Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a383030303a3a2f33332d3333203d3e20323636323638.roa
File:                     323830343a336435343a383030303a3a2f33332d3333203d3e20323636323638.roa (raw, json)
Hash identifier:          pp0YX5Di4LnxFJAzQ23KT/zwwAWhpy6h2tCSJnM1xzc=
Subject key identifier:   6B:A9:0A:97:70:C6:BE:D3:43:D2:1D:F2:DC:D7:A4:B7:4A:43:A6:C2
Certificate issuer:       /CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
Certificate serial:       017D49E0E697CEAE3042A48C0507E99BC50ED60A
Authority key identifier: F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a383030303a3a2f33332d3333203d3e20323636323638.roa
Signing time:             Mon 15 Sep 2025 23:58:41 +0000
ROA not before:           Mon 15 Sep 2025 23:53:41 +0000
ROA not after:            Mon 14 Sep 2026 23:58:41 +0000
asID:                     266268
IP address blocks:        2804:3d54:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7d:49:e0:e6:97:ce:ae:30:42:a4:8c:05:07:e9:9b:c5:0e:d6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
        Validity
            Not Before: Sep 15 23:53:41 2025 GMT
            Not After : Sep 14 23:58:41 2026 GMT
        Subject: CN=6BA90A9770C6BED343D21DF2DCD7A4B74A43A6C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3d:6e:f4:23:61:f4:7d:d1:68:a9:ff:73:30:
                    48:8d:7f:35:3a:92:07:89:de:f1:50:09:6c:5d:ae:
                    81:4f:5e:00:9e:f1:16:8b:be:27:94:1e:0e:58:55:
                    8c:af:0d:43:9a:0d:54:10:7f:cd:ed:75:8d:83:1e:
                    6f:9b:68:06:6d:dd:9c:ec:95:43:b0:62:93:9f:fd:
                    91:37:e6:82:51:df:1d:3f:0a:f8:0a:71:15:4a:3b:
                    6f:85:37:dd:7f:a8:11:d4:f6:ee:53:02:6f:29:88:
                    4e:7d:70:e8:c2:26:6f:71:15:87:a0:c8:e3:63:15:
                    29:19:cf:ae:80:72:58:a0:28:0a:21:f5:e7:da:98:
                    dc:66:46:ff:68:b3:36:97:ff:df:03:a7:c1:82:56:
                    5d:04:34:a1:27:a1:cb:c6:7a:0e:13:f9:78:08:b3:
                    e7:28:d2:2b:e0:f3:6f:06:2e:c7:21:ed:8b:30:38:
                    f8:fc:3d:b3:02:e7:c7:b0:f6:3f:f9:e7:c7:a4:da:
                    93:2b:2a:10:dc:89:5d:0a:a6:e3:cf:e2:3a:37:6c:
                    05:f7:21:4b:b0:62:ea:b7:df:16:89:10:56:00:7c:
                    2b:97:cc:df:2b:c5:7d:34:8e:89:2f:f8:03:a9:df:
                    e4:3d:2d:a1:44:94:31:17:9e:c2:3a:67:03:eb:6d:
                    5f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A9:0A:97:70:C6:BE:D3:43:D2:1D:F2:DC:D7:A4:B7:4A:43:A6:C2
            X509v3 Authority Key Identifier:
                keyid:F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a383030303a3a2f33332d3333203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         38:b2:dd:37:c4:f3:ee:bd:a2:d9:de:31:92:13:98:9b:91:67:
         10:0f:49:61:4e:39:68:4b:52:0b:b1:0a:54:86:cf:3a:99:d5:
         15:31:c2:c5:46:61:42:11:c0:dd:4d:94:ce:47:4b:57:9d:8c:
         7d:f7:f0:b5:ab:06:8f:79:5e:7f:a6:a5:1a:69:18:9e:4f:c6:
         77:35:f9:96:79:28:46:23:8c:9f:b0:f8:fb:0d:e5:aa:7c:52:
         ee:bf:d1:33:35:68:41:75:e6:f4:e8:d2:4a:42:aa:b5:04:47:
         60:77:09:5e:d1:87:8e:d5:57:80:86:d4:d6:e5:d8:3b:37:09:
         4a:81:c7:54:0e:d9:bc:e0:aa:46:71:97:ee:56:a4:a1:7f:ec:
         b9:1f:90:09:d8:20:cb:e3:46:a9:56:ce:73:cb:7e:75:34:6a:
         92:ba:bc:3b:d1:09:2f:79:f8:36:80:37:d0:05:9e:ab:18:49:
         37:58:63:e3:3a:af:b4:d6:ee:e3:f9:60:b6:80:01:7c:05:15:
         0e:9e:18:b3:e7:48:d2:48:b3:f7:b2:2c:42:a7:34:d0:99:25:
         38:8a:60:40:b3:20:02:17:67:91:5c:87:e4:fe:31:bb:36:af:
         8c:97:48:6a:db:1e:3e:ef:70:73:be:c2:7c:67:90:45:ae:9c:
         b7:b6:f1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:32:26 2025 by rpki-client