Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3863303a3a2f34382d3438203d3e20323635313735.roa
File:                     323830343a326263383a3863303a3a2f34382d3438203d3e20323635313735.roa (raw, json)
Hash identifier:          ex2qeeoNyVvDedl6Lx1D5Gz74Gr6fO3XpXJTHz1pW90=
Subject key identifier:   67:F8:A1:8B:DF:98:4F:BB:E5:87:8D:17:E6:A7:5C:5E:85:A3:1E:F9
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       1290B330830111EA169A8FFFAF8B29807BFC492A
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3863303a3a2f34382d3438203d3e20323635313735.roa
Signing time:             Tue 09 Sep 2025 19:10:00 +0000
ROA not before:           Tue 09 Sep 2025 19:05:00 +0000
ROA not after:            Tue 08 Sep 2026 19:10:00 +0000
asID:                     265175
IP address blocks:        2804:2bc8:8c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 19:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:90:b3:30:83:01:11:ea:16:9a:8f:ff:af:8b:29:80:7b:fc:49:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Sep  9 19:05:00 2025 GMT
            Not After : Sep  8 19:10:00 2026 GMT
        Subject: CN=3082010A0282010100A610BE397E5BD009531AB34B5D94D51D32C8323D5C7ABE8D89750C5D1BB565B453D4828875B792819640E3B2EAA06E9C87AA88119B46C24BFC76946B363FC3874FCD2A7E59AEAE399256210D5644BA06C52747B4DA09FE9B6FD2764AC0CFA0A477D97736B655D9589555DA608226BD37CE3CBBBF6C4DE66E72B35F789CB157CF9525529AB2D7AF0DF7A225A633144348905A77B676F82DE4EE90D08E7294D5E9678E8F9077B2766E72FAD43278616C11EA02F42E640433A8DD02370DBB5425FD119C3DC85E4E0E69EC422C8AC8CCB9D737FB5AD6FA35C8165B47E28B2FC2944C58B93D395274D106840DD328AC4D753B04BF34ADCA163A0628E9373F5440C3550203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:10:be:39:7e:5b:d0:09:53:1a:b3:4b:5d:94:
                    d5:1d:32:c8:32:3d:5c:7a:be:8d:89:75:0c:5d:1b:
                    b5:65:b4:53:d4:82:88:75:b7:92:81:96:40:e3:b2:
                    ea:a0:6e:9c:87:aa:88:11:9b:46:c2:4b:fc:76:94:
                    6b:36:3f:c3:87:4f:cd:2a:7e:59:ae:ae:39:92:56:
                    21:0d:56:44:ba:06:c5:27:47:b4:da:09:fe:9b:6f:
                    d2:76:4a:c0:cf:a0:a4:77:d9:77:36:b6:55:d9:58:
                    95:55:da:60:82:26:bd:37:ce:3c:bb:bf:6c:4d:e6:
                    6e:72:b3:5f:78:9c:b1:57:cf:95:25:52:9a:b2:d7:
                    af:0d:f7:a2:25:a6:33:14:43:48:90:5a:77:b6:76:
                    f8:2d:e4:ee:90:d0:8e:72:94:d5:e9:67:8e:8f:90:
                    77:b2:76:6e:72:fa:d4:32:78:61:6c:11:ea:02:f4:
                    2e:64:04:33:a8:dd:02:37:0d:bb:54:25:fd:11:9c:
                    3d:c8:5e:4e:0e:69:ec:42:2c:8a:c8:cc:b9:d7:37:
                    fb:5a:d6:fa:35:c8:16:5b:47:e2:8b:2f:c2:94:4c:
                    58:b9:3d:39:52:74:d1:06:84:0d:d3:28:ac:4d:75:
                    3b:04:bf:34:ad:ca:16:3a:06:28:e9:37:3f:54:40:
                    c3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F8:A1:8B:DF:98:4F:BB:E5:87:8D:17:E6:A7:5C:5E:85:A3:1E:F9
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3863303a3a2f34382d3438203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:74:eb:3f:92:dc:b9:c8:62:78:23:e0:c7:55:e6:0a:9f:13:
         54:a8:09:04:d9:d3:72:5d:87:87:0b:28:e7:76:b9:38:38:ef:
         e9:bd:87:4f:d2:a4:5f:4f:7f:bf:16:da:ca:d6:be:fa:9a:c2:
         af:a0:42:83:7c:36:82:8e:ca:37:84:00:e3:b3:f4:72:aa:a9:
         8c:8d:10:a1:98:48:d3:22:07:b5:8e:e9:47:e9:28:87:54:11:
         34:3f:62:4d:c1:2e:82:6a:e5:9f:b0:3f:15:ea:ff:8e:56:1c:
         ed:a1:ba:48:41:73:8b:ab:19:86:8f:79:87:18:74:bf:18:64:
         fb:ff:aa:ec:5b:4e:14:13:da:16:35:9d:7b:b3:78:27:1b:71:
         3f:10:97:e1:fd:b3:41:c2:68:3a:ba:12:10:62:5a:8a:ae:33:
         27:9b:17:51:7b:3c:98:75:0b:97:a1:83:d7:86:67:73:b6:b6:
         b2:d8:e0:0f:b4:20:2c:40:56:a0:6d:35:23:dc:19:93:3e:a6:
         07:d3:a8:18:c7:aa:47:f1:15:87:ae:30:0c:bf:65:22:56:c7:
         a7:87:44:1e:44:c5:36:bf:33:30:ef:3d:aa:f6:3c:d3:31:d0:
         3f:b3:4e:9d:6f:c1:f5:3a:f8:0d:25:a0:43:60:d2:7d:67:65:
         39:0e:9e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:49:58 2025 by rpki-client