Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/323830343a366531303a3a2f33322d3332203d3e20323730353733.roa
File:                     323830343a366531303a3a2f33322d3332203d3e20323730353733.roa (raw, json)
Hash identifier:          QhKfWuOCGzXjK0AtKwQdeyzuDsrjgWJJnNBJQgH+fZg=
Subject key identifier:   A0:A4:95:0E:0A:7F:ED:25:75:7E:14:2C:D9:94:D6:3A:D2:20:06:C3
Certificate issuer:       /CN=4290059BE28E435DA0953004AF02E14518D3EE13
Certificate serial:       774B195E9899B1FFA11774E0B58397B9C4471B73
Authority key identifier: 42:90:05:9B:E2:8E:43:5D:A0:95:30:04:AF:02:E1:45:18:D3:EE:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4290059BE28E435DA0953004AF02E14518D3EE13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/323830343a366531303a3a2f33322d3332203d3e20323730353733.roa
Signing time:             Tue 23 Sep 2025 13:49:00 +0000
ROA not before:           Tue 23 Sep 2025 13:44:00 +0000
ROA not after:            Tue 22 Sep 2026 13:49:00 +0000
asID:                     270573
IP address blocks:        2804:6e10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/4290059BE28E435DA0953004AF02E14518D3EE13.crl
                          rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/4290059BE28E435DA0953004AF02E14518D3EE13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4290059BE28E435DA0953004AF02E14518D3EE13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4b:19:5e:98:99:b1:ff:a1:17:74:e0:b5:83:97:b9:c4:47:1b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4290059BE28E435DA0953004AF02E14518D3EE13
        Validity
            Not Before: Sep 23 13:44:00 2025 GMT
            Not After : Sep 22 13:49:00 2026 GMT
        Subject: CN=A0A4950E0A7FED25757E142CD994D63AD22006C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2f:a8:bd:f5:7c:e6:e1:e3:68:35:c3:9c:99:
                    fb:64:1c:fe:41:99:c1:23:4b:69:fb:44:4d:f0:42:
                    40:44:9b:e0:7a:10:29:09:69:81:ac:f4:4b:c6:90:
                    0a:bb:3b:51:76:d2:96:eb:2c:ae:7b:7a:75:0d:e0:
                    67:1c:67:aa:2a:fd:33:24:83:5f:b8:e3:c0:9e:ff:
                    48:53:11:b9:62:b0:0e:97:60:cb:1e:a8:53:c4:72:
                    33:a3:34:fd:a7:85:23:b3:0f:ed:6f:e6:ba:3a:57:
                    85:dd:21:03:32:65:cf:27:b7:56:da:76:2a:c3:b2:
                    4d:e7:91:a7:19:a0:39:5e:57:22:e7:b4:1c:fd:e2:
                    05:33:28:c1:fe:9c:2a:5b:23:84:15:80:42:8f:d2:
                    55:b2:d7:44:73:27:ba:c5:39:4f:cd:19:fb:3d:fb:
                    9e:c4:39:73:28:51:ac:36:dd:9f:6f:9d:aa:ea:d6:
                    50:48:64:07:1c:f9:c4:c3:a7:f9:f8:58:78:7b:0e:
                    70:c1:b1:a6:da:1d:c3:d1:d0:ee:db:9d:c7:47:4a:
                    bf:ef:93:66:8f:fe:62:f4:09:cf:b8:ed:f8:1c:2d:
                    fa:ab:98:22:4b:1d:7f:51:9e:0c:71:56:26:34:c2:
                    00:51:06:7c:d7:58:6f:93:79:69:30:5f:ba:85:fc:
                    34:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A4:95:0E:0A:7F:ED:25:75:7E:14:2C:D9:94:D6:3A:D2:20:06:C3
            X509v3 Authority Key Identifier:
                keyid:42:90:05:9B:E2:8E:43:5D:A0:95:30:04:AF:02:E1:45:18:D3:EE:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/4290059BE28E435DA0953004AF02E14518D3EE13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4290059BE28E435DA0953004AF02E14518D3EE13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HtXJVQF4SKYzuYoc3pVQNRyDz9VEtfaPCSRxYxyxomi/0/323830343a366531303a3a2f33322d3332203d3e20323730353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e10::/32

    Signature Algorithm: sha256WithRSAEncryption
         d6:87:28:a0:6a:b2:72:e1:71:dd:7a:19:4b:2a:a5:53:5f:f2:
         31:50:c4:56:7f:51:c8:19:8b:ff:92:a8:79:ec:a4:f1:78:86:
         e4:be:89:cf:f2:6f:22:a5:ab:92:80:c1:1c:50:9e:44:97:5f:
         40:9b:4c:85:56:a4:bc:04:80:f4:09:9a:f0:8c:5b:bc:67:12:
         8f:3b:b6:7c:38:09:3c:92:92:8e:91:c3:7d:2d:c5:4c:a6:ea:
         a7:86:f5:23:c7:1a:06:c8:af:be:8d:52:40:06:50:66:34:30:
         7e:f8:eb:49:33:6e:ec:46:7b:40:18:d9:27:0e:a9:57:94:14:
         a6:3c:e0:40:0b:79:e6:42:49:17:57:ea:39:06:82:d3:c3:72:
         47:ad:22:07:7e:ff:53:f5:df:45:65:80:eb:0c:42:3b:d8:55:
         a7:89:96:46:56:9f:9f:81:fe:78:b2:0c:77:24:79:f1:22:32:
         a8:c3:0a:5f:a3:76:ad:d1:c7:89:22:da:f3:f7:49:3f:0f:2c:
         f7:ec:e8:9b:2d:a3:d9:37:cd:90:cb:50:3a:3d:89:c9:42:82:
         7f:ea:84:95:94:57:77:b9:e2:00:7b:5b:32:f7:60:fa:9e:d1:
         db:2f:99:6f:76:59:3a:fc:a0:fe:cc:49:89:72:f1:9a:e6:ea:
         1e:75:69:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:32:36 2025 by rpki-client