Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3438203d3e20323632343037.roa
File:                     323830343a3366343a3a2f33322d3438203d3e20323632343037.roa (raw, json)
Hash identifier:          EQDo8v6pEFtVj5Qon2vXpByo7TH8RO6ixp9Qv2vvPqw=
Subject key identifier:   27:5E:1C:AC:3B:07:4A:FC:E7:35:48:7C:5D:56:7D:08:8C:47:16:17
Certificate issuer:       /CN=6D31497D50F2E7BCADD55F9BBCC79046B5989FD9
Certificate serial:       31E884AA73C6D0D3B222B8FB8804D5373BCB0547
Authority key identifier: 6D:31:49:7D:50:F2:E7:BC:AD:D5:5F:9B:BC:C7:90:46:B5:98:9F:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3438203d3e20323632343037.roa
Signing time:             Thu 11 Sep 2025 20:13:41 +0000
ROA not before:           Thu 11 Sep 2025 20:08:41 +0000
ROA not after:            Thu 10 Sep 2026 20:13:41 +0000
asID:                     262407
IP address blocks:        2804:3f4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.crl
                          rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 14:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e8:84:aa:73:c6:d0:d3:b2:22:b8:fb:88:04:d5:37:3b:cb:05:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D31497D50F2E7BCADD55F9BBCC79046B5989FD9
        Validity
            Not Before: Sep 11 20:08:41 2025 GMT
            Not After : Sep 10 20:13:41 2026 GMT
        Subject: CN=275E1CAC3B074AFCE735487C5D567D088C471617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ad:dc:7c:0a:5f:a5:37:15:5e:54:0d:74:61:
                    88:c4:a0:94:b3:68:e6:af:c0:31:d7:34:19:c3:b3:
                    f6:9f:37:66:4b:56:72:f7:18:6c:5d:a7:5a:cb:1a:
                    bb:03:80:d9:db:2f:9c:42:83:c0:fe:e9:b1:5e:bc:
                    79:77:ba:10:85:73:45:e5:89:78:f5:83:09:8e:3d:
                    1b:7d:aa:be:d8:db:94:d0:4a:3f:67:5a:05:97:63:
                    a3:e3:9e:eb:ca:72:c5:ff:44:1b:94:2b:5f:7a:a7:
                    61:b4:d2:95:63:15:40:fe:d8:6d:bd:58:cb:46:0a:
                    74:2d:f0:c9:a8:8a:22:46:02:14:49:bb:60:c4:16:
                    9f:25:ed:ae:85:3f:1e:ae:91:dc:fc:39:8c:9e:94:
                    b7:7f:c0:96:04:6d:85:2b:ae:92:61:f0:37:d7:da:
                    ae:78:64:3f:c5:66:6b:c9:94:70:86:6f:da:01:b5:
                    84:f3:82:ba:a1:48:3a:f5:b0:80:ff:50:5f:72:e2:
                    2e:dc:50:96:ce:32:93:71:09:32:e0:3c:2a:a9:21:
                    c9:17:e2:77:a4:2a:1a:1a:79:08:f1:0d:bc:e9:91:
                    13:ac:77:6c:54:26:78:ac:7a:bb:df:a8:79:92:3b:
                    d1:90:bc:1c:2e:91:8d:14:9c:38:dc:8f:27:c8:3c:
                    e3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5E:1C:AC:3B:07:4A:FC:E7:35:48:7C:5D:56:7D:08:8C:47:16:17
            X509v3 Authority Key Identifier:
                keyid:6D:31:49:7D:50:F2:E7:BC:AD:D5:5F:9B:BC:C7:90:46:B5:98:9F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/323830343a3366343a3a2f33322d3438203d3e20323632343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:58:ad:a9:db:d1:a5:20:e5:0e:7c:47:71:67:79:3c:95:8a:
         a0:6a:81:55:c5:a1:30:a0:a3:ae:05:0d:b0:f7:a4:cc:ca:47:
         28:c9:6c:bd:c4:0b:57:f3:05:72:98:ff:1f:94:04:0a:3c:79:
         90:5c:79:e2:bc:df:13:8b:f0:8f:de:a4:b4:9c:1f:4c:99:9a:
         7b:1d:f9:78:b9:23:14:77:0c:f8:0c:0c:04:27:6b:ec:3c:5f:
         43:0d:df:9c:a8:ac:42:4c:39:d9:f6:b0:db:c6:ad:98:48:bc:
         a1:59:c2:62:d7:0e:52:f8:67:98:d7:c3:bd:b2:0e:52:4a:af:
         a9:61:c9:d5:f9:41:ff:65:6f:52:44:6d:42:a4:7b:cb:10:81:
         bd:b6:67:5c:45:00:18:17:35:dc:dd:b9:65:63:27:f2:d6:b8:
         6b:4b:e0:87:c2:de:6a:6e:06:75:f9:90:78:fb:80:16:92:76:
         4d:48:84:c6:6f:60:95:7d:38:82:76:09:cd:1c:20:5e:3a:c7:
         f9:a0:41:8b:3c:12:38:33:8a:bf:c9:80:48:39:01:27:60:b7:
         37:43:60:02:8b:a1:11:af:ff:03:e5:b2:68:7e:8d:f6:35:db:
         07:14:7a:03:e2:69:dd:e6:16:5f:8b:14:10:93:53:59:41:b0:
         fc:5d:34:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:58:37 2025 by rpki-client