Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/323830343a333137343a3a2f33362d313238203d3e20323635303136.roa
File:                     323830343a333137343a3a2f33362d313238203d3e20323635303136.roa (raw, json)
Hash identifier:          qAzyEkmPw3mlSBC4lABTQiivdhcCsktw+/oqmoHZXow=
Subject key identifier:   62:7F:EA:7D:D1:1D:26:FA:66:E7:0D:1A:BE:CB:B9:48:25:7D:70:AD
Certificate issuer:       /CN=28AEA4799AA16796C18CA8950931D4394F01179A
Certificate serial:       79139D4F8EECED388E941C49C56681080B0A7C7E
Authority key identifier: 28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/323830343a333137343a3a2f33362d313238203d3e20323635303136.roa
Signing time:             Tue 17 Jun 2025 14:14:39 +0000
ROA not before:           Tue 17 Jun 2025 14:09:39 +0000
ROA not after:            Tue 16 Jun 2026 14:14:39 +0000
asID:                     265016
IP address blocks:        2804:3174::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl
                          rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 14:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:13:9d:4f:8e:ec:ed:38:8e:94:1c:49:c5:66:81:08:0b:0a:7c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28AEA4799AA16796C18CA8950931D4394F01179A
        Validity
            Not Before: Jun 17 14:09:39 2025 GMT
            Not After : Jun 16 14:14:39 2026 GMT
        Subject: CN=627FEA7DD11D26FA66E70D1ABECBB948257D70AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:c9:df:ef:d1:30:e2:68:fb:f1:25:19:b3:
                    df:94:31:04:89:cd:62:2a:a6:71:fb:bd:9b:2c:fa:
                    e5:de:44:8d:17:ee:5b:79:a6:3b:1d:31:fe:0d:3f:
                    a9:cc:06:70:64:27:aa:7c:98:fd:a1:8e:7d:92:ac:
                    1f:2d:d4:1e:69:a3:3f:85:f4:53:a4:83:92:ac:02:
                    9d:af:34:11:00:47:a3:9c:c0:0e:b1:ab:0f:69:0f:
                    8d:d9:15:03:04:b5:a3:97:65:f4:fa:b9:73:39:aa:
                    d7:be:48:21:7e:67:a5:71:5a:33:0b:f9:e6:2e:3a:
                    8e:c8:f8:64:4d:f7:30:a6:20:1c:7f:29:3a:7c:bb:
                    ae:3c:b0:bf:ae:3e:0f:d3:16:92:b7:3d:82:ca:83:
                    68:5f:42:d2:9b:bd:ad:15:80:e6:79:72:ee:7c:05:
                    b9:b9:c6:64:93:67:17:b3:fe:ef:d9:8a:f9:ad:3a:
                    af:c5:27:e5:ec:b8:91:f7:3b:14:3d:c4:50:19:5b:
                    64:fb:95:7e:8d:a2:a8:29:e2:db:26:44:7e:58:e2:
                    24:7e:ea:73:1d:5e:4c:b9:e7:f8:73:a1:cf:d2:d4:
                    ab:5c:81:78:c5:81:73:c9:a6:73:66:25:b2:be:d5:
                    03:ce:d5:e6:ec:4b:97:5c:b0:6d:a0:c2:31:a5:6a:
                    7a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7F:EA:7D:D1:1D:26:FA:66:E7:0D:1A:BE:CB:B9:48:25:7D:70:AD
            X509v3 Authority Key Identifier:
                keyid:28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/323830343a333137343a3a2f33362d313238203d3e20323635303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3174::/36

    Signature Algorithm: sha256WithRSAEncryption
         67:62:3f:de:96:2a:c6:1e:b2:eb:e1:ef:bb:e1:b8:ec:42:5e:
         6c:65:2c:b1:7d:3a:af:3f:c5:12:7e:5c:a5:0a:3c:1b:ec:9b:
         0b:ad:d2:78:c2:5d:59:6a:be:24:ba:72:13:c7:45:30:54:9f:
         94:04:53:7a:de:28:ed:2a:e9:e1:30:45:f7:8c:52:ff:c5:50:
         c4:0d:81:78:eb:dc:ae:68:e7:05:61:35:59:fd:b8:44:97:5f:
         f7:98:bb:46:7d:01:32:44:18:76:1d:61:06:3a:ca:b7:bd:8f:
         77:b2:b5:cb:c3:54:b7:33:81:49:c4:1d:c4:70:6e:74:50:43:
         71:49:ac:65:e3:a0:57:a7:2f:93:0e:86:a6:80:ae:5b:73:30:
         b5:43:0c:3d:2e:f0:04:a8:db:09:de:77:88:89:0d:0d:13:8c:
         00:8b:db:30:d6:23:33:86:78:26:97:6e:76:f8:cc:56:30:8c:
         44:8b:dd:3a:83:2b:e4:d7:fb:f2:94:77:75:66:4e:07:e9:cb:
         12:ab:8c:17:c9:9c:ac:42:5d:dd:94:57:05:b4:62:af:d3:1f:
         17:6d:39:bd:2b:bb:0b:fe:c1:68:a0:28:c0:a3:a6:f6:56:07:
         26:e0:ac:9f:1b:df:de:62:a3:81:ef:11:c9:7d:d8:24:ef:05:
         8b:14:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:09:54 2025 by rpki-client