Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/323830343a353335633a3a2f33322d3334203d3e20323638353739.roa
File:                     323830343a353335633a3a2f33322d3334203d3e20323638353739.roa (raw, json)
Hash identifier:          TgnyQYMsbtvTvhCYmDb5BA2b5EuJArLcNTjJwf/8xGE=
Subject key identifier:   48:21:F2:20:2A:8B:B1:B2:E5:98:2B:8B:A6:E9:64:65:48:D5:90:D1
Certificate issuer:       /CN=B3728F04BFDFAB911E5102967954415941D192DA
Certificate serial:       2F55CF67FBE2EC53F7EFD7CBD591BE146DB78577
Authority key identifier: B3:72:8F:04:BF:DF:AB:91:1E:51:02:96:79:54:41:59:41:D1:92:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3728F04BFDFAB911E5102967954415941D192DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/323830343a353335633a3a2f33322d3334203d3e20323638353739.roa
Signing time:             Mon 29 Sep 2025 15:59:01 +0000
ROA not before:           Mon 29 Sep 2025 15:54:01 +0000
ROA not after:            Mon 28 Sep 2026 15:59:01 +0000
asID:                     268579
IP address blocks:        2804:535c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/B3728F04BFDFAB911E5102967954415941D192DA.crl
                          rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/B3728F04BFDFAB911E5102967954415941D192DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3728F04BFDFAB911E5102967954415941D192DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:55:cf:67:fb:e2:ec:53:f7:ef:d7:cb:d5:91:be:14:6d:b7:85:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3728F04BFDFAB911E5102967954415941D192DA
        Validity
            Not Before: Sep 29 15:54:01 2025 GMT
            Not After : Sep 28 15:59:01 2026 GMT
        Subject: CN=4821F2202A8BB1B2E5982B8BA6E9646548D590D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:0b:8a:67:90:1a:67:ac:53:ba:43:b2:38:
                    45:56:4c:40:06:ef:48:46:70:3a:13:34:d0:21:7e:
                    79:ad:9d:b9:9a:cd:a8:f2:be:4a:a7:be:17:3e:17:
                    bb:aa:1e:dc:36:37:ec:16:5e:21:8f:91:db:d6:64:
                    34:7a:ae:b4:2d:bd:39:22:ff:e9:43:37:01:24:2d:
                    82:ac:12:af:eb:5d:c7:24:78:05:5f:15:68:4e:9d:
                    b9:fb:6c:f4:79:8a:d8:1b:14:2e:db:ce:df:76:5f:
                    51:c3:8a:ab:e9:b8:f8:25:a9:b0:b6:b1:81:40:3b:
                    b6:5c:41:05:b3:f7:ed:00:b2:c4:74:48:35:d9:af:
                    33:9e:26:ba:30:56:95:b7:7a:07:40:ca:25:83:f5:
                    c8:5e:a1:b1:5b:ea:b1:6c:3c:3e:e0:80:ac:23:31:
                    a4:0e:7e:90:eb:49:7f:3a:59:94:18:2b:e2:52:5e:
                    e9:92:67:d9:b3:3d:25:e3:0c:cc:df:9f:80:10:89:
                    60:a4:a6:54:62:9b:a1:4e:32:7b:51:00:2c:87:8a:
                    39:f8:69:49:1c:c2:5f:cd:ec:8f:9a:82:85:99:34:
                    de:6a:f4:0e:c2:fb:a1:86:9e:5b:aa:00:75:fd:95:
                    d6:99:10:6a:0f:16:aa:3a:18:bc:16:56:35:29:51:
                    68:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:21:F2:20:2A:8B:B1:B2:E5:98:2B:8B:A6:E9:64:65:48:D5:90:D1
            X509v3 Authority Key Identifier:
                keyid:B3:72:8F:04:BF:DF:AB:91:1E:51:02:96:79:54:41:59:41:D1:92:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/B3728F04BFDFAB911E5102967954415941D192DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3728F04BFDFAB911E5102967954415941D192DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/323830343a353335633a3a2f33322d3334203d3e20323638353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:535c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:6a:9e:d3:e1:54:4e:88:a9:4c:66:ac:35:2a:b1:8f:99:9b:
         4a:91:94:44:03:c6:20:6f:18:c8:84:76:07:1a:80:21:0a:89:
         4d:9f:fc:59:fb:1f:02:fe:19:a4:bc:a2:b9:38:99:0a:09:0f:
         a0:66:e9:c0:ea:bb:f1:72:77:4d:b2:a8:98:47:c3:3d:2f:66:
         06:81:cd:e2:88:b8:61:bd:8f:13:ee:42:26:c2:b6:59:1b:99:
         2b:86:e0:b8:f1:1b:53:45:ce:fb:39:e8:6a:6a:43:c5:4b:fc:
         30:b0:1e:cf:76:40:13:07:09:fb:fb:32:5b:9a:40:0f:d5:00:
         be:2c:c0:91:3e:ca:8a:6c:28:5d:3c:06:9f:26:29:71:1a:a1:
         8e:18:69:f3:60:b7:f7:8a:cf:8e:08:d1:82:75:d3:75:1d:52:
         38:01:ee:26:ae:c6:c3:12:d8:f6:34:1c:73:41:ce:d8:ce:cf:
         2c:5e:8d:56:c6:27:6e:39:1a:4c:8d:a1:98:08:95:2d:f2:2f:
         84:01:d5:35:ef:df:e0:78:15:56:72:90:a0:78:16:5c:90:3f:
         d9:d2:44:c6:06:88:6c:5d:fe:79:20:bd:4a:ef:3b:e1:c5:2d:
         29:cd:2e:47:28:c4:e9:f7:79:2e:48:6b:51:8c:6a:c5:e2:e7:
         bd:f4:d0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:15:40 2025 by rpki-client