Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a323030303a3a2f34302d3430203d3e20323635343638.roa
File:                     323830343a333439633a323030303a3a2f34302d3430203d3e20323635343638.roa (raw, json)
Hash identifier:          5T7MSkgaxTJ/rqCWIgYcgyi/8FfzgGH+U23C/YlzQa0=
Subject key identifier:   EF:6B:04:C0:D8:DC:A1:D3:15:44:91:4C:7D:CC:A0:24:22:EE:C1:44
Certificate issuer:       /CN=D122D268516BC498BFD4DFF4B38F0B442647ABE4
Certificate serial:       450ECED04EDACD0E56A5D73D9930A1FBB11749F6
Authority key identifier: D1:22:D2:68:51:6B:C4:98:BF:D4:DF:F4:B3:8F:0B:44:26:47:AB:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D122D268516BC498BFD4DFF4B38F0B442647ABE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a323030303a3a2f34302d3430203d3e20323635343638.roa
Signing time:             Tue 16 Sep 2025 15:49:20 +0000
ROA not before:           Tue 16 Sep 2025 15:44:20 +0000
ROA not after:            Tue 15 Sep 2026 15:49:20 +0000
asID:                     265468
IP address blocks:        2804:349c:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D122D268516BC498BFD4DFF4B38F0B442647ABE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0e:ce:d0:4e:da:cd:0e:56:a5:d7:3d:99:30:a1:fb:b1:17:49:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D122D268516BC498BFD4DFF4B38F0B442647ABE4
        Validity
            Not Before: Sep 16 15:44:20 2025 GMT
            Not After : Sep 15 15:49:20 2026 GMT
        Subject: CN=EF6B04C0D8DCA1D31544914C7DCCA02422EEC144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:9a:91:ae:f8:f1:76:ec:dd:87:f4:41:93:
                    f8:1e:8e:ad:c3:fe:ec:ac:a4:c2:dd:99:56:6f:17:
                    9e:a4:a8:f2:2c:88:55:46:d9:55:68:c0:9b:84:8a:
                    be:ad:b4:2c:9b:7c:35:57:24:a5:00:76:bf:9f:ac:
                    29:22:af:2a:a5:96:5e:9e:dd:16:69:fe:cd:e8:b6:
                    c5:0a:77:a6:88:5b:2c:b6:23:52:e3:50:44:50:5f:
                    06:64:cc:73:f5:d0:82:d4:54:71:74:6d:90:f0:7c:
                    4e:eb:d0:db:ff:0d:72:43:4e:28:84:63:67:77:a7:
                    8c:ca:b1:d5:1e:2d:e7:6e:41:eb:53:d4:25:a7:32:
                    f3:ec:ed:38:08:3d:4d:86:6e:d6:fe:34:b9:51:c9:
                    30:1d:10:3c:41:f0:87:06:7c:0b:03:88:63:e8:ef:
                    fb:f9:36:3b:f1:4b:46:7d:49:9f:f4:0f:77:e8:2b:
                    a7:88:1f:a2:34:73:f6:1a:1e:36:59:7c:da:37:e4:
                    fe:28:58:11:e9:1f:58:2f:ad:1b:f4:3f:84:a9:0c:
                    0f:73:09:27:a8:15:17:da:b1:d1:56:00:b6:48:f9:
                    c7:a8:ab:65:0e:a7:e9:ee:1f:81:b0:e6:b4:5c:60:
                    c2:41:16:e8:09:2a:6a:61:3a:12:1e:c1:c4:55:7c:
                    57:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6B:04:C0:D8:DC:A1:D3:15:44:91:4C:7D:CC:A0:24:22:EE:C1:44
            X509v3 Authority Key Identifier:
                keyid:D1:22:D2:68:51:6B:C4:98:BF:D4:DF:F4:B3:8F:0B:44:26:47:AB:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/D122D268516BC498BFD4DFF4B38F0B442647ABE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D122D268516BC498BFD4DFF4B38F0B442647ABE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/323830343a333439633a323030303a3a2f34302d3430203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:349c:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:9b:d3:31:db:8f:3b:0d:d3:98:a8:32:5b:73:1c:b0:c3:91:
         6a:d1:47:c3:0f:7f:70:0f:40:0f:04:b2:ca:ee:c0:2a:d6:6c:
         ca:60:dc:88:9b:b8:4e:9c:38:84:f3:26:2d:b5:55:3d:df:8c:
         3e:db:23:bb:e8:bc:3d:6f:e8:85:85:df:02:ab:17:ff:1c:79:
         b0:ab:ed:63:bf:69:fa:59:c6:a0:97:35:21:e3:75:a8:87:f4:
         29:82:a6:15:7a:9d:29:d3:c2:63:59:1a:81:6a:c5:9d:19:b8:
         c3:b5:18:00:bd:ec:76:ea:62:2a:f3:04:22:bd:1e:d8:8b:3a:
         5e:7e:fe:a4:e6:4d:75:06:ee:b1:63:dc:f8:95:cc:67:f7:4a:
         f6:21:7b:9d:39:37:f4:09:cb:9b:29:f9:22:53:8e:07:15:f7:
         da:5b:2b:b4:37:2b:cb:46:eb:3f:5d:de:f6:89:12:24:bb:fc:
         01:4a:be:7c:19:f0:5a:28:ee:08:cd:6c:0d:47:56:94:d0:aa:
         05:e7:21:b1:5d:37:c8:67:39:91:a5:1e:04:7f:f8:bf:b8:23:
         8f:db:f2:30:05:a0:fc:ed:0c:60:7b:88:f2:c6:7c:21:fe:77:
         05:f8:34:84:0b:c0:fd:d9:e7:63:bd:80:01:b8:25:55:38:a5:
         b9:4e:29:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:55:45 2025 by rpki-client