47:9e:94:f6:2b:3b:f1:9c:69:61:15:6c:1f:
         32:7a:2c:30:1b:32:26:29:6c:7e:a6:2a:9d:f9:40:bc:0a:4d:
         fe:cd:4e:6f:d9:69:b9:d8:04:e5:d1:0a:63:24:94:82:15:56:
         99:6b:1a:a8:44:c8:20:60:8c:96:cf:a4:43:ee:a4:25:71:e1:
         8a:70:dd:52:29:9a:11:45:b3:9e:a1:a5:94:65:b7:6e:8a:75:
         3f:94:5c:b0:ac:55:52:c9:96:56:fa:e2:c2:9b:d8:dc:1d:26:
         49:ae:59:4f:bc:ed:0d:a9:42:e1:98:6d:28:03:48:8a:c5:0c:
         70:3b:73:49:21:51:aa:4c:10:67:1d:56:ae:85:3c:a2:04:d0:
         f9:59:69:10:07:35:2c:e3:18:79:9f:63:05:14:6a:72:dc:aa:
         88:70:cb:58:41:fe:be:2f:12:d9:15:8e:99:7d:4d:b8:01:71:
         9a:23:57:73:b9:c1:6a:47:66:ac:b9:ac:fd:97:7e:4c:16:05:
         d0:59:5f:ba:f2:08:12:c3:ed:fd:47:21:61:3d:ec:80:b5:17:
         c8:8a:70:3b:d2:f3:72:a7:87:27:4d:3a:df:01:f9:4c:d4:cf:
         25:56:64:ff:ee:7d:d8:81:8f:38:78:ad:90:f2:fb:8e:85:94:
         5e:ff:c7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:36:47 2025 by rpki-client