Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/323830343a333361303a3a2f33322d313238203d3e20323635343038.roa
File:                     323830343a333361303a3a2f33322d313238203d3e20323635343038.roa (raw, json)
Hash identifier:          Kp/b8Wyk12Q+ELS2bZBR7kZz/oKY/oUsXFFo2MBDT0Y=
Subject key identifier:   18:EF:90:FF:E6:98:BF:35:75:D2:A0:B6:34:67:43:C5:14:6E:EA:7B
Certificate issuer:       /CN=2F6E3A878A125B74BB292CE5412A523F4B1DCBAF
Certificate serial:       2590F7F393EC6C082DD79D82C52465CE2ED3008C
Authority key identifier: 2F:6E:3A:87:8A:12:5B:74:BB:29:2C:E5:41:2A:52:3F:4B:1D:CB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/323830343a333361303a3a2f33322d313238203d3e20323635343038.roa
Signing time:             Tue 28 Oct 2025 12:11:41 +0000
ROA not before:           Tue 28 Oct 2025 12:06:41 +0000
ROA not after:            Tue 27 Oct 2026 12:11:41 +0000
asID:                     265408
IP address blocks:        2804:33a0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.crl
                          rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 03:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:90:f7:f3:93:ec:6c:08:2d:d7:9d:82:c5:24:65:ce:2e:d3:00:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F6E3A878A125B74BB292CE5412A523F4B1DCBAF
        Validity
            Not Before: Oct 28 12:06:41 2025 GMT
            Not After : Oct 27 12:11:41 2026 GMT
        Subject: CN=18EF90FFE698BF3575D2A0B6346743C5146EEA7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1c:ec:aa:5e:a7:a4:ba:00:72:20:ea:0d:b7:
                    31:c8:99:8d:1d:c0:a5:74:81:19:08:fb:bc:8c:5a:
                    a5:76:ba:02:77:c6:ab:16:ec:46:aa:eb:88:31:c1:
                    25:f8:83:79:a4:b2:e8:1e:8a:48:fd:ed:c0:a0:0b:
                    cf:f3:0e:73:48:85:ea:7e:fb:08:d2:15:d5:2f:5c:
                    43:fd:15:0e:82:cd:c4:bc:e8:3d:6d:47:54:42:6f:
                    31:29:92:a7:e9:c6:28:40:d0:55:87:a9:f3:c6:f5:
                    dc:64:67:b1:73:d9:ce:0b:13:02:6c:99:b1:9c:bb:
                    d1:3c:ae:8b:51:af:f0:d3:90:f9:91:9c:85:f6:27:
                    8f:03:d1:16:3a:17:22:cd:a2:02:c4:a2:4e:b8:20:
                    d9:d3:53:17:0a:72:ad:bb:8e:aa:90:c6:0c:78:d8:
                    32:06:a6:36:59:fe:17:68:2a:ac:01:48:fc:cc:f2:
                    7b:b7:f1:5f:ed:56:f6:0f:64:b6:62:ba:9f:f7:3a:
                    81:04:c9:61:3d:1c:c7:f0:31:e1:60:e3:aa:76:c1:
                    c1:65:5b:bd:e7:7c:0e:b3:9a:f6:7a:f0:bf:ed:7a:
                    a9:23:f6:d7:f4:06:07:0f:af:6c:22:6a:53:ae:da:
                    f5:a4:85:95:93:88:fb:38:12:5d:01:ec:5c:14:e6:
                    ac:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EF:90:FF:E6:98:BF:35:75:D2:A0:B6:34:67:43:C5:14:6E:EA:7B
            X509v3 Authority Key Identifier:
                keyid:2F:6E:3A:87:8A:12:5B:74:BB:29:2C:E5:41:2A:52:3F:4B:1D:CB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F6E3A878A125B74BB292CE5412A523F4B1DCBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9knH1AeqdXT6GLmuJsZsMpbJRKWekDeCSrcXsyLPDjsf/0/323830343a333361303a3a2f33322d313238203d3e20323635343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:8a:66:58:95:9b:d6:fe:bc:4f:d3:b3:d6:71:82:6c:ee:f8:
         a6:81:74:95:83:e5:63:2e:78:8c:18:ae:91:9a:cf:dd:9b:2a:
         cc:be:41:43:bb:13:4d:ed:a6:11:18:fe:5b:0a:d9:97:55:fa:
         cd:a2:93:79:34:f8:85:ba:11:5d:10:fe:de:9b:9a:01:c2:d0:
         15:d7:d1:a6:4e:e4:59:c9:57:6c:97:be:88:ab:ea:53:98:2d:
         dc:be:9a:b4:38:00:7e:9e:82:c9:d6:c2:b7:9a:f8:f1:af:ba:
         7e:29:1e:9c:86:4a:34:15:d3:62:92:06:44:90:d4:98:92:2a:
         45:0c:fb:3b:a8:c6:81:cb:7c:75:de:e2:4d:79:4b:2e:6d:c0:
         ef:33:cc:6d:9d:67:59:2a:7c:ca:23:f5:42:2c:fd:39:04:e1:
         c6:eb:85:6d:4c:9a:69:3f:6d:68:5e:f8:ee:0a:91:3b:a4:06:
         19:44:2b:5d:01:98:3a:b3:42:81:dd:ff:83:f7:da:b5:a1:df:
         d7:dd:6b:9c:33:f6:50:34:13:ab:89:cb:44:c0:07:ae:37:bd:
         11:33:08:68:6f:ba:d8:43:25:6f:48:a0:8f:a5:3c:38:81:50:
         7a:48:29:f6:74:02:05:f2:bf:bf:0d:65:49:0a:82:ae:6f:07:
         0b:de:c2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:04:00 2025 by rpki-client