Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a3a2f33342d3334203d3e20323730393035.roa
File:                     323830343a373334343a3a2f33342d3334203d3e20323730393035.roa (raw, json)
Hash identifier:          W6gEhC0BdyjXA01tT7J7K2zLIa0l8RKWQqfOCow1TBM=
Subject key identifier:   B6:A7:43:C7:84:B6:A2:EB:1E:01:6D:A2:03:23:4C:46:BF:56:7E:F3
Certificate issuer:       /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial:       486FFA2C6208588714D7B083EDFDDCF0A289F3B3
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a3a2f33342d3334203d3e20323730393035.roa
Signing time:             Wed 01 Oct 2025 16:15:47 +0000
ROA not before:           Wed 01 Oct 2025 16:10:47 +0000
ROA not after:            Wed 30 Sep 2026 16:15:47 +0000
asID:                     270905
IP address blocks:        2804:7344::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
                          rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6f:fa:2c:62:08:58:87:14:d7:b0:83:ed:fd:dc:f0:a2:89:f3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
        Validity
            Not Before: Oct  1 16:10:47 2025 GMT
            Not After : Sep 30 16:15:47 2026 GMT
        Subject: CN=B6A743C784B6A2EB1E016DA203234C46BF567EF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8a:fb:36:1a:1a:c4:e8:22:78:58:6f:d3:9c:
                    33:01:d1:bd:09:a6:94:ea:64:6c:30:5f:73:fa:6b:
                    4c:83:a8:ae:c7:87:78:a2:0f:b1:fa:02:29:85:12:
                    9c:f3:4d:4c:0d:cd:ab:59:11:e4:ed:17:2a:9b:80:
                    01:7f:78:66:6e:65:27:d6:d7:8f:51:0b:9a:80:1a:
                    f3:3b:22:26:0c:bb:b0:e6:c4:a9:a1:f5:2e:ee:dd:
                    5c:db:45:4b:40:2c:65:67:a3:f5:01:b1:e8:89:89:
                    31:b5:0b:ce:b3:46:29:6e:73:13:25:29:62:7a:13:
                    06:0b:8f:3b:b9:8b:3e:dc:cc:92:88:a3:90:03:d0:
                    57:c3:9e:4a:7f:13:64:94:90:6c:71:5a:bd:51:0e:
                    86:90:83:d9:fa:1c:4f:95:bf:0e:8e:e3:74:36:f4:
                    6b:fe:4e:6a:c2:c6:13:a3:50:c9:c1:55:4b:26:cd:
                    39:ca:e5:95:37:bb:6d:4a:be:d1:69:a2:e8:8f:5a:
                    e3:a2:f5:64:74:8b:e7:1c:5d:36:33:5d:3e:d8:36:
                    ec:24:ef:f8:02:21:2a:e8:59:b5:0b:7d:51:ed:ea:
                    e8:97:63:81:21:66:71:f6:a8:98:47:14:0f:30:cb:
                    c0:6b:76:16:f9:7a:7f:42:a9:9d:9a:8b:06:ff:35:
                    2e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A7:43:C7:84:B6:A2:EB:1E:01:6D:A2:03:23:4C:46:BF:56:7E:F3
            X509v3 Authority Key Identifier:
                keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a3a2f33342d3334203d3e20323730393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7344::/34

    Signature Algorithm: sha256WithRSAEncryption
         16:eb:8e:12:1b:f3:63:c8:25:49:4c:67:d6:47:15:36:64:25:
         e7:56:c6:9f:2d:16:76:ce:ae:59:2e:76:42:7e:92:c6:d8:5f:
         1d:a1:ae:63:aa:11:c7:d3:b5:bc:57:c0:84:76:89:b0:43:fd:
         b6:51:b9:69:49:56:4a:95:22:e0:27:45:5c:ef:ee:96:97:9d:
         28:5d:88:cd:b0:92:80:ab:74:25:de:98:63:57:f2:92:b8:e8:
         73:be:94:c3:cd:f3:40:75:34:eb:fe:7d:68:da:7a:cb:06:5a:
         14:6b:04:8a:7e:1e:0f:a5:9c:21:4c:95:0b:ff:ab:7e:2e:6b:
         aa:72:66:f5:67:f2:81:d1:12:61:45:fc:29:23:08:dc:95:6d:
         23:11:ef:e1:e9:87:94:81:c4:87:04:e7:4b:37:01:f5:a1:da:
         c9:ad:bc:9b:86:e2:eb:9d:16:a7:da:89:76:24:26:9a:35:ae:
         7c:21:16:65:b8:06:bc:50:a9:df:9a:10:41:b9:07:77:16:e0:
         c2:18:72:04:4d:72:7a:7b:60:ee:31:e7:ab:7c:e4:bf:d2:06:
         b9:42:7d:bb:8b:57:2e:3f:1b:c3:29:0d:46:fe:d3:24:41:b5:
         dd:7d:b8:e0:a2:c6:6a:20:86:ad:d1:bf:35:af:32:4d:b7:88:
         84:90:35:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:07:46 2025 by rpki-client