Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/323830343a336632633a3a2f33322d313238203d3e20323636363434.roa
File:                     323830343a336632633a3a2f33322d313238203d3e20323636363434.roa (raw, json)
Hash identifier:          6H0dUCYu+zpyOtjKrACs8ym/KLI6dHxy1ivwjplR+eE=
Subject key identifier:   6F:7A:12:E5:68:C1:44:55:31:28:C7:4D:42:42:A5:6A:03:B9:ED:08
Certificate issuer:       /CN=96A685ACC1AE4D09C4B25F227F9800FD9278C982
Certificate serial:       054432B2C75C9C159EE1971436E7B8C8DEDDED8E
Authority key identifier: 96:A6:85:AC:C1:AE:4D:09:C4:B2:5F:22:7F:98:00:FD:92:78:C9:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A685ACC1AE4D09C4B25F227F9800FD9278C982.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/323830343a336632633a3a2f33322d313238203d3e20323636363434.roa
Signing time:             Wed 03 Sep 2025 11:45:33 +0000
ROA not before:           Wed 03 Sep 2025 11:40:33 +0000
ROA not after:            Wed 02 Sep 2026 11:45:33 +0000
asID:                     266644
IP address blocks:        2804:3f2c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/96A685ACC1AE4D09C4B25F227F9800FD9278C982.crl
                          rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/96A685ACC1AE4D09C4B25F227F9800FD9278C982.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A685ACC1AE4D09C4B25F227F9800FD9278C982.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 01:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:44:32:b2:c7:5c:9c:15:9e:e1:97:14:36:e7:b8:c8:de:dd:ed:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96A685ACC1AE4D09C4B25F227F9800FD9278C982
        Validity
            Not Before: Sep  3 11:40:33 2025 GMT
            Not After : Sep  2 11:45:33 2026 GMT
        Subject: CN=6F7A12E568C144553128C74D4242A56A03B9ED08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:93:da:95:c3:a8:c0:99:13:16:af:0c:d0:
                    b2:a2:25:85:80:15:8e:80:8f:83:0a:0e:54:ab:e1:
                    1c:d4:aa:9f:31:8c:1d:65:20:1c:3a:38:e5:0c:d2:
                    6c:e3:55:c1:50:3d:e3:f0:81:05:cf:54:d3:f3:a2:
                    f3:2f:bc:8e:aa:c7:58:c1:a4:51:b7:9e:2f:2d:23:
                    06:03:aa:96:b2:86:42:61:6b:61:da:ec:c6:3e:0b:
                    4c:0f:88:f1:d9:c8:89:06:fb:85:25:cc:51:ab:dd:
                    27:f9:87:bf:80:24:c7:4a:58:e9:e9:9a:dc:4e:b4:
                    59:be:0a:3c:e0:5f:eb:3d:c3:27:0b:9c:4d:e4:9b:
                    71:25:3a:57:96:08:72:d5:52:96:76:29:17:03:f6:
                    47:f2:2d:03:e1:51:ca:df:b2:b5:70:4c:ac:41:11:
                    9d:c3:63:8e:6a:5c:0a:1e:39:76:d8:34:f8:32:71:
                    ed:7e:84:ef:74:ae:ee:85:4a:9a:6b:8b:e7:2e:65:
                    92:d5:e1:57:cf:4b:69:f9:50:61:a0:68:bd:bd:3f:
                    39:ad:cc:00:4e:43:02:f7:9b:3e:9a:7d:4e:48:b6:
                    e0:db:06:d1:46:91:e5:09:b2:e3:a6:95:a1:3f:52:
                    2c:0b:be:99:a8:91:74:d7:04:6e:6f:98:42:62:a8:
                    24:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7A:12:E5:68:C1:44:55:31:28:C7:4D:42:42:A5:6A:03:B9:ED:08
            X509v3 Authority Key Identifier:
                keyid:96:A6:85:AC:C1:AE:4D:09:C4:B2:5F:22:7F:98:00:FD:92:78:C9:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/96A685ACC1AE4D09C4B25F227F9800FD9278C982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A685ACC1AE4D09C4B25F227F9800FD9278C982.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/323830343a336632633a3a2f33322d313238203d3e20323636363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:4a:1f:f4:cd:01:33:a4:92:57:c1:5b:17:7f:38:c5:4e:69:
         d1:e0:ac:ae:27:03:7f:5a:7d:83:09:1f:23:88:61:b9:f6:88:
         60:ca:dd:92:5a:02:ad:1d:a6:05:d9:ee:f9:13:80:ce:a7:37:
         d1:7d:79:63:96:64:37:4a:67:61:98:36:80:8d:08:bd:13:9e:
         5a:2e:be:70:80:77:f0:ba:20:bd:28:01:53:36:05:2e:98:1a:
         e0:c3:61:70:f3:b0:c3:2e:30:a8:0e:c1:e4:e0:f1:7e:fa:d3:
         91:91:28:0e:2f:ad:33:f2:71:6f:f6:97:ed:27:7d:d1:ad:7e:
         a7:f4:5e:60:45:31:1f:32:e3:a6:37:de:c9:ab:4c:ab:cc:c1:
         e3:9a:06:9f:49:2b:87:30:02:74:c7:95:62:c0:d6:16:23:85:
         9c:fa:d7:67:e6:12:4e:ee:01:e1:5b:6f:bf:77:ad:f7:56:4c:
         0b:3f:12:37:88:d1:4d:b4:d7:01:62:e7:5c:52:c1:18:81:ab:
         33:6c:3f:e1:d9:c9:d1:3b:08:e7:a3:59:9a:e6:e6:db:f8:6a:
         72:4a:84:9b:2a:cf:47:91:db:bf:2a:c5:5a:77:05:8a:d3:39:
         2d:03:51:d6:b9:51:19:a5:58:c4:74:6e:2b:d4:2e:9d:76:69:
         71:ff:af:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:47:44 2025 by rpki-client