Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/323830343a316466633a643030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a643030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          9zwx6ES8An6sfebhL+W4MrhSXvqIV+5A4cHf5yAVkY0=
Subject key identifier:   B8:38:82:1D:49:A7:2E:3A:5B:B9:FC:62:6C:D2:2D:86:48:94:09:9F
Certificate issuer:       /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
Certificate serial:       34A0E95C52271867270D910C0644CA40E502972F
Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/323830343a316466633a643030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Wed 22 Oct 2025 20:47:47 +0000
ROA not before:           Wed 22 Oct 2025 20:42:47 +0000
ROA not after:            Wed 21 Oct 2026 20:47:47 +0000
asID:                     262765
IP address blocks:        2804:1dfc:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a0:e9:5c:52:27:18:67:27:0d:91:0c:06:44:ca:40:e5:02:97:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Validity
            Not Before: Oct 22 20:42:47 2025 GMT
            Not After : Oct 21 20:47:47 2026 GMT
        Subject: CN=B838821D49A72E3A5BB9FC626CD22D864894099F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:31:cb:54:f8:9e:cc:10:c9:77:9b:d8:f1:dc:
                    45:b9:66:7c:c0:60:8a:a7:31:be:f5:72:1f:6a:d8:
                    32:7a:f7:3b:c6:59:9e:9d:4b:29:08:56:41:97:5b:
                    b4:c3:19:fa:57:8b:f4:bd:dd:ed:4f:c6:f5:30:43:
                    b8:87:cc:dc:90:1a:98:fd:29:9a:8c:e5:25:e9:24:
                    4d:30:d1:cc:64:81:c1:be:43:3a:b9:8e:50:63:ca:
                    03:9e:6d:87:9b:4a:0a:a1:76:82:c0:e6:f5:9d:e7:
                    e1:67:0b:11:7f:e5:3b:1c:14:a1:79:b0:87:a7:ac:
                    cb:b2:9e:0e:d6:77:1e:da:63:dd:41:f2:62:40:d0:
                    0a:75:1d:02:31:b5:20:69:87:7a:a2:f6:40:d6:b1:
                    be:8d:b9:2a:0a:ea:64:e6:80:d4:db:8f:b2:e9:76:
                    87:75:d9:06:33:90:ba:51:8c:96:61:97:98:02:69:
                    6e:5b:02:b7:9e:3d:78:c8:4d:97:17:e5:96:c4:73:
                    af:88:f2:5c:a2:8b:ba:fb:7a:1b:44:aa:a5:70:e2:
                    8d:f1:8d:81:b5:95:cf:07:89:ea:44:e0:82:2a:4a:
                    c7:2b:62:34:2b:c0:e0:51:8c:7a:64:2b:1d:cc:63:
                    da:06:5d:ca:c0:07:9e:7f:e5:11:42:c3:77:f3:31:
                    94:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:38:82:1D:49:A7:2E:3A:5B:B9:FC:62:6C:D2:2D:86:48:94:09:9F
            X509v3 Authority Key Identifier:
                keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/323830343a316466633a643030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         85:db:80:ce:2b:3f:f4:ef:7e:7f:a9:f4:f6:22:8a:3a:22:cf:
         84:1c:0b:36:70:10:f6:53:a4:11:54:22:b0:6c:ec:2d:ff:c4:
         96:c4:23:29:a7:90:48:c5:c2:4b:fb:64:66:f7:83:09:da:f2:
         06:a1:63:00:f8:f9:a2:86:76:9c:97:d5:f1:39:02:87:1a:9d:
         7e:c5:41:03:ff:4f:6e:eb:cd:8a:6f:a2:08:71:dc:11:69:37:
         00:43:4a:4a:4f:4e:51:21:ee:de:f0:3c:ba:6d:71:09:cc:7b:
         d1:53:38:98:ae:37:71:56:f6:02:ce:61:23:6b:17:7b:7b:a3:
         83:dc:fa:fd:e0:fd:4c:fb:ef:6e:58:61:50:ba:e2:8d:1a:b4:
         a5:4c:70:4b:f7:83:af:dc:a5:9b:e5:1e:1c:de:8d:e8:ff:c6:
         86:65:8c:3a:54:cb:16:aa:40:04:f1:15:b2:64:84:ed:c1:dd:
         94:d8:b8:04:00:2d:60:bb:77:75:4e:6b:5c:90:39:e4:47:f1:
         f6:50:6f:b7:d3:0f:f6:36:dc:ab:a0:83:20:2d:e7:fa:a4:27:
         37:b9:04:65:a9:f6:c7:9e:c6:6d:31:a1:e0:59:24:73:e2:2f:
         d3:ea:8a:10:30:f9:a1:85:82:33:a9:67:5d:98:40:08:3a:c1:
         09:4a:80:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:37:10 2025 by rpki-client