Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa
File:                     323830343a366663383a3a2f33322d3438203d3e20323730363834.roa (raw, json)
Hash identifier:          YA0kcBA3M2vP4jEVRRNMfGmFVJycRN4s8jPtqdjAIQI=
Subject key identifier:   C1:10:31:87:98:A8:F2:9E:84:FC:22:F9:9B:F5:20:C0:18:17:D2:50
Certificate issuer:       /CN=45B6BEC77EDDAC8F9E384D4FBD33C876CB20F35D
Certificate serial:       4E9872150849C73F6CF0000705CFDEAB344AABE7
Authority key identifier: 45:B6:BE:C7:7E:DD:AC:8F:9E:38:4D:4F:BD:33:C8:76:CB:20:F3:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45B6BEC77EDDAC8F9E384D4FBD33C876CB20F35D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa
Signing time:             Thu 11 Sep 2025 14:20:27 +0000
ROA not before:           Thu 11 Sep 2025 14:15:27 +0000
ROA not after:            Thu 10 Sep 2026 14:20:27 +0000
asID:                     270684
IP address blocks:        2804:6fc8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/45B6BEC77EDDAC8F9E384D4FBD33C876CB20F35D.crl
                          rsync://rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/45B6BEC77EDDAC8F9E384D4FBD33C876CB20F35D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45B6BEC77EDDAC8F9E384D4FBD33C876CB20F35D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:98:72:15:08:49:c7:3f:6c:f0:00:07:05:cf:de:ab:34:4a:ab:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45B6BEC77EDDAC8F9E384D4FBD33C876CB20F35D
        Validity
            Not Before: Sep 11 14:15:27 2025 GMT
            Not After : Sep 10 14:20:27 2026 GMT
        Subject: CN=C110318798A8F29E84FC22F99BF520C01817D250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:8b:35:36:ef:09:2a:96:41:d7:0d:c2:09:
                    84:4d:ba:98:f3:2e:e2:a7:35:71:62:0d:0d:0d:75:
                    b8:e2:4e:8c:8b:26:13:11:b4:d5:8e:f1:c4:ef:95:
                    7c:de:23:e4:97:24:f6:51:37:1e:c1:b8:0f:ce:a1:
                    d0:b5:3a:9c:14:17:1c:4e:33:d5:77:1a:b7:a5:8e:
                    97:8e:dd:94:07:af:22:59:e7:70:7c:64:2b:ef:ed:
                    4b:5b:46:ea:53:a7:d7:76:38:db:53:e4:e5:72:7f:
                    13:c1:3f:21:ea:4a:69:83:a5:4b:bd:eb:6d:6b:d3:
                    d4:21:f5:64:24:40:9f:53:b7:9d:d5:2d:9d:e6:02:
                    45:03:36:74:1c:01:bc:0c:da:e3:8a:4e:12:bc:9c:
                    af:41:c2:2c:d3:5c:a6:97:7d:91:a4:e4:05:d6:b1:
                    e0:f0:62:ed:79:6d:13:fd:aa:e2:a1:d3:ac:e8:92:
                    a2:f1:e2:6a:94:20:ba:1d:29:31:be:8d:cd:f5:17:
                    9b:8a:1a:b1:49:57:e0:87:33:f2:b6:57:f4:a8:7a:
                    c5:85:8e:d1:9d:c7:a8:6e:2b:a1:6a:9c:7d:ea:ac:
                    98:7b:db:d4:af:29:65:3f:6e:1e:c1:64:5a:92:6d:
                    40:93:e0:97:39:80:e8:54:cc:09:8d:3d:24:2e:53:
                    33:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:10:31:87:98:A8:F2:9E:84:FC:22:F9:9B:F5:20:C0:18:17:D2:50
            X509v3 Authority Key Identifier:
                keyid:45:B6:BE:C7:7E:DD:AC:8F:9E:38:4D:4F:BD:33:C8:76:CB:20:F3:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/45B6BEC77EDDAC8F9E384D4FBD33C876CB20F35D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45B6BEC77EDDAC8F9E384D4FBD33C876CB20F35D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mca4dj5P2K8fNxnJoZ5UxZg1RJ8oQAvEuC8cp9ypFiW/0/323830343a366663383a3a2f33322d3438203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:59:10:d8:a4:4f:d0:65:dd:59:e6:1c:1f:5d:08:e7:09:04:
         47:51:cb:da:e7:71:62:42:86:82:6f:f2:64:fa:62:9e:48:a1:
         75:da:c4:42:8a:b5:51:ab:8f:41:67:25:b7:4e:8e:67:c3:db:
         95:0d:cb:92:30:c2:ec:22:e3:da:f0:59:7f:7e:33:6a:be:10:
         cb:55:8a:4f:fa:42:97:6a:24:82:ed:fd:83:08:8b:c5:bf:37:
         e0:ae:80:ee:d4:d2:21:35:bb:24:b4:41:41:70:77:99:d3:42:
         5e:6c:c2:19:77:dd:64:0d:14:50:f7:4a:12:43:2a:6c:6c:66:
         72:0a:99:01:66:f3:06:85:e3:6a:20:ea:85:8a:73:17:7a:ad:
         50:49:cd:13:f2:4a:dc:45:77:8f:a3:cd:21:4a:e7:82:06:07:
         14:10:31:70:89:c3:0e:e7:ab:17:ca:75:2e:e0:14:19:9d:59:
         68:fc:72:71:12:e4:b7:72:75:70:dd:38:d8:e8:45:1b:e9:4d:
         ec:da:08:ef:cf:78:e1:e1:31:27:e3:88:34:80:8d:c6:6b:5b:
         a8:e0:c9:d2:48:10:d3:76:2c:e7:6b:63:e3:3e:6c:03:68:10:
         40:a8:7f:73:0c:fb:6c:57:78:a7:32:40:e4:75:71:bd:4a:54:
         63:d6:a0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:00:07 2025 by rpki-client