Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a343030303a3a2f33342d3334203d3e20323730393035.roa
File:                     323830343a373334343a343030303a3a2f33342d3334203d3e20323730393035.roa (raw, json)
Hash identifier:          4oa2Pqqjk+v9zjeeAZuE9nPiU+p6xlCBHnTjnFWf3r4=
Subject key identifier:   98:AF:46:87:65:62:30:BD:09:9D:12:CE:A9:4D:50:12:87:C7:AB:D4
Certificate issuer:       /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial:       20341D46F335014DEF0F0755FC96C89614492132
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a343030303a3a2f33342d3334203d3e20323730393035.roa
Signing time:             Wed 01 Oct 2025 16:15:51 +0000
ROA not before:           Wed 01 Oct 2025 16:10:51 +0000
ROA not after:            Wed 30 Sep 2026 16:15:51 +0000
asID:                     270905
IP address blocks:        2804:7344:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
                          rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:34:1d:46:f3:35:01:4d:ef:0f:07:55:fc:96:c8:96:14:49:21:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
        Validity
            Not Before: Oct  1 16:10:51 2025 GMT
            Not After : Sep 30 16:15:51 2026 GMT
        Subject: CN=98AF4687656230BD099D12CEA94D501287C7ABD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:d6:9c:89:9d:39:ca:df:cd:e9:bc:d4:4a:
                    5b:25:73:b1:9f:4d:0f:1a:a4:44:c9:c3:27:9e:20:
                    ea:15:9a:69:ca:06:cb:31:d9:9f:9b:27:11:fc:61:
                    bb:80:da:d7:54:72:43:df:be:b1:d2:dd:d6:b8:9a:
                    a7:4c:8e:43:5d:0a:68:42:8b:54:31:c5:49:1d:89:
                    7c:b4:eb:18:8f:54:a1:01:64:a8:ad:1e:a3:84:d2:
                    24:4b:89:82:74:2c:6d:36:3e:95:33:05:11:e6:cc:
                    fa:c8:aa:b6:d4:53:33:13:ef:2d:bd:8a:e2:ff:62:
                    6c:b9:fa:ca:9b:c4:64:71:a1:6d:ab:20:66:62:7d:
                    ed:cc:e8:75:df:c2:dd:e8:b0:1b:b8:e7:0e:f8:31:
                    fc:40:b7:a6:e9:a1:f3:2e:5e:2a:c0:f3:83:f2:3e:
                    ee:87:1e:f4:4d:cb:b3:87:be:c8:84:85:25:de:3e:
                    c0:8f:ce:2b:76:76:38:d6:27:eb:d6:5e:2f:e2:56:
                    31:46:99:51:f3:1f:03:73:61:92:82:83:86:2d:91:
                    13:7a:0d:57:67:76:18:5e:d1:72:73:86:26:b0:cf:
                    2e:f0:9b:93:97:3c:35:f9:c1:2f:85:ef:24:8e:16:
                    93:81:3e:c0:94:f7:97:15:66:e5:20:d4:6d:16:c2:
                    51:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AF:46:87:65:62:30:BD:09:9D:12:CE:A9:4D:50:12:87:C7:AB:D4
            X509v3 Authority Key Identifier:
                keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a343030303a3a2f33342d3334203d3e20323730393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7344:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6f:25:3e:3d:5e:13:1b:45:c3:2d:b9:84:d2:97:14:67:b2:b5:
         8f:39:96:2c:f2:51:7f:0c:f9:cb:79:1d:f5:85:d1:72:db:f5:
         47:5d:59:a4:2e:cb:42:f9:9e:62:6d:19:60:40:7a:df:84:01:
         fd:a7:9f:d9:73:ad:26:9e:e0:f2:bc:62:7e:9e:80:0a:25:7e:
         79:8c:8c:f1:f0:c8:b4:20:07:11:c2:d1:f5:61:6d:3a:12:50:
         2b:97:9c:25:cd:61:37:88:f9:2f:c9:f0:b2:70:c6:b5:32:ac:
         6c:b8:16:b0:9b:9b:a6:52:49:db:7f:26:94:7e:90:07:81:4f:
         5c:b7:f6:f1:95:05:b3:51:36:f6:58:f7:53:7e:c1:0c:27:e0:
         77:d5:ff:60:3c:e9:38:1e:93:66:41:28:aa:32:44:f5:79:19:
         f1:94:0a:9c:e6:c2:2a:0c:7b:d4:97:e7:f2:4a:50:22:d1:77:
         c8:55:53:9a:b9:c9:60:b2:55:d7:1c:76:7a:9f:3d:fb:68:15:
         83:b1:1f:0a:b1:4a:09:86:40:7d:ed:f4:ac:2f:3d:2c:3d:1e:
         2c:7e:e2:de:69:e4:13:eb:1b:b5:41:b2:c6:7d:54:20:d6:bc:
         2f:ca:32:7f:9b:54:c6:83:60:80:d3:a2:c7:f6:ad:51:42:f3:
         a8:f0:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:07:45 2025 by rpki-client