Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a323030303a3a2f33362d3336203d3e20323636323638.roa
File:                     323830343a336435343a323030303a3a2f33362d3336203d3e20323636323638.roa (raw, json)
Hash identifier:          3+UQ4LPXY8TjvUlDcpQC4h5qxnSvLHW04DUWg6WM7sg=
Subject key identifier:   5E:A5:15:66:FC:3E:5C:35:E0:A6:98:92:52:E8:DC:95:9C:E1:F1:4A
Certificate issuer:       /CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
Certificate serial:       29704C87CF7DBFA246E4191D568F33D017AFA9D0
Authority key identifier: F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a323030303a3a2f33362d3336203d3e20323636323638.roa
Signing time:             Mon 15 Sep 2025 23:58:52 +0000
ROA not before:           Mon 15 Sep 2025 23:53:52 +0000
ROA not after:            Mon 14 Sep 2026 23:58:52 +0000
asID:                     266268
IP address blocks:        2804:3d54:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:70:4c:87:cf:7d:bf:a2:46:e4:19:1d:56:8f:33:d0:17:af:a9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
        Validity
            Not Before: Sep 15 23:53:52 2025 GMT
            Not After : Sep 14 23:58:52 2026 GMT
        Subject: CN=5EA51566FC3E5C35E0A6989252E8DC959CE1F14A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a7:fc:e3:6d:9d:b0:f0:87:0b:6e:b6:ab:53:
                    55:47:47:d9:f6:b8:df:13:f0:6c:3c:0a:da:4c:9e:
                    b2:37:25:e1:48:bd:fe:dd:fb:37:d0:42:28:72:f4:
                    a0:2a:82:ab:4e:2c:e6:be:0a:9e:39:6d:54:58:29:
                    68:d7:9c:e6:4d:30:99:8b:b4:53:a8:84:20:77:6d:
                    f3:92:e3:28:0f:69:0c:c4:f8:d6:6f:6f:ec:22:b8:
                    c4:cf:0f:30:c7:50:12:66:69:93:d3:cf:6e:46:f4:
                    b3:8e:61:c0:cc:ff:6d:d0:00:86:aa:b5:ea:41:58:
                    9c:cf:c9:92:3e:92:55:a4:e2:f2:bb:11:de:18:0c:
                    f3:82:e9:01:d6:14:92:fd:9e:23:a0:fc:3e:76:ee:
                    aa:0a:e8:43:36:41:e7:8a:44:47:16:49:14:bd:0e:
                    0b:55:b5:e4:74:5d:30:02:31:b4:55:f9:48:d4:ba:
                    e0:38:7d:0d:d9:e0:5f:68:74:4b:04:9c:31:8f:42:
                    c0:cc:74:9c:ae:98:c7:b7:d2:3a:33:a1:6b:87:56:
                    c5:66:e2:df:54:92:27:32:82:73:a2:d0:dd:54:d2:
                    b9:40:86:d0:ce:f6:75:09:cf:76:55:b7:f1:3e:10:
                    56:c7:36:d4:e6:56:61:1a:73:49:9f:3e:91:f9:c5:
                    59:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A5:15:66:FC:3E:5C:35:E0:A6:98:92:52:E8:DC:95:9C:E1:F1:4A
            X509v3 Authority Key Identifier:
                keyid:F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a323030303a3a2f33362d3336203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         09:c7:f2:cb:f9:0b:6f:c0:c1:8d:b2:ff:3d:51:e6:12:6b:91:
         18:cb:99:09:65:1b:d9:a0:75:77:5f:6c:86:53:3b:1f:b3:36:
         b4:f7:b9:ff:2e:2a:7b:76:cf:11:13:65:b3:5c:de:e1:4f:a1:
         83:04:9b:e8:38:f4:be:e9:14:5e:5e:63:90:60:fd:87:59:0d:
         08:12:d9:c8:53:a4:c5:aa:7d:9c:7e:f8:0e:18:46:bf:cd:b0:
         c2:fa:85:d1:f8:e0:f1:6f:71:e2:b7:4b:02:9a:bc:34:5b:28:
         3b:94:3d:b6:bf:0a:00:59:66:18:47:63:08:36:57:6f:cf:02:
         04:48:7d:c3:f2:4e:80:26:55:53:e6:51:b7:26:f5:4f:8a:e5:
         14:40:6e:bb:78:ad:c1:85:fa:64:c4:7a:84:c4:11:8f:74:0e:
         e7:50:cf:f3:e8:a4:23:5e:94:c3:df:c6:4f:39:d6:ec:64:f7:
         6e:cc:b7:73:09:6f:bc:a0:8b:c6:40:c5:0c:d3:76:68:c3:b3:
         d1:11:39:5a:ba:bc:b9:84:d5:65:46:1d:40:a1:4f:89:93:50:
         39:80:84:41:24:d1:38:f8:88:ca:a6:ec:ec:7b:80:a5:b7:32:
         08:80:7d:4e:60:5c:02:e4:3a:94:16:06:dc:35:ed:fe:f0:b8:
         b7:dc:0d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:01:58 2025 by rpki-client