Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/323830343a333734303a383030303a3a2f33342d3334203d3e20323636333939.roa
File:                     323830343a333734303a383030303a3a2f33342d3334203d3e20323636333939.roa (raw, json)
Hash identifier:          rmY8SbHD4A20WJv2LhvbyShg3Hv9hfNr0kqj0aKMImk=
Subject key identifier:   6D:38:6A:D1:C0:E3:EE:7D:A3:FC:F4:47:B4:C5:90:3A:AF:41:39:3B
Certificate issuer:       /CN=52C828C27EEBBFF1E4B815AD151841CD2C9E17CA
Certificate serial:       213DF83D8F8F25A141DCC70A5374F930DD5142B9
Authority key identifier: 52:C8:28:C2:7E:EB:BF:F1:E4:B8:15:AD:15:18:41:CD:2C:9E:17:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/323830343a333734303a383030303a3a2f33342d3334203d3e20323636333939.roa
Signing time:             Thu 11 Sep 2025 20:42:34 +0000
ROA not before:           Thu 11 Sep 2025 20:37:34 +0000
ROA not after:            Thu 10 Sep 2026 20:42:34 +0000
asID:                     266399
IP address blocks:        2804:3740:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.crl
                          rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 09:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3d:f8:3d:8f:8f:25:a1:41:dc:c7:0a:53:74:f9:30:dd:51:42:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52C828C27EEBBFF1E4B815AD151841CD2C9E17CA
        Validity
            Not Before: Sep 11 20:37:34 2025 GMT
            Not After : Sep 10 20:42:34 2026 GMT
        Subject: CN=6D386AD1C0E3EE7DA3FCF447B4C5903AAF41393B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:10:23:fa:d5:8d:83:8c:34:61:50:15:af:1c:
                    ab:c5:c2:a6:b6:e1:a1:77:8b:67:60:6e:9d:19:7d:
                    38:4e:06:41:65:f7:dd:1d:b8:f7:8f:f3:ea:52:3e:
                    0c:c1:95:f7:ee:43:d9:6e:c3:66:ca:05:63:7d:43:
                    4c:e9:08:f5:44:9f:07:d5:c0:f6:78:ef:7c:2d:28:
                    42:7b:a2:a9:3f:10:21:3b:33:ab:86:03:64:c7:b8:
                    cf:c3:76:d2:40:ac:68:c0:99:49:ec:47:e4:7c:0a:
                    d8:33:79:a8:54:3d:6e:65:bf:a4:e3:07:13:ce:3a:
                    09:56:01:82:d9:1c:ab:3a:d7:a0:e1:c5:98:99:80:
                    bd:87:e9:d3:bc:4c:d7:c7:0d:84:d1:8f:aa:29:e5:
                    de:9a:77:19:1a:01:7d:8f:8f:63:87:ee:79:39:33:
                    1a:5e:53:c3:05:8c:99:f5:f0:65:ee:70:07:b1:b2:
                    1d:d9:50:dd:b0:30:08:63:8c:25:9c:36:35:c7:12:
                    03:55:46:9e:e4:70:7c:cd:53:43:50:84:75:3c:bc:
                    00:54:2d:cb:68:32:40:e9:6c:c4:cd:0d:8e:1b:de:
                    fc:2e:3e:0d:80:a2:0e:b0:26:70:95:23:45:78:e7:
                    92:5b:ab:f0:a7:20:a8:28:1e:07:d4:d1:dd:ee:7c:
                    06:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:38:6A:D1:C0:E3:EE:7D:A3:FC:F4:47:B4:C5:90:3A:AF:41:39:3B
            X509v3 Authority Key Identifier:
                keyid:52:C8:28:C2:7E:EB:BF:F1:E4:B8:15:AD:15:18:41:CD:2C:9E:17:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52C828C27EEBBFF1E4B815AD151841CD2C9E17CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/323830343a333734303a383030303a3a2f33342d3334203d3e20323636333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3740:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:fe:cb:13:79:4e:11:85:06:1d:1b:d8:07:fc:a2:02:86:a2:
         4d:a7:ec:24:89:ab:fc:92:cc:b8:dd:11:1a:d1:59:a1:ba:06:
         71:77:0c:4f:a3:52:84:2f:c6:d8:88:b1:09:3d:ad:85:c7:23:
         cf:69:a4:b8:e4:ea:9e:c3:79:90:1e:e2:5d:46:f1:0e:c6:ea:
         62:5f:5e:e2:da:cb:b6:c6:b4:0b:77:d6:cf:a5:56:f5:e0:5c:
         34:27:e7:60:98:d1:b6:c0:04:08:2c:07:b4:24:30:64:20:2b:
         4a:16:a2:ed:eb:4b:6c:75:da:25:b9:a4:a2:4a:ab:4a:21:e0:
         10:42:95:d6:fd:38:93:b4:44:7e:a4:04:30:42:02:44:87:af:
         40:63:f8:4c:22:fe:94:5c:c8:52:7f:ed:f0:34:ff:5e:18:c1:
         ab:9d:55:1b:05:50:05:8b:97:84:7d:0f:20:a9:ef:7c:f2:ca:
         f4:ad:c0:4e:d9:a6:16:21:5c:99:b2:32:b6:a3:48:d6:86:ce:
         4c:11:50:8f:b0:61:21:92:c7:e7:cd:99:49:84:63:c2:6c:ae:
         27:11:34:6d:f6:1f:41:cc:2e:05:95:24:3d:73:0e:03:55:5c:
         92:80:0e:31:3b:80:cb:55:f4:99:60:62:f5:a8:2a:2a:05:b9:
         d0:63:f3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:09:43 2025 by rpki-client