Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a383030303a3a2f33342d3334203d3e20323638373436.roa
File:                     323830343a356131303a383030303a3a2f33342d3334203d3e20323638373436.roa (raw, json)
Hash identifier:          kVm0VIVBjTNJy5YqaBSoeHi2G45/6/NLZ0FjoV6k0AY=
Subject key identifier:   A3:4C:51:D6:27:0A:4D:36:70:09:5F:C1:3F:01:E3:D9:BB:1C:8B:8C
Certificate issuer:       /CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
Certificate serial:       1E46252EA0369EA0B02461BEF472C6FEABF34324
Authority key identifier: DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a383030303a3a2f33342d3334203d3e20323638373436.roa
Signing time:             Fri 12 Sep 2025 18:32:18 +0000
ROA not before:           Fri 12 Sep 2025 18:27:18 +0000
ROA not after:            Fri 11 Sep 2026 18:32:18 +0000
asID:                     268746
IP address blocks:        2804:5a10:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 03:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:46:25:2e:a0:36:9e:a0:b0:24:61:be:f4:72:c6:fe:ab:f3:43:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA32161651B9F9E5E58F4DC96D7517F0D8023D21
        Validity
            Not Before: Sep 12 18:27:18 2025 GMT
            Not After : Sep 11 18:32:18 2026 GMT
        Subject: CN=A34C51D6270A4D3670095FC13F01E3D9BB1C8B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d8:1e:f0:76:89:83:ff:03:68:dd:41:b2:4a:
                    b1:6d:fa:1a:a7:49:73:ea:5b:61:6b:6c:92:8d:54:
                    d5:fe:4b:16:74:f8:19:16:a5:c7:06:ae:2b:bc:09:
                    33:fe:c3:1b:2d:49:a1:91:a1:b0:4b:53:fa:00:82:
                    94:87:39:f1:d2:7a:d4:ca:74:61:96:fd:53:a7:7e:
                    b1:ff:a3:7c:68:5f:21:5d:b0:49:8c:4e:69:e7:6a:
                    51:2f:6f:57:7f:fa:69:ab:14:e6:a8:f3:16:28:b8:
                    e9:8f:07:ab:b0:3c:d3:74:55:76:02:a4:8a:bd:5d:
                    45:90:66:29:b2:f7:12:d3:53:b5:25:7e:67:4b:80:
                    20:2c:b3:44:ee:de:82:03:91:6c:fc:7b:50:7f:a8:
                    a6:44:b3:8b:3a:c1:b7:e4:37:35:84:5d:74:bd:46:
                    c2:a2:b6:e5:96:28:8e:2d:7a:f1:62:db:65:2c:dc:
                    89:6d:69:85:9f:c1:dd:6c:14:06:8c:74:3e:4a:49:
                    03:5b:a9:7c:92:c8:e2:90:5c:e6:3e:8f:97:41:8c:
                    dc:7c:82:b6:7e:eb:1a:57:25:af:f9:c4:9d:4d:e3:
                    82:20:35:f8:50:69:8b:68:9c:64:04:a7:0b:f6:06:
                    6e:80:de:cd:33:d4:30:e1:b2:20:bc:ee:c1:82:cb:
                    53:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4C:51:D6:27:0A:4D:36:70:09:5F:C1:3F:01:E3:D9:BB:1C:8B:8C
            X509v3 Authority Key Identifier:
                keyid:DA:32:16:16:51:B9:F9:E5:E5:8F:4D:C9:6D:75:17:F0:D8:02:3D:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA32161651B9F9E5E58F4DC96D7517F0D8023D21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/323830343a356131303a383030303a3a2f33342d3334203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6d:06:fe:55:33:33:e1:e0:a0:89:ae:d8:c6:f3:a8:7e:67:0f:
         39:4e:67:7e:36:5a:5f:86:4c:56:05:bb:06:83:50:26:1a:20:
         39:6a:ab:58:68:46:6c:5e:2d:c3:e1:1f:e4:e1:8a:71:d4:56:
         85:f7:68:2c:80:b5:55:cf:92:11:e1:a8:a6:b0:43:ed:e2:cd:
         cd:44:db:e7:8a:65:84:03:4d:77:b8:1a:4d:92:86:0a:ce:7a:
         1b:e0:78:4e:27:02:d5:21:54:bc:69:e6:4c:96:27:06:39:90:
         df:88:6f:e0:ec:1b:33:74:40:45:69:a7:2b:91:5c:57:f7:ad:
         3f:ce:28:67:cc:b3:9e:6f:14:a7:da:20:f7:7f:73:2f:12:0f:
         c0:67:d6:7d:2c:4b:ba:a1:c5:16:83:de:10:2a:04:75:d9:16:
         67:ce:c0:52:f8:8b:2c:a6:6e:ed:02:fe:73:23:6a:2f:78:f3:
         9a:9b:f0:1f:98:9f:51:19:d5:70:db:f1:0f:71:81:bb:93:7c:
         1b:51:7c:59:68:e0:72:54:f4:9a:9b:dd:ed:b8:db:37:14:b5:
         40:a2:31:ac:6e:4a:df:7e:ec:0e:60:05:07:48:15:88:8f:ea:
         5c:34:e5:cd:11:c0:6e:26:41:f8:cc:68:cd:0e:5f:0b:f4:06:
         ed:2f:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:57:49 2025 by rpki-client