Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/323830343a323139303a3a2f33322d3634203d3e20323634353632.roa
File:                     323830343a323139303a3a2f33322d3634203d3e20323634353632.roa (raw, json)
Hash identifier:          zlSA6X8xym9nADcxgsEGBLQrJDc3E80RmIKc1sMT+eI=
Subject key identifier:   03:DC:3E:DB:B3:5E:F0:1D:FA:83:7C:6C:5F:5A:20:DC:F8:7D:B3:B4
Certificate issuer:       /CN=16DB25C60A6926C58AF5C7D77DA693B17ADA0D55
Certificate serial:       0497CC1A637DE9FF1B3A38C5F47356B44958953F
Authority key identifier: 16:DB:25:C6:0A:69:26:C5:8A:F5:C7:D7:7D:A6:93:B1:7A:DA:0D:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/323830343a323139303a3a2f33322d3634203d3e20323634353632.roa
Signing time:             Wed 27 Aug 2025 19:42:11 +0000
ROA not before:           Wed 27 Aug 2025 19:37:11 +0000
ROA not after:            Wed 26 Aug 2026 19:42:11 +0000
asID:                     264562
IP address blocks:        2804:2190::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.crl
                          rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 11:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:97:cc:1a:63:7d:e9:ff:1b:3a:38:c5:f4:73:56:b4:49:58:95:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16DB25C60A6926C58AF5C7D77DA693B17ADA0D55
        Validity
            Not Before: Aug 27 19:37:11 2025 GMT
            Not After : Aug 26 19:42:11 2026 GMT
        Subject: CN=03DC3EDBB35EF01DFA837C6C5F5A20DCF87DB3B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:67:84:3b:1a:cb:7e:bd:f1:35:2f:c7:40:2b:
                    46:2f:86:05:a9:84:4e:38:1e:fc:9e:1c:af:88:0e:
                    92:5c:07:4e:7a:91:15:be:91:a6:94:47:41:e5:44:
                    8c:1d:48:7e:52:a5:65:5f:e1:36:9e:b2:b6:e6:bf:
                    18:16:a7:98:43:fe:36:ef:57:46:32:35:24:cc:b4:
                    02:2f:f3:ae:ec:d5:d1:b7:a4:b4:d1:9e:80:36:0e:
                    ef:07:4a:53:85:d9:1b:9a:ba:80:18:b7:06:98:62:
                    86:2f:b5:65:f9:65:07:6c:c7:7b:e4:82:53:50:0e:
                    b4:b7:39:a9:3a:91:61:6e:45:24:13:48:a7:ad:6b:
                    86:22:ba:d0:c3:5c:97:75:7f:f6:5a:18:13:7d:61:
                    dd:c5:01:ba:29:25:7d:7c:ed:50:82:08:d2:0c:d4:
                    ae:be:71:02:6b:93:47:70:3e:7d:c2:39:63:74:b0:
                    8a:a8:14:c4:61:e5:60:ee:79:2f:5f:b0:be:77:2c:
                    84:25:73:5b:a9:b1:7d:bf:5c:e9:c0:4b:df:8b:f7:
                    51:59:ed:30:e9:56:c7:8e:1d:71:83:46:32:2f:53:
                    3b:c6:87:23:23:49:ca:f8:2a:5d:d4:22:a3:f8:35:
                    3f:46:7e:48:11:7d:19:65:78:92:66:47:37:27:d0:
                    64:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DC:3E:DB:B3:5E:F0:1D:FA:83:7C:6C:5F:5A:20:DC:F8:7D:B3:B4
            X509v3 Authority Key Identifier:
                keyid:16:DB:25:C6:0A:69:26:C5:8A:F5:C7:D7:7D:A6:93:B1:7A:DA:0D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/323830343a323139303a3a2f33322d3634203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2190::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:b4:64:55:b0:d3:bc:fb:8f:d3:7b:65:76:ac:2b:6e:69:
         0e:65:40:02:c0:a6:1d:71:f1:58:64:f9:72:eb:a5:fc:26:f1:
         1d:2d:d1:bf:c3:90:c7:2b:ec:21:ad:3d:c1:47:6e:43:b6:f9:
         f1:00:3b:bf:f3:7e:fe:3a:6b:2d:78:45:92:0f:c9:16:88:12:
         06:61:9e:fb:4b:85:50:45:bc:7e:ca:24:19:1e:97:92:36:d3:
         1f:e4:6d:bb:e5:ec:91:ed:0d:c1:d9:ec:b4:e4:67:22:6a:53:
         21:c9:23:7f:77:e8:f7:e8:63:d9:eb:52:98:af:9a:4d:b7:7c:
         26:59:16:2f:6a:89:95:de:9e:14:ec:df:7b:f4:9e:b9:49:e9:
         2a:d0:91:a6:e0:07:1c:6e:2e:bc:27:10:df:4a:16:46:5a:fa:
         a9:4c:71:cd:95:ec:6e:43:50:90:8d:ad:55:ce:b1:06:4d:33:
         fc:9e:6b:06:4e:6a:76:fe:aa:da:ec:d3:fc:27:54:d7:2d:f6:
         98:65:6d:9c:9e:36:14:58:51:28:20:44:37:15:93:8e:f2:a8:
         da:5b:e0:cd:eb:c8:d2:e5:94:f2:15:8f:22:01:66:9f:01:7d:
         91:4f:2a:db:86:3e:42:d9:a5:8d:c0:93:ff:da:35:68:cf:5d:
         10:4f:e7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:52:16 2025 by rpki-client