Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/323830343a333462383a3a2f33322d3438203d3e20323635343735.roa
File:                     323830343a333462383a3a2f33322d3438203d3e20323635343735.roa (raw, json)
Hash identifier:          7IoalipyU9bCWrcvBhgDRcJlcy9X1NBtovpjl/NZOjk=
Subject key identifier:   94:CE:65:DE:98:BE:E2:D7:33:48:CA:C5:97:F1:6B:E2:6C:11:F0:A9
Certificate issuer:       /CN=2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8
Certificate serial:       6DA36E880A2678C1475EE2600C1E231799ACA2ED
Authority key identifier: 2B:E9:E1:3D:9A:7C:5A:A3:F1:7D:C9:9A:74:E8:D5:C7:D8:4B:D4:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/323830343a333462383a3a2f33322d3438203d3e20323635343735.roa
Signing time:             Wed 23 Jul 2025 13:05:31 +0000
ROA not before:           Wed 23 Jul 2025 13:00:31 +0000
ROA not after:            Wed 22 Jul 2026 13:05:31 +0000
asID:                     265475
IP address blocks:        2804:34b8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.crl
                          rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a3:6e:88:0a:26:78:c1:47:5e:e2:60:0c:1e:23:17:99:ac:a2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8
        Validity
            Not Before: Jul 23 13:00:31 2025 GMT
            Not After : Jul 22 13:05:31 2026 GMT
        Subject: CN=94CE65DE98BEE2D73348CAC597F16BE26C11F0A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ad:c1:dd:48:47:5e:99:c7:eb:39:26:1b:e4:
                    a1:32:2d:c7:8c:95:e0:f0:44:48:e6:ef:9e:60:e9:
                    6c:ea:40:3e:cc:56:d0:ac:15:67:3c:74:cc:eb:a1:
                    53:1e:96:0a:e1:56:d7:f4:cb:b1:f9:ba:4a:81:de:
                    80:a0:71:fc:91:82:27:87:85:d9:ce:6c:f9:e5:0d:
                    eb:48:fc:e5:7d:5f:45:52:d9:59:19:62:80:cc:e9:
                    80:20:83:92:ef:85:36:62:33:52:a6:2c:8f:45:28:
                    1c:f0:4f:98:95:b4:29:c2:b3:98:b6:e6:1a:53:5f:
                    60:83:18:7e:bc:52:bd:4f:ab:70:bd:e2:fa:a4:05:
                    0a:ea:1f:c0:b0:23:89:32:df:2b:b8:3a:25:51:5a:
                    b0:ba:25:dd:c5:b1:6f:74:23:d6:e3:90:01:72:a9:
                    85:b0:74:2f:f9:fa:f4:ae:52:b9:04:0f:91:63:5c:
                    80:93:4b:11:5b:a1:49:6a:f4:14:f9:63:94:85:b5:
                    a3:29:53:b9:d5:e7:b9:33:30:ff:cb:da:b3:7b:dc:
                    2e:db:7e:ad:89:8b:6b:54:81:da:b3:b0:48:05:4f:
                    04:cf:32:9d:11:b9:5d:ea:62:1b:08:9b:03:58:48:
                    ca:51:9b:0c:c2:5d:a2:8e:5c:f9:e2:6d:b7:97:f6:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CE:65:DE:98:BE:E2:D7:33:48:CA:C5:97:F1:6B:E2:6C:11:F0:A9
            X509v3 Authority Key Identifier:
                keyid:2B:E9:E1:3D:9A:7C:5A:A3:F1:7D:C9:9A:74:E8:D5:C7:D8:4B:D4:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BE9E13D9A7C5AA3F17DC99A74E8D5C7D84BD4D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdHtMynN32vK2FEC5jmWQ7AyhD4477vmhNP3QTUCFkqn/0/323830343a333462383a3a2f33322d3438203d3e20323635343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:cb:26:aa:bb:9a:e8:41:86:99:f7:ee:27:59:70:89:51:46:
         87:ae:7d:70:b8:18:f5:fa:b2:2a:3c:e7:09:21:c4:2e:aa:28:
         df:5e:87:38:bd:48:38:d1:c5:6e:e9:f5:af:e2:b5:28:72:31:
         c1:e3:3f:61:98:08:46:e1:5b:1e:fb:b0:5e:1b:23:ad:fc:77:
         54:2e:6f:4f:7b:c0:7c:a7:04:81:8f:9d:e6:65:83:4e:58:a1:
         89:79:9c:58:fc:4d:f4:88:e5:15:a7:ae:bd:6f:ba:41:be:54:
         a9:78:19:e7:cd:5b:56:7d:c0:f8:e1:50:f8:d2:23:de:f4:7f:
         39:6a:85:85:ef:e9:b0:86:4d:9a:95:49:f0:69:b0:89:62:b1:
         73:bc:7c:93:13:2a:7b:5e:42:a6:b3:3d:8e:53:96:b3:62:6a:
         29:fd:49:cf:c2:7a:46:79:3d:27:58:74:cd:a2:ca:30:49:92:
         f8:04:1f:ca:5e:d4:ee:ee:46:3e:10:c7:55:91:ac:d9:8e:75:
         96:80:e8:73:99:e1:27:3c:98:a1:58:cf:d5:52:51:55:a9:e3:
         cd:1b:d7:27:18:20:d4:90:89:63:3c:90:d5:ed:88:7c:95:c0:
         f1:93:2f:c5:27:b9:c2:e9:2a:d8:bd:66:cf:9a:34:b5:dd:a4:
         cf:b1:a8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:24:41 2025 by rpki-client