Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a383030303a3a2f33332d3333203d3e20323731313639.roa
File:                     323830343a373734633a383030303a3a2f33332d3333203d3e20323731313639.roa (raw, json)
Hash identifier:          OuoTXKPnBKOFqNHXuond+55xBI68EYCycs1SJLX3MaU=
Subject key identifier:   44:4D:AF:03:3C:46:83:DB:54:F0:95:0D:D4:1F:57:94:1A:05:9B:83
Certificate issuer:       /CN=3361B8500E929AFEE58BD9E5708ACE056EEB73DB
Certificate serial:       71A86AC5DBF1CF96B4FFD1BCFBC383254E43FAFF
Authority key identifier: 33:61:B8:50:0E:92:9A:FE:E5:8B:D9:E5:70:8A:CE:05:6E:EB:73:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a383030303a3a2f33332d3333203d3e20323731313639.roa
Signing time:             Mon 20 Oct 2025 19:53:06 +0000
ROA not before:           Mon 20 Oct 2025 19:48:06 +0000
ROA not after:            Mon 19 Oct 2026 19:53:06 +0000
asID:                     271169
IP address blocks:        2804:774c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.crl
                          rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a8:6a:c5:db:f1:cf:96:b4:ff:d1:bc:fb:c3:83:25:4e:43:fa:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3361B8500E929AFEE58BD9E5708ACE056EEB73DB
        Validity
            Not Before: Oct 20 19:48:06 2025 GMT
            Not After : Oct 19 19:53:06 2026 GMT
        Subject: CN=444DAF033C4683DB54F0950DD41F57941A059B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0e:b4:a0:5c:62:ba:a1:c5:a4:63:6f:62:b0:
                    6d:63:75:05:88:70:d1:92:d5:a1:c6:d1:55:92:80:
                    ec:5f:77:ff:a8:b3:88:83:15:68:f0:64:ef:5d:a7:
                    56:3e:b4:c7:fc:ad:dd:dd:72:63:c3:20:98:0e:d9:
                    eb:a6:a0:ff:b2:bf:35:c8:f0:16:86:45:0e:b8:7f:
                    2f:bd:da:bd:29:fb:96:78:4a:d8:d2:71:5d:ef:e0:
                    29:05:2d:b1:f5:c2:4d:85:dc:45:17:f0:8e:6a:7d:
                    21:77:11:78:ff:95:f5:b8:d7:10:cf:9b:14:9f:9b:
                    4f:50:b4:e0:6a:59:6b:2d:4f:1a:de:83:fc:de:36:
                    6b:64:bd:ef:47:c8:25:8c:dd:e8:0c:68:d1:ab:7b:
                    48:78:f0:dc:3d:e3:91:46:65:49:82:67:bd:e5:32:
                    b6:c8:3a:eb:94:45:9e:74:33:38:07:db:34:89:6c:
                    63:a4:e1:50:7a:7b:96:70:96:66:00:f9:d3:ec:cb:
                    69:06:78:a2:ed:57:ad:ce:02:de:ba:05:74:8f:61:
                    c0:2e:fa:fa:75:83:c6:01:d6:af:1d:49:7b:30:35:
                    1c:fa:f5:30:01:b8:ec:0b:21:d0:3d:6a:b5:21:be:
                    73:60:45:c6:2b:3d:f4:3a:24:b3:34:7f:3f:06:21:
                    1d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4D:AF:03:3C:46:83:DB:54:F0:95:0D:D4:1F:57:94:1A:05:9B:83
            X509v3 Authority Key Identifier:
                keyid:33:61:B8:50:0E:92:9A:FE:E5:8B:D9:E5:70:8A:CE:05:6E:EB:73:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a383030303a3a2f33332d3333203d3e20323731313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         34:31:19:b7:9a:25:3e:e9:7d:94:f3:d1:07:7a:cf:f4:f8:cb:
         b8:d9:a1:06:80:3e:89:de:71:76:bc:bc:06:d2:d9:b0:e1:69:
         a3:39:73:47:ca:ce:07:68:59:9e:66:31:6b:b6:01:fd:f7:39:
         4e:71:8f:9f:3a:03:0a:2d:e9:56:db:2d:30:d1:e2:f8:c7:fd:
         02:75:cf:0b:9e:5c:c6:37:9b:49:1c:f5:fc:8c:ed:57:04:e7:
         26:06:7d:6c:4b:9c:a4:30:ec:91:88:28:eb:8b:34:3a:9e:d9:
         53:da:ca:44:23:95:9b:fa:36:57:45:c4:56:20:b8:c7:5f:e2:
         f8:9f:4c:88:d5:1d:3c:7d:bd:98:b7:d8:4b:05:b8:55:2f:1a:
         40:09:87:65:cb:bf:7c:9d:51:15:06:ab:9f:22:21:a9:04:94:
         19:b6:58:82:80:40:79:c1:2b:1c:ba:77:45:5d:fa:9f:a2:8b:
         15:68:b6:be:2a:0f:42:9a:f1:aa:0b:6b:90:39:9b:6a:7a:d2:
         ab:8e:27:6f:d8:d8:0f:c0:0a:4b:8b:db:36:a9:59:b1:89:e1:
         f0:29:2e:61:8c:fe:bf:29:c0:7b:94:62:1f:f4:fa:8e:13:56:
         b7:e0:48:e1:69:9c:53:6e:98:92:b5:37:78:10:b5:9a:0e:ea:
         bd:c5:9f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:42 2025 by rpki-client