Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a666630303a3a2f34302d3430203d3e20323730373034.roa
File:                     323830343a373031343a666630303a3a2f34302d3430203d3e20323730373034.roa (raw, json)
Hash identifier:          rUvoPO0WeI4YemN/gY/bMGACOyzbXYzW6aiLXiEsdJo=
Subject key identifier:   6C:91:82:DE:0C:FD:7D:32:75:46:9C:19:39:DA:CF:A5:85:80:02:45
Certificate issuer:       /CN=1374315B9575D65AACB45CAFC3702522BE608F60
Certificate serial:       5663F20538E92A51D15DBCA2D649796A5F56B0B8
Authority key identifier: 13:74:31:5B:95:75:D6:5A:AC:B4:5C:AF:C3:70:25:22:BE:60:8F:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a666630303a3a2f34302d3430203d3e20323730373034.roa
Signing time:             Fri 03 Oct 2025 02:28:40 +0000
ROA not before:           Fri 03 Oct 2025 02:23:40 +0000
ROA not after:            Fri 02 Oct 2026 02:28:40 +0000
asID:                     270704
IP address blocks:        2804:7014:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.crl
                          rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:63:f2:05:38:e9:2a:51:d1:5d:bc:a2:d6:49:79:6a:5f:56:b0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1374315B9575D65AACB45CAFC3702522BE608F60
        Validity
            Not Before: Oct  3 02:23:40 2025 GMT
            Not After : Oct  2 02:28:40 2026 GMT
        Subject: CN=6C9182DE0CFD7D3275469C1939DACFA585800245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:67:72:22:d4:56:48:57:d5:97:b5:15:50:78:
                    35:0b:5a:89:6f:99:c1:7b:f8:53:a1:6d:14:4b:58:
                    66:31:57:6d:66:15:94:2b:47:f1:e8:e5:8f:54:6f:
                    77:01:f0:ae:5e:3f:02:b8:73:d1:aa:30:a6:34:ac:
                    bc:bf:74:2e:23:d3:7f:a0:7e:f3:46:07:9d:cc:35:
                    e3:97:b6:e2:ba:42:5e:1f:11:62:16:66:7e:59:cb:
                    c1:eb:b4:c0:93:8a:a7:f8:83:cf:16:bb:dd:ed:c8:
                    3d:47:f3:e8:2b:0a:2f:d7:bb:3b:51:b9:e2:ae:d9:
                    a6:84:43:0f:9c:01:b2:7b:b3:59:e6:e5:c1:38:f5:
                    2f:a5:d8:8b:04:c3:f7:9a:2d:bb:c9:ae:17:ef:c1:
                    67:db:c2:16:23:66:e6:54:3a:46:71:61:02:27:d9:
                    7a:96:42:e4:79:0b:f6:b9:c5:3b:0c:46:09:a8:34:
                    d9:98:bd:40:dc:d9:c4:3c:8f:15:20:06:ba:0e:6f:
                    75:0b:cf:61:85:f6:47:54:63:95:17:96:17:8c:d7:
                    92:07:f3:c1:b1:42:4e:38:e4:9f:c4:b1:6e:91:5b:
                    bf:d2:f2:00:bf:04:51:d7:51:9f:ea:3e:0b:31:d2:
                    5e:9a:0c:06:92:8b:e4:a2:68:4b:de:3d:d3:7f:3f:
                    30:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:91:82:DE:0C:FD:7D:32:75:46:9C:19:39:DA:CF:A5:85:80:02:45
            X509v3 Authority Key Identifier:
                keyid:13:74:31:5B:95:75:D6:5A:AC:B4:5C:AF:C3:70:25:22:BE:60:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a666630303a3a2f34302d3430203d3e20323730373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7014:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:1a:7e:8c:88:d7:c7:9c:a9:95:49:09:24:f4:a8:fe:1a:40:
         63:ad:8e:bd:cb:82:c3:38:57:b8:39:e5:19:97:85:dc:bf:a9:
         5b:46:2a:ed:c6:3b:3c:3e:33:cd:e8:ed:4c:67:ea:93:91:c2:
         70:43:c8:ee:9b:ef:01:09:a0:6e:ec:5b:a0:72:18:36:a2:8c:
         dd:88:81:90:74:ef:c3:41:a2:49:23:9b:85:76:d1:43:71:f1:
         2b:96:0d:19:9d:72:a2:fe:a7:4f:33:0b:c3:9e:a5:fa:92:8d:
         32:ac:e6:0d:c7:d3:34:50:c0:04:3b:d2:4b:a0:4d:5a:ce:fe:
         e6:0d:d3:73:53:d6:d0:0d:f7:bc:2c:23:c8:4b:9f:28:08:8b:
         9d:9f:c5:6f:ed:ce:90:a7:cc:bd:51:7f:5a:a5:74:57:e0:78:
         78:4c:95:62:43:6b:93:c6:79:ad:34:75:8c:95:79:f9:88:60:
         dd:8d:2a:d6:f2:15:33:96:b2:fa:fc:9f:f6:f0:2c:06:89:81:
         a3:87:90:75:b4:c0:1c:09:be:1b:24:3e:e4:5b:f1:cd:89:2e:
         d5:60:b1:a8:b8:23:df:00:80:d7:75:b6:71:41:26:b5:c8:2f:
         d0:f4:14:1b:b8:4c:a5:3b:a6:f0:db:7e:ca:72:0e:ad:39:35:
         83:f5:da:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:06 2025 by rpki-client