Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a3a2f33322d3438203d3e20323731313136.roa
File:                     323830343a373638303a3a2f33322d3438203d3e20323731313136.roa (raw, json)
Hash identifier:          Fghb94hzBmNLRB/tUKYWAkrpbGHaujN2ZH//k6LONAQ=
Subject key identifier:   3F:D9:0B:E3:27:A9:48:FE:D8:01:08:E7:3F:C7:7F:AE:09:94:C7:D3
Certificate issuer:       /CN=278075463571E15A322ACDFA4EA429CD983E3EFB
Certificate serial:       1325282C73C5D41086460B151842478FEC611A67
Authority key identifier: 27:80:75:46:35:71:E1:5A:32:2A:CD:FA:4E:A4:29:CD:98:3E:3E:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/278075463571E15A322ACDFA4EA429CD983E3EFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a3a2f33322d3438203d3e20323731313136.roa
Signing time:             Wed 11 Jun 2025 16:00:00 +0000
ROA not before:           Wed 11 Jun 2025 15:55:00 +0000
ROA not after:            Wed 10 Jun 2026 16:00:00 +0000
asID:                     271116
IP address blocks:        2804:7680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/278075463571E15A322ACDFA4EA429CD983E3EFB.crl
                          rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/278075463571E15A322ACDFA4EA429CD983E3EFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/278075463571E15A322ACDFA4EA429CD983E3EFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 17:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:25:28:2c:73:c5:d4:10:86:46:0b:15:18:42:47:8f:ec:61:1a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278075463571E15A322ACDFA4EA429CD983E3EFB
        Validity
            Not Before: Jun 11 15:55:00 2025 GMT
            Not After : Jun 10 16:00:00 2026 GMT
        Subject: CN=3082010A0282010100CC289A837E425021E4A426466CAFE845D67F5FB86732FCF69FCCFE870014667470BAAF35757FA1CFBC10BFF5696628055FD9BE9184AA4ED5E3C5675F9679949D75E3A60CD47FDE16032D5F4008190C7528A16E3C3AC3DEE964EDDCA911C470BDAD45B429CADC03557A2BDB5E1AB89FD615818626C4758A673B66073D5DA9F9D57FC643F0F87B9C6FAC64E97684B0FEB5C3F106ED8A42EF9E0DDC7F72A0C065142E5FCF78029EC7E7EA8DDCE52583CDB503747C63599111DC11369973D3C765BCE92555E3E49D6CB12BCBC4452E67699F0DB77A18E0782DDEE7DA7231AD5B36E45579DC192A3BB82FB20B218E8AB58C9BD0BB087567933B5FAF78E8DFCF5490AB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:28:9a:83:7e:42:50:21:e4:a4:26:46:6c:af:
                    e8:45:d6:7f:5f:b8:67:32:fc:f6:9f:cc:fe:87:00:
                    14:66:74:70:ba:af:35:75:7f:a1:cf:bc:10:bf:f5:
                    69:66:28:05:5f:d9:be:91:84:aa:4e:d5:e3:c5:67:
                    5f:96:79:94:9d:75:e3:a6:0c:d4:7f:de:16:03:2d:
                    5f:40:08:19:0c:75:28:a1:6e:3c:3a:c3:de:e9:64:
                    ed:dc:a9:11:c4:70:bd:ad:45:b4:29:ca:dc:03:55:
                    7a:2b:db:5e:1a:b8:9f:d6:15:81:86:26:c4:75:8a:
                    67:3b:66:07:3d:5d:a9:f9:d5:7f:c6:43:f0:f8:7b:
                    9c:6f:ac:64:e9:76:84:b0:fe:b5:c3:f1:06:ed:8a:
                    42:ef:9e:0d:dc:7f:72:a0:c0:65:14:2e:5f:cf:78:
                    02:9e:c7:e7:ea:8d:dc:e5:25:83:cd:b5:03:74:7c:
                    63:59:91:11:dc:11:36:99:73:d3:c7:65:bc:e9:25:
                    55:e3:e4:9d:6c:b1:2b:cb:c4:45:2e:67:69:9f:0d:
                    b7:7a:18:e0:78:2d:de:e7:da:72:31:ad:5b:36:e4:
                    55:79:dc:19:2a:3b:b8:2f:b2:0b:21:8e:8a:b5:8c:
                    9b:d0:bb:08:75:67:93:3b:5f:af:78:e8:df:cf:54:
                    90:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D9:0B:E3:27:A9:48:FE:D8:01:08:E7:3F:C7:7F:AE:09:94:C7:D3
            X509v3 Authority Key Identifier:
                keyid:27:80:75:46:35:71:E1:5A:32:2A:CD:FA:4E:A4:29:CD:98:3E:3E:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/278075463571E15A322ACDFA4EA429CD983E3EFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/278075463571E15A322ACDFA4EA429CD983E3EFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3DFxouR7EKGTRz3ZbfSBuhy24PPqubYwrXeQT6GURG5/0/323830343a373638303a3a2f33322d3438203d3e20323731313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7680::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:6d:a8:90:06:66:23:07:32:22:22:29:57:21:78:31:f9:96:
         16:7f:51:a3:cb:5d:3c:31:b7:13:1b:b7:dc:a3:3f:3f:d4:8a:
         bf:90:9c:1b:d9:fc:1e:95:0d:7f:b6:40:f8:87:b2:d1:8f:c8:
         90:57:17:13:44:e8:d7:b0:56:46:46:b6:5f:1d:c0:cf:7d:3b:
         80:79:b1:83:31:09:5f:28:75:00:c5:f5:16:20:6e:91:9a:f9:
         43:bf:92:be:7e:1b:8b:7c:af:18:b3:69:68:84:0d:7b:4d:28:
         e0:95:5a:d5:d5:7a:f4:ac:57:8e:a1:00:e4:aa:c0:10:d6:c0:
         dc:b5:aa:98:35:60:fc:3d:db:e1:b4:83:65:56:c1:f4:90:20:
         b6:47:79:bd:a5:f0:e5:86:95:13:b8:e4:5c:5b:ed:dd:f9:b5:
         5a:87:fc:bb:9c:bf:63:1a:b6:98:72:6b:72:e6:f1:50:cc:98:
         e3:e5:f8:5d:08:32:7d:6a:3b:9b:e1:93:59:4f:4a:b2:cd:2b:
         a1:00:4b:ea:ab:13:5a:32:03:6e:85:e6:da:d3:72:28:8d:61:
         d6:4d:e7:37:46:aa:99:4a:38:d1:5b:2a:64:a6:22:59:b6:9c:
         cc:b4:84:54:d7:1b:b4:f3:29:5a:8d:10:4e:60:b3:05:33:e3:
         3b:22:3a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:47:35 2025 by rpki-client