Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a383030303a3a2f33342d3334203d3e2030.roa
File:                     323830343a363539383a383030303a3a2f33342d3334203d3e2030.roa (raw, json)
Hash identifier:          qHW+GdfRMHPLo9IGgWHpnE5zqCPecCSj4tluvtchyMk=
Subject key identifier:   16:8D:98:E4:CE:18:76:04:24:45:EF:FC:24:31:8C:C1:84:34:33:62
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       1FCED22C23F31FF1D273BAB60F19D79B2E85EB87
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a383030303a3a2f33342d3334203d3e2030.roa
Signing time:             Sun 05 Oct 2025 18:22:49 +0000
ROA not before:           Sun 05 Oct 2025 18:17:49 +0000
ROA not after:            Sun 04 Oct 2026 18:22:49 +0000
asID:                     0
IP address blocks:        2804:6598:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Oct 2025 10:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ce:d2:2c:23:f3:1f:f1:d2:73:ba:b6:0f:19:d7:9b:2e:85:eb:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: Oct  5 18:17:49 2025 GMT
            Not After : Oct  4 18:22:49 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:c2:3f:83:ef:02:b3:f6:f5:7a:bf:39:5a:
                    c0:b7:07:be:e8:06:45:bd:bf:76:52:4d:6f:eb:fb:
                    dd:bd:b3:aa:32:71:91:00:41:d7:11:ea:60:73:bd:
                    9b:fb:4e:d6:48:45:4f:39:8a:ee:51:a0:9f:de:88:
                    d3:33:32:8d:fd:be:52:90:c5:27:da:22:91:b1:72:
                    90:ef:de:6b:7c:e7:cd:7c:b6:ad:72:fa:ed:b7:ca:
                    a5:af:ff:4c:4c:8b:97:74:fc:b6:7c:24:b8:7f:97:
                    e9:5b:15:5f:d4:36:7d:30:0f:01:2a:af:b3:46:46:
                    3e:6c:f6:84:02:3f:eb:a8:9a:ef:75:d5:31:6a:a1:
                    ca:9c:88:62:30:b8:4b:76:8c:17:c7:50:5d:fd:00:
                    f7:f3:ec:78:37:b8:1a:92:a1:10:60:e3:89:aa:ed:
                    9a:20:bb:84:bd:9c:45:22:f7:3e:ca:48:9d:82:97:
                    45:f3:4c:85:90:54:de:bd:8e:c1:77:0a:24:01:67:
                    7e:f6:13:6d:4c:50:4b:67:a8:82:04:0d:b3:09:12:
                    b6:c6:5d:b8:69:5f:e9:f1:29:d3:9c:e9:55:a0:9a:
                    a8:b5:ad:d0:21:c4:b7:6c:12:96:d6:af:16:40:5f:
                    c7:03:11:6d:6e:a5:14:5d:68:b4:d3:42:ee:1f:01:
                    23:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8D:98:E4:CE:18:76:04:24:45:EF:FC:24:31:8C:C1:84:34:33:62
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a383030303a3a2f33342d3334203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         13:40:0e:4b:bd:be:be:f8:56:15:bb:6e:3f:3b:6e:07:ce:49:
         2b:d5:07:33:b3:2c:0a:58:f7:f9:8b:38:7f:8b:b7:cd:b8:86:
         ef:7b:5e:8a:27:86:24:da:3f:74:c2:d6:e5:b5:07:d7:62:1e:
         01:7c:a3:58:9f:7d:6e:17:24:07:7f:c9:3a:36:1b:5e:36:7c:
         41:45:ac:17:bb:1c:09:86:d5:7e:a3:52:f9:de:a8:47:4c:e9:
         ab:e3:82:da:48:f3:88:98:fd:95:2f:de:b4:63:25:1c:04:f1:
         a7:a1:6a:33:a0:a9:98:52:f1:17:55:9f:d1:ce:92:51:c6:0d:
         13:86:39:54:2a:31:7f:1b:ff:8f:56:5a:f9:18:7b:72:dc:a3:
         61:d0:1a:a8:b5:96:03:17:9e:b1:4f:30:fc:b1:0f:60:63:17:
         40:4d:56:c9:26:92:a8:fc:91:8d:38:4c:00:b9:f1:93:63:4b:
         a2:3a:7e:48:f0:4f:27:81:71:60:0f:5b:f8:a8:2b:c9:b9:50:
         44:82:eb:0e:0a:e0:84:46:f6:f9:01:63:7d:1e:e3:4f:41:a6:
         0f:e9:19:6f:4a:23:7b:4e:e8:2f:dc:a6:7f:dc:2c:cb:61:b0:
         02:f2:da:9b:b6:21:ee:f8:b3:33:53:0c:9c:72:cc:08:81:77:
         eb:d8:d2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:01:47 2025 by rpki-client