Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a313030303a3a2f33362d3336203d3e20323636333132.roa
File:                     323830343a333565303a313030303a3a2f33362d3336203d3e20323636333132.roa (raw, json)
Hash identifier:          fpZTqhI81qboOpuWKtyO4ABItCpv8AkbRxRbKatyW5c=
Subject key identifier:   BC:B0:B8:06:B8:D4:79:E3:98:00:06:44:50:EA:7F:2D:FD:BC:F8:EA
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       6A00C4704A202B073A77EA404DFF0C6B9EEA9775
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a313030303a3a2f33362d3336203d3e20323636333132.roa
Signing time:             Wed 27 Aug 2025 15:39:15 +0000
ROA not before:           Wed 27 Aug 2025 15:34:15 +0000
ROA not after:            Wed 26 Aug 2026 15:39:15 +0000
asID:                     266312
IP address blocks:        2804:35e0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 00:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:00:c4:70:4a:20:2b:07:3a:77:ea:40:4d:ff:0c:6b:9e:ea:97:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Aug 27 15:34:15 2025 GMT
            Not After : Aug 26 15:39:15 2026 GMT
        Subject: CN=BCB0B806B8D479E39800064450EA7F2DFDBCF8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:81:aa:7a:33:2b:a9:bc:35:45:3b:f2:27:0b:
                    bb:4d:d8:f1:49:7e:da:b0:e1:a4:63:9c:03:be:97:
                    f2:83:3a:0d:54:8a:77:30:18:21:cd:96:66:c1:89:
                    96:4c:a1:46:b2:b7:df:8f:ac:73:29:eb:74:64:81:
                    16:cb:83:67:af:7b:0f:e1:45:95:d7:b0:c4:79:3b:
                    4c:e6:c9:72:10:1d:c3:73:5a:a7:2e:3d:58:41:b8:
                    92:ce:84:9c:03:7a:55:7d:a5:e8:bc:bb:4f:f0:49:
                    68:01:2a:88:13:e7:61:56:99:d7:51:c5:10:d7:8b:
                    b1:f4:1e:1b:05:41:b3:9f:6b:39:5e:f8:e6:19:23:
                    96:b7:df:0d:8c:70:b3:87:4a:08:78:ea:0b:22:da:
                    78:f7:c2:b1:cb:96:43:c4:e5:57:3f:0d:a8:70:08:
                    cf:e5:2b:5f:77:26:0f:e6:1a:41:a7:f6:dc:83:a1:
                    f5:ff:85:bf:24:55:a2:15:ad:8a:82:56:62:12:3c:
                    eb:6d:85:50:ce:c4:7b:96:3b:c9:a6:d6:30:6a:e3:
                    e0:8e:e9:d5:8b:b8:94:b8:c8:ff:d5:fc:d5:70:18:
                    b3:e6:13:04:60:47:15:9e:72:d2:5b:98:77:8a:57:
                    b9:1b:ba:10:49:3a:c4:d7:5e:b5:78:6e:b5:1a:e7:
                    20:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B0:B8:06:B8:D4:79:E3:98:00:06:44:50:EA:7F:2D:FD:BC:F8:EA
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a313030303a3a2f33362d3336203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35e0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3b:f6:34:2c:d9:f0:75:b6:71:c8:22:81:33:b3:68:73:e6:4c:
         5d:5e:35:be:9d:21:bf:be:de:8c:40:9c:dc:c7:96:6f:82:6e:
         8e:6d:86:d8:78:56:c9:b3:f0:2b:f2:0a:f8:5f:78:70:b1:18:
         83:0c:ea:86:45:5d:a2:8f:9d:fe:aa:13:af:a1:4d:4c:51:76:
         c5:c1:52:36:1a:37:97:53:5a:ff:8c:83:36:6c:df:92:c3:ad:
         5c:96:89:7e:1c:1a:ef:8c:13:2e:20:78:51:35:f0:8f:2d:32:
         f8:f6:95:ae:a2:e1:b9:d6:00:b9:8b:19:65:e5:dd:1b:85:87:
         e0:d1:16:ff:4b:92:a3:e0:60:11:e1:48:b9:16:d4:7b:6e:74:
         89:62:3b:a4:e4:7b:d6:b2:ac:58:8c:d8:0c:36:76:39:76:20:
         2a:3f:02:15:f7:f8:9f:f3:08:8a:d3:0a:9e:ea:14:09:d3:c3:
         33:d0:31:08:3c:a4:7c:9c:a5:5f:79:6e:a6:04:d9:2c:39:e9:
         42:5a:ae:43:d9:b3:c9:89:b6:6b:40:7c:6c:57:99:be:0e:54:
         1d:20:a4:29:50:79:ea:55:66:bb:74:0e:6a:67:d1:e1:69:75:
         c4:10:0b:2e:7f:4d:9f:18:6e:ed:78:b3:2a:ac:fe:85:59:fe:
         bb:6a:82:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:55:48 2025 by rpki-client