Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a343030303a3a2f33342d3334203d3e20323633393037.roa
File:                     323830343a323738383a343030303a3a2f33342d3334203d3e20323633393037.roa (raw, json)
Hash identifier:          Q3nHk6LWj9E7K1HfLIib8pBB+nBg5zEWO4Ys0nhYxao=
Subject key identifier:   21:01:96:AF:B5:41:3F:33:A8:49:14:37:EC:75:63:EC:52:24:50:DF
Certificate issuer:       /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
Certificate serial:       7463ACFA0B3A74AEB72D83044C1CC183AF0792E0
Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a343030303a3a2f33342d3334203d3e20323633393037.roa
Signing time:             Mon 01 Sep 2025 13:53:23 +0000
ROA not before:           Mon 01 Sep 2025 13:48:23 +0000
ROA not after:            Mon 31 Aug 2026 13:53:23 +0000
asID:                     263907
IP address blocks:        2804:2788:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl
                          rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:63:ac:fa:0b:3a:74:ae:b7:2d:83:04:4c:1c:c1:83:af:07:92:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
        Validity
            Not Before: Sep  1 13:48:23 2025 GMT
            Not After : Aug 31 13:53:23 2026 GMT
        Subject: CN=210196AFB5413F33A8491437EC7563EC522450DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5a:88:af:aa:39:bb:7a:5b:af:92:a3:5a:f1:
                    0a:a0:6d:9b:1a:75:35:42:c6:9d:42:30:67:39:dd:
                    a1:f2:7e:32:30:a7:86:6f:4e:e2:45:19:73:d0:86:
                    94:ed:77:40:18:b4:8c:3d:2c:18:56:92:78:f9:04:
                    a9:4a:a9:d8:35:b0:dc:88:5a:6d:0f:14:af:f1:ea:
                    a1:6a:e6:92:00:8b:01:16:3c:a4:af:c9:82:41:c3:
                    6f:8e:1e:c6:73:83:c2:24:c6:4c:da:bc:96:1a:7e:
                    5a:62:5a:12:ff:af:1e:02:c4:e6:ea:e1:a7:fc:8d:
                    43:df:0d:48:64:d8:1d:77:02:bc:e5:85:82:6a:9f:
                    7d:ec:b8:05:b5:fa:aa:80:77:31:29:44:4c:20:14:
                    bb:9b:d1:8b:8e:cb:98:77:28:66:72:cf:14:4c:7e:
                    aa:28:b6:ef:2d:9d:f8:9d:88:c9:3c:d3:9e:70:c3:
                    c1:1c:68:8c:20:5f:07:b6:7f:93:1d:f9:f3:9f:03:
                    c5:15:e7:28:e2:aa:b9:1f:a6:42:86:1e:56:24:9e:
                    c8:f8:21:8e:b3:2d:8f:9f:ab:54:53:43:13:be:f1:
                    50:37:7d:3f:5a:ba:31:9a:c6:5e:ec:92:be:b6:bb:
                    fd:37:7d:78:45:5a:66:4e:51:a0:dd:bb:dc:67:a3:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:01:96:AF:B5:41:3F:33:A8:49:14:37:EC:75:63:EC:52:24:50:DF
            X509v3 Authority Key Identifier:
                keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/323830343a323738383a343030303a3a2f33342d3334203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2788:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ac:b8:fb:c7:91:b7:24:37:cb:d1:14:08:2c:8d:ac:b4:e6:b1:
         54:a7:70:c5:cf:8f:5e:8a:2e:65:f6:84:49:46:d9:b3:3c:cc:
         a9:ef:12:da:d3:14:3e:a5:96:8a:06:3b:89:43:d6:c2:32:0b:
         9f:3a:b5:37:c2:f6:37:bc:3d:75:d9:20:25:a5:cc:a3:af:1a:
         4d:61:2c:5a:26:8f:3b:ce:1c:db:53:39:f7:08:5c:2e:25:3b:
         02:fd:48:d3:36:88:f2:e6:86:b0:31:a7:f3:8f:9d:ec:d0:0a:
         33:66:0d:a5:2a:ff:6b:20:2c:51:03:b6:eb:2d:42:ab:54:f3:
         d0:28:3a:d6:d8:2e:32:60:97:9d:ef:f7:5d:68:69:01:8f:a4:
         cb:cf:19:97:fb:9d:2e:c0:c7:76:33:a1:ac:4d:a6:8c:bc:7b:
         39:ca:97:ca:45:2f:4b:d7:7f:26:7d:80:a3:1b:33:0e:79:d4:
         83:f9:f7:57:6f:45:1f:61:4b:41:2d:cc:24:75:a1:54:74:e9:
         d2:89:7b:65:16:3a:82:1e:f2:1f:c5:a4:12:e2:28:4b:4d:39:
         b1:60:4c:19:ec:e4:9c:42:15:5c:aa:83:9a:cc:bd:06:d8:5c:
         72:cb:e8:c8:4b:aa:ea:cb:36:21:14:0c:74:9b:00:0b:bc:b2:
         ca:34:72:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:49:34 2025 by rpki-client