Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a3a2f33322d3332203d3e20323731313639.roa
File:                     323830343a373734633a3a2f33322d3332203d3e20323731313639.roa (raw, json)
Hash identifier:          n9+5XRtF0ATWth+RjDsAMbcUaehH1RAXc/kEUAYR2TY=
Subject key identifier:   90:8D:0F:04:DA:BE:8F:D0:A1:00:79:4E:31:F5:2A:53:BD:E9:A0:67
Certificate issuer:       /CN=3361B8500E929AFEE58BD9E5708ACE056EEB73DB
Certificate serial:       19907B0764FB0C1867EED873473A2D65F6369164
Authority key identifier: 33:61:B8:50:0E:92:9A:FE:E5:8B:D9:E5:70:8A:CE:05:6E:EB:73:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a3a2f33322d3332203d3e20323731313639.roa
Signing time:             Mon 20 Oct 2025 19:53:07 +0000
ROA not before:           Mon 20 Oct 2025 19:48:07 +0000
ROA not after:            Mon 19 Oct 2026 19:53:07 +0000
asID:                     271169
IP address blocks:        2804:774c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.crl
                          rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 13:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:90:7b:07:64:fb:0c:18:67:ee:d8:73:47:3a:2d:65:f6:36:91:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3361B8500E929AFEE58BD9E5708ACE056EEB73DB
        Validity
            Not Before: Oct 20 19:48:07 2025 GMT
            Not After : Oct 19 19:53:07 2026 GMT
        Subject: CN=908D0F04DABE8FD0A100794E31F52A53BDE9A067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:ff:8e:d5:22:c7:ed:67:97:6b:c1:21:5d:
                    ee:5c:99:9d:4a:d9:b5:1d:a7:ca:1f:b5:3e:f2:47:
                    46:5a:e7:c2:19:6a:8b:9e:22:68:ce:15:69:0f:a3:
                    77:fb:3f:f3:c5:02:83:9f:4c:99:07:63:f0:7e:98:
                    47:50:6e:0f:30:0f:51:07:2b:01:85:bd:24:c9:43:
                    60:d3:e6:0e:48:b7:37:c7:15:03:bb:35:f0:e5:b4:
                    b7:63:84:89:e0:bb:0a:18:6c:14:3f:81:b7:fb:8c:
                    5a:19:a6:a5:30:de:ba:77:b8:52:3c:2b:7e:87:15:
                    ce:61:61:c1:e6:d3:14:7a:5e:70:7c:be:80:cb:ec:
                    6e:09:22:d9:52:35:ad:03:b2:4b:11:3b:cb:b6:cb:
                    6f:4f:4e:d4:af:e0:a5:9b:33:c6:f7:93:6d:6b:72:
                    59:5a:55:80:ba:d7:78:e4:4d:9e:84:41:b3:da:f3:
                    8e:e7:70:0e:1f:30:09:1d:2b:b1:9c:3f:78:5c:eb:
                    1a:66:7b:de:34:ae:12:c4:a5:bb:c2:bb:91:f9:a3:
                    79:f9:2f:03:07:b5:37:34:17:ac:56:96:7b:22:4d:
                    d4:8a:43:c9:0e:39:dc:79:2e:eb:01:d7:5d:f5:6b:
                    92:f7:ee:7a:4a:4e:28:28:b9:ec:16:27:b5:9a:95:
                    46:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8D:0F:04:DA:BE:8F:D0:A1:00:79:4E:31:F5:2A:53:BD:E9:A0:67
            X509v3 Authority Key Identifier:
                keyid:33:61:B8:50:0E:92:9A:FE:E5:8B:D9:E5:70:8A:CE:05:6E:EB:73:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a3a2f33322d3332203d3e20323731313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774c::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:6b:4f:cc:d3:f2:3a:ee:da:57:18:70:a5:3f:1c:3e:2e:2c:
         05:0e:69:0d:f2:88:d3:e8:92:11:90:8c:00:e3:54:b7:64:8f:
         01:dd:65:cc:7b:2d:61:d4:63:3f:9e:f9:03:57:24:26:15:3b:
         7c:d6:1b:92:f8:01:68:d5:42:54:09:61:66:75:b7:3a:36:ed:
         a5:fe:6f:76:71:6e:ae:97:ad:b3:31:69:26:71:5c:41:29:04:
         f4:71:a1:35:4a:8c:4b:63:de:72:ce:07:02:ae:01:22:cf:6d:
         54:bc:4d:2a:9b:99:99:6d:20:6a:60:65:97:73:6e:53:d7:2a:
         53:f9:51:02:b2:3b:3f:8e:41:f6:44:be:2b:62:0e:66:94:8f:
         75:34:58:c8:7d:d1:0b:3e:7e:51:09:2e:d4:98:4c:c7:46:4d:
         b4:b5:1a:17:b7:4c:af:fa:3b:32:73:ac:a7:e4:c8:ac:02:13:
         74:36:72:c5:ac:8b:0c:01:75:fa:23:bd:0b:5b:d2:a6:d0:fc:
         4a:1c:59:ad:a1:c3:69:05:25:c3:ce:9b:94:3d:16:3f:f5:76:
         48:41:b7:79:f8:ba:7c:d4:55:b2:fd:a8:5c:52:46:0e:d3:2b:
         a9:60:55:d1:e4:28:0f:eb:73:43:36:21:ae:f1:6f:ec:3e:54:
         e5:78:cf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:46 2025 by rpki-client