Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/323830343a393539633a3a2f33322d313238203d3e20323734353333.roa
File:                     323830343a393539633a3a2f33322d313238203d3e20323734353333.roa (raw, json)
Hash identifier:          a9F7vSdRDqTEgN/gtYRAs3XRaP7P5JpCBU0ige+1hgk=
Subject key identifier:   7F:D4:C0:4B:05:DC:02:69:D0:71:6F:A1:D6:43:F2:0A:1B:7C:3C:9D
Certificate issuer:       /CN=CD466D427F1FD3AB41CF878A569898A79B337545
Certificate serial:       3F201329C1249DC45ABBD463C98C9B7925444C5E
Authority key identifier: CD:46:6D:42:7F:1F:D3:AB:41:CF:87:8A:56:98:98:A7:9B:33:75:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD466D427F1FD3AB41CF878A569898A79B337545.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/323830343a393539633a3a2f33322d313238203d3e20323734353333.roa
Signing time:             Mon 03 Nov 2025 13:37:19 +0000
ROA not before:           Mon 03 Nov 2025 13:32:19 +0000
ROA not after:            Mon 02 Nov 2026 13:37:19 +0000
asID:                     274533
IP address blocks:        2804:959c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.crl
                          rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD466D427F1FD3AB41CF878A569898A79B337545.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 08:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:20:13:29:c1:24:9d:c4:5a:bb:d4:63:c9:8c:9b:79:25:44:4c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD466D427F1FD3AB41CF878A569898A79B337545
        Validity
            Not Before: Nov  3 13:32:19 2025 GMT
            Not After : Nov  2 13:37:19 2026 GMT
        Subject: CN=7FD4C04B05DC0269D0716FA1D643F20A1B7C3C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c8:f2:fb:1a:7a:6d:ef:a4:5b:49:1e:54:aa:
                    07:1b:10:25:5c:d0:d3:39:54:78:a2:2f:da:af:9d:
                    0a:ad:50:8a:55:b1:47:9c:84:7a:16:a1:0b:37:d5:
                    41:4c:33:bc:f5:23:8c:64:f8:50:ea:48:de:83:04:
                    8f:eb:dc:f3:80:bc:03:05:73:4a:99:52:c7:2f:76:
                    82:87:71:84:3d:d1:6c:3f:5f:c4:15:65:d5:c3:c6:
                    6e:d5:5a:95:ce:b5:23:36:e3:e3:46:01:ba:e9:7e:
                    bf:d6:9b:b5:8b:16:ee:bf:4e:2d:ef:a4:c3:48:b0:
                    58:f8:8d:59:22:2d:9a:2a:c7:2d:f3:a4:81:99:a1:
                    20:ef:17:d3:a9:ea:02:82:01:86:d0:f4:dd:8d:f0:
                    3c:84:99:a2:72:a5:ed:53:a3:6a:77:88:2a:ae:67:
                    31:e1:7f:8f:04:5c:ca:01:74:15:7b:e4:c6:13:45:
                    8f:00:8f:1f:7f:6a:bc:5b:b7:65:df:c3:6c:97:0c:
                    2a:e1:d8:b9:07:58:ef:d3:c4:d7:ee:00:f2:d3:a3:
                    40:20:2f:b2:b4:50:9a:5b:c6:b9:04:7c:6e:5b:b4:
                    52:0e:4f:01:80:5f:11:ff:d1:dd:f2:2e:22:1b:46:
                    0f:12:36:8c:e3:da:81:5b:56:d7:cc:33:4e:15:05:
                    9d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D4:C0:4B:05:DC:02:69:D0:71:6F:A1:D6:43:F2:0A:1B:7C:3C:9D
            X509v3 Authority Key Identifier:
                keyid:CD:46:6D:42:7F:1F:D3:AB:41:CF:87:8A:56:98:98:A7:9B:33:75:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/CD466D427F1FD3AB41CF878A569898A79B337545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD466D427F1FD3AB41CF878A569898A79B337545.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnmLXJMQseYXiMvh9Z2fqHwizKethTcfCKJuZ8WofF6/0/323830343a393539633a3a2f33322d313238203d3e20323734353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:959c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:11:2b:a8:c7:5c:50:fe:6b:b2:70:22:90:82:65:31:7e:78:
         cc:2d:7f:6f:a9:2c:c5:70:11:10:b8:0a:b4:40:e4:2a:14:8e:
         72:39:f8:0d:79:a8:95:9b:8f:a4:1f:a9:e5:78:a9:5d:db:43:
         41:a3:43:33:e7:38:b5:ce:7e:bb:7c:ac:77:a4:12:10:c0:1b:
         ac:c1:c6:94:16:a8:24:bd:de:b0:b8:95:bc:0f:9e:c7:ce:52:
         de:72:51:1b:10:44:6c:fc:a0:63:06:19:fa:99:7e:96:0e:cb:
         35:94:a8:09:fe:5c:21:2f:f3:e5:27:a0:43:20:43:92:33:95:
         7f:67:a3:4f:5e:6d:1f:d6:10:6c:d0:e3:a3:1c:e6:08:01:c5:
         de:06:cb:58:a5:95:fb:1c:b4:38:a8:44:9d:77:32:d0:a4:bf:
         72:f7:46:6c:f5:31:68:00:c2:90:df:75:13:9a:32:16:ee:be:
         25:1e:45:08:1a:25:13:32:15:07:fd:2c:ec:a5:71:c2:e1:91:
         25:b0:6e:97:34:ee:78:d0:6e:27:7b:32:2b:53:0c:73:7f:92:
         de:02:e1:4f:3e:4f:17:b7:23:95:87:2e:21:9a:cc:7e:7b:58:
         70:9e:cd:47:96:aa:c9:dd:7a:63:31:73:93:0b:24:e7:9c:48:
         d5:5e:d3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:05:28 2025 by rpki-client