Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/323830343a323731303a3a2f33322d3332203d3e20323637313032.roa
File:                     323830343a323731303a3a2f33322d3332203d3e20323637313032.roa (raw, json)
Hash identifier:          ykxDsk2oXzOL6oJXVc7KFx88TqA+yK0Oop4jdn5sQD4=
Subject key identifier:   03:F6:29:9B:7C:73:D5:E4:6C:9F:85:0F:9F:3D:F4:A3:7F:8D:93:77
Certificate issuer:       /CN=184AC896B5572D83192F860B4C6AB497566468B5
Certificate serial:       29CF104108FAC0247AE917087E2D6A023DEB7B05
Authority key identifier: 18:4A:C8:96:B5:57:2D:83:19:2F:86:0B:4C:6A:B4:97:56:64:68:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/184AC896B5572D83192F860B4C6AB497566468B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/323830343a323731303a3a2f33322d3332203d3e20323637313032.roa
Signing time:             Tue 21 Oct 2025 15:00:27 +0000
ROA not before:           Tue 21 Oct 2025 14:55:27 +0000
ROA not after:            Tue 20 Oct 2026 15:00:27 +0000
asID:                     267102
IP address blocks:        2804:2710::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/184AC896B5572D83192F860B4C6AB497566468B5.crl
                          rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/184AC896B5572D83192F860B4C6AB497566468B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/184AC896B5572D83192F860B4C6AB497566468B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 04:39:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:cf:10:41:08:fa:c0:24:7a:e9:17:08:7e:2d:6a:02:3d:eb:7b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184AC896B5572D83192F860B4C6AB497566468B5
        Validity
            Not Before: Oct 21 14:55:27 2025 GMT
            Not After : Oct 20 15:00:27 2026 GMT
        Subject: CN=03F6299B7C73D5E46C9F850F9F3DF4A37F8D9377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:82:4c:44:00:d1:32:46:f0:22:9f:ab:15:b8:
                    3a:5d:37:51:b5:7c:81:07:5e:a6:94:7b:00:05:16:
                    a3:1d:97:1f:d2:4f:f8:3e:5d:ea:4e:f2:f1:f9:3d:
                    5c:2c:6d:ce:bc:4a:30:a9:3e:3c:35:dc:4b:12:99:
                    b5:51:21:cd:cc:80:f4:c1:93:5c:0e:7e:36:3d:c3:
                    cd:4f:49:bb:51:c5:16:c0:37:bd:90:cc:fe:2d:e2:
                    17:bc:52:8d:b5:b8:78:c8:36:94:9f:0f:28:dc:e2:
                    da:7a:53:26:89:aa:1d:b0:04:68:26:7d:72:c5:55:
                    26:12:a8:7d:b8:51:98:36:af:1d:d5:99:94:53:f5:
                    03:95:4e:95:b2:e9:6b:c3:a7:bd:fa:db:99:21:5e:
                    1e:a1:79:b2:a5:5b:89:c6:ba:e5:d5:e0:82:13:80:
                    16:db:26:ee:b5:c2:99:2d:95:ea:30:d4:cb:2c:5d:
                    35:6f:fa:c6:1a:1d:2c:46:ad:80:6f:1f:37:0a:c2:
                    af:17:99:3a:48:72:b5:1a:05:05:bf:e9:14:92:0c:
                    15:8e:6a:62:a7:5d:39:ba:34:89:fa:04:02:29:7c:
                    dc:6f:59:d4:75:ad:91:43:1f:06:ce:0c:5b:5b:84:
                    65:d7:25:2b:f4:1a:bd:cc:dc:49:a3:15:c1:d3:72:
                    e4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F6:29:9B:7C:73:D5:E4:6C:9F:85:0F:9F:3D:F4:A3:7F:8D:93:77
            X509v3 Authority Key Identifier:
                keyid:18:4A:C8:96:B5:57:2D:83:19:2F:86:0B:4C:6A:B4:97:56:64:68:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/184AC896B5572D83192F860B4C6AB497566468B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/184AC896B5572D83192F860B4C6AB497566468B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/323830343a323731303a3a2f33322d3332203d3e20323637313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2710::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:2e:1a:ba:87:8d:87:d2:c0:f9:80:85:48:63:e6:d9:1b:f4:
         13:77:6c:2f:7c:54:51:6d:8e:47:0a:3b:a2:3b:3c:2a:80:98:
         7e:46:f1:1f:b5:e4:81:be:41:0c:4c:90:ad:04:15:be:7a:e2:
         33:3c:40:5e:25:e5:cb:d8:2c:4e:2b:de:c0:46:b6:2c:2d:91:
         08:3d:99:11:b4:73:68:d3:b4:e4:f9:a3:1d:24:57:b5:ec:cf:
         82:49:33:73:a8:91:97:31:d3:56:fc:5b:a6:0d:a7:29:2c:6f:
         22:02:3b:93:4b:46:5a:58:68:e0:b8:ac:16:85:38:ff:54:6f:
         9e:96:43:aa:77:07:31:cb:d1:09:44:5d:31:24:da:b2:b9:01:
         37:fb:f5:66:24:e0:56:1c:2d:87:ba:ed:18:1c:21:85:c5:84:
         39:65:95:78:ca:6a:4a:76:ad:f6:dc:03:06:5e:8a:aa:d1:2a:
         0c:22:6c:15:aa:65:99:11:1f:bf:85:4c:91:dc:d8:97:24:cc:
         b5:fb:49:62:6a:ec:e1:81:1d:5b:57:c0:2b:d0:a2:cd:88:4a:
         be:ca:4a:bc:7c:db:7b:36:f9:ca:41:00:20:5a:a0:66:2f:f5:
         fb:63:aa:b4:8a:70:0e:ab:e0:7b:01:c3:4c:41:57:8a:fc:a4:
         32:b8:a9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:13:19 2025 by rpki-client