Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/323830343a333137343a383030303a3a2f33362d313238203d3e20323635303136.roa
File:                     323830343a333137343a383030303a3a2f33362d313238203d3e20323635303136.roa (raw, json)
Hash identifier:          Rj6vfHuvEIIrIwG8lNEGd6KDgvKS0X/NDvCLaLd/AAg=
Subject key identifier:   90:1C:D7:AF:6A:65:DC:C3:D8:90:E1:1C:13:E8:CA:99:AF:6E:F9:F3
Certificate issuer:       /CN=28AEA4799AA16796C18CA8950931D4394F01179A
Certificate serial:       59FBA36B02E3A901DC8A178A8AF0352A2D193873
Authority key identifier: 28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/323830343a333137343a383030303a3a2f33362d313238203d3e20323635303136.roa
Signing time:             Tue 17 Jun 2025 14:14:47 +0000
ROA not before:           Tue 17 Jun 2025 14:09:47 +0000
ROA not after:            Tue 16 Jun 2026 14:14:47 +0000
asID:                     265016
IP address blocks:        2804:3174:8000::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl
                          rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 09:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fb:a3:6b:02:e3:a9:01:dc:8a:17:8a:8a:f0:35:2a:2d:19:38:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AEA4799AA16796C18CA8950931D4394F01179A
        Validity
            Not Before: Jun 17 14:09:47 2025 GMT
            Not After : Jun 16 14:14:47 2026 GMT
        Subject: CN=901CD7AF6A65DCC3D890E11C13E8CA99AF6EF9F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:f7:4a:58:21:dc:08:e5:bb:d2:e7:3b:13:
                    cf:62:6d:39:05:74:8c:2e:83:6b:c8:de:3b:5b:2e:
                    83:d9:91:8f:83:ce:b1:d6:70:00:6c:bc:42:f3:de:
                    db:bb:bd:29:93:b2:a0:b9:b5:40:76:a3:cb:79:ef:
                    68:c5:83:b8:e5:cd:e8:e5:c7:0e:d1:4e:e7:18:66:
                    dd:27:37:38:f1:16:5a:52:b0:57:ac:ea:ec:e6:64:
                    eb:b2:ba:25:e4:bb:cc:05:7f:cf:25:ee:87:8d:34:
                    0b:61:80:cc:66:53:f1:35:d9:54:f2:c9:6e:26:f3:
                    1e:02:e3:e8:9d:8d:b5:e4:4a:ac:d6:05:59:66:8e:
                    69:c8:dd:43:88:6b:34:ff:5c:ba:2a:76:4c:6e:47:
                    33:41:07:36:37:58:7c:4d:60:3c:17:33:c4:f6:6b:
                    4e:cb:aa:e4:aa:b6:03:b1:de:61:ae:81:81:04:9c:
                    ec:38:07:3a:96:2c:25:6e:6a:82:c5:2f:32:35:f6:
                    27:c1:c5:e7:d8:5b:89:e8:8c:6e:05:d1:ba:89:b6:
                    ba:30:01:d2:8e:bf:27:c0:62:d0:4a:f8:42:b4:0f:
                    21:64:57:db:db:73:e8:46:2b:b0:f3:db:ad:6e:0b:
                    dc:1b:19:09:37:eb:b3:f1:5a:47:4a:e5:3a:1b:46:
                    84:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1C:D7:AF:6A:65:DC:C3:D8:90:E1:1C:13:E8:CA:99:AF:6E:F9:F3
            X509v3 Authority Key Identifier:
                keyid:28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/323830343a333137343a383030303a3a2f33362d313238203d3e20323635303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3174:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6d:f5:87:cd:14:1d:74:05:f2:28:15:7a:f9:47:1e:87:2c:26:
         de:0f:f6:aa:6a:07:b3:27:e7:ea:84:e7:04:8e:5f:6a:42:79:
         71:7d:f8:7f:1c:11:ce:65:8f:5f:71:1e:57:bb:26:c2:a4:f4:
         03:b4:a4:10:c1:47:f2:91:e5:5c:bb:ad:97:4a:73:b4:f7:49:
         fd:88:a8:a9:37:7f:0d:f9:1f:4e:8b:76:9f:29:ba:9a:e0:85:
         24:c3:01:3a:21:e6:33:0a:42:72:ce:f5:fc:9e:56:8e:ce:5d:
         1f:16:77:af:f5:92:32:63:3b:d0:7f:a7:f8:01:1c:ce:7a:ff:
         2e:df:7e:7b:69:c4:01:b0:41:85:e9:35:9d:1d:12:c0:f0:cb:
         2b:f7:7b:73:f3:8d:dd:01:23:ba:b7:73:8b:a5:37:d6:21:72:
         5e:88:63:6d:43:8b:11:a6:d2:21:3e:91:fb:fd:4c:a2:5d:31:
         66:2a:49:23:a3:a1:98:61:07:b3:94:00:05:0e:12:02:95:1f:
         fa:ac:bf:86:92:b4:6d:aa:0c:a8:4d:50:30:17:3b:43:46:95:
         92:79:5e:8d:ed:b7:5c:7b:d0:78:3f:96:e1:e4:5c:e4:04:f9:
         9b:bb:31:5c:ce:5b:f6:bd:27:bb:2c:c6:ca:61:fb:68:24:2e:
         02:36:25:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:03:41 2025 by rpki-client