Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/323830343a363632343a3a2f33322d3332203d3e20323639353337.roa
File:                     323830343a363632343a3a2f33322d3332203d3e20323639353337.roa (raw, json)
Hash identifier:          G17UY6f/KoM062+f7DHs2qD+fPYitrdHBXhX06n80f8=
Subject key identifier:   94:31:1F:D5:80:25:26:A2:DD:54:24:2D:C1:83:3E:26:EC:25:8D:31
Certificate issuer:       /CN=94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2
Certificate serial:       43FC407D75A677CCD58EF8868CE21B6D27293144
Authority key identifier: 94:F5:D1:82:A1:AA:8D:6C:4F:E6:24:A8:F3:24:1D:6C:E5:D9:A7:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/323830343a363632343a3a2f33322d3332203d3e20323639353337.roa
Signing time:             Tue 09 Sep 2025 20:43:18 +0000
ROA not before:           Tue 09 Sep 2025 20:38:18 +0000
ROA not after:            Tue 08 Sep 2026 20:43:18 +0000
asID:                     269537
IP address blocks:        2804:6624::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.crl
                          rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 01:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fc:40:7d:75:a6:77:cc:d5:8e:f8:86:8c:e2:1b:6d:27:29:31:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2
        Validity
            Not Before: Sep  9 20:38:18 2025 GMT
            Not After : Sep  8 20:43:18 2026 GMT
        Subject: CN=94311FD5802526A2DD54242DC1833E26EC258D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1c:f0:fb:7e:32:c1:2d:8e:e5:f0:4b:6d:2f:
                    dc:26:e6:6e:8d:1a:b0:e7:96:0c:6a:bf:0e:37:ed:
                    71:30:8d:87:a3:61:72:1a:bc:72:a0:10:a8:79:5e:
                    18:ef:d4:9e:ca:4d:49:79:9a:2d:9d:38:59:84:39:
                    14:3e:67:2a:1f:64:ef:77:4c:4e:a5:8f:eb:53:be:
                    b2:b3:63:83:ec:9a:87:f4:79:bb:56:99:df:98:3b:
                    46:e9:15:a8:17:fe:65:96:9c:4f:f4:6f:03:91:3b:
                    ef:08:c8:c7:44:81:7c:09:87:77:46:9b:48:de:29:
                    78:c2:4b:fe:49:c9:45:80:4b:37:8a:7d:ed:b1:7d:
                    c7:0b:a6:9e:68:23:69:98:1c:6c:ca:09:3e:37:cc:
                    ca:cf:03:e4:95:bf:28:ba:72:c9:c0:f6:6f:b1:7f:
                    2f:6d:5f:88:72:0a:c8:14:d2:9c:3a:13:13:31:dc:
                    dd:fd:8f:d2:c7:ed:be:25:aa:2a:a1:27:13:02:22:
                    18:7b:b7:d0:9c:ee:ae:b9:d7:e1:49:c2:1d:3c:6d:
                    07:4f:ce:28:db:51:ca:7a:63:2e:c2:91:9f:ac:05:
                    f4:29:75:af:fb:34:8b:7b:c1:50:3e:fb:ab:9d:83:
                    19:27:4b:0d:06:36:c7:8a:09:49:5f:b8:38:75:87:
                    45:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:31:1F:D5:80:25:26:A2:DD:54:24:2D:C1:83:3E:26:EC:25:8D:31
            X509v3 Authority Key Identifier:
                keyid:94:F5:D1:82:A1:AA:8D:6C:4F:E6:24:A8:F3:24:1D:6C:E5:D9:A7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94F5D182A1AA8D6C4FE624A8F3241D6CE5D9A7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/323830343a363632343a3a2f33322d3332203d3e20323639353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6624::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:43:31:64:89:53:38:87:49:f4:e4:a3:4a:d2:34:20:09:
         38:7d:0b:15:66:47:2e:21:d5:e7:b9:e4:4a:19:89:d1:16:53:
         e8:64:41:2d:00:0b:a3:d3:4e:69:a3:fb:1c:5b:c4:3d:40:6e:
         bb:19:ed:62:18:c7:8f:da:47:c0:3f:f1:e1:83:7b:46:73:09:
         b0:01:2f:bd:8f:f5:a4:dd:83:a0:d7:e4:cb:e4:73:f2:03:3b:
         49:ec:03:3b:83:b9:70:30:ba:4a:a3:08:6b:27:d2:71:ba:74:
         77:55:4a:98:77:56:b9:a5:c5:dc:9b:06:7b:70:e9:65:46:6d:
         46:a8:04:94:c7:42:11:96:80:d5:07:8b:6e:c1:8f:20:12:df:
         eb:03:28:86:20:86:18:bd:a1:02:27:86:4c:dd:8f:a3:ab:2c:
         7d:e4:ca:cd:fb:3c:31:c7:b4:59:60:51:b2:98:29:29:49:da:
         9e:4f:77:69:60:25:33:f1:7f:6e:f9:fa:e4:2e:d4:64:28:3d:
         22:c1:c2:df:53:4b:83:a3:60:19:36:68:c5:ec:89:32:d0:1d:
         2c:67:2c:61:00:b3:fd:3a:74:38:b9:1a:65:ce:8f:55:59:99:
         a9:05:5f:bf:43:f1:cc:4e:10:e5:d1:ce:45:31:2e:b9:df:0f:
         04:d9:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:45:02 2025 by rpki-client