Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmxgQmA6LmDcdyQhftJjFmUJW2PXZb29Nf5FApC6GT7s/0/323830343a376532343a3a2f33322d3438203d3e20323731363035.roa
File:                     323830343a376532343a3a2f33322d3438203d3e20323731363035.roa (raw, json)
Hash identifier:          6ZFMJJ/pLA6ZWrh3r3o3pPmgS9wxPUHZsrwJLyS7uM0=
Subject key identifier:   04:2F:9B:93:5C:62:4E:56:AF:6B:DD:17:9B:A9:3E:AF:0F:57:67:23
Certificate issuer:       /CN=83BFB6651E66BD7711AA101ED8D332821E769F4B
Certificate serial:       15D89BCEFA83122CB6E08203A46645CA797DD2C7
Authority key identifier: 83:BF:B6:65:1E:66:BD:77:11:AA:10:1E:D8:D3:32:82:1E:76:9F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83BFB6651E66BD7711AA101ED8D332821E769F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmxgQmA6LmDcdyQhftJjFmUJW2PXZb29Nf5FApC6GT7s/0/323830343a376532343a3a2f33322d3438203d3e20323731363035.roa
Signing time:             Sun 24 Aug 2025 23:16:49 +0000
ROA not before:           Sun 24 Aug 2025 23:11:49 +0000
ROA not after:            Sun 23 Aug 2026 23:16:49 +0000
asID:                     271605
IP address blocks:        2804:7e24::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmxgQmA6LmDcdyQhftJjFmUJW2PXZb29Nf5FApC6GT7s/0/83BFB6651E66BD7711AA101ED8D332821E769F4B.crl
                          rsync://rpki-repo.registro.br/repo/GmxgQmA6LmDcdyQhftJjFmUJW2PXZb29Nf5FApC6GT7s/0/83BFB6651E66BD7711AA101ED8D332821E769F4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83BFB6651E66BD7711AA101ED8D332821E769F4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 19:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d8:9b:ce:fa:83:12:2c:b6:e0:82:03:a4:66:45:ca:79:7d:d2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83BFB6651E66BD7711AA101ED8D332821E769F4B
        Validity
            Not Before: Aug 24 23:11:49 2025 GMT
            Not After : Aug 23 23:16:49 2026 GMT
        Subject: CN=042F9B935C624E56AF6BDD179BA93EAF0F576723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5f:bc:e0:89:b0:fd:52:8e:42:d9:15:84:b9:
                    c1:b6:06:87:26:ca:9c:92:ec:3d:ba:05:c9:d6:44:
                    34:c2:c9:fa:c9:8c:8b:16:84:d9:f4:ff:e0:be:14:
                    c1:84:d2:4a:fd:4d:58:ad:68:cf:b8:3c:38:b0:ca:
                    32:55:7b:e8:d9:0f:62:eb:8d:1e:75:2c:5d:4c:fd:
                    a3:e9:3e:a9:c1:ee:40:e0:07:6f:eb:0e:5c:38:77:
                    09:f1:a3:c6:41:d4:05:49:b9:47:99:64:1c:4d:05:
                    14:25:1c:12:53:33:2a:c6:7a:3c:e9:8c:cb:14:4c:
                    4a:b8:d0:4c:8e:19:fc:8b:3e:54:84:e6:52:11:16:
                    04:c4:f5:84:59:fa:05:52:3f:5d:1c:4a:6a:f5:18:
                    25:fd:d2:74:27:82:32:4f:73:fc:db:fc:ff:5d:c5:
                    c8:34:c0:62:70:0a:fe:73:04:fc:ca:75:84:c5:ab:
                    9d:90:f4:87:b0:af:0a:0f:97:af:13:25:7b:b2:35:
                    da:5e:a7:4a:b8:29:94:15:90:42:8b:54:45:8f:c6:
                    f1:ac:1d:0a:66:8f:c2:ab:47:36:57:0b:eb:c3:64:
                    11:50:21:eb:8d:ab:15:a0:ba:6b:71:09:77:4e:7b:
                    2f:fe:56:7e:76:d0:06:28:d3:f1:06:d0:5e:93:50:
                    85:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2F:9B:93:5C:62:4E:56:AF:6B:DD:17:9B:A9:3E:AF:0F:57:67:23
            X509v3 Authority Key Identifier:
                keyid:83:BF:B6:65:1E:66:BD:77:11:AA:10:1E:D8:D3:32:82:1E:76:9F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmxgQmA6LmDcdyQhftJjFmUJW2PXZb29Nf5FApC6GT7s/0/83BFB6651E66BD7711AA101ED8D332821E769F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83BFB6651E66BD7711AA101ED8D332821E769F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmxgQmA6LmDcdyQhftJjFmUJW2PXZb29Nf5FApC6GT7s/0/323830343a376532343a3a2f33322d3438203d3e20323731363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e24::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:60:76:6f:80:60:18:f9:03:38:68:a7:40:2e:ab:ff:61:4f:
         62:40:b8:a3:3b:57:8a:d4:1b:d9:84:9e:31:06:6f:b9:ea:b8:
         f6:70:c6:cd:76:32:33:23:e5:5b:b4:d6:e3:71:3b:76:76:27:
         ba:73:1b:4f:c8:8b:ef:8a:02:60:3a:c7:e5:80:92:48:45:41:
         9c:91:88:01:61:d2:a3:5a:da:f9:4e:b5:3e:83:fe:bb:34:c4:
         41:b1:56:1d:99:1d:71:02:4c:17:9b:58:a9:d9:26:3b:d7:b3:
         28:a1:aa:ae:b2:3d:85:30:8f:3f:a4:85:29:28:60:0e:ab:0b:
         49:aa:d3:ab:94:e2:29:b1:2e:86:b9:22:4b:8c:31:d2:23:8b:
         31:35:11:5b:43:61:f3:99:6a:b7:47:41:4d:60:f8:3f:45:af:
         5f:10:7f:e6:06:54:64:46:68:85:76:ac:b8:75:fc:ea:0e:48:
         7f:35:46:6f:9e:c2:ed:0e:2c:18:fb:69:ad:d3:3b:6d:91:fa:
         4d:65:30:e5:51:45:1f:31:bf:25:a0:07:ca:21:24:41:af:99:
         dc:c9:d9:71:5e:35:dc:af:3a:95:59:23:69:c9:5e:61:fa:f0:
         ea:2e:51:b1:1c:07:c2:8f:e9:cf:34:3c:15:35:ea:d6:c6:91:
         de:f8:7c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:25:53 2025 by rpki-client