Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/323830343a313735343a3a2f33322d3438203d3e20323633313337.roa
File:                     323830343a313735343a3a2f33322d3438203d3e20323633313337.roa (raw, json)
Hash identifier:          2pYNoB0nzMjsHVlF53HbQfxAIHIUNDTF1t94z66lpOQ=
Subject key identifier:   69:68:8F:30:BF:8B:8E:F3:8A:9A:B2:29:A3:3A:D5:22:1D:48:53:DE
Certificate issuer:       /CN=08CF424E6FE1980B284A93E6736C3E8628D381CA
Certificate serial:       38DAFD95B08F244C389ADA58B2B27C77A8764525
Authority key identifier: 08:CF:42:4E:6F:E1:98:0B:28:4A:93:E6:73:6C:3E:86:28:D3:81:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/323830343a313735343a3a2f33322d3438203d3e20323633313337.roa
Signing time:             Thu 11 Sep 2025 14:24:38 +0000
ROA not before:           Thu 11 Sep 2025 14:19:38 +0000
ROA not after:            Thu 10 Sep 2026 14:24:38 +0000
asID:                     263137
IP address blocks:        2804:1754::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.crl
                          rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 18 Sep 2025 22:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:da:fd:95:b0:8f:24:4c:38:9a:da:58:b2:b2:7c:77:a8:76:45:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08CF424E6FE1980B284A93E6736C3E8628D381CA
        Validity
            Not Before: Sep 11 14:19:38 2025 GMT
            Not After : Sep 10 14:24:38 2026 GMT
        Subject: CN=69688F30BF8B8EF38A9AB229A33AD5221D4853DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6d:f2:f9:9a:1b:26:fc:25:e5:ea:fb:31:f6:
                    25:3d:93:41:22:0a:b5:1b:8a:db:cb:c0:cc:1f:f0:
                    f9:ed:5f:1a:d5:92:2f:42:35:4f:e7:21:88:83:42:
                    00:26:d6:7c:a8:14:ea:a1:da:08:a2:d7:8d:24:de:
                    f0:05:e4:d3:33:a9:20:72:85:e2:e8:c8:9e:78:89:
                    bc:6d:92:bf:7b:75:d8:eb:4d:a6:89:97:c9:0b:e1:
                    ad:2d:66:c7:36:de:3e:b0:1d:e4:a6:cc:c9:2c:03:
                    25:84:34:a9:33:61:36:c9:9d:46:da:54:27:52:a5:
                    57:76:b6:f3:54:bb:44:ee:e1:54:9e:6d:47:84:d5:
                    95:25:42:b7:8f:b7:e8:94:6d:b5:91:74:49:fc:31:
                    cc:fe:ad:4e:6d:6d:a7:ea:a4:b8:4e:58:de:09:bd:
                    ef:59:e1:ce:b4:30:06:d0:55:e6:fa:4b:a8:10:31:
                    e2:24:0d:8a:3e:45:c6:ae:1d:b1:16:5c:32:90:e6:
                    61:71:fe:4f:0b:0d:09:86:e9:83:c7:f4:14:e2:87:
                    cf:c0:9c:0d:dc:c8:7b:dd:0c:62:44:cf:03:d8:14:
                    62:35:40:dd:47:b0:30:ed:ef:19:74:a7:5e:18:ce:
                    4e:74:ec:a0:8a:ed:0a:64:b6:0d:5e:9b:59:14:71:
                    b9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:68:8F:30:BF:8B:8E:F3:8A:9A:B2:29:A3:3A:D5:22:1D:48:53:DE
            X509v3 Authority Key Identifier:
                keyid:08:CF:42:4E:6F:E1:98:0B:28:4A:93:E6:73:6C:3E:86:28:D3:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/323830343a313735343a3a2f33322d3438203d3e20323633313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1754::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:1e:ce:f2:8f:3d:60:49:e9:a7:d2:bd:55:7a:34:1f:ea:f2:
         fe:2d:59:75:ba:c5:f5:dc:a1:78:2f:ea:ee:24:b7:99:a4:e1:
         a7:71:9f:3a:a5:ab:2f:51:a4:dd:0a:43:f5:93:ec:70:29:0b:
         b9:bc:96:98:c1:af:00:67:dc:e3:5d:0d:a9:b2:25:34:5b:e0:
         63:34:b3:78:2f:34:6f:0d:9b:45:5a:43:de:85:fc:1a:c4:27:
         3f:6f:24:38:39:78:df:37:65:71:45:53:f0:90:00:4d:fd:91:
         1c:c5:94:55:a2:50:5c:5a:12:bf:69:9f:ce:3c:51:03:61:16:
         fa:b4:74:bb:43:72:02:d6:71:ab:cf:98:94:13:5b:58:43:b6:
         51:51:07:cb:2c:d6:89:78:30:4e:cb:31:95:24:5c:40:70:2d:
         d5:8c:81:b6:19:b4:7a:5c:d5:6c:28:34:77:1e:89:a8:d7:f7:
         f7:3a:60:fa:4e:dc:53:a9:2a:0a:95:a9:b5:52:40:35:b2:5d:
         0a:1d:9a:46:24:63:31:06:e3:d2:9b:59:86:32:5b:e3:1e:fe:
         19:a4:0b:8d:39:4f:84:53:28:15:29:08:7f:dc:54:f9:53:83:
         1d:02:48:23:62:1d:8b:8c:09:e0:f3:60:68:b1:5f:63:c6:32:
         14:6b:e3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:59:13 2025 by rpki-client