Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/323830343a393166343a3a2f33322d3438203d3e20323734363738.roa
File:                     323830343a393166343a3a2f33322d3438203d3e20323734363738.roa (raw, json)
Hash identifier:          ghEUttYr177zxqlIFjApVok9ngnyD5oBX76OmMMBEqA=
Subject key identifier:   F9:4D:0D:C7:53:8B:1E:74:27:57:EE:29:04:76:BE:EF:D5:D6:04:9F
Certificate issuer:       /CN=829E9E44626A23C357DBBBEDBFF4769A3F40B87A
Certificate serial:       20D0D3131D4FABCD61201FBB08AAA31D55A0D01A
Authority key identifier: 82:9E:9E:44:62:6A:23:C3:57:DB:BB:ED:BF:F4:76:9A:3F:40:B8:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/323830343a393166343a3a2f33322d3438203d3e20323734363738.roa
Signing time:             Fri 31 Oct 2025 12:16:57 +0000
ROA not before:           Fri 31 Oct 2025 12:11:57 +0000
ROA not after:            Fri 30 Oct 2026 12:16:57 +0000
asID:                     274678
IP address blocks:        2804:91f4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.crl
                          rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 15:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d0:d3:13:1d:4f:ab:cd:61:20:1f:bb:08:aa:a3:1d:55:a0:d0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829E9E44626A23C357DBBBEDBFF4769A3F40B87A
        Validity
            Not Before: Oct 31 12:11:57 2025 GMT
            Not After : Oct 30 12:16:57 2026 GMT
        Subject: CN=F94D0DC7538B1E742757EE290476BEEFD5D6049F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e2:21:80:37:a7:53:2c:7b:39:53:2f:5c:2c:
                    73:c1:bb:a7:ee:8f:5a:57:e2:85:97:68:25:78:55:
                    a6:5b:f0:fa:1a:ea:13:83:f1:20:2c:35:20:cb:d2:
                    14:87:f1:dc:61:ec:55:d2:12:59:05:81:21:6c:e3:
                    c7:aa:11:19:a7:a1:c5:a8:40:5e:d6:04:81:a2:40:
                    1d:26:0a:50:0f:e6:27:43:1f:dc:44:0b:3d:13:20:
                    77:94:65:fe:3c:5a:8e:c7:f6:d7:23:7b:8e:f2:9d:
                    51:29:bf:64:36:c4:f1:83:cf:35:33:17:88:85:8b:
                    9c:51:0a:39:6b:45:db:29:8a:e4:d3:8c:72:9a:69:
                    12:88:43:12:3a:c0:38:f5:7b:11:b3:89:61:12:94:
                    94:47:8b:1f:99:88:ab:87:45:13:13:bc:9d:b9:34:
                    44:07:d6:6f:79:16:84:9a:fc:57:bd:fc:b2:c1:21:
                    be:f6:32:c3:3a:2f:eb:cd:7f:93:bb:75:49:87:34:
                    d7:ab:8e:2f:d8:24:8e:1d:8c:d7:38:29:e9:d4:97:
                    96:68:af:21:c7:7b:80:cf:ff:a6:ec:fd:64:9a:fd:
                    f3:76:94:f7:66:21:b8:8c:9c:2d:7c:0a:57:23:90:
                    20:ef:57:a5:8e:46:00:8d:ec:f0:45:87:42:34:93:
                    91:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4D:0D:C7:53:8B:1E:74:27:57:EE:29:04:76:BE:EF:D5:D6:04:9F
            X509v3 Authority Key Identifier:
                keyid:82:9E:9E:44:62:6A:23:C3:57:DB:BB:ED:BF:F4:76:9A:3F:40:B8:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/829E9E44626A23C357DBBBEDBFF4769A3F40B87A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YkFJuPybsmcpY1oQe7ZTNnsVzeMLkVws4vA2Kvz1NcZ/0/323830343a393166343a3a2f33322d3438203d3e20323734363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:01:36:05:ff:15:d0:8c:e3:40:cc:58:34:47:25:3a:56:de:
         07:4d:e7:35:2c:2c:6e:70:45:31:e5:cb:b7:e7:17:fd:5e:f8:
         8d:ba:84:a6:2c:cc:dd:e7:10:fb:81:5e:23:de:e1:06:78:7b:
         42:29:4c:b4:3d:b2:97:47:41:4e:ff:bc:a2:64:3b:08:27:c9:
         dd:1c:e2:34:07:10:f1:0c:37:bc:7a:3c:28:31:df:92:ea:1b:
         64:b7:54:3c:f8:dc:3c:76:8e:d6:72:0e:a6:ac:3c:e5:5b:dc:
         b2:2b:d3:14:25:1b:19:f4:36:20:5b:a0:a8:7f:a8:b8:be:bf:
         c7:10:74:b3:b1:6f:4f:8b:58:81:e9:93:5d:d5:80:04:b8:c3:
         b6:59:07:6a:4e:12:36:7c:26:c5:08:33:6c:df:d3:8d:ea:27:
         74:a8:31:5c:14:9e:29:61:45:60:27:0f:f0:56:2a:4e:20:73:
         2f:3f:6d:20:8a:7d:a2:97:da:38:8a:03:2a:d8:5f:8c:3f:63:
         e8:90:cd:be:9b:12:56:8a:16:05:20:3f:90:41:e7:34:eb:17:
         3b:4d:7f:4e:d1:e2:be:d5:69:9a:a6:71:65:27:41:19:8f:05:
         42:41:5d:4c:dd:4d:18:07:69:21:04:b8:f4:4f:2f:7b:76:04:
         a9:d7:13:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:39:16 2025 by rpki-client