Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/323830343a333739383a3a2f33322d313238203d3e20323636343233.roa
File:                     323830343a333739383a3a2f33322d313238203d3e20323636343233.roa (raw, json)
Hash identifier:          chjI8KrTMe3udo1ajscb+NrlqP7BHB275wj8IHwcilE=
Subject key identifier:   CB:2A:99:6E:93:52:8E:AF:13:D9:82:DB:56:1C:52:BB:9C:1A:9C:12
Certificate issuer:       /CN=924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F
Certificate serial:       7B4C8E196B0297D921565D99174DD0EF75C01E50
Authority key identifier: 92:4A:34:23:D2:EA:E0:F9:16:CD:D6:05:EB:5E:C3:1F:F0:DF:B9:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/323830343a333739383a3a2f33322d313238203d3e20323636343233.roa
Signing time:             Mon 08 Sep 2025 18:33:39 +0000
ROA not before:           Mon 08 Sep 2025 18:28:39 +0000
ROA not after:            Mon 07 Sep 2026 18:33:39 +0000
asID:                     266423
IP address blocks:        2804:3798::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.crl
                          rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 07:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4c:8e:19:6b:02:97:d9:21:56:5d:99:17:4d:d0:ef:75:c0:1e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F
        Validity
            Not Before: Sep  8 18:28:39 2025 GMT
            Not After : Sep  7 18:33:39 2026 GMT
        Subject: CN=CB2A996E93528EAF13D982DB561C52BB9C1A9C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dd:2e:92:95:4c:cc:3c:75:7a:b9:6a:9f:f0:
                    bc:f8:c8:91:0b:f3:09:81:92:e2:92:90:48:ed:c1:
                    ad:48:ff:7a:14:f4:87:d1:b5:91:4f:e0:f2:c4:77:
                    d7:cd:3a:ee:ec:1f:b8:15:cd:50:f3:61:9a:b1:3d:
                    83:67:e4:e4:f1:1b:7e:26:54:ae:ad:6c:d0:08:de:
                    b9:6f:1e:3e:66:1d:a4:c0:bd:ee:42:8b:01:89:96:
                    01:a3:2e:b7:35:35:2a:a1:cd:6d:98:0b:96:8c:08:
                    21:5e:f5:2b:5e:2f:f0:2a:76:f1:d1:47:ad:ad:e1:
                    82:7c:b5:fa:07:a1:84:f1:ce:48:cb:64:05:41:97:
                    60:c6:0e:2f:ae:05:60:cc:fc:31:fc:b6:1a:bc:33:
                    dd:46:13:f1:8a:7c:95:51:41:fc:ce:9d:bb:fe:75:
                    f6:73:8e:22:08:c7:b6:98:9b:d3:c9:cf:63:6c:8c:
                    3b:0b:6f:31:47:8b:ca:9a:14:5d:12:52:4c:90:3f:
                    d3:d4:ce:77:8f:91:6f:5f:cf:cb:80:d5:c7:5d:7b:
                    84:21:9d:f4:fb:b3:87:f4:17:6f:6c:09:97:e2:93:
                    03:1b:10:23:cc:6c:5d:22:07:21:d9:51:ab:1d:8e:
                    62:78:ce:45:15:e2:2f:97:33:3d:da:83:bd:2e:6f:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2A:99:6E:93:52:8E:AF:13:D9:82:DB:56:1C:52:BB:9C:1A:9C:12
            X509v3 Authority Key Identifier:
                keyid:92:4A:34:23:D2:EA:E0:F9:16:CD:D6:05:EB:5E:C3:1F:F0:DF:B9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/924A3423D2EAE0F916CDD605EB5EC31FF0DFB98F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bsE4znh98PSttSkW94daEjweSyF64AzQDqEDAD8Y4bi/0/323830343a333739383a3a2f33322d313238203d3e20323636343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3798::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:07:1e:da:a3:f7:e1:4e:e0:78:52:3c:2e:4c:61:8f:8a:4b:
         ef:83:0a:bb:5d:63:eb:59:cf:65:45:56:77:db:e1:b0:ba:50:
         90:a3:78:06:5e:f0:44:e3:64:9f:e1:78:d1:fa:b9:60:d2:2e:
         f8:f5:b4:85:f2:8d:df:af:7f:cb:7c:72:08:90:27:65:cc:f1:
         e5:34:c5:a4:8b:aa:09:50:0a:e4:90:91:5f:88:34:6e:d3:99:
         0f:b7:f7:5b:e5:fe:12:98:08:af:3d:21:da:04:5f:ec:84:ea:
         53:0f:86:1d:2e:3a:df:fe:05:28:e9:f5:b9:78:b0:a9:5b:ec:
         11:22:a4:23:b5:12:0e:be:be:e1:f3:7f:82:98:2e:c5:34:91:
         12:62:ed:74:c1:59:47:2c:9a:7d:38:27:01:54:2f:ac:3c:73:
         66:eb:af:91:22:6d:00:43:09:aa:b3:ef:8c:2d:ae:f3:67:c5:
         f7:8d:d7:99:ee:25:f7:ed:ea:83:8a:68:0d:2f:18:3f:8b:99:
         69:59:cf:f4:44:87:16:f1:03:8b:4b:b7:16:81:b7:35:94:9e:
         b3:2e:5d:0d:6a:59:08:4b:eb:11:7b:16:22:e9:50:41:ab:fe:
         65:87:e4:3c:8f:50:bf:1c:c2:41:56:01:41:1e:99:b0:2e:2b:
         00:83:fd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:56:57 2025 by rpki-client