Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPiAETsdobFQY3ybUxsHDwoTpFubFeeBrA2MUHKVW1N7/0/323830343a393532633a3a2f33322d313238203d3e20323734353033.roa
File:                     323830343a393532633a3a2f33322d313238203d3e20323734353033.roa (raw, json)
Hash identifier:          rTJJa38/W67G26CcLsZt6MGICdJYurinEhgRg5IU25k=
Subject key identifier:   EC:B3:9A:EC:EF:56:B5:20:47:12:3A:E4:85:A2:30:9B:C8:A1:01:DF
Certificate issuer:       /CN=82676721AEBE871198A7BBA4F1FE49E1992E3E9F
Certificate serial:       5BAEF76F350D2B9CE2AEAA7D9839CF42122F6185
Authority key identifier: 82:67:67:21:AE:BE:87:11:98:A7:BB:A4:F1:FE:49:E1:99:2E:3E:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82676721AEBE871198A7BBA4F1FE49E1992E3E9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPiAETsdobFQY3ybUxsHDwoTpFubFeeBrA2MUHKVW1N7/0/323830343a393532633a3a2f33322d313238203d3e20323734353033.roa
Signing time:             Wed 24 Sep 2025 19:47:08 +0000
ROA not before:           Wed 24 Sep 2025 19:42:08 +0000
ROA not after:            Wed 23 Sep 2026 19:47:08 +0000
asID:                     274503
IP address blocks:        2804:952c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HPiAETsdobFQY3ybUxsHDwoTpFubFeeBrA2MUHKVW1N7/0/82676721AEBE871198A7BBA4F1FE49E1992E3E9F.crl
                          rsync://rpki-repo.registro.br/repo/HPiAETsdobFQY3ybUxsHDwoTpFubFeeBrA2MUHKVW1N7/0/82676721AEBE871198A7BBA4F1FE49E1992E3E9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82676721AEBE871198A7BBA4F1FE49E1992E3E9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ae:f7:6f:35:0d:2b:9c:e2:ae:aa:7d:98:39:cf:42:12:2f:61:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82676721AEBE871198A7BBA4F1FE49E1992E3E9F
        Validity
            Not Before: Sep 24 19:42:08 2025 GMT
            Not After : Sep 23 19:47:08 2026 GMT
        Subject: CN=ECB39AECEF56B52047123AE485A2309BC8A101DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:34:21:b8:94:8f:b6:62:b0:41:e0:5c:24:
                    71:ba:fa:cd:69:22:e9:b3:09:0c:b6:fe:31:c0:80:
                    aa:04:08:f7:46:25:21:07:df:4a:29:55:57:64:ac:
                    e4:77:eb:76:8e:6e:71:a1:8f:58:85:11:75:38:1b:
                    2c:ba:a5:52:14:2f:10:b9:2d:5d:88:3e:2c:9a:c2:
                    ac:32:6d:27:13:4a:47:44:b0:20:5b:92:d8:91:a9:
                    a8:b0:cb:91:5f:54:2a:2c:eb:a5:00:23:ef:fc:c5:
                    7b:49:7d:f7:4e:57:e3:8a:35:ae:f2:b7:21:a4:6d:
                    8b:69:ed:09:4c:c4:9c:68:64:5c:6a:99:66:86:79:
                    2b:b6:78:15:86:b9:f8:b3:88:fb:00:b5:bf:7f:bb:
                    e0:c9:34:75:12:52:b4:c4:22:a3:7f:9a:d2:a9:5c:
                    14:36:7d:e2:db:38:af:72:4e:a5:76:4e:01:68:d3:
                    c4:9a:63:26:4a:e9:f3:e1:c0:fb:41:6e:ae:fb:6b:
                    f9:bb:a0:fc:6e:56:00:8b:f9:aa:98:b6:59:03:ec:
                    64:88:e3:7b:4f:45:67:0f:76:22:92:b6:2d:80:39:
                    d4:d3:eb:d2:0f:bd:b7:c3:a2:e2:80:d1:3a:31:9f:
                    87:17:96:8c:c6:3b:33:4d:8c:cd:c3:d6:5a:39:80:
                    ac:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B3:9A:EC:EF:56:B5:20:47:12:3A:E4:85:A2:30:9B:C8:A1:01:DF
            X509v3 Authority Key Identifier:
                keyid:82:67:67:21:AE:BE:87:11:98:A7:BB:A4:F1:FE:49:E1:99:2E:3E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPiAETsdobFQY3ybUxsHDwoTpFubFeeBrA2MUHKVW1N7/0/82676721AEBE871198A7BBA4F1FE49E1992E3E9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82676721AEBE871198A7BBA4F1FE49E1992E3E9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPiAETsdobFQY3ybUxsHDwoTpFubFeeBrA2MUHKVW1N7/0/323830343a393532633a3a2f33322d313238203d3e20323734353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:952c::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:11:18:01:9a:c6:c4:f2:12:b6:92:ee:27:fb:6f:91:54:10:
         ee:c5:d4:11:0b:37:28:06:4c:f5:6f:4a:22:59:8c:2c:48:fb:
         a0:42:74:9a:cc:a1:71:7e:27:e1:67:b1:73:12:af:d6:12:83:
         7a:93:20:4f:ba:80:a6:db:04:c2:65:2b:fb:7e:f6:e7:67:21:
         80:13:5c:d8:75:05:33:52:e5:7f:60:28:54:e1:bd:0f:0f:41:
         70:8a:f9:64:52:c7:98:72:62:78:e3:c5:e4:f9:1d:4b:78:0a:
         76:4b:6c:58:7d:58:da:62:a7:2c:5a:18:04:54:de:94:cf:f4:
         9f:d7:27:db:c0:02:7d:03:a4:a3:f5:fb:15:c3:19:fe:9c:0d:
         39:b7:2f:b8:4a:4f:01:97:84:fa:03:1b:b6:c2:fb:d3:87:f5:
         d9:b9:d9:25:27:49:b6:f8:df:03:d7:20:e8:c6:4d:d4:3b:89:
         28:90:7b:28:7a:1d:fc:0e:25:95:72:23:98:70:6e:90:6c:86:
         1e:9b:c7:bc:33:3b:36:2d:c8:6d:ef:5f:b3:da:9b:3f:a0:d1:
         16:a4:28:39:1b:97:b6:75:c5:2a:3e:c6:bf:f2:9f:0f:b6:83:
         9e:d0:d7:42:0d:d5:b1:3b:8a:62:c4:18:e7:21:15:3e:42:11:
         4a:34:cb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:56:00 2025 by rpki-client