Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a393030303a3a2f33362d3336203d3e20323636323638.roa
File:                     323830343a336435343a393030303a3a2f33362d3336203d3e20323636323638.roa (raw, json)
Hash identifier:          HZUxfTjpQuZRF5d7qQ/8Aip4mfRe9iOIekRHaGiJtoc=
Subject key identifier:   DA:A4:AE:4C:FD:99:37:C6:F3:93:CE:7C:B4:74:37:DA:36:2F:64:CE
Certificate issuer:       /CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
Certificate serial:       09C743FB0FC2B8436288BCC2BE3CA94FD235E1C2
Authority key identifier: F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a393030303a3a2f33362d3336203d3e20323636323638.roa
Signing time:             Mon 15 Sep 2025 23:58:50 +0000
ROA not before:           Mon 15 Sep 2025 23:53:50 +0000
ROA not after:            Mon 14 Sep 2026 23:58:50 +0000
asID:                     266268
IP address blocks:        2804:3d54:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c7:43:fb:0f:c2:b8:43:62:88:bc:c2:be:3c:a9:4f:d2:35:e1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
        Validity
            Not Before: Sep 15 23:53:50 2025 GMT
            Not After : Sep 14 23:58:50 2026 GMT
        Subject: CN=DAA4AE4CFD9937C6F393CE7CB47437DA362F64CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ba:87:33:3a:0e:46:89:f2:6c:97:54:90:61:
                    ba:68:98:9e:b3:6c:5b:0e:e6:27:0e:7d:7f:01:3b:
                    51:9e:f1:96:2e:a6:85:35:b8:c8:9b:21:9d:17:9e:
                    d2:79:dd:1a:e5:24:cc:e3:f7:05:6f:b2:b0:43:9d:
                    26:e3:4f:9a:72:2e:9f:51:b8:11:b7:9b:10:4d:39:
                    98:95:50:8e:a8:72:31:7b:d2:a7:a2:68:09:4d:4b:
                    54:04:57:76:a0:ee:43:e1:70:9a:46:9f:3f:b7:63:
                    00:0c:ad:bd:f4:36:d8:c9:ad:e7:c7:bb:8b:de:69:
                    c9:5a:f7:d8:1f:f0:6a:e4:3d:2c:b4:09:d9:09:74:
                    a0:81:78:93:54:13:c7:12:9f:dc:c8:ce:9a:d6:59:
                    54:9a:66:f9:d6:de:31:1f:5f:ff:ad:1b:5e:72:38:
                    ba:02:cc:31:36:92:9c:35:de:af:6b:17:06:22:c3:
                    22:2d:33:a6:e3:ff:10:64:c6:c0:a8:75:4b:10:41:
                    52:9c:90:4f:fa:ab:40:13:99:5d:69:9f:67:39:3f:
                    e4:3d:f2:a9:08:3d:78:37:b0:12:73:7b:af:6d:09:
                    53:e5:f2:79:e6:97:5d:5c:33:e5:8a:18:dd:2b:ea:
                    1d:85:09:4d:8a:b1:75:47:d9:4d:32:75:7a:2f:63:
                    be:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A4:AE:4C:FD:99:37:C6:F3:93:CE:7C:B4:74:37:DA:36:2F:64:CE
            X509v3 Authority Key Identifier:
                keyid:F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a393030303a3a2f33362d3336203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         13:08:9a:bd:ef:29:9e:68:48:05:f4:bc:6f:f5:0b:f4:94:e0:
         bd:62:98:02:74:8a:58:bf:69:64:ae:7a:08:03:e6:dc:1a:fc:
         4a:a6:17:33:9c:1a:ac:98:12:5f:de:2d:42:69:e9:43:67:9e:
         fe:21:7a:38:42:01:2c:ba:ce:ab:89:67:55:e2:26:3d:3a:fe:
         1d:ad:64:bb:f5:9e:86:ed:5e:60:66:24:4b:52:58:22:eb:bc:
         bf:47:6a:9a:c6:e0:7b:f9:c3:9b:3e:b5:14:d4:01:e5:95:ad:
         78:fd:a2:33:62:85:78:32:ce:64:79:cb:4f:87:51:38:ec:e2:
         cc:d8:94:db:25:a8:4a:9e:49:8e:38:f9:a0:f0:5f:df:94:af:
         40:f7:5b:46:97:a4:32:26:be:97:fd:c0:82:17:26:4e:ff:d5:
         4d:4d:1d:95:d2:68:51:38:12:da:96:2d:6e:9b:bd:3d:26:ca:
         3f:c8:6e:49:d3:52:d3:f5:8e:9c:f7:8e:08:f2:9e:ee:c0:41:
         1d:d8:6c:ea:8e:36:08:57:70:ae:53:88:84:65:45:0f:74:1e:
         3d:bf:6d:c8:9f:51:36:85:06:71:94:04:55:28:a5:05:bb:72:
         c3:76:05:0b:5f:93:5a:f8:20:91:07:02:c3:23:05:d1:af:23:
         38:82:5f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:31:04 2025 by rpki-client