Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/323830343a346163303a3a2f33362d313238203d3e20323637323631.roa
File:                     323830343a346163303a3a2f33362d313238203d3e20323637323631.roa (raw, json)
Hash identifier:          4epJ9lVEGtoR0vWaiC0Iswc5dbzIPwfIhxIOekcVFQI=
Subject key identifier:   29:18:57:F3:D1:E7:2E:04:FB:5A:AD:EA:A2:1B:86:54:16:46:29:D8
Certificate issuer:       /CN=25C7F81AB8123826510AD39D4507448271E2A2E2
Certificate serial:       70A18089EDD9A0C5E746F9459709EF669F42DFDA
Authority key identifier: 25:C7:F8:1A:B8:12:38:26:51:0A:D3:9D:45:07:44:82:71:E2:A2:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C7F81AB8123826510AD39D4507448271E2A2E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/323830343a346163303a3a2f33362d313238203d3e20323637323631.roa
Signing time:             Fri 12 Sep 2025 16:35:11 +0000
ROA not before:           Fri 12 Sep 2025 16:30:11 +0000
ROA not after:            Fri 11 Sep 2026 16:35:11 +0000
asID:                     267261
IP address blocks:        2804:4ac0::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.crl
                          rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C7F81AB8123826510AD39D4507448271E2A2E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a1:80:89:ed:d9:a0:c5:e7:46:f9:45:97:09:ef:66:9f:42:df:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C7F81AB8123826510AD39D4507448271E2A2E2
        Validity
            Not Before: Sep 12 16:30:11 2025 GMT
            Not After : Sep 11 16:35:11 2026 GMT
        Subject: CN=291857F3D1E72E04FB5AADEAA21B8654164629D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ec:0e:c7:7c:fc:e1:32:fe:7e:6f:4a:ab:e9:
                    ad:8b:61:e2:44:f8:86:53:ee:5f:0d:41:e2:bd:a0:
                    5d:11:22:19:6a:5f:94:a2:24:82:84:39:cc:15:08:
                    1b:af:7a:6c:0d:1d:f0:69:4a:10:5f:a3:cf:18:02:
                    a9:a1:4d:50:46:c4:10:11:ca:6d:66:7f:1c:7e:76:
                    fd:76:97:ab:1a:be:49:41:21:4f:a1:77:25:c5:59:
                    76:95:dc:ab:20:cc:26:fe:b8:cc:3c:75:b5:75:c1:
                    f1:e2:1b:f0:6d:ba:10:13:e9:47:76:96:49:13:16:
                    fc:10:cd:ea:60:f5:c3:44:4d:5d:0b:e3:19:54:d4:
                    27:f7:34:e9:01:a5:02:d4:20:8e:87:da:4a:83:06:
                    69:7a:24:eb:2e:6c:21:18:3c:4b:80:1b:c2:90:21:
                    98:3a:37:d4:ca:09:70:99:10:9c:1d:aa:57:94:e1:
                    26:4a:e9:55:f6:8c:06:94:21:3b:33:81:5e:5c:79:
                    ef:14:d3:7d:ec:6a:47:64:a1:36:e6:22:85:34:eb:
                    26:53:e4:08:68:c9:e6:ee:5e:ee:56:f4:cf:b4:82:
                    4d:00:77:d9:b8:f4:1e:e1:0a:cc:14:4e:be:01:38:
                    99:15:05:79:24:97:c1:7b:1d:c3:24:32:1d:95:21:
                    d0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:18:57:F3:D1:E7:2E:04:FB:5A:AD:EA:A2:1B:86:54:16:46:29:D8
            X509v3 Authority Key Identifier:
                keyid:25:C7:F8:1A:B8:12:38:26:51:0A:D3:9D:45:07:44:82:71:E2:A2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/25C7F81AB8123826510AD39D4507448271E2A2E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C7F81AB8123826510AD39D4507448271E2A2E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BmQ9wXoc6rqVZqRkgRoYDUqKF7r2WMjLUbyAbRaByeH/0/323830343a346163303a3a2f33362d313238203d3e20323637323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ac0::/36

    Signature Algorithm: sha256WithRSAEncryption
         6b:1d:bd:92:c2:f6:20:a4:74:72:06:e6:fb:24:a9:6e:f0:d3:
         25:7e:4c:13:2d:0f:02:a8:bf:be:bd:f2:b7:b4:a8:f9:de:0c:
         c0:1c:89:36:8c:51:8a:56:03:3a:9f:78:2b:a1:70:51:5d:2f:
         1e:15:89:ac:58:85:69:a1:aa:17:eb:25:60:db:82:06:6a:2d:
         a2:89:f4:2b:f2:10:24:7f:00:13:f7:dc:f3:a6:f9:42:08:3e:
         0c:1e:c8:a4:4f:dc:4e:9e:1e:5b:0e:0a:3e:fc:c5:2c:e5:71:
         7d:15:ad:c0:a5:76:dc:a3:12:89:78:af:bf:d0:41:26:f2:18:
         73:aa:b1:c7:b0:30:43:b4:ee:d0:cf:53:3a:a9:f6:12:44:97:
         13:07:9f:80:79:f7:eb:a4:c4:4e:e5:18:32:fd:58:a9:30:5a:
         03:cb:94:53:3f:02:cd:48:c5:bc:e5:b3:c6:0d:45:e7:8e:5d:
         39:6e:ea:6c:fc:44:3a:bb:14:3d:fe:19:96:95:95:aa:04:34:
         91:db:31:26:61:b4:07:ef:d2:ab:5e:30:70:1a:15:af:41:c1:
         dd:51:ed:7d:01:7d:36:cb:60:a5:98:cc:fe:c3:6d:01:aa:ce:
         e2:35:23:de:39:da:78:c8:df:eb:22:47:a9:a7:85:7d:70:a0:
         3f:46:c2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:30:30 2025 by rpki-client