Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a3a2f33322d3438203d3e20323637353733.roa
File:                     323830343a343337633a3a2f33322d3438203d3e20323637353733.roa (raw, json)
Hash identifier:          ni2C/GOWXY7hB9FTCEJw3P6qqntotO11JNTwEmZvIDw=
Subject key identifier:   BD:FF:64:13:4C:60:F4:B3:1E:29:BC:6E:69:81:FE:3E:CF:F6:E9:F9
Certificate issuer:       /CN=609613B367F9AFEF8852EC6257E4AA5F4FA35302
Certificate serial:       255E192A874F304E1E7ED3386D00E2E738F6414D
Authority key identifier: 60:96:13:B3:67:F9:AF:EF:88:52:EC:62:57:E4:AA:5F:4F:A3:53:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/609613B367F9AFEF8852EC6257E4AA5F4FA35302.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a3a2f33322d3438203d3e20323637353733.roa
Signing time:             Thu 23 Oct 2025 14:20:34 +0000
ROA not before:           Thu 23 Oct 2025 14:15:34 +0000
ROA not after:            Thu 22 Oct 2026 14:20:34 +0000
asID:                     267573
IP address blocks:        2804:437c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/609613B367F9AFEF8852EC6257E4AA5F4FA35302.crl
                          rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/609613B367F9AFEF8852EC6257E4AA5F4FA35302.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/609613B367F9AFEF8852EC6257E4AA5F4FA35302.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 22:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5e:19:2a:87:4f:30:4e:1e:7e:d3:38:6d:00:e2:e7:38:f6:41:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=609613B367F9AFEF8852EC6257E4AA5F4FA35302
        Validity
            Not Before: Oct 23 14:15:34 2025 GMT
            Not After : Oct 22 14:20:34 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:77:e4:ed:61:f1:b6:e9:d6:47:f6:ef:90:88:
                    12:01:44:a0:80:7c:d8:7c:2e:93:f4:2d:f3:eb:86:
                    e9:a4:28:6b:0f:b3:99:86:1a:0b:89:7e:f5:d8:9a:
                    84:72:78:be:dd:62:b7:58:62:2f:61:7c:cd:31:e5:
                    7d:69:fc:4d:85:e0:54:f9:60:e5:7c:ae:a1:ce:e4:
                    72:ef:64:14:2a:0c:bc:6f:58:c9:68:5d:5b:42:11:
                    9c:e8:96:04:43:43:46:ba:eb:21:4c:0a:46:36:45:
                    29:95:f1:b4:d9:a4:24:db:46:73:41:87:95:ab:fd:
                    d0:01:53:10:e0:53:7a:15:9b:8e:d7:ed:6b:9a:48:
                    a1:57:d5:d1:0c:25:ea:69:73:be:c9:86:0d:b0:c7:
                    05:39:bd:44:dc:d1:90:f6:45:77:4b:9b:6d:8c:a9:
                    0f:2b:0f:52:bf:57:33:48:11:5f:fd:71:32:86:5f:
                    13:46:dc:d4:32:a9:1a:13:ae:66:61:d6:5e:56:01:
                    95:5a:72:c3:d8:19:19:75:e2:97:39:c4:be:79:d4:
                    1c:2b:81:cc:bb:c7:f2:3e:6a:ad:ee:7d:f9:d0:44:
                    a0:b2:b3:36:57:3e:ab:7c:14:27:a2:ec:77:ce:0a:
                    37:8f:7a:e2:11:74:df:7b:d5:a3:73:f3:c8:02:e2:
                    cc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FF:64:13:4C:60:F4:B3:1E:29:BC:6E:69:81:FE:3E:CF:F6:E9:F9
            X509v3 Authority Key Identifier:
                keyid:60:96:13:B3:67:F9:AF:EF:88:52:EC:62:57:E4:AA:5F:4F:A3:53:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/609613B367F9AFEF8852EC6257E4AA5F4FA35302.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/609613B367F9AFEF8852EC6257E4AA5F4FA35302.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/323830343a343337633a3a2f33322d3438203d3e20323637353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:437c::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:82:e0:95:df:eb:f6:8b:49:ca:bd:22:33:98:52:45:e2:a4:
         2f:6a:73:be:05:a8:1a:15:ee:07:f2:bc:87:c9:be:0b:26:81:
         90:59:18:52:f6:b3:25:41:5e:db:08:9c:63:66:5c:69:17:98:
         97:bc:4e:b3:6d:f5:ac:c1:5b:ea:12:da:76:e4:2e:2b:3c:98:
         52:d1:2f:88:fd:0b:8c:45:d8:7f:ae:2a:c1:30:c7:a4:20:8d:
         52:a9:60:8c:79:3d:ca:64:73:c1:7a:34:35:22:aa:89:2b:54:
         ac:d5:1d:52:6c:92:02:82:f8:6b:e7:49:31:83:f5:59:6d:dd:
         f4:19:e4:b3:44:df:e9:1f:2a:cf:e3:3e:a7:f8:2b:5c:e9:66:
         00:df:85:07:da:d2:5a:dc:f5:ae:60:db:d4:20:a3:b4:71:ef:
         9e:11:e0:a7:b0:ef:41:05:62:b4:2d:7c:15:58:45:63:3a:5f:
         a3:3d:6a:b6:0e:77:10:5d:ea:9e:c7:48:20:38:75:79:24:2a:
         d1:1a:96:44:ee:e7:50:25:05:a5:e7:d5:62:5b:d9:ff:a4:d8:
         7a:39:6f:fa:23:4c:b6:81:1e:3b:43:0a:cf:10:6f:32:bb:82:
         cb:1b:1c:96:d9:40:98:8f:22:b1:cf:71:c3:fa:60:8f:03:7d:
         37:9c:c6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 07:59:33 2025 by rpki-client