Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/323830343a343064303a3a2f33322d313238203d3e20323635393833.roa
File:                     323830343a343064303a3a2f33322d313238203d3e20323635393833.roa (raw, json)
Hash identifier:          xEEZkfy9FtOMO6g1LgZsdvTtb3lVY0eBe38XC9ihhIc=
Subject key identifier:   0C:2B:5E:EC:77:10:A5:D4:8B:9E:2B:CB:52:32:D0:D2:65:BE:6C:2A
Certificate issuer:       /CN=D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33
Certificate serial:       732CDE45F29B288590520376B93B8EE4F182E323
Authority key identifier: D4:41:D0:17:30:BF:5E:BE:C8:2A:7F:95:FF:FE:F5:D9:0B:87:AA:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/323830343a343064303a3a2f33322d313238203d3e20323635393833.roa
Signing time:             Wed 17 Sep 2025 20:02:53 +0000
ROA not before:           Wed 17 Sep 2025 19:57:53 +0000
ROA not after:            Wed 16 Sep 2026 20:02:53 +0000
asID:                     265983
IP address blocks:        2804:40d0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.crl
                          rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2c:de:45:f2:9b:28:85:90:52:03:76:b9:3b:8e:e4:f1:82:e3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33
        Validity
            Not Before: Sep 17 19:57:53 2025 GMT
            Not After : Sep 16 20:02:53 2026 GMT
        Subject: CN=0C2B5EEC7710A5D48B9E2BCB5232D0D265BE6C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:30:aa:df:8f:29:fa:c9:45:0a:3a:22:70:3a:
                    d0:7c:75:15:38:db:33:5c:42:74:cd:8d:97:b9:77:
                    e3:eb:8a:f1:ea:6d:e9:55:0d:2a:b4:f2:ab:0b:ce:
                    ea:a6:6c:9a:d7:12:ca:79:c3:4b:ee:18:99:38:7b:
                    b7:97:b7:fe:9b:60:52:9f:96:3b:81:e6:3c:bc:0e:
                    75:b0:69:7a:af:96:cf:4a:16:63:d4:df:57:f0:14:
                    9d:a5:db:9a:16:c0:d4:60:27:25:06:cc:5b:95:33:
                    ff:90:c7:f9:6b:de:fc:cc:99:e4:27:37:6a:b4:bf:
                    2a:65:fd:cd:e3:a9:5d:a6:e8:b0:6d:18:39:0d:a7:
                    bb:91:2e:c0:7a:be:9f:6d:78:92:30:82:ee:50:41:
                    55:81:64:92:eb:23:5c:65:05:33:84:e0:27:35:87:
                    cd:c9:72:28:99:e3:13:b5:0a:92:32:61:1b:08:b4:
                    ee:62:d2:d5:45:2c:15:07:0a:70:81:b1:ca:db:27:
                    64:95:0c:bd:09:30:a6:b8:0f:ae:b5:53:5c:ba:51:
                    f7:ca:ce:4e:d6:73:df:82:93:85:28:0f:84:b5:45:
                    e3:f3:51:bb:45:47:c3:32:9a:39:71:cb:89:f3:1b:
                    f9:b2:c4:d8:9e:a0:24:a4:67:94:00:14:59:61:0c:
                    60:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2B:5E:EC:77:10:A5:D4:8B:9E:2B:CB:52:32:D0:D2:65:BE:6C:2A
            X509v3 Authority Key Identifier:
                keyid:D4:41:D0:17:30:BF:5E:BE:C8:2A:7F:95:FF:FE:F5:D9:0B:87:AA:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D441D01730BF5EBEC82A7F95FFFEF5D90B87AA33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/0/323830343a343064303a3a2f33322d313238203d3e20323635393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:29:48:61:1e:8f:4a:69:fc:f5:2d:27:78:a2:f3:84:68:ee:
         31:ee:88:d0:4c:f2:56:bb:de:4e:59:7f:ac:a6:b9:61:62:0c:
         eb:18:67:48:79:31:5f:71:a1:2a:55:b3:a1:27:f7:38:e6:42:
         42:bf:91:a4:eb:83:0f:46:eb:59:d8:7e:8f:c0:d9:43:bd:09:
         7c:51:46:62:b8:06:d2:38:ff:02:93:39:e3:56:44:27:39:7d:
         13:6c:82:86:b2:f7:f8:36:76:c0:96:1f:97:06:0e:ec:0b:b5:
         01:fd:3d:07:8b:86:f7:87:6d:e1:3c:1b:cf:55:ad:2b:44:9f:
         49:4e:39:55:fb:ac:25:c7:b5:9c:d6:06:f3:91:c9:6c:5f:08:
         9d:4a:33:b1:83:5b:41:fc:05:2c:c0:66:e4:7c:b8:4f:f4:ea:
         df:6a:bf:5a:d6:10:81:79:70:56:7a:89:96:84:64:b0:06:30:
         2f:57:43:86:1b:ad:31:9e:20:3c:01:2b:ed:52:d9:9e:b0:63:
         54:68:cb:b5:48:d8:e0:15:14:6b:91:4e:11:98:ef:7e:8b:5a:
         08:21:5e:20:2e:04:86:c2:1d:12:e0:9e:81:68:dd:33:99:2f:
         cf:96:7a:12:a7:72:84:df:d7:df:fc:4d:b4:67:2e:8c:f3:85:
         04:2f:17:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:41:58 2025 by rpki-client