Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a666630313a3a2f34382d3438203d3e20323730373034.roa
File:                     323830343a373031343a666630313a3a2f34382d3438203d3e20323730373034.roa (raw, json)
Hash identifier:          ZeojaHm6X60m2rx0k3KK4QWDmMJUFII/9X5BZxwFTmY=
Subject key identifier:   3B:74:E2:A6:B2:AE:97:79:E8:65:8B:EA:C9:01:3D:F0:CA:98:A4:54
Certificate issuer:       /CN=1374315B9575D65AACB45CAFC3702522BE608F60
Certificate serial:       44C7179550C686A4DC7FC1EBA2DDB898199F7094
Authority key identifier: 13:74:31:5B:95:75:D6:5A:AC:B4:5C:AF:C3:70:25:22:BE:60:8F:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a666630313a3a2f34382d3438203d3e20323730373034.roa
Signing time:             Fri 03 Oct 2025 02:28:42 +0000
ROA not before:           Fri 03 Oct 2025 02:23:42 +0000
ROA not after:            Fri 02 Oct 2026 02:28:42 +0000
asID:                     270704
IP address blocks:        2804:7014:ff01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.crl
                          rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c7:17:95:50:c6:86:a4:dc:7f:c1:eb:a2:dd:b8:98:19:9f:70:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1374315B9575D65AACB45CAFC3702522BE608F60
        Validity
            Not Before: Oct  3 02:23:42 2025 GMT
            Not After : Oct  2 02:28:42 2026 GMT
        Subject: CN=3B74E2A6B2AE9779E8658BEAC9013DF0CA98A454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:f3:f0:59:6a:3f:68:7c:0b:1c:94:b0:df:
                    de:64:99:66:53:0c:14:f0:0f:0c:82:f4:87:fa:16:
                    c3:50:5a:24:26:ad:98:49:c5:94:e2:83:29:06:61:
                    e6:d0:ec:f0:3a:6f:25:23:9f:b7:45:b0:3f:68:8d:
                    68:be:1c:2f:39:ee:a3:7b:69:87:ca:de:ed:14:a5:
                    28:08:67:f4:d9:30:c9:5b:b1:3d:ca:59:bc:df:2b:
                    fd:5b:7b:ad:97:51:b9:ab:02:7c:ca:6b:50:21:89:
                    f2:98:e1:b1:23:5b:b4:9d:9a:d4:01:09:78:78:8f:
                    ac:f8:7e:0a:69:71:da:2d:3f:6d:c0:46:18:1a:3b:
                    5b:3a:28:e2:0f:77:41:c0:f4:f7:c0:44:2a:7c:b5:
                    6e:f5:02:02:50:d7:5c:6e:4c:2d:46:f0:a6:c1:52:
                    cd:87:df:f1:ec:a5:2f:33:55:2a:f2:1d:3a:e7:60:
                    10:38:3a:cc:d3:e1:46:9d:98:46:17:65:37:c7:20:
                    fa:92:47:ea:85:ea:58:9b:71:87:28:d1:3a:56:e6:
                    92:d5:d7:34:25:82:6f:87:78:4c:f6:f4:57:69:87:
                    4d:4a:47:00:8f:80:b6:90:fc:1b:41:ff:9a:23:e5:
                    91:be:b5:f1:80:5b:78:52:e6:5e:20:49:58:06:ac:
                    8b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:74:E2:A6:B2:AE:97:79:E8:65:8B:EA:C9:01:3D:F0:CA:98:A4:54
            X509v3 Authority Key Identifier:
                keyid:13:74:31:5B:95:75:D6:5A:AC:B4:5C:AF:C3:70:25:22:BE:60:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a666630313a3a2f34382d3438203d3e20323730373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7014:ff01::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:5e:3a:78:d7:ee:fe:bc:14:7d:13:c8:53:a9:57:47:ce:ae:
         ed:f8:91:79:32:9a:ab:df:40:94:ef:bd:96:7f:e1:41:8e:0d:
         0c:13:d2:97:2f:65:fa:58:0c:49:99:aa:97:c3:17:f6:59:43:
         d9:36:c8:32:64:41:34:d5:a9:6c:bf:32:8f:df:85:bb:b0:4e:
         f4:af:a1:27:e5:12:51:b9:47:92:bf:42:8a:42:15:f8:f4:f4:
         90:14:7c:61:91:9e:c9:d1:dc:3b:d9:e0:5b:db:7c:2f:b6:34:
         a7:71:2a:73:37:14:41:e5:ce:4b:91:dc:98:92:83:b2:d7:5c:
         50:2e:d3:c2:f7:e2:fa:6f:2b:1a:1c:69:ee:79:08:0b:df:18:
         05:e6:9b:0d:8b:4d:c7:75:13:6e:e5:9c:ea:c2:cb:f8:c9:29:
         e3:83:a4:cf:9a:c1:12:fa:bf:be:89:4c:0c:60:08:dd:1e:04:
         26:92:dd:b4:93:fc:54:4b:82:6a:28:6b:d8:fc:37:8d:0b:70:
         93:49:a4:36:79:fe:17:e0:60:94:1d:cc:12:39:6d:c6:50:a6:
         e8:52:e2:bf:0c:48:70:24:af:7e:7f:27:da:a1:00:6e:3c:95:
         90:08:26:26:b5:10:b0:97:55:3a:9c:55:e2:ad:95:53:f2:3c:
         5b:67:aa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:12 2025 by rpki-client