Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/323830343a316466633a663030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a663030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          VOGquA9LL1EvNlNlBzr5sSYPPuzAmBaFMhEo4B1ZDv0=
Subject key identifier:   BD:C8:9A:9A:19:98:06:8D:B1:20:B3:45:8E:E7:73:04:C3:C6:54:9C
Certificate issuer:       /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
Certificate serial:       7DDBC7BC83122245FF8986243392E13123B08D56
Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/323830343a316466633a663030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Wed 22 Oct 2025 20:47:53 +0000
ROA not before:           Wed 22 Oct 2025 20:42:53 +0000
ROA not after:            Wed 21 Oct 2026 20:47:53 +0000
asID:                     262765
IP address blocks:        2804:1dfc:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:db:c7:bc:83:12:22:45:ff:89:86:24:33:92:e1:31:23:b0:8d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Validity
            Not Before: Oct 22 20:42:53 2025 GMT
            Not After : Oct 21 20:47:53 2026 GMT
        Subject: CN=BDC89A9A1998068DB120B3458EE77304C3C6549C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a1:13:8f:86:46:b5:d8:3a:d9:37:8c:c2:2f:
                    f5:1b:0f:0d:6a:65:40:4e:ac:fa:4a:f6:e0:f8:02:
                    04:d8:84:65:8a:cc:15:79:b9:39:23:fe:6f:3e:76:
                    0b:38:bf:2b:80:c0:c5:27:1a:bc:87:26:8a:e3:a0:
                    24:2e:cf:26:27:ae:3f:07:c4:db:d2:e2:96:98:f8:
                    a9:fc:07:eb:86:b5:c6:46:2f:e0:c9:12:24:56:b4:
                    a3:83:1c:26:f3:56:81:56:a4:49:77:81:49:6d:d9:
                    c2:13:94:ba:5c:d1:13:39:e9:b9:73:37:45:e1:8a:
                    60:f3:6f:96:dc:14:dc:35:2d:89:f6:1a:72:e7:a3:
                    e3:ae:24:92:86:69:eb:63:2e:8f:75:2d:51:e9:a5:
                    57:ff:5b:e6:4c:56:1b:f2:7e:86:4a:23:59:fe:ec:
                    85:6a:58:1b:68:ff:11:08:9e:c8:d5:05:89:e9:c8:
                    ad:41:91:10:a3:d9:dc:a7:6b:6e:93:ac:b6:35:87:
                    f6:25:52:d1:54:06:40:42:0e:23:e1:2d:c9:22:19:
                    44:09:1e:4a:39:7f:1c:42:14:44:77:25:81:75:41:
                    dc:0b:d5:ab:7f:1d:e3:dd:1a:18:06:a6:88:04:3c:
                    de:03:ae:6b:ad:3a:67:58:ae:85:97:5c:f9:f3:b1:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C8:9A:9A:19:98:06:8D:B1:20:B3:45:8E:E7:73:04:C3:C6:54:9C
            X509v3 Authority Key Identifier:
                keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/323830343a316466633a663030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         35:1b:10:3d:a5:99:fd:ef:7a:1d:93:f6:47:23:1b:59:7d:0b:
         df:62:f1:2c:6d:e3:16:47:77:bd:8c:e3:dd:b7:ad:ac:12:b8:
         1a:be:b2:a1:a5:2b:3e:b6:4b:63:b5:ac:28:9f:e0:39:ed:95:
         04:6d:8a:4f:92:ba:c1:5c:04:f8:32:1f:1f:fa:bd:9b:f1:14:
         f4:a5:29:05:e6:0a:32:18:20:97:f3:b0:03:96:b4:dd:37:bd:
         a1:43:1a:09:fa:85:0f:cd:22:c7:56:cf:ac:7b:b4:6e:51:3b:
         8a:68:61:f5:a2:c5:96:c9:76:54:f4:bc:de:57:df:9a:24:0a:
         71:f6:10:fb:52:98:f6:e5:1e:bf:43:56:ce:dc:d9:58:33:16:
         a2:04:5e:b4:43:66:5d:d4:80:6d:9c:1b:9d:07:ed:01:24:94:
         b1:08:b9:a5:0c:6a:72:78:6d:33:2e:02:f1:35:6b:2d:df:80:
         a5:10:66:d4:4f:59:13:19:05:b9:35:af:32:b2:1e:00:2f:5e:
         4d:93:87:0d:9c:bc:60:de:2d:92:07:1b:64:63:22:28:5a:e2:
         fc:fa:08:c8:e0:73:ea:a6:95:cf:94:74:7f:12:59:bc:04:96:
         32:45:4a:7a:85:6d:28:59:7f:4a:92:6b:50:57:6a:45:70:bf:
         a1:fb:ae:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:37:13 2025 by rpki-client