Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a663030303a3a2f33362d3336203d3e20323634313337.roa
File:                     323830343a323330343a663030303a3a2f33362d3336203d3e20323634313337.roa (raw, json)
Hash identifier:          SiNgxD/4wNKX6j4TTDJyEQOeaOmzQ/WklfWVvE2Rq58=
Subject key identifier:   33:78:00:43:1B:F7:D0:03:C9:98:FB:84:25:65:93:22:46:6F:4E:2C
Certificate issuer:       /CN=239C283AE95BF77707DED60A35EF02DFA2AE1930
Certificate serial:       3066AB06F41BC0E9190E20834B48DBA0E9883B52
Authority key identifier: 23:9C:28:3A:E9:5B:F7:77:07:DE:D6:0A:35:EF:02:DF:A2:AE:19:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a663030303a3a2f33362d3336203d3e20323634313337.roa
Signing time:             Mon 08 Sep 2025 20:26:09 +0000
ROA not before:           Mon 08 Sep 2025 20:21:09 +0000
ROA not after:            Mon 07 Sep 2026 20:26:09 +0000
asID:                     264137
IP address blocks:        2804:2304:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/239C283AE95BF77707DED60A35EF02DFA2AE1930.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/239C283AE95BF77707DED60A35EF02DFA2AE1930.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 13:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:66:ab:06:f4:1b:c0:e9:19:0e:20:83:4b:48:db:a0:e9:88:3b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239C283AE95BF77707DED60A35EF02DFA2AE1930
        Validity
            Not Before: Sep  8 20:21:09 2025 GMT
            Not After : Sep  7 20:26:09 2026 GMT
        Subject: CN=337800431BF7D003C998FB8425659322466F4E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:39:25:31:d6:54:96:00:ed:7b:9e:ed:6f:e9:
                    85:78:2f:22:f1:db:bb:c0:0d:bb:79:0f:92:85:ce:
                    13:be:80:64:f6:d5:99:69:ce:bb:92:42:d7:f0:3a:
                    20:56:90:e1:16:9f:bf:b2:4e:b6:b1:83:43:bf:d3:
                    c4:a2:58:03:77:4a:e5:0d:7e:e3:cc:fa:37:29:7b:
                    45:e8:27:8a:b8:97:d6:5a:f1:b6:e5:b8:45:53:f7:
                    b4:4d:6e:fd:19:b7:c5:ef:54:48:1c:0d:df:22:f0:
                    2d:78:8c:b0:4f:17:39:ee:b6:1f:ec:5b:9e:da:55:
                    dd:62:2f:fa:30:a3:02:7d:ab:35:15:50:4c:d9:58:
                    21:e9:ac:fe:3c:45:6f:cf:8d:d5:51:35:29:a6:90:
                    86:ea:39:ec:1b:06:63:02:25:1c:8a:54:13:63:63:
                    65:e2:ed:a1:83:e9:07:02:a3:63:bf:ac:c4:d5:d2:
                    a8:b1:5a:43:36:09:6e:b1:88:c4:59:23:99:46:d4:
                    33:6e:0d:db:c8:62:c2:ea:ce:9d:36:84:c2:59:79:
                    43:68:38:37:7d:1d:88:c7:6f:95:c7:6f:4d:6c:d9:
                    6f:13:6f:df:c4:45:d0:72:6b:12:41:a2:30:75:3f:
                    22:69:3f:b3:f3:d5:f4:77:47:a1:c7:33:8d:02:5a:
                    6d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:78:00:43:1B:F7:D0:03:C9:98:FB:84:25:65:93:22:46:6F:4E:2C
            X509v3 Authority Key Identifier:
                keyid:23:9C:28:3A:E9:5B:F7:77:07:DE:D6:0A:35:EF:02:DF:A2:AE:19:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/239C283AE95BF77707DED60A35EF02DFA2AE1930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/239C283AE95BF77707DED60A35EF02DFA2AE1930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/323830343a323330343a663030303a3a2f33362d3336203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:d4:bb:80:0c:df:e1:d0:1c:39:e5:96:08:6d:3a:2f:c2:de:
         5d:5b:83:7e:35:72:72:9f:f3:8a:0c:6b:71:70:f4:9c:ff:04:
         d2:06:55:72:66:69:a9:b9:27:4d:bd:f2:c1:94:4a:80:6d:bc:
         b9:04:4b:50:13:d5:64:87:11:7e:f6:86:76:ff:37:44:15:ca:
         ba:cb:12:8a:b4:4b:11:49:4c:f4:c9:41:a8:c8:f9:f3:36:b2:
         1c:74:fb:9f:ef:bb:d8:d5:05:9c:b7:b1:de:0f:99:6c:8b:99:
         29:c6:db:ad:81:d9:83:03:bd:ec:5e:49:7e:3b:23:e9:bf:af:
         4a:b2:19:97:ef:5c:b1:f3:45:b0:47:7f:cf:74:29:16:d6:94:
         90:25:a5:97:ae:2a:c2:ec:03:0a:29:ad:d6:c5:45:3a:3a:24:
         42:22:19:cc:e0:d3:90:1e:a3:ce:88:43:74:2d:e0:77:8d:98:
         1b:63:5a:66:03:cb:57:91:7c:07:1b:83:78:d3:9a:9a:45:17:
         12:0d:34:51:58:ea:ba:15:a5:34:b8:a1:70:2a:b6:bc:9c:77:
         2e:26:b5:88:2b:4e:bc:36:d8:4b:a2:2c:1d:43:db:c0:81:3c:
         d4:1a:03:36:2b:88:ab:f2:12:9a:67:a4:c4:a4:91:83:55:ea:
         12:69:28:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:56:24 2025 by rpki-client