Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2axSP73kUmd1cohYAE13joA35qXwKzds4tQ5DMGmbTmz/0/323830343a366339303a3a2f33322d313238203d3e20323730343737.roa
File:                     323830343a366339303a3a2f33322d313238203d3e20323730343737.roa (raw, json)
Hash identifier:          g/Ky2a6lgh0/L/E6DsaQrbtmiacEVFneQD6O2L9VFNo=
Subject key identifier:   38:83:F7:41:4E:B1:51:23:7D:62:F8:77:5F:CD:0F:EE:03:CD:08:C3
Certificate issuer:       /CN=7CDD05FC0EA627777B05AE53580ECDF16BF176A2
Certificate serial:       08B22A07124BFE7BF2C2B548165F254B248774BB
Authority key identifier: 7C:DD:05:FC:0E:A6:27:77:7B:05:AE:53:58:0E:CD:F1:6B:F1:76:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CDD05FC0EA627777B05AE53580ECDF16BF176A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2axSP73kUmd1cohYAE13joA35qXwKzds4tQ5DMGmbTmz/0/323830343a366339303a3a2f33322d313238203d3e20323730343737.roa
Signing time:             Mon 15 Sep 2025 18:08:42 +0000
ROA not before:           Mon 15 Sep 2025 18:03:42 +0000
ROA not after:            Mon 14 Sep 2026 18:08:42 +0000
asID:                     270477
IP address blocks:        2804:6c90::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2axSP73kUmd1cohYAE13joA35qXwKzds4tQ5DMGmbTmz/0/7CDD05FC0EA627777B05AE53580ECDF16BF176A2.crl
                          rsync://rpki-repo.registro.br/repo/2axSP73kUmd1cohYAE13joA35qXwKzds4tQ5DMGmbTmz/0/7CDD05FC0EA627777B05AE53580ECDF16BF176A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CDD05FC0EA627777B05AE53580ECDF16BF176A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b2:2a:07:12:4b:fe:7b:f2:c2:b5:48:16:5f:25:4b:24:87:74:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CDD05FC0EA627777B05AE53580ECDF16BF176A2
        Validity
            Not Before: Sep 15 18:03:42 2025 GMT
            Not After : Sep 14 18:08:42 2026 GMT
        Subject: CN=3883F7414EB151237D62F8775FCD0FEE03CD08C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:69:f7:ec:7d:cd:0f:ad:78:e0:ac:25:57:2b:
                    bd:1c:ca:0a:d2:c5:5a:6a:06:ec:62:10:8f:0a:a7:
                    bf:81:d4:f4:92:fd:ae:94:90:4e:c1:ad:ce:5a:86:
                    e1:ad:91:e8:3b:b3:71:90:5a:26:d2:9d:4a:09:e8:
                    f1:7f:2e:e1:b0:ec:5b:7e:56:e3:af:81:e9:77:3e:
                    56:30:5e:0c:cd:a7:b5:ee:05:f0:8e:30:a6:ff:7e:
                    bd:d8:37:4c:9e:10:71:5c:7c:dc:d1:f3:2d:b7:95:
                    80:11:34:6a:a2:2f:bb:93:08:25:c4:52:17:d4:19:
                    ad:99:02:b7:78:99:06:53:f1:6c:e3:a7:03:8d:43:
                    11:2a:90:cf:23:1f:8f:70:2f:2c:c8:f3:2d:11:f4:
                    db:43:f3:c2:95:c4:79:14:95:d3:3a:af:19:7f:59:
                    13:87:a2:f8:18:11:c0:07:42:32:5d:6a:66:af:bb:
                    be:ef:6d:99:13:55:bd:60:32:53:f0:8b:a3:b0:ee:
                    6d:a3:8b:06:72:e1:f1:e0:2d:8b:7d:21:3d:54:39:
                    06:de:03:e3:fd:82:d4:66:29:a8:45:c1:91:19:44:
                    a6:e1:1d:e5:30:26:6d:e4:0c:3d:c5:71:27:79:76:
                    e2:6b:6b:b6:d5:e5:4f:07:61:23:7a:c4:24:a1:2f:
                    10:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:83:F7:41:4E:B1:51:23:7D:62:F8:77:5F:CD:0F:EE:03:CD:08:C3
            X509v3 Authority Key Identifier:
                keyid:7C:DD:05:FC:0E:A6:27:77:7B:05:AE:53:58:0E:CD:F1:6B:F1:76:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2axSP73kUmd1cohYAE13joA35qXwKzds4tQ5DMGmbTmz/0/7CDD05FC0EA627777B05AE53580ECDF16BF176A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CDD05FC0EA627777B05AE53580ECDF16BF176A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2axSP73kUmd1cohYAE13joA35qXwKzds4tQ5DMGmbTmz/0/323830343a366339303a3a2f33322d313238203d3e20323730343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:9e:ed:b6:fa:8d:a1:89:ab:a8:27:d5:4c:00:0d:06:05:da:
         46:b4:ad:1a:97:8d:89:49:c7:eb:54:29:25:1a:98:08:3f:ea:
         d2:e7:a7:47:3c:b9:5d:e9:f6:a1:bc:b4:5d:68:3e:29:57:50:
         06:72:1b:72:87:50:88:10:08:eb:71:c2:b8:05:68:67:dc:b4:
         0c:81:19:a0:60:d4:1c:f9:6f:ab:0e:a1:9b:ba:67:db:3f:b9:
         93:08:de:0b:57:db:28:34:47:d3:6d:9c:d1:07:21:b7:33:6f:
         8c:44:6f:47:e8:95:9f:7d:02:41:1c:5f:75:39:87:14:10:e8:
         f5:06:04:74:62:c8:9c:c7:f8:96:64:1b:95:9f:81:85:1e:fb:
         bd:ec:f8:4e:12:63:f7:33:2d:20:f5:19:c9:91:a2:0e:80:51:
         37:5c:a2:56:5b:96:a6:ad:28:79:0a:0a:1a:e6:6e:2b:45:a9:
         10:31:ef:70:65:13:d9:8f:c9:9c:a8:7a:af:e4:bb:88:78:c6:
         f4:f2:14:83:40:53:95:9a:e6:62:2d:31:6e:1e:40:55:12:c2:
         4b:cc:5f:11:e4:38:e2:3d:c6:d6:08:4b:f5:06:16:91:df:ef:
         47:10:b1:34:c6:92:1f:a5:bc:c8:51:f4:21:a7:a6:18:22:f9:
         8d:ad:15:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:08:23 2025 by rpki-client