Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/323830343a363037633a3a2f33322d3332203d3e20323639313730.roa
File:                     323830343a363037633a3a2f33322d3332203d3e20323639313730.roa (raw, json)
Hash identifier:          bDMA0Rwtq0RjW/5LOo5tEukpRf+he8sVB8/de82kmvA=
Subject key identifier:   A4:FA:52:2C:32:84:A0:1C:EB:0D:FC:3F:D2:6C:77:06:2D:8A:9C:D7
Certificate issuer:       /CN=3D580FBC905909266C331DDA6416C18006A24750
Certificate serial:       1FAA8555F1BA72128D7711BFD5529357813C1D50
Authority key identifier: 3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/323830343a363037633a3a2f33322d3332203d3e20323639313730.roa
Signing time:             Tue 02 Sep 2025 10:30:04 +0000
ROA not before:           Tue 02 Sep 2025 10:25:04 +0000
ROA not after:            Tue 01 Sep 2026 10:30:04 +0000
asID:                     269170
IP address blocks:        2804:607c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl
                          rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:aa:85:55:f1:ba:72:12:8d:77:11:bf:d5:52:93:57:81:3c:1d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D580FBC905909266C331DDA6416C18006A24750
        Validity
            Not Before: Sep  2 10:25:04 2025 GMT
            Not After : Sep  1 10:30:04 2026 GMT
        Subject: CN=A4FA522C3284A01CEB0DFC3FD26C77062D8A9CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:2d:2a:64:56:14:61:01:17:4d:e2:e2:4f:
                    88:ac:d6:6c:e5:c7:d9:8d:88:50:28:52:65:3e:76:
                    69:15:fa:4c:7f:db:69:7a:80:05:8d:cf:6b:f4:3d:
                    ba:41:ba:e6:ea:f1:f3:42:11:c2:94:25:79:70:3f:
                    c9:56:fe:a7:c3:11:09:c6:e3:16:8c:63:74:1e:b4:
                    be:9d:06:a1:17:6f:04:67:00:20:3c:7e:c1:8c:6b:
                    24:9d:51:d4:ba:0e:b1:66:d9:28:31:16:07:6f:40:
                    de:90:de:73:dd:d5:3a:3f:4b:2a:ee:91:07:ec:20:
                    cd:2d:9e:b4:f6:79:84:f6:d3:06:9a:ea:d0:a1:84:
                    a4:fe:e3:e8:d4:d8:55:32:6c:49:2c:b6:85:2f:9e:
                    91:3a:0d:ac:e4:75:20:a7:2a:5d:b8:c6:ff:7b:a4:
                    e5:09:9f:b9:fc:36:d8:41:35:1e:21:59:5c:d3:6a:
                    c8:0c:cc:9f:a4:3d:65:15:00:e4:b4:3e:06:a7:8d:
                    b3:d0:37:50:cb:76:15:cd:a7:e5:b0:a6:01:0e:b3:
                    57:6f:f3:a2:81:d4:e3:16:d9:ea:26:25:db:f6:43:
                    56:e5:13:a8:74:b5:91:d9:0d:2d:0d:6a:ea:65:f6:
                    0c:b1:a2:c6:89:99:f0:8b:d4:23:6f:f5:72:4d:ba:
                    51:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FA:52:2C:32:84:A0:1C:EB:0D:FC:3F:D2:6C:77:06:2D:8A:9C:D7
            X509v3 Authority Key Identifier:
                keyid:3D:58:0F:BC:90:59:09:26:6C:33:1D:DA:64:16:C1:80:06:A2:47:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/3D580FBC905909266C331DDA6416C18006A24750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D580FBC905909266C331DDA6416C18006A24750.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/323830343a363037633a3a2f33322d3332203d3e20323639313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:607c::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:a1:cd:55:7d:4d:53:d8:52:c1:18:88:10:25:02:8a:6b:6b:
         02:09:80:f6:2d:4f:24:21:c0:38:02:17:3d:cb:76:79:d3:df:
         0e:67:ac:6c:ae:c1:cb:0f:dc:9b:29:ae:80:c7:d8:c8:07:2e:
         f1:0f:1c:99:c3:b4:e5:53:0c:19:8d:27:6d:70:5f:f2:fc:5b:
         3a:29:7b:5f:7e:2a:a9:c2:55:19:43:c2:51:f8:8d:8f:df:6f:
         8a:f3:91:37:52:64:fd:50:a0:7b:f5:1b:9b:62:1e:51:63:48:
         19:ea:20:60:3b:4c:06:b8:dd:5e:b3:e6:af:d3:f9:0b:ff:aa:
         f3:36:48:0f:ad:06:32:9e:25:18:71:93:71:f5:92:57:d6:f4:
         db:d9:a7:08:c7:1e:95:9b:51:a0:5d:6e:be:64:66:f8:6f:14:
         59:3e:25:8c:2e:af:b0:7a:51:04:d8:63:3b:37:31:fb:ae:de:
         44:2c:3f:12:41:ef:cb:59:52:1b:29:60:90:a6:a7:80:39:47:
         de:fe:f1:24:f5:cb:e9:bd:00:1a:84:38:70:3c:c3:5b:97:c3:
         3e:59:0f:8f:cc:61:f9:9d:74:aa:66:9a:db:46:f9:3f:58:e3:
         84:c3:b1:d9:29:c1:72:b7:f5:87:16:6d:0d:bc:9e:97:68:d5:
         74:08:64:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:06:35 2025 by rpki-client