Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/323830343a353134303a3a2f33332d3333203d3e20323638343430.roa
File:                     323830343a353134303a3a2f33332d3333203d3e20323638343430.roa (raw, json)
Hash identifier:          LeRqew8opsaem32EprvHblYNmhZFlfM2Lnc7VUAt0Ic=
Subject key identifier:   D2:0A:A5:C7:65:AF:39:D8:6B:7A:01:1F:29:D1:12:DA:08:50:C4:8F
Certificate issuer:       /CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
Certificate serial:       554AD3F2C9851C520065DFFA4D35E2DFB9ABFAA4
Authority key identifier: 70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/323830343a353134303a3a2f33332d3333203d3e20323638343430.roa
Signing time:             Wed 01 Oct 2025 18:01:38 +0000
ROA not before:           Wed 01 Oct 2025 17:56:38 +0000
ROA not after:            Wed 30 Sep 2026 18:01:38 +0000
asID:                     268440
IP address blocks:        2804:5140::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4a:d3:f2:c9:85:1c:52:00:65:df:fa:4d:35:e2:df:b9:ab:fa:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701F7EBD5EE2152D4689A615D0F186D075EECD41
        Validity
            Not Before: Oct  1 17:56:38 2025 GMT
            Not After : Sep 30 18:01:38 2026 GMT
        Subject: CN=D20AA5C765AF39D86B7A011F29D112DA0850C48F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:fd:d0:7e:a1:8e:dd:98:fb:90:68:2b:8c:
                    3d:aa:53:74:5f:0e:f8:5e:9d:d8:d4:f9:bf:1f:f1:
                    d1:1d:d6:ad:c6:b1:fb:92:82:26:9b:ba:cd:61:f1:
                    88:2c:80:25:ab:4d:6d:3f:13:d5:73:8b:3b:71:78:
                    50:50:f6:d4:88:8d:ee:b6:a1:76:f3:0b:e3:64:87:
                    0e:d0:ac:41:ff:d6:cf:07:7e:62:cd:97:a9:72:a1:
                    58:fe:4f:0f:ed:1c:d9:6f:e8:7c:ef:88:2b:fe:7a:
                    5f:d3:b1:1d:2d:d1:0f:98:90:15:f0:59:e9:87:3b:
                    cb:4f:31:95:30:98:46:b9:62:7b:8a:f0:b4:3f:d9:
                    cc:58:69:88:a1:bc:76:a6:51:b2:c4:ec:d8:af:95:
                    e2:a7:76:66:78:26:f2:f8:2d:73:5c:4a:c1:93:a2:
                    0b:a1:07:5d:16:c2:5f:3e:d0:b3:ff:2c:2c:97:81:
                    05:ca:c1:44:a1:c7:22:13:05:fb:a3:59:18:4a:77:
                    56:73:7d:68:50:e7:3d:43:c9:98:0f:9f:34:42:a6:
                    0b:10:24:87:e8:6a:59:e3:5c:26:5c:f5:7b:c0:f9:
                    aa:12:fc:b6:32:0a:f6:17:b7:04:b6:23:50:54:88:
                    ed:06:7a:e9:cc:ca:2d:0c:01:fa:f4:d3:3b:da:bc:
                    ed:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0A:A5:C7:65:AF:39:D8:6B:7A:01:1F:29:D1:12:DA:08:50:C4:8F
            X509v3 Authority Key Identifier:
                keyid:70:1F:7E:BD:5E:E2:15:2D:46:89:A6:15:D0:F1:86:D0:75:EE:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/701F7EBD5EE2152D4689A615D0F186D075EECD41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701F7EBD5EE2152D4689A615D0F186D075EECD41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/323830343a353134303a3a2f33332d3333203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5140::/33

    Signature Algorithm: sha256WithRSAEncryption
         52:f2:86:62:b0:b2:35:74:ac:a1:6a:52:61:a8:c1:42:4b:62:
         ec:93:c7:c8:ae:16:17:50:5c:0b:e9:5a:5a:c1:c0:d6:18:4c:
         ef:0d:db:10:62:84:96:e2:89:e8:98:e3:ca:3c:36:ac:a7:db:
         d0:6e:a4:33:28:38:be:28:24:f0:cb:8b:e0:b1:a4:92:8a:66:
         c8:ee:c4:fc:7d:b5:99:ee:2f:dd:83:d2:ef:ef:c2:ec:4e:3c:
         b4:4f:e1:1a:ba:3f:76:92:9a:d7:ff:5e:b3:a7:53:6d:8d:23:
         be:22:01:ef:97:52:d7:83:7d:a1:e0:57:06:ab:af:69:0e:3a:
         98:c9:47:05:4e:31:ce:e8:e8:50:38:d0:b7:9d:3b:a4:e1:54:
         1a:0e:63:dc:31:32:92:6c:b6:0e:99:bc:b3:88:de:be:2d:e2:
         ca:d5:6b:75:9c:df:70:48:80:c2:78:34:18:1e:71:27:94:5d:
         7d:21:a1:ca:72:2b:ad:8e:e9:7c:2a:14:a4:f1:c7:81:33:ae:
         0f:b1:c9:d2:1c:88:dc:c9:51:c6:43:3a:f8:cf:29:e4:76:e3:
         de:c3:cd:40:d1:51:dd:40:a2:03:ed:45:b7:67:a4:23:bd:22:
         3f:0e:b5:19:44:0c:49:5b:0f:82:76:f3:c3:c2:6f:cd:66:b6:
         d8:d4:42:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:15:41 2025 by rpki-client