Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a343030303a3a2f33342d3334203d3e20323732313637.roa
File:                     323830343a383266343a343030303a3a2f33342d3334203d3e20323732313637.roa (raw, json)
Hash identifier:          4yzGQMSc0AUrNWtIfxWTpvIlPLr2og5AMNXh5+qZ1hk=
Subject key identifier:   3A:A7:B3:67:9D:81:BF:81:41:8E:24:75:C0:01:49:45:00:01:AB:25
Certificate issuer:       /CN=266EB7778B34AD61D225851E8CF4924FC36A8639
Certificate serial:       77A0C8106978352F497D574D52B14F096026CDAD
Authority key identifier: 26:6E:B7:77:8B:34:AD:61:D2:25:85:1E:8C:F4:92:4F:C3:6A:86:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a343030303a3a2f33342d3334203d3e20323732313637.roa
Signing time:             Sun 22 Jun 2025 23:36:01 +0000
ROA not before:           Sun 22 Jun 2025 23:31:01 +0000
ROA not after:            Sun 21 Jun 2026 23:36:01 +0000
asID:                     272167
IP address blocks:        2804:82f4:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.crl
                          rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 06:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a0:c8:10:69:78:35:2f:49:7d:57:4d:52:b1:4f:09:60:26:cd:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266EB7778B34AD61D225851E8CF4924FC36A8639
        Validity
            Not Before: Jun 22 23:31:01 2025 GMT
            Not After : Jun 21 23:36:01 2026 GMT
        Subject: CN=3AA7B3679D81BF81418E2475C00149450001AB25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dd:fa:90:ab:b2:96:65:49:49:91:58:e9:a9:
                    1d:f3:7b:8f:4a:f6:6b:15:b8:16:d1:a9:d8:a6:42:
                    be:b2:44:00:53:84:d6:24:cf:91:e1:b2:93:95:06:
                    86:bc:6c:3a:0c:53:ca:d8:ad:06:b6:09:73:3c:44:
                    50:2d:67:64:ec:6c:7e:89:1d:c7:df:7b:ba:25:dc:
                    c5:3c:2f:a7:4c:e7:99:33:2f:c3:b5:00:8c:33:da:
                    19:87:16:47:74:c5:02:74:a6:29:56:0f:ad:75:86:
                    00:77:f2:db:10:ca:a4:56:62:44:9a:f4:88:9a:b8:
                    c4:ed:c1:68:5c:34:f9:dd:92:45:15:2f:ae:3e:bd:
                    02:a6:e0:dd:79:cb:1d:8b:af:09:be:7d:b3:c6:f7:
                    d6:28:a8:c4:be:21:61:36:77:df:ed:52:6b:d7:98:
                    b6:28:aa:93:c1:9b:1e:35:00:93:7f:f9:21:51:06:
                    89:84:f7:3e:f3:40:a6:cc:da:97:0c:2d:16:ee:5c:
                    56:c3:18:2f:b8:8c:49:b7:ea:42:0f:71:85:16:08:
                    d0:16:11:77:dd:fa:ea:ad:42:2e:e8:50:c8:7f:a1:
                    d6:58:ff:14:cd:c5:17:b8:c2:9b:69:91:23:ee:24:
                    97:8e:0f:7d:aa:0d:35:e2:05:17:b4:66:2b:91:d6:
                    7e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A7:B3:67:9D:81:BF:81:41:8E:24:75:C0:01:49:45:00:01:AB:25
            X509v3 Authority Key Identifier:
                keyid:26:6E:B7:77:8B:34:AD:61:D2:25:85:1E:8C:F4:92:4F:C3:6A:86:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a343030303a3a2f33342d3334203d3e20323732313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82f4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b0:d9:ca:8e:49:b3:3f:3c:ff:32:e7:3a:11:e9:9a:40:ae:06:
         87:b2:84:0f:9d:a0:e7:3a:d5:10:7b:40:e2:0e:e1:5d:5b:f1:
         2f:22:98:5c:37:1b:52:5f:3f:40:ac:37:fc:e3:8b:54:b4:d7:
         6e:9c:a9:e4:83:98:4f:4a:e4:b8:7f:98:16:c8:da:f0:20:93:
         37:f3:d5:a1:68:33:af:63:5c:af:a4:99:64:b4:da:76:75:23:
         5b:a6:64:3b:24:38:b1:9f:5a:6b:36:dc:60:41:8a:d6:0e:21:
         5b:3a:a4:6b:45:de:28:36:2b:91:1a:a1:3a:3b:14:91:e2:3c:
         ca:32:26:db:7d:53:99:6e:4d:5e:d1:9e:9b:14:86:e5:db:86:
         23:14:f4:53:c6:8c:96:bc:6f:c5:af:76:6a:5c:03:1b:03:df:
         da:1f:81:da:ab:a0:7c:c0:7c:06:6e:4c:7b:ac:6f:c8:39:31:
         c9:58:65:c6:fe:5a:c3:05:60:28:2f:b8:81:88:f3:f5:be:6d:
         2f:01:f0:99:22:67:d6:a3:a7:6e:15:95:a7:c9:06:f2:85:70:
         9b:5c:cf:dc:bf:57:0b:60:7e:c3:73:dc:af:96:f4:41:68:92:
         22:82:c5:07:b8:36:98:18:30:c8:81:e0:5e:57:a2:eb:a5:62:
         f5:dc:70:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 12:07:23 2025 by rpki-client