Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a663030303a3a2f33362d3336203d3e20323636323638.roa
File:                     323830343a336435343a663030303a3a2f33362d3336203d3e20323636323638.roa (raw, json)
Hash identifier:          hwGtGjuN6DUzNxwigKtGq6bmre8M3BxJjhb8l3y+wFs=
Subject key identifier:   84:D6:0F:17:D0:02:C7:32:83:22:F4:82:EA:FA:0F:10:50:DC:55:B5
Certificate issuer:       /CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
Certificate serial:       7628332D8130D8376D2C150964332950A1E883D1
Authority key identifier: F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a663030303a3a2f33362d3336203d3e20323636323638.roa
Signing time:             Mon 15 Sep 2025 23:58:43 +0000
ROA not before:           Mon 15 Sep 2025 23:53:43 +0000
ROA not after:            Mon 14 Sep 2026 23:58:43 +0000
asID:                     266268
IP address blocks:        2804:3d54:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl
                          rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:28:33:2d:81:30:d8:37:6d:2c:15:09:64:33:29:50:a1:e8:83:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D
        Validity
            Not Before: Sep 15 23:53:43 2025 GMT
            Not After : Sep 14 23:58:43 2026 GMT
        Subject: CN=84D60F17D002C7328322F482EAFA0F1050DC55B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fc:d9:15:b4:8f:67:6b:89:ae:f8:5f:69:92:
                    6d:34:9d:7b:03:46:3b:3b:90:95:94:f1:e0:5e:bc:
                    88:bb:46:3f:ef:b7:cc:77:3f:72:96:da:b7:28:79:
                    67:64:c6:b9:f9:b0:4b:65:60:0b:03:49:5c:2a:f9:
                    6a:b9:3c:7d:83:80:b1:53:09:c1:22:26:cb:e4:84:
                    c8:b5:ff:39:ec:e6:f9:40:56:5e:0a:fd:35:ce:f2:
                    c8:5c:33:04:cb:68:6f:36:be:74:5b:9e:53:3f:03:
                    f3:23:10:2b:46:62:64:6d:7a:65:c2:9f:11:fc:e6:
                    c5:f0:ef:a1:a7:c2:09:b9:6f:db:f4:67:5e:19:a1:
                    5a:cd:3a:17:37:fa:a8:03:70:77:30:8c:1c:c9:ca:
                    a4:18:ea:e6:59:a8:0a:f3:1b:63:31:04:3c:12:b0:
                    8b:d7:e2:06:86:94:1d:28:4e:7c:d0:91:ca:6a:17:
                    97:e4:6e:7d:e4:b9:0c:86:e8:8f:7b:61:b3:1f:58:
                    4f:8a:5f:ec:a2:00:4b:75:e5:2b:8d:41:74:b6:e1:
                    60:a3:46:e1:7b:69:5a:ce:97:ba:b2:1a:ee:5b:29:
                    5e:76:d9:3b:09:f2:af:61:15:bb:f7:2f:79:09:81:
                    7c:09:8a:b1:ef:ce:91:53:2b:93:10:5c:9b:31:66:
                    b3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D6:0F:17:D0:02:C7:32:83:22:F4:82:EA:FA:0F:10:50:DC:55:B5
            X509v3 Authority Key Identifier:
                keyid:F8:05:FD:D6:74:7B:0D:EC:B3:1D:3B:6B:E8:B0:0F:0B:17:ED:55:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F805FDD6747B0DECB31D3B6BE8B00F0B17ED554D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97Qwv9XZqBL3jZiLXfS9rbFExTZQpwd1B4cX7crovbMp/0/323830343a336435343a663030303a3a2f33362d3336203d3e20323636323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d54:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3d:11:35:c7:8a:1e:54:01:83:69:03:71:36:22:e3:0a:e2:47:
         d7:05:ea:79:99:3a:93:08:ec:48:cf:5a:48:8e:8e:aa:b7:e1:
         79:45:6c:fc:95:01:ac:7e:99:23:10:2a:50:13:10:c9:e8:87:
         8d:8e:b1:59:14:8f:33:3b:30:e9:3e:cc:73:2e:48:d2:a5:ff:
         fa:61:22:02:12:ed:f9:46:a5:63:dc:2e:54:d1:0e:e5:2c:69:
         91:bc:c8:73:82:b7:e7:8c:e3:43:15:63:ab:aa:84:ad:43:16:
         ab:fa:f9:0f:cc:23:58:67:2e:ef:77:29:e5:c3:c5:a1:c0:43:
         bc:02:7c:32:59:d4:0d:f3:b6:69:12:62:ef:2f:4d:b1:4c:ac:
         7e:9f:5f:43:f0:ee:67:23:b2:28:6a:c4:8a:47:01:71:bf:23:
         ab:d5:1d:cc:d6:14:b9:cb:90:5f:b5:6d:e7:0c:4e:59:92:55:
         24:da:d5:19:55:40:cd:0d:27:ee:cd:99:2d:e1:69:d1:7a:17:
         7e:56:88:69:12:22:90:4b:82:a0:ee:65:e3:04:be:86:2c:fb:
         2f:a5:66:ce:a2:81:fe:73:c0:50:67:40:36:e0:89:3e:68:bd:
         64:0c:24:f9:85:2d:45:ce:44:f1:25:86:7f:a1:a2:b0:1a:7d:
         3d:a3:45:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:34:06 2025 by rpki-client