Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a363030303a3a2f33362d3336203d3e20323636323638.roa
File:                     323830343a336435343a363030303a3a2f33362d3336203d3e20323636323638.roa (raw, json)
Hash identifier:          CgEzkyOCweIA5WATI3fEvpxaMsRcDJn52r34b/uLI44=
Subject key identifier:   86:06:81:85:7B:3E:D8:1F:B3:54:E1:1F:D4:B5:B0:6F:39:F7:7E:3C
Certificate issuer:       /CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
Certificate serial:       09EEE1D0857DD3E65B8FDA286766C0D5D622780C
Authority key identifier: F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a363030303a3a2f33362d3336203d3e20323636323638.roa
Signing time:             Mon 15 Sep 2025 23:58:49 +0000
ROA not before:           Mon 15 Sep 2025 23:53:49 +0000
ROA not after:            Mon 14 Sep 2026 23:58:49 +0000
asID:                     266268
IP address blocks:        2804:3d54:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ee:e1:d0:85:7d:d3:e6:5b:8f:da:28:67:66:c0:d5:d6:22:78:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
        Validity
            Not Before: Sep 15 23:53:49 2025 GMT
            Not After : Sep 14 23:58:49 2026 GMT
        Subject: CN=860681857B3ED81FB354E11FD4B5B06F39F77E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:20:44:4f:e8:4b:77:98:1f:11:02:ae:b5:
                    88:1d:e8:1e:53:5e:4a:12:3c:fa:07:ad:6a:1f:91:
                    74:bc:cd:38:32:31:12:23:02:4c:41:55:0b:50:10:
                    38:11:2f:75:8a:d8:9c:b7:c7:ae:07:38:45:48:a3:
                    cd:82:2f:fb:72:73:98:d5:36:d2:67:eb:88:74:19:
                    cb:3a:11:f2:f1:2c:82:9b:5e:a8:ac:7d:8a:85:e3:
                    bb:9a:b8:ce:79:ef:3f:f5:a2:ba:94:d6:63:87:46:
                    43:3f:c6:4d:aa:33:3f:e7:a6:ae:e4:ed:a2:3a:8a:
                    3a:85:5b:1d:b2:b5:c5:46:97:c4:24:a1:d6:94:80:
                    a3:9f:2d:ed:1e:1e:21:92:a4:63:60:78:1d:71:4b:
                    45:6d:0f:04:de:ef:2e:fa:82:ee:57:07:4a:0a:1f:
                    1a:dd:bf:9f:0d:b1:a8:37:28:7f:ad:63:66:4b:f7:
                    aa:48:ae:dd:08:48:a1:85:29:90:c8:f4:f2:11:ca:
                    3d:6c:5e:e2:f7:bd:b0:2a:86:db:0f:1a:2c:ef:fd:
                    77:b3:d8:fb:c3:b9:79:b3:da:76:d6:ee:ed:65:46:
                    6f:c8:a5:4b:60:e7:dc:a5:73:69:fc:e8:d5:0e:73:
                    0b:04:37:c5:7a:0b:9a:97:50:22:c1:4b:a5:f4:52:
                    32:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:06:81:85:7B:3E:D8:1F:B3:54:E1:1F:D4:B5:B0:6F:39:F7:7E:3C
            X509v3 Authority Key Identifier:
                keyid:F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a363030303a3a2f33362d3336203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         40:68:ad:8a:17:bc:f4:9b:61:65:cd:8a:3e:0c:54:9f:a2:f4:
         7a:98:0b:b4:c5:a2:c7:d1:cb:bb:89:41:ac:d8:11:66:ad:28:
         c0:3d:d2:84:0f:f8:90:87:03:d5:47:6f:5f:df:97:a8:86:79:
         35:b5:5b:33:11:fa:4c:97:e8:2e:5a:4c:29:64:84:22:bb:0e:
         ff:c1:9b:d1:98:b0:e2:dc:59:8c:3c:38:61:ba:2b:1d:aa:3c:
         bd:73:2a:c5:d6:ef:1f:d0:ab:12:ad:dd:2f:bb:c1:69:98:97:
         6b:3c:7b:d9:db:85:8f:da:70:45:04:e8:25:41:e3:a8:4f:6e:
         c1:4b:50:32:b6:a9:ab:ea:04:41:9f:0b:36:c0:17:d1:c9:cc:
         6d:4d:5f:50:8b:6d:55:6b:84:7e:80:10:1e:53:3f:2c:8a:c8:
         d8:c3:f3:dd:0e:98:4b:f0:5c:75:7c:dc:bc:b0:a3:5a:81:6f:
         79:42:48:68:32:95:82:a6:7c:f4:e4:e8:0b:b7:64:3a:01:de:
         74:a9:ec:5a:91:c6:ba:fb:7e:c1:be:11:f0:54:88:6c:a4:e1:
         fa:36:c1:e8:13:c3:14:7e:cf:e5:2f:42:9a:9e:a6:17:c5:7b:
         51:f7:01:2c:e8:fa:00:2a:8c:2c:59:9a:01:66:fe:bd:97:33:
         72:da:d2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:01:42 2025 by rpki-client