Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/323830343a393532343a3a2f33322d3438203d3e203631363235.roa
File:                     323830343a393532343a3a2f33322d3438203d3e203631363235.roa (raw, json)
Hash identifier:          i6NrnPeEmUZ9PBdw/Sv5k2uiHHpyfFWWELso32cI//w=
Subject key identifier:   6F:C6:8A:B5:C6:A3:52:56:69:F4:8D:0B:7E:34:4B:F3:52:48:46:3C
Certificate issuer:       /CN=9070D2E187CE3F862AB9E78E2A420A02C3525244
Certificate serial:       115C1B542B937A84166B9E4DFBFC3F6B4E14DAC0
Authority key identifier: 90:70:D2:E1:87:CE:3F:86:2A:B9:E7:8E:2A:42:0A:02:C3:52:52:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9070D2E187CE3F862AB9E78E2A420A02C3525244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/323830343a393532343a3a2f33322d3438203d3e203631363235.roa
Signing time:             Tue 02 Sep 2025 12:32:40 +0000
ROA not before:           Tue 02 Sep 2025 12:27:40 +0000
ROA not after:            Tue 01 Sep 2026 12:32:40 +0000
asID:                     61625
IP address blocks:        2804:9524::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.crl
                          rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9070D2E187CE3F862AB9E78E2A420A02C3525244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5c:1b:54:2b:93:7a:84:16:6b:9e:4d:fb:fc:3f:6b:4e:14:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9070D2E187CE3F862AB9E78E2A420A02C3525244
        Validity
            Not Before: Sep  2 12:27:40 2025 GMT
            Not After : Sep  1 12:32:40 2026 GMT
        Subject: CN=6FC68AB5C6A3525669F48D0B7E344BF35248463C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:63:f1:98:1a:bb:d7:eb:bb:65:12:ea:4d:e9:
                    2f:6a:bb:24:67:d8:6c:e6:71:e0:99:70:cf:ab:4b:
                    b3:ee:c7:49:f6:2d:f6:05:8a:d7:83:73:70:fc:0a:
                    b8:5d:0b:08:44:1f:6b:cd:65:9a:d0:9e:c5:6a:b9:
                    15:81:31:87:84:29:9f:01:f3:b3:f4:89:40:f3:af:
                    6b:2f:4c:10:68:be:0d:c1:60:6c:10:7a:ed:70:d9:
                    5d:39:52:80:65:6b:7d:ec:17:18:12:5f:a4:00:a1:
                    0f:88:04:fc:e3:c0:57:71:e0:df:20:34:27:e8:b5:
                    fd:79:9d:60:0f:3c:bb:e4:ba:30:45:af:77:2a:fb:
                    28:94:e8:d3:a9:d9:0b:09:4f:71:9d:94:e7:6e:4c:
                    26:2d:54:89:4d:05:f2:a9:53:97:46:61:9d:02:42:
                    f9:ea:9f:1f:55:28:b6:de:09:5a:03:e6:d5:11:bc:
                    47:5c:9d:bd:60:df:2b:f6:5d:05:0c:a2:03:bb:49:
                    15:33:23:bf:a7:24:5c:5f:85:7f:85:e7:b4:99:9e:
                    a3:81:79:e5:e1:4f:da:f2:aa:a8:00:0d:24:14:52:
                    8d:25:a9:a6:bf:b7:81:54:2a:9b:18:fe:ca:e2:61:
                    05:00:ff:a9:dd:aa:1a:89:30:8e:c4:ce:a1:e1:35:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C6:8A:B5:C6:A3:52:56:69:F4:8D:0B:7E:34:4B:F3:52:48:46:3C
            X509v3 Authority Key Identifier:
                keyid:90:70:D2:E1:87:CE:3F:86:2A:B9:E7:8E:2A:42:0A:02:C3:52:52:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/9070D2E187CE3F862AB9E78E2A420A02C3525244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9070D2E187CE3F862AB9E78E2A420A02C3525244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7qKZstBP33CGtcB5nGtr2nXxRQeaWAzVcSthoFab6Qy/0/323830343a393532343a3a2f33322d3438203d3e203631363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9524::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:64:e0:09:95:b4:1f:38:52:53:ad:41:34:0a:8b:a7:11:9e:
         1c:2b:d2:21:9e:ad:4c:02:d2:c7:9e:68:11:28:21:4c:53:67:
         a2:8a:d0:f3:2c:0e:df:9a:72:79:f1:c2:eb:e1:c4:48:af:c9:
         e4:03:ef:d8:a5:be:b0:50:8e:c6:7f:20:2c:87:b9:f9:32:48:
         01:90:d6:b0:9d:4c:37:66:83:88:ba:de:2e:d7:d9:ad:c0:c9:
         4d:6c:af:40:21:41:1e:20:6f:79:a1:75:1e:ec:a3:a8:79:66:
         61:9d:a8:18:3b:c9:d8:ea:05:c7:18:c4:23:bd:98:ea:6a:d5:
         ec:7f:b1:f5:b3:05:8a:b2:8c:5f:f2:30:9c:08:7e:6e:e4:05:
         23:99:94:61:cc:b0:ce:46:b5:69:a4:79:b5:e5:43:5a:1b:d9:
         b4:89:1b:dc:96:e6:c4:cf:0d:4e:db:64:5d:e9:f4:2c:12:d6:
         fd:96:97:02:98:35:04:a2:55:46:d4:db:fc:66:a6:80:f5:9b:
         be:0f:eb:33:28:51:90:0b:c7:06:6e:09:63:37:05:57:cc:42:
         08:c2:6b:d0:c5:dd:37:f8:70:02:81:9b:0b:e1:df:77:88:e9:
         79:f9:18:d9:fa:9f:fc:0a:03:f2:77:89:fb:58:a0:6e:63:36:
         b2:f1:58:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:46:04 2025 by rpki-client