Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/323830343a326231633a3a2f33322d3438203d3e20323635313335.roa
File:                     323830343a326231633a3a2f33322d3438203d3e20323635313335.roa (raw, json)
Hash identifier:          pSsB1S3FUXFc9njMdn2qS6UwxdOWzXu8JwqX24iuwLI=
Subject key identifier:   53:68:68:A7:C0:BF:AC:38:41:14:C8:00:71:7F:61:94:DD:A4:F1:1F
Certificate issuer:       /CN=3D36604D4F0F275D1906B90B003E6D3400D8B6D6
Certificate serial:       6D080AD28CB4174B7EA4A7C4F8D8B91BBC3DFA8B
Authority key identifier: 3D:36:60:4D:4F:0F:27:5D:19:06:B9:0B:00:3E:6D:34:00:D8:B6:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D36604D4F0F275D1906B90B003E6D3400D8B6D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/323830343a326231633a3a2f33322d3438203d3e20323635313335.roa
Signing time:             Mon 15 Sep 2025 18:15:57 +0000
ROA not before:           Mon 15 Sep 2025 18:10:57 +0000
ROA not after:            Mon 14 Sep 2026 18:15:57 +0000
asID:                     265135
IP address blocks:        2804:2b1c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/3D36604D4F0F275D1906B90B003E6D3400D8B6D6.crl
                          rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/3D36604D4F0F275D1906B90B003E6D3400D8B6D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D36604D4F0F275D1906B90B003E6D3400D8B6D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 23:24:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:08:0a:d2:8c:b4:17:4b:7e:a4:a7:c4:f8:d8:b9:1b:bc:3d:fa:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D36604D4F0F275D1906B90B003E6D3400D8B6D6
        Validity
            Not Before: Sep 15 18:10:57 2025 GMT
            Not After : Sep 14 18:15:57 2026 GMT
        Subject: CN=536868A7C0BFAC384114C800717F6194DDA4F11F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bd:6d:5c:06:77:9e:12:51:02:f0:1d:3d:f3:
                    11:4f:a2:23:22:7b:b4:9e:e4:13:23:33:7f:be:3e:
                    69:9a:e2:cc:58:fa:f6:98:fa:2a:49:55:5a:83:14:
                    e4:0a:62:d6:a3:dd:ae:54:01:be:c2:af:3a:db:ae:
                    fb:18:0e:7c:70:44:0e:4a:2e:96:14:90:b8:c6:cf:
                    b7:75:a8:15:b2:8a:aa:4f:9f:d0:3e:b7:28:76:9b:
                    64:d3:0b:56:56:1c:5f:a4:bd:5d:7f:bb:2b:c5:7b:
                    f2:f2:96:1b:5e:cd:b5:01:c6:93:72:04:7c:3a:d3:
                    a2:5a:f4:17:c8:d5:8e:e9:8a:ef:5c:2b:43:c0:5f:
                    1b:46:46:84:cb:23:d3:ad:e2:c7:63:eb:12:0a:c5:
                    31:d1:63:ac:3b:4d:b4:4c:95:11:9d:4a:19:12:1d:
                    b6:a6:30:74:6b:51:e3:bd:3a:64:91:24:a2:b7:89:
                    9d:59:2e:e4:fe:5d:e9:8a:5e:9f:2f:88:f7:05:9c:
                    a8:c7:90:4f:b7:64:57:1b:66:86:c9:3d:77:aa:fa:
                    3f:b9:5c:7e:d8:25:f8:29:63:fe:b3:99:95:2f:a6:
                    0f:2a:d6:d9:a6:a3:de:b8:f5:54:3f:ab:18:65:74:
                    a9:ed:b6:79:c5:c1:8c:37:9e:0f:d3:c8:e8:11:37:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:68:68:A7:C0:BF:AC:38:41:14:C8:00:71:7F:61:94:DD:A4:F1:1F
            X509v3 Authority Key Identifier:
                keyid:3D:36:60:4D:4F:0F:27:5D:19:06:B9:0B:00:3E:6D:34:00:D8:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/3D36604D4F0F275D1906B90B003E6D3400D8B6D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D36604D4F0F275D1906B90B003E6D3400D8B6D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/323830343a326231633a3a2f33322d3438203d3e20323635313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:8b:d0:d7:80:3a:23:43:3e:52:0c:1b:8f:06:8c:71:9f:34:
         67:77:2a:c5:a0:34:39:7e:2f:b9:e3:01:ed:a0:50:0f:76:1d:
         d8:8c:a8:97:51:46:63:cf:11:b3:c0:09:7f:7a:29:cd:7b:94:
         f8:19:5f:3a:60:38:23:9e:7c:d5:01:78:d2:1b:64:77:1b:4d:
         59:7a:f5:48:2d:fd:d1:95:90:c6:d9:ac:a5:12:33:8c:83:61:
         74:39:c1:09:dd:07:69:9e:e6:8d:e0:1d:d4:58:c8:7c:0c:fb:
         0b:c2:9b:80:47:74:97:2f:f9:5a:9b:9d:50:c4:d7:f0:99:4f:
         c9:94:ac:3f:a9:71:88:fd:cd:c1:7d:d4:34:e4:9f:21:56:7a:
         1f:b9:da:98:5c:d4:64:6b:f2:38:83:cf:e7:cc:df:8d:25:24:
         39:3d:1f:f2:be:07:eb:5f:7b:da:bd:a4:07:25:22:ca:8d:a1:
         27:33:55:65:28:14:7a:72:1c:59:b2:fb:ba:e4:eb:76:34:a7:
         22:b8:81:8b:bd:15:c9:b8:0a:9c:52:f4:ea:50:e9:02:30:3e:
         eb:8b:c9:fb:e7:bc:73:fe:80:85:cd:87:c1:1a:45:ba:be:36:
         c8:2c:04:2a:e4:2e:ea:93:94:a2:83:9a:b4:26:be:b4:79:a3:
         c5:cb:3c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 14:51:45 2025 by rpki-client