Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/323830343a393330343a383030303a3a2f33342d313238203d3e20323734373439.roa
File:                     323830343a393330343a383030303a3a2f33342d313238203d3e20323734373439.roa (raw, json)
Hash identifier:          8UlTE0PsRtnYcvuu7MFB/dcIM1uziu0AKGGwyH4carA=
Subject key identifier:   74:92:B4:65:20:45:87:0D:00:EF:DD:A4:11:E8:E2:97:93:03:66:0F
Certificate issuer:       /CN=84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B
Certificate serial:       3414D1A59CEA622456DF14EBDCB3576802F5E3E1
Authority key identifier: 84:95:5A:3B:55:62:5C:35:E5:CD:6F:BE:13:80:1E:9A:8E:1F:1F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/323830343a393330343a383030303a3a2f33342d313238203d3e20323734373439.roa
Signing time:             Tue 07 Oct 2025 21:36:07 +0000
ROA not before:           Tue 07 Oct 2025 21:31:07 +0000
ROA not after:            Tue 06 Oct 2026 21:36:07 +0000
asID:                     274749
IP address blocks:        2804:9304:8000::/34 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.crl
                          rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 18:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:14:d1:a5:9c:ea:62:24:56:df:14:eb:dc:b3:57:68:02:f5:e3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B
        Validity
            Not Before: Oct  7 21:31:07 2025 GMT
            Not After : Oct  6 21:36:07 2026 GMT
        Subject: CN=7492B4652045870D00EFDDA411E8E2979303660F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:2b:b3:de:94:01:9c:15:76:95:ca:95:dd:
                    fe:9a:ae:26:d3:83:25:e9:25:e0:86:0f:02:2c:d3:
                    dc:aa:52:94:5a:31:5e:74:c9:8d:43:4d:70:20:d4:
                    89:e1:35:62:7b:c9:e1:2f:84:de:c8:16:b7:71:16:
                    ea:a3:c8:61:35:d0:8b:91:b3:36:50:5c:c8:4f:11:
                    37:a1:fa:47:01:5f:f8:ea:4d:5e:39:aa:59:cf:c8:
                    11:d9:21:78:e2:29:9e:72:4a:41:08:10:f2:30:8e:
                    af:ce:77:8f:08:91:1f:0a:a1:12:24:bb:32:13:5f:
                    bc:7e:6e:b5:8b:8d:6f:a1:26:d3:0a:ba:ea:98:8d:
                    a3:d2:89:ed:98:82:02:65:ad:42:a4:2f:fa:a5:4e:
                    52:b9:ff:f0:b2:51:96:b9:a4:c6:ff:a1:dd:3c:9f:
                    6b:27:4f:00:24:03:fa:6e:9c:47:1b:dd:a0:19:ea:
                    d2:96:ad:e3:5e:a5:59:7f:60:48:9d:59:86:4a:27:
                    3a:37:f3:e4:20:b4:71:83:37:a8:d0:49:af:e9:d3:
                    93:39:6d:74:79:6b:7a:8b:14:5b:72:7f:8a:90:d9:
                    75:5a:2a:11:89:7c:26:a9:e2:b2:cb:a4:2f:b7:ff:
                    b5:c4:cd:9c:40:53:fc:f1:b3:58:e2:35:f2:ec:e5:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:92:B4:65:20:45:87:0D:00:EF:DD:A4:11:E8:E2:97:93:03:66:0F
            X509v3 Authority Key Identifier:
                keyid:84:95:5A:3B:55:62:5C:35:E5:CD:6F:BE:13:80:1E:9A:8E:1F:1F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84955A3B55625C35E5CD6FBE13801E9A8E1F1F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AiY9FfwiebnrJY2JaDhp7DSTdpE3JBJGVziBw5xXr5gJ/0/323830343a393330343a383030303a3a2f33342d313238203d3e20323734373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9304:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7f:a8:94:ab:3e:69:07:43:2b:6a:02:79:3b:ad:af:07:89:95:
         0a:7a:50:9c:4f:aa:00:26:7b:9a:97:5a:90:84:1b:c9:f1:33:
         fa:bc:a6:8a:65:36:96:0e:92:ef:2c:c8:76:00:44:ad:72:e7:
         86:e8:ac:a3:bc:f3:1c:1b:2a:b3:d7:60:fb:7d:41:67:58:55:
         c7:ec:71:dc:98:45:91:db:50:78:fd:3e:02:2a:52:02:ce:34:
         6c:1c:6a:7d:10:dc:e1:9a:c1:8f:64:ab:3f:de:26:66:b8:62:
         0d:3f:91:91:e8:14:14:1e:70:c0:89:bf:48:bc:a8:79:b3:70:
         1f:49:f6:0e:2a:62:a8:78:fe:ce:ef:47:00:bd:a8:7f:4c:b7:
         dc:6b:b1:a1:06:d8:82:aa:28:01:c6:da:fd:b4:29:c0:72:1c:
         38:f7:d8:4d:c7:99:41:2a:b7:a6:c0:bc:e8:13:cc:70:3c:fb:
         65:90:f0:7d:2a:a7:de:f8:4d:87:e2:85:cf:5e:5d:e9:b1:42:
         91:7e:97:7e:9a:08:6d:f8:e5:1e:fd:f4:a5:91:b1:b9:42:1a:
         d3:b8:93:0a:c8:22:ed:19:72:fa:63:c3:c6:54:ec:3b:c6:25:
         f4:86:59:0d:f1:b9:dc:59:ef:6c:fd:1c:9b:ce:2f:cd:01:6c:
         38:41:19:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:36:36 2025 by rpki-client