Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/323830343a333434343a3a2f33322d313238203d3e20323635343436.roa
File:                     323830343a333434343a3a2f33322d313238203d3e20323635343436.roa (raw, json)
Hash identifier:          dUDlHgNCuZ93aicUk/mH3Si/Q6dP4PtlITKr+tKS6Wc=
Subject key identifier:   3F:7A:EC:38:21:6F:E1:87:AE:CB:4F:4C:C6:27:A6:69:CA:1A:2E:D2
Certificate issuer:       /CN=3921558C04D37C64DA2CBC9D86CFF035672C152F
Certificate serial:       19E00FAC5EDAA504E1CBA24062A0B671539CA57B
Authority key identifier: 39:21:55:8C:04:D3:7C:64:DA:2C:BC:9D:86:CF:F0:35:67:2C:15:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3921558C04D37C64DA2CBC9D86CFF035672C152F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/323830343a333434343a3a2f33322d313238203d3e20323635343436.roa
Signing time:             Thu 21 Aug 2025 18:39:44 +0000
ROA not before:           Thu 21 Aug 2025 18:34:44 +0000
ROA not after:            Thu 20 Aug 2026 18:39:44 +0000
asID:                     265446
IP address blocks:        2804:3444::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.crl
                          rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3921558C04D37C64DA2CBC9D86CFF035672C152F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 05:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e0:0f:ac:5e:da:a5:04:e1:cb:a2:40:62:a0:b6:71:53:9c:a5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3921558C04D37C64DA2CBC9D86CFF035672C152F
        Validity
            Not Before: Aug 21 18:34:44 2025 GMT
            Not After : Aug 20 18:39:44 2026 GMT
        Subject: CN=3F7AEC38216FE187AECB4F4CC627A669CA1A2ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:83:d8:2f:c0:24:94:2e:c0:de:24:1e:ec:e5:
                    80:4c:7a:64:1f:39:8e:f0:95:fa:a6:cb:e4:f3:33:
                    47:4f:73:6d:98:e2:ae:99:ec:45:03:94:a1:0a:10:
                    59:34:ae:4a:b1:a6:e5:77:5b:91:92:25:3b:75:8c:
                    4c:f7:dc:fc:49:a1:7f:c4:86:01:51:a5:a2:2e:27:
                    46:81:42:5e:68:5d:9b:54:be:7a:25:b6:a7:61:e9:
                    84:cc:05:b6:2d:9a:ff:e8:07:2e:1f:cf:61:d9:73:
                    b0:68:33:78:2a:3d:50:02:4e:5a:2d:2d:97:37:e0:
                    a6:0e:fa:3b:21:3c:54:af:a2:73:02:ce:76:e7:99:
                    bc:56:bd:c9:34:08:03:de:10:83:d7:c1:49:86:09:
                    0a:f7:3f:78:21:70:fa:a6:a9:81:dc:b6:e1:c0:d1:
                    25:9f:f6:62:48:0f:8e:79:91:b2:9c:46:8b:32:45:
                    4d:e5:0a:60:52:ef:08:eb:a1:41:55:10:d0:73:59:
                    e9:47:a9:c9:6c:24:01:d5:fc:01:4a:15:66:e8:a1:
                    0e:c6:01:91:c7:2c:99:23:d0:94:e6:a5:da:10:81:
                    c4:e2:63:85:fa:de:57:ed:f8:93:d6:72:44:39:df:
                    32:59:84:73:f5:f8:05:83:2d:14:0e:c8:77:88:7d:
                    ed:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7A:EC:38:21:6F:E1:87:AE:CB:4F:4C:C6:27:A6:69:CA:1A:2E:D2
            X509v3 Authority Key Identifier:
                keyid:39:21:55:8C:04:D3:7C:64:DA:2C:BC:9D:86:CF:F0:35:67:2C:15:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/3921558C04D37C64DA2CBC9D86CFF035672C152F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3921558C04D37C64DA2CBC9D86CFF035672C152F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/323830343a333434343a3a2f33322d313238203d3e20323635343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3444::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:17:55:ce:47:95:33:b2:ef:72:22:da:7f:f7:7c:32:65:38:
         3a:87:45:a0:89:94:d0:42:a8:68:59:b3:06:5f:59:9d:be:aa:
         ab:8a:16:81:ca:95:c7:dd:ae:66:5c:d3:bb:e2:1b:47:78:f5:
         cc:c7:50:13:da:69:92:ff:69:7e:88:94:bb:3e:e9:11:62:9e:
         b6:12:14:68:c5:1f:40:ce:a1:42:53:4e:6e:30:7a:e9:43:f5:
         aa:f1:17:20:89:0b:69:58:40:be:be:b8:c0:f1:37:a1:65:77:
         31:cd:fe:e9:dc:0b:9e:11:35:14:e0:c1:a1:ca:49:04:0f:7d:
         72:08:3e:78:48:f5:9a:fc:d8:da:95:64:de:5e:bd:e2:69:bc:
         29:f9:57:47:37:bd:fe:99:7a:63:22:bb:c3:18:98:53:f2:09:
         9d:c0:45:04:a3:7b:89:89:8c:b7:58:8c:c1:4b:b5:10:c6:aa:
         7d:ee:0d:1b:e2:df:f7:33:43:43:59:94:9a:da:cc:e1:c8:39:
         c9:ed:01:67:09:1b:77:09:df:bd:6a:d2:8d:26:ca:a2:5a:b3:
         11:88:3d:8e:b8:06:1f:e4:b7:98:74:44:18:20:0e:57:29:5f:
         d1:9a:b9:82:da:77:9b:71:e0:cf:13:f3:17:95:8c:d5:68:32:
         68:83:05:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:23:02 2025 by rpki-client