Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/323830343a356336383a3a2f33322d313238203d3e20323638393037.roa
File:                     323830343a356336383a3a2f33322d313238203d3e20323638393037.roa (raw, json)
Hash identifier:          ydeiKw+dDRQOyoxa0XqUWRDqo3xlSdNN3y9kxTu5DL0=
Subject key identifier:   76:5D:CC:C5:69:D2:35:4B:71:D8:E4:BB:20:21:C3:6E:A4:FA:E0:70
Certificate issuer:       /CN=3C8F07685F793211CE3D58E8AE40E3335D01AC65
Certificate serial:       6B10A9924C77680AC521F1B7FE4DE86E0F0BEC15
Authority key identifier: 3C:8F:07:68:5F:79:32:11:CE:3D:58:E8:AE:40:E3:33:5D:01:AC:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/323830343a356336383a3a2f33322d313238203d3e20323638393037.roa
Signing time:             Thu 04 Sep 2025 14:00:43 +0000
ROA not before:           Thu 04 Sep 2025 13:55:43 +0000
ROA not after:            Thu 03 Sep 2026 14:00:43 +0000
asID:                     268907
IP address blocks:        2804:5c68::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl
                          rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 01:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:10:a9:92:4c:77:68:0a:c5:21:f1:b7:fe:4d:e8:6e:0f:0b:ec:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8F07685F793211CE3D58E8AE40E3335D01AC65
        Validity
            Not Before: Sep  4 13:55:43 2025 GMT
            Not After : Sep  3 14:00:43 2026 GMT
        Subject: CN=765DCCC569D2354B71D8E4BB2021C36EA4FAE070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:c1:a8:5c:af:3a:df:7d:2c:33:c7:7e:1d:
                    02:71:67:e1:4d:c8:00:0e:50:b3:13:49:5a:34:2d:
                    58:59:8f:c6:1d:7f:9b:e7:b6:e7:e9:cd:de:25:46:
                    83:1f:54:cf:58:3b:5a:80:b1:10:67:6a:39:93:e5:
                    6d:7a:5a:9c:d2:9f:b4:97:8d:a3:62:92:3d:dc:03:
                    64:6d:48:e8:c0:6a:81:9b:40:dc:b5:81:02:2b:70:
                    7b:64:a8:1c:1d:33:27:05:d5:9f:3b:6e:21:9f:bb:
                    90:3f:65:4a:65:1f:32:1f:b1:cd:9e:15:68:98:14:
                    b7:05:3f:16:e6:3d:ff:88:06:d0:69:b8:14:75:56:
                    86:19:74:0a:3a:ba:48:4e:bd:33:9f:bb:86:23:b6:
                    e0:20:f0:7c:c6:04:e5:bb:9f:64:a2:cd:2c:11:06:
                    cf:4d:5f:4a:f6:dc:dd:d4:93:ac:94:0e:09:19:3f:
                    7d:1d:42:35:86:d3:bd:50:60:cf:d4:9a:b9:24:17:
                    12:44:23:cb:6e:d6:0c:2c:81:f9:19:c9:20:d3:36:
                    d4:46:bc:f0:9f:e1:39:5b:ca:41:1e:f6:fa:1f:e0:
                    21:e9:ca:12:bb:22:83:d9:35:32:8e:1f:0e:62:f8:
                    d4:be:cb:42:a2:68:eb:92:99:63:ab:d0:0e:55:79:
                    2a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5D:CC:C5:69:D2:35:4B:71:D8:E4:BB:20:21:C3:6E:A4:FA:E0:70
            X509v3 Authority Key Identifier:
                keyid:3C:8F:07:68:5F:79:32:11:CE:3D:58:E8:AE:40:E3:33:5D:01:AC:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/323830343a356336383a3a2f33322d313238203d3e20323638393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c68::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:54:22:e8:53:6f:95:5d:37:b8:ef:a9:77:2d:33:35:12:1c:
         53:22:11:bc:21:e7:9b:b2:d4:b3:84:f2:aa:ac:27:5c:31:6f:
         3b:40:65:d7:77:c8:18:e9:51:9e:84:53:63:c8:de:36:04:35:
         20:7a:44:0d:ac:a1:3f:76:16:61:ac:e0:2d:b6:a3:47:c2:db:
         1d:fa:d1:f4:ad:1e:6b:4b:9a:ec:d9:60:76:4b:2e:98:81:36:
         15:61:bd:a0:fe:21:57:65:33:5e:05:98:d9:9f:9e:b7:3b:62:
         30:4c:3d:dc:cc:2d:55:5f:53:5a:7b:b1:74:f4:1d:93:eb:4b:
         18:d2:f1:80:fc:71:56:e7:38:84:33:bb:57:d1:21:58:27:cc:
         5d:b9:f7:a6:c4:9e:fa:0f:27:be:ac:5f:73:91:c9:d2:3f:75:
         78:f1:d9:04:89:20:4b:d7:a2:3b:91:7a:4f:56:39:f6:ef:9c:
         15:bf:8c:03:16:8d:9d:76:2e:ff:5c:44:31:96:a3:be:f4:2b:
         b3:a1:2d:6f:f4:d5:81:00:5e:f7:f2:03:47:6e:b4:7c:9e:c8:
         84:68:59:85:59:e3:8f:6f:98:d3:91:83:7b:13:d2:1a:5c:0b:
         59:23:84:41:c3:ce:1d:93:02:62:41:ac:86:21:7a:92:0d:88:
         20:a4:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:24:28 2025 by rpki-client